FIM 2010 R2: Model Generator is installed in production environment

This topic is intended to address a specific issue identified by a Best Practices Analyzer scan. You should apply the information in this topic only to computers that have had the Forefront Identity Manager 2010 R2 Best Practices Analyzer run against them and are experiencing the issue addressed by this topic. For more information about best practices and scans, see Best Practices Analyzer (https://go.microsoft.com/fwlink/?LinkId=122786).

Issue

Microsoft BHOLD Model Generator should not be installed in a production environment.

To enable building a full role model, the Model Generator tool must be able to clear the entire BHOLD database, which would result in the loss of an existing role model if it is performed when BHOLD Model Generator is installed in a production BHOLD deployment.

Impact

Incorrect usage of BHOLD Model Generator could cause an existing role model to be deleted.

Resolution

Reinstall BHOLD Model Generator to create a separate database

To prevent possible deletion of your production role model, you must uninstall BHOLD Model Generator.

To uninstall BHOLD Model Generator

1. On the BHOLD Model Generator server, click Start, click Control Panel, and then under Programs, click Uninstall a program.

2. Right-click Microsoft BHOLD Suite - Model Generator, click Uninstall, and then click Yes.

Additional references

For more information, see Microsoft BHOLD Suite Installation Guide (https://technet.microsoft.com/en-us/library/jj134107(v=ws.10)).