Deploy MIIS

  • Article
Cc526390.chm_head_left(en-us,TechNet.10).gif Cc526390.chm_head_middle(en-us,TechNet.10).gif Cc526390.chm_head_right(en-us,TechNet.10).gif

Deploy MIIS

This section contains the steps necessary to set up and configure the Microsoft Identity Integration Server (MIIS) 2003 computer for the Customer Directory Integration (CDI) Service and to configure Active Directory management agents for both the customer Active Directory and service provider shared Active Directory. This includes the installation of Microsoft Windows Server 2003 Enterprise Edition, Microsoft Identity Integration Server (MIIS) 2003 Enterprise Edition, and Microsoft SQL Server 2000 Standard or Enterprise Edition with Service Pack 4.

Perform the procedures that follow to set up the MIIS computer.

Procedure DCDOM.17: To install Windows Server 2003, Standard or Enterprise Edition

  1. Perform a default installation of Windows Server 2003, Enterprise Edition by using the CD boot or floppy boot method.

    You should use appropriate naming conventions for your environment. However, for the purposes of this guide, the MIIS computer is named MIIS01.

  2. Install the Support Tools from the Windows Server 2003 CD.

  3. Apply Service Pack 1 and any other released updates to Windows Server 2003 by using Microsoft Update.

  4. Set the Application, Security, and System event logs to 20 megabytes (MB) and configure them to overwrite as needed.

  5. Enable a private-facing interface that communicates with the hosting Active Directory infrastructure. This is to enable communication from IIFP01 to the service provider shared Active Directory.

    Note

    MIIS01 is dualhomed.

  6. Enable a public-facing interface that will allow outside traffic to communicate with this server. This is to enable communication between end users and the Password Management Web Service of MIIS01.

  7. Assign static IP addresses to the network interfaces that you enabled in steps 5 and 6 with an IP addressing format that is appropriate for your network environment.

  8. When assigning the DNS server addresses for the network interfaces, ensure that you add the private IP addresses of AD01, AD02, and DNS01 as the DNS servers for the private network interface that you installed in step 5. The public-facing interface that you installed in step 6 should contain the public IP address of DNS01 as a DNS server.

Procedure DCDOM.18: To join the MIIS01 computer to the fabrikam domain

  1. On the desktop of MIIS01, right-click the My Computer icon and then click Properties.
  2. Click the Computer Name tab, then click Change.
  3. In the Member of section of the Computer Name Changes dialog box, click the Domain option and type fabrikam.com.
  4. Click OK and wait for the connection to the AD01 domain controller to complete.
  5. Reboot the computer as directed.

Procedure DCDOM.19: To move MIIS01 to the Infrastructure Management OU on AD01 Before starting this procedure, ensure that the MIIS01 computer has successfully rebooted and is at the CTRL+ALT+DELETE logon prompt.

  1. Log on to AD01 using an account that is a member of the Domain Administrators group.
  2. Click the Start button, click All Programs, click Administrative Tools, then click Active Directory Users and Computers.
  3. Expand your domain name, such as fabrikam.com, and then click Computers.
  4. Right-click MIIS01, and then click Move.
  5. Expand Servers, expand Infrastructure, click Management, and then click OK.

Procedure DCDOM.20: To install IIS with ASP.Net on the MIIS01 server

  1. Log on to MIIS01 with an account that is a member of the Domain Administrators group.
  2. Click the Start button, click Control Panel, then click Add or Remove Programs.
  3. Click Add/Remove Windows Components.
  4. Click the check box next to Application Server, then click Details.
  5. Click the ASP.NET and Internet Information Services (IIS) check boxes, select Internet Information Services (IIS), then click Details.
  6. Ensure that the Internet Information Services Manager check box is selected.
  7. Select World Wide Web Services and then click Details.
  8. Ensure that Active Server Pages and World Wide Web Service are selected.
  9. Click OK to exit.
  10. In the Windows Components dialog box, click Next and allow the Windows Components Wizard to configure the IIS components.
  11. When the Windows Components Wizard completes configuration tasks, click Finish.

Procedure DCDOM.21: To ensure that ASP.Net is allowed in IIS on MIIS01

  1. Click the Start button, click Run, type inetmgr, and then click OK.

  2. In the Internet Information Services (IIS) Manager, expand the MIIS01 computer node.

    Note

    In the Internet Information Services (IIS) Manager, if the Web Service Extensions folder does not show an item for ASP.NET v1.1.4322, you must install it manually at the command line, per the steps of the procedure "To manually install Web Service Extensions," and then run this procedure again.

  3. Click the Web Service Extensions folder.

  4. Ensure that ASP.NET v1.1.4322 is set to Allowed.

  5. If it is not, click the Extended tab, select ASP.NET v1.1.4322, and then click the Allow button.

  6. Close the Internet Information Services (IIS) Manager console.

Only perform the following procedure if the Web Service Extensions folder in Internet Information Services (IIS) Manager does not show an item for ASP.Net v1.1.4322.

Procedure DCDOM.22: To manually install Web Service Extensions

  1. Click the Start button, click Run, and then type cmd to open a command shell.
  2. At the command prompt, type the following: CD %WINDIR%\Microsoft.net\framework\v1.1.4322.
  3. Run the following command to enable ASP.NET: aspnet_regiis.exe -I -enable.

Procedure DCDOM.23: To install SQL Server 2000 on MIIS01

  1. Place the SQL Server 2000 installation disk in your CD-ROM drive.
  2. Navigate to the Enterprise folder and double-click Autorun.exe.
  3. On the SQL Server 2000 Enterprise Edition opening page, click Read the Release Notes to review installation information.
  4. When you are ready to start the installation, click SQL Server 2000 Components.
  5. On the Install Components page, click Install Database Server.
  6. Click Continue to the message indicating that SQL Server 2000 is not supported by the current Windows operating system (Windows Server 2003).
  7. Click Next on the Welcome page.
  8. In the Computer Name dialog box of the SQL Server Installation Wizard, accept the default option for Local Computer and then click Next.
  9. In the Installation Selection dialog box, accept the default installation option of Create a new instance of SQL Server or install Client tools and click Next.
  10. In the User Information dialog box, type the user Name and Company, then click Next.
  11. In the Software License Agreement dialog box, read the agreement and click Yes to accept the agreement terms.
  12. In the Installation Definition dialog box, accept the default option for a Server and Client Tools installation and click Next.
  13. In the Instance Name dialog box, accept the Default instance and click Next.
  14. In the Setup Type dialog box, accept the default option for Typical setup and click Next.
  15. In the Service Accounts dialog box, accept the default option for Use the same account for each service. Auto start SQL Server Service.
  16. Under Service Settings, click the Use the Local System Account option, then click Next.
  17. In the Authentication Mode dialog box, accept the default option for Windows Authentication Mode and then click Next.
  18. In the Start Copying Files dialog box, click Next.
  19. In the Choose Licensing Mode dialog box, under Licensing Mode, select your appropriate licensing mode and options, and then click Continue to begin the installation.
  20. When the installation is complete, click Finish in the Setup Complete dialog box.

Procedure DCDOM.24: To install SQL Server 2000 SP4 on MIIS01

  1. Restart the MIIS01 machine and log on using an account that is a member of the Domain Administrators group.
  2. Place the SQL Server 2000 SP4 installation disk in your CD-ROM drive.
  3. Double-click the Setup.bat script in the root folder of your SQL Server SP4 installation disk to start the installation.
  4. In the Welcome page of the Microsoft SQL Server 2000 Service Pack 4 Installation Wizard, click Next.
  5. In the Software License Agreement dialog box, read the agreement and click Yes to accept the license agreement terms.
  6. In the Instance Name dialog box, click Next.
  7. In the Connect to Server dialog box, accept the default option for Windows authentication and click Next.
  8. In the SA Password Warning dialog box, enter a strong password in Enter SA Password and Confirm SA Password.
  9. In the Backward Compatibility Checklist dialog box, select Upgrade Microsoft Search and apply SQL Server 2000 SP4, then click Continue.
  10. If you want to send error reports to Microsoft, select Automatically send error reports to Microsoft, then click OK.
  11. In the Start Copying Files dialog box, click Next.
  12. When setup is complete, click Finish in the Setup Complete dialog box.

Procedure DCDOM.25: To install MIIS 2003 Enterprise Edition

  1. Place the MIIS 2003 with Service Pack 1 installation disk in your CD-ROM drive.

  2. Navigate to the Setup folder and double-click Setup.exe.

  3. On the splash screen, click Install Microsoft Identity Integration Server 2003.

  4. In the Microsoft Identity Integration Server Setup Wizard opening page, click Next.

  5. In the End User License Agreement dialog box, read the agreement, select I accept the terms of the license agreement, and then click Next to continue.

  6. In the Type of Installation dialog box, accept the default option for Complete installation, then click Next.

  7. In the Store Information dialog box, select This computer, if you installed SQL Server 2000 with Service Pack 4 on your MIIS server. Otherwise, select A remote machine and specify the network location of the SQL Server installation.

  8. Under The SQL Server instance is section of the Store Information dialog box, accept the default option for The default instance if you used the default instance during SQL Server setup. Otherwise, select A named instance and specify the instance name you configured during SQL Server setup. Click Next.

  9. In the Service Account Information dialog box, type MIISService in the Service Account box, type the password for the account in the Password box, and enter the domain name, such as fabrikam, in the Domain or local computer name box. Click Next.

  10. In the Group Information dialog box, type the group names for Administrator (MIISAdmins), Operator (MIISOperators), Joiner (MIISJoiners), Connector browse (MIISBrowse), and Windows Management Instrumentation (WMI) Password management (MIISPasswordSet) that you configured earlier when setting up AD01, then click Next.

    Note

    When entering group names, be sure to use the global groups by using the domain\groupname format, for example fabrikam\MIISPasswordSet.

  11. In the Ready to Install the Program dialog box, click Start.

  12. Click OK to the message indicating that the MIIS service account is unsecured in its current configuration.

  13. Click OK to the message indicating that you will be prompted to specify a backup location for the encryption key set.

  14. In the Save Encryption Key Set file system dialog box, navigate to %systemdrive%\Program Files\Microsoft Identity Integration Server\, type the folder name as KeyBackup and the file name as KeyBackup.bin, and then click Save.

  15. Click Finish when the installation is complete.

  16. Restart the MIIS01 computer and then log back on.

Procedure DCDOM.26: To index the uid Metaverse attribute in MIIS

  1. Click the Start button, click All Programs, click Microsoft Identity Integration Server, and then click Identity Manager.
  2. On the toolbar, click Metaverse Designer.
  3. In the upper left-hand pane of Metaverse Designer, select person in the list of Object types.
  4. In the lower left-hand pane, select uid in the Attributes list, right-click uid, then select Edit Attribute to display the Edit Attribute dialog box.
  5. Select Indexed, then click OK.
  6. Leave Identity Manager open.

Procedure DCDOM.27: To create and configure an Active Directory MIIS management agent for the Service Provider fabrikam domain

  1. On the toolbar of Identity Manager, click Management Agents.

  2. In the Actions pane on the right side of Identity Manager, click Create to start the Create Management Agent Wizard.

  3. Under Management agent for, ensure that Active Directory is selected.

  4. In the Name box, type fabrikam, then click Next to create the Active Directory management agent.

  5. In the Connect to Active Directory Forest dialog box, type fabrikam.com for the Forest name value, MIISAgentSvc@fabrikam.com for the User name value, and the password you assigned to the MIISAgentSvc account for the Password value. Leave the Domain box empty and click Next.

  6. In the Select directory partitions section of the Configure Directory Partitions dialog box, select DC=fabrikam,DC=com.

  7. Click the Containers button to display the Select Containers dialog box.

  8. Clear the DC=fabrikam,DC=com (the root) check box, select Hosting, then click OK.

  9. In the Configure Directory Partitions dialog box, click Next.

  10. In the Select Object Types dialog box, select user. Make sure that container, domainDNS, and organizationalUnit are all selected, since they are mandatory, then click Next.

  11. In the Select Attributes dialog box, click the Show All check box to expand the attribute list.

  12. Select adminDescription, then click Next.

  13. In the Configure Connector Filter dialog box, click Next.

  14. In the Configure Join and Projection Rules dialog box, click user and then click New Join Rule to display the Join Rule for user dialog box.

  15. In the Data source attribute section, select adminDescription.

  16. In the Mapping type section, select the Direct option.

  17. Select person from the Metaverse object type drop-down box.

  18. In the Metaverse attribute section, select uid.

  19. Click the Add Condition button to configure the rule, then click OK.

    Note that the Join and projection rules section is populated with the rule you configured.

  20. In the Configure Join and Projection Rules dialog box, click Next.

  21. In the Configure Attribute Flow dialog box, click Next (no configuration is required).

  22. In the Configure Deprovisioning dialog box, accept the default selection for Make them disconnectors, then click Next.

  23. In the Configure Extensions dialog box, click Enable password management.

  24. Click the Edit button to display the Configure Partition Display Name dialog box.

  25. In Partitions, select DC=fabrikam,DC=com (the domain root).

  26. In the box next to the Edit button, type in a descriptive phrase such as fabrikam service provider.

    Note

    This description will display in the MIIS Password Management Web service. You should therefore use user-friendly terms for the descriptive text so that users can readily identify them.

  27. Click Edit and then click OK.

  28. Click Finish.

Procedure DCDOM.28: To create and configure an Active Directory MIIS management agent for the customer Active Directory domain

  1. On the toolbar of Identity Manager, click Management Agents.

  2. In the Actions pane on the right side of Identity Manager, click Create to start the Create Management Agent Wizard.

  3. Under Management agent for, ensure that Active Directory is selected.

  4. In the Name field type alpineskihouse, then click Next to create the Active Directory management agent.

  5. In the Connect to Active Directory Forest dialog box, type alpineskihouse.local for the Forest name value, MIISAgentSvc@alpineskihouse.local for the User name value, and the password you assigned to the MIISAgentSvc account for the Password value. Leave the Domain box empty and click Next.

  6. In the Select directory partitions section of the Configure Directory Partitions dialog box, select DC=alpineskihouse,DC=local.

  7. Click the Containers button to display the Select Containers dialog box.

  8. Select DC=alpineskihouse,DC=local (the root), select Users (or OU where user accounts exist), then click OK.

  9. In the Configure Directory Partitions dialog box, click Next.

  10. In the Select Object Types dialog box, select user. Make sure that container, domainDNS, and organizationalUnit are all selected, since they are mandatory, then click Next.

  11. In the Select Attributes dialog box, select the Show All to expand the attribute list.

  12. Select userPrincipalName, then click Next.

  13. In the Configure Connector Filter dialog box, click Next.

  14. In the Configure Join and Projection Rules dialog box, click user and then click the New Projection Rule button to display the Projection dialog box.

  15. In the Projection dialog box, make sure that the Declared option is selected and that the Metaverse object type is person, the default, then click OK.

    Note that the Join and projection rules section is now populated with the rule you configured.

  16. In the Configure Join and Projection Rules dialog box, click Next.

  17. In the Data source object type drop-down box of the Configure Attribute Flow dialog box, select user.

  18. In the Metaverse object type drop-down box, select person.

  19. In the Data source attribute box, select userPrincipalName.

  20. In the Flow Direction section, select the Import option.

  21. In the Metaverse attribute box, select uid.

  22. Click the New button to add the configuration to the attribute flow list, then click Next.

  23. In the Configure Deprovisioning dialog box, accept the default selection for Make them disconnectors, then click Next.

  24. In the Configure Extensions dialog box, click Enable password management.

  25. Click the Edit button to display the Configure Partition Display Name dialog box.

  26. In Partitions, select DC=alpineskihouse,DC=local (the domain root).

  27. In the box next to the Edit button, type in a descriptive phrase such as alpineskihouse customer.

    Note

    This description will display in the MIIS Password Management Web service. You should therefore utilize user-friendly terms for the descriptive text so that users can readily identify them.

  28. Click Edit and then click OK.

  29. Click Finish.

Procedure DCDOM.29: To create MIIS management agent run profiles for fabrikam

  1. In Identity Manager, click Management Agents on the toolbar, then click on fabrikam.
  2. In the Actions pane on the right-hand side of Identity Manager, click Configure Run Profiles to bring up the Configure Run Profiles dialog box.
  3. Click the New Profile button.
  4. Type Initial Discovery in the Name field, then click Next.
  5. In the Type drop-down box, select Full Import (Stage Only), then click Next.
  6. In the Custom Data section, set the Timeoutvalue to 3000, then click Finish to create an initial discovery run profile for fabrikam.
  7. In the Configure Run Profiles dialog box, click the New Profile button.
  8. Type Delta Import in the Name box, then click Next.
  9. In the Type drop-down box, select Delta Import (Stage Only), then click Next.
  10. In the Custom Data section, set the Timeout value to 3000, then click Finish to create a delta import run profile for fabrikam.
  11. In the Configure Run Profiles dialog box, click the New Profile button.
  12. Type Delta Synchronization in the Name field, then click Next.
  13. In the Type drop-down box, select Delta Synchronization, then click Next.
  14. Click Finish to create a delta synchronization run profile for fabrikam.
  15. Click Apply and then click OK.

Procedure DCDOM.30: To create MIIS management agent run profiles for alpineskihouse

  1. Under Management Agents in Identity Manager, click on alpineskihouse.
  2. In the Actions pane on the right-hand side of Identity Manager, click Configure Run Profiles to bring up the Configure Run Profiles dialog box.
  3. Click the New Profile button.
  4. Type Initial Discovery in the Name box, then click Next
  5. In the Type drop-down box, select Full Import (Stage Only), then click Next.
  6. In the Custom Data section, set the Timeout value to 3000, then click Finish to create an initial discovery run profile for alpineskihouse.
  7. In the Configure Run Profiles dialog box, click the New Profile button.
  8. Type Delta Import in the Name field, then click Next.
  9. In the Type drop-down box, select Delta Import (Stage Only), then click Next.
  10. In the Custom Data section, set the Timeout value to 3000, then click Finish to create a delta import run profile for alpineskihouse.
  11. In the Configure Run Profiles dialog box, click the New Profile button.
  12. Type Delta Synchronization in the Name field, then click Next.
  13. In the Type drop-down box, select Delta Synchronization, then click Next.
  14. Click Finish to create a delta synchronization run profile for alpineskihouse.
  15. Click Apply and then click OK.

Procedure DCDOM.31: To create scripts for the run profiles

  1. In Identity Manager, click Management Agents on the toolbar, then click on fabrikam.
  2. In the Actions pane on the right-hand side of Identity Manager, click Configure Run Profiles to bring up the Configure Run Profiles dialog box.
  3. Under Management agent run profiles, select Delta Import, then click the Script button.
  4. In the Save As dialog box, navigate to %systemdrive%\Program Files\Microsoft Identity Integration Server\ and create a Scripts directory.
  5. Open the Scripts folder, type fabrikam_deltaimport.vbs for the file name, then click Save.
  6. Under Management Agents, click on fabrikam.
  7. In the Actions pane, click Configure Run Profiles to bring up the Configure Run Profiles dialog box.
  8. Under Management agent run profiles, select Delta Synchronization, then click the Script button.
  9. In the Save As dialog box, navigate to %systemdrive%\Program Files\Microsoft Identity Integration Server\ and open the Scripts folder.
  10. Type fabrikam_deltasynch.vbs for file name, then click Save.
  11. Under Management Agents, click on alpineskihouse.
  12. In the Actions pane, click Configure Run Profiles to bring up the Configure Run Profiles dialog box.
  13. Under Management agent run profiles, select Delta Import, then click the Script button.
  14. In the Save As dialog box, navigate to %systemdrive%\Program Files\Microsoft Identity Integration Server\ and open the Scripts folder.
  15. Type alpineskihouse_deltaimport.vbs for the file name, then click Save.
  16. Under Management Agents, click on alpineskihouse.
  17. In the Actions pane, click Configure Run Profiles to bring up the Configure Run Profiles dialog box.
  18. Under Management agent run profiles, select Delta Synchronization, then click the Script button.
  19. In the Save As dialog box, navigate to %systemdrive%\Program Files\Microsoft Identity Integration Server\ and open the Scripts folder.
  20. Type alpineskihouse_deltasynch.vbs for the file name, then click Save.

Procedure DCDOM.32: To perform an Initial Discovery run

  1. Under Management Agents, click on alpineskihouse.
  2. In the Actions pane, click Run.
  3. Under Run profiles, click Initial Discovery, and then click OK.
  4. Watch the state until it changes from running to idle. In the lower right-hand corner of Identity Manager, verify that Status reads Success.
  5. In the Actions pane, click Run.
  6. Under Run profiles, click Delta Synchronization, and then click OK.
  7. Watch the state until it changes from running to idle. In the lower right-hand corner of Identity Manager, verify that Status reads Success.
  8. Under Management Agents, click on fabrikam.
  9. In the Actions pane, click Run.
  10. Under Run profiles, click Initial Discovery, and then click OK.
  11. Watch the state until it changes from running to idle. In the lower right-hand corner of Identity Manager, verify that Status reads Success.
  12. In the Actions pane, click Run.
  13. Under Run profiles, click Delta Synchronization, and then click OK.
  14. Watch the state until it changes from running to idle. In the lower right-hand corner of Identity Manager, verify that Status reads Success.
  15. Close Identity Manager.

Procedure DCDOM.33: To create an MIISPasswordSet group on MIIS01 and add the MIISAgentSvc to it

  1. Click the Start button, click Administrative Tools, and then click Computer Management.
  2. Expand Local Users and Groups.
  3. Click on Groups.
  4. Right-click on Groups and select New Group..
  5. In the Group name box of the New Group dialog box, type MIISPasswordSet, and then click Add.
  6. In the Enter the object names to select box of the Select Users, Computers, or Groups dialog box, type MIISAgentSvc, click Check Names, then click OK.
  7. In the New Group dialog box, click Create.
  8. From the File menu of Computer Management, click Exit.

Procedure DCDOM.34: To install the MIIS 2003 Password Management Web Service

  1. Place the MIIS 2003 with Service Pack 1 installation disk in your CD-ROM drive.
  2. Navigate to the Password Management folder, double-click it, and then double-click the MIIS2003PasswordManagement.msi file to start the setup application.
  3. In the opening screen of the Password Management Setup Wizard, click Next.
  4. Read the license agreement and select I accept the terms in the license agreement to proceed with the install, then click Next.
  5. In the User Name box, type your name; and in the Organization box, type the organization name.
  6. Ensure that Anyone who uses this computer is selected, then click Next.
  7. In the Setup Type dialog box, select Complete, then click Next.
  8. In the Application Pool Identity Information dialog box, type the specified values in the following boxes:
    • User Account Name: MIISAgentSvc
    • User Password: the password you assigned to this account
    • Domain: fabrikam
    • PasswordSet Group Name: MIISPasswordSet
  9. Click Next.
  10. In the Ready to Install the Program dialog box, click Install.
  11. When the setup wizard completes, click Finish.
  12. Click Yes to the dialog box that prompts you to log off and log on again for the security group membership to take effect.

Procedure DCDOM.35: To configure the MIIS 2003 Password Management Web Service

  1. Log on to the MIIS01 computer with an account that is a member of the Domain Administrators group.
  2. Click the Start button and then click Windows Explorer to open it.
  3. Navigate to the %systemroot%\system32\inetsrv\Microsoft Identity Integration Server folder.
  4. Right-click on the PasswordWebAppOptions.xml file and click Edit.
  5. Under the <user app> section of the file, change the value for <show-connectors>0</show-connectors> to <show-connectors>1</show-connectors>.
  6. From the File menu, click Save and Exit notepad.
  7. Exit Windows Explorer.

Procedure DCDOM.36: To create a command file to run MIIS scripts

  1. Click the Start button, click Run, type Notepad, then click OK to start the Notepad application.
  2. Type the following lines of text in the open Notepad file: <pre IsFakePre="true" xmlns="https://www.w3.org/1999/xhtml"> cscript.exe "%systemdrive%\Program Files\Microsoft Identity Integration Server\Scripts\alpineskihouse_deltaimport.vbs" cscript.exe "%systemdrive%\Program Files\Microsoft Identity Integration Server\Scripts\alpineskihouse_deltasynch.vbs" cscript.exe "%systemdrive%\Program Files\Microsoft Identity Integration Server\Scripts\fabrikam_deltaimport.vbs" cscript.exe "%systemdrive%\Program Files\Microsoft Identity Integration Server\Scripts\fabrikam_deltasynch.vbs" </pre> Make sure you substitute the correct drive letter in your system for the %systemdrive% environment variable specified here.
  3. From the File menu, click Save.
  4. In the Save As dialog box, navigate to the %systemdrive%\Program Files\Microsoft Identity Integration Server\Scripts\ directory.
  5. In the Save as type drop-down box of the Save As dialog box, select All Files.
  6. In the File name box, type runcycles.cmd.
  7. Click Save in the Save As dialog box, and then exit Notepad.

Procedure DCDOM.37: To create a scheduled job to execute the command file

  1. Click the Start button, click All Programs, click Accessories, click System Tools, and then click Scheduled Tasks.
  2. In the main Scheduled Tasks window, double-click Add Scheduled Task.
  3. In the opening dialog of the Scheduled Task Wizard, click Next.
  4. Click the Browse button and navigate to the %systemdrivet%\Program Files\Microsoft Identity Integration Server\Scripts\ directory, and then double-click runcycles.cmd.
  5. Under Perform this task in the Scheduled Task Wizard, select Daily and then click Next.
  6. Under Start time, configure 1:00 AM as the start time and then click Next.
  7. In the Enter the username box, type fabrikam\Administrator, and in Enter the password and Confirm password, type the Administrator password, then click Next.
  8. In the Scheduled Task Wizard, click Finish.
  9. In the Scheduled Tasks dialog box, right-click runcycles and then click Run to execute the task once.
  10. Ensure that the task completes properly and that the Last Run Time is updated.
  11. From the File menu of Scheduled Tasks, click Close.