Kurt Shintaku's Blog

We’ve released the Microsoft® Forefront™ Identity Manager 2010 R2 Best Practices Analyzer (4.1.2515.0). 

The FIM2010 R2 Best Practices Analyzer is a tool that lets you verify the implementation of Best Practices. These best practices typically relate to the usage and administration aspects of your FIM 2010 R2 deployment, to ensure they are managed and operated well.

Here’s a list of some of the best practices that the new FIM2010R2 BPA detects and helps correct:

• FIM 2010 R2: Delete expired objects SQL job should be enabled
• FIM 2010 R2: The FIM 2010 R2 Service is not started
• FIM 2010 R2: SQL server service should be running on the remote server
• FIM 2010 R2: The FIM 2010 R2 Synchronization Service is not started
• FIM 2010 R2: Model Generator is installed in production environment
• FIM 2010 R2: Timer interval for BFPC and BFSS too low
• FIM 2010 R2: BHOLD Core root account is used for BHOLD FIM Integration
• FIM 2010 R2: Same Account being used for FIM Synchronization Service and FIM MA
• FIM 2010 R2: FIM Service or the FIM Synchronization Service Account does not have Deny Logon As Batch Job set
• FIM 2010 R2: FIMCM – Portal should be set to use only secure connections
• FIM 2010 R2: FIM CM – Database connection string should use Windows Authentication only.
• FIM 2010 R2: <Certificate Type> certificate is not defined, is close to its expiry date or has already expired.
• FIM 2010 R2: USEGroups and USEGroups settings are used
• FIM 2010 R2: Appropriate Service principal name should be set for the Web Pool account
• FIM 2010 R2: Autostats equals ON
• FIM 2010 R2: FTS Index is enabled in auto mode and the index is fully populated
• FIM 2010 R2: SQL Server Agent is not running or FIM Jobs are not enabled
• FIM 2010 R2: A required Certificate Management patch should be installed
• FIM 2010 R2: Remote server should be present and accessible to run sub model scans
• FIM 2010 R2: Pre-requisite check status
• FIM 2010 R2: Powershell remoting should be enabled on the remote serve
• FIM 2010 R2: Discovery script needs to be run by a user in the Local Administrators group

DOWNLOAD: Microsoft® Forefront™ Identity Manager 2010 R2 Best Practices Analyzer 4.1.2515.0
http://www.microsoft.com/en-us/download/details.aspx?id=30419