Microsoft KB Archive/818572

= No objects are exported when you run the export run profile for an Active Directory global address list management agent =

Article ID: 818572

Article Last Modified on 12/31/2003

-

APPLIES TO


 * Microsoft Identity Integration Server 2003 Enterprise Edition
 * Identity Integration Feature Pack for Microsoft Windows Server Active Directory

-





SYMPTOMS
When you run export run profiles for Active Directory global address list (GAL) management agents to synchronize the global address lists in those forests, the operation displays a successful status. However, no objects are exported to the Microsoft Active Directory directory service. This issue occurs after you run import run profiles for the management agents to import objects from two or more Active Directory forests to the Microsoft Identity Integration Server 2003 metaverse.



CAUSE
This issue occurs if you do not enable a provisioning rules extension before you synchronize objects into the metaverse. If the provisioning rules extension is not enabled, the objects are not provisioned. The objects are only created in the metaverse. Therefore, when you run the export run profile for the management agent or the management agents, no objects are exported to the connected directory.



RESOLUTION
To resolve this issue, after you perform an import run profile for a management agent, you must configure the provisioning rules extension, and then you must run an export run profile for that management agent. To do this, follow these steps:  Click Start, point to All Programs, point to Microsoft Identity Integration Server, and then click Identity Manager. On the Tools menu, click Configure Extensions. Click to select the Enable Provisioning Rules Extension check box, and then click OK. Run a full synchronization run profile on each Active Directory global address list (GAL) management agent.  Click the management agent where you want to run the full synchronization run profile. On the Actions menu, click Run.</li> In the Run profiles list, click Full Synchronization, and then click OK.</li></ol> </li> Run the export run profile on each Active Directory global address list (GAL) management agent. To do so: <ol style="list-style-type: lower-alpha;"> Click the management agent where you want to run the export run profile.</li> On the Actions menu, click Run.</li> In the Run profiles list, click Export, and then click OK.</li></ol> </li></ol>

<div class="moreinformation_section">

MORE INFORMATION
If you enable provisioning for an Active Directory global address list (GAL) management agent before you perform the first Full Import run profile for that management agent, you receive an error result when you run the Full Import run profile. This issue occurs because no structure yet exists in the other management agent's connector space for provisioning to write to. Because of this, you must run the Full Import (Stage Only) step type in the run profile for that management agent to bring in the structure before you synchronize the data. You can then run synchronization with provisioning enabled. By default, provisioning verification is not enabled so that this scenario can be avoided.

<div class="references_section">