Who we are
- - - WHY WORK HERE
    - We solve tough problems for organizations big and small. As a trusted partner to international brands, small firms, and colleges/universities, we need top-notch people to do what we do.
  - - Join Our Team
What We Do
- - - Services
    - We offer customized cybersecurity solutions in security, identity & access, compliance, and mobility and DaaS to help you stay ahead of an ever-evolving threat landscape.
    - GET STARTED WITH OUR
      AD HEALTH CHECK
Technology
Resources
- - - Resources
    - Explore our resources for advice on boosting your organization's security.
    - Blog
    - Stay up-to-date — read our experts' unique takes on trends in cybersecurity.
Get in touch
- - - Free Assessment
    - Our experts are always ready to discuss your needs – whatever stage you’re at – and with no obligation.
    - AD HEALTH CHECK
    - We enhance your AD and improve its security with our holistic health assessment.
  - - Join Our Team

How To Get the MIM Synchronization Service Groups

When you install the Microsoft Identity Manager (MIM) Synchronization Service, you have to provide five security groups for privileged access. Once the installation has been completed there isn’t a simple way to find out what groups were configured. This can be an issue if you have inherited an installation or there is no documentation available for reference.

One way to find out what groups were configured is to run the MIM Synchronization Service installer and choose the Configure option. You’ll need to know the password for the service account to do this. Another way to get this information is to query the MIM Synchronization Service database.

The script included in this article will provide output similar to what’s shown below.

To run this script, run the following command:
.\GetMIMSyncGroups.ps1 -Server "&ltMIMSQLServerName&gt" -Database "FIMSynchronizationService"

You can download the script here. Don’t forget to unblock the file before you try to run it.

Adam Zucker

Adam Zucker specializes in enterprise mobility and identity management. He works with customers to develop strategic and long-term solutions, planning and implementing projects using Microsoft IAM and enterprise mobility tools. Adam’s well-rounded skill set allows him to recommend solutions that meet both big picture and day-to-day needs for businesses.

[RELEVANT BLOG CONTENT]

Three Reasons to Use Azure Automation to Run Your Scripts

Andy Schneider April 11, 2024

Azure Automation is a cloud-based service that can help you run scripts; configure, update, and manage operating systems; and manage your IT asset inventory. This

An Introduction to Protected Actions in Conditional Access

David Conners February 29, 2024

The Microsoft Azure portal includes a subset of permissions called protected actions, which can be used to manage Conditional Access (CA) policies and cross-tenant access

Windows 365 Boot and Switch: Building a Solid Foundation

Hidra Antar February 20, 2024

In the ever-evolving landscape of digital workspace solutions, Windows 365 emerges as a cloud-based PC deployment solution tailored for organizations seeking enhanced security and centralized

6 Tips to Harden Your Windows LAPS Deployment

Thomas Garrity February 8, 2024

In a previous blog post, we covered how to migrate to Windows Local Administrator Password Solution (LAPS). With Windows LAPS deployments gaining traction, it’s important

Use Privileged Access Workstations to Increase Security

Burke Matsuo January 24, 2024

All organizations use privileged accounts to manage their environments. In many cases, administration is performed from productivity workstations, which are vulnerable to a substantial number

Active Directory: The End of the Road? Not Quite Yet!

Burke Matsuo January 15, 2024

Microsoft announced several enhancements to Active Directory Domain Services (AD DS) and Active Directory Lightweight Directory Services (AD LDS) that are included in the preview

Migrating to Windows LAPS

Thomas Garrity November 30, 2023

Windows Local Administrator Password Solution (LAPS), now integrated into the OS, is the replacement for Microsoft LAPS, which was a separate installation. Windows LAPS is

Virtual Machine Generation ID with Active Directory Domain Controllers

Josh Goben October 11, 2023

Active Directory (AD) domain controllers (DCs) have been around since Windows 2000. At that time, virtualization was in its infancy and almost every server was

Leave a Comment Cancel Reply

This site uses Akismet to reduce spam. Learn how your comment data is processed.