FIM2010 R2-Upgrade Account Rights

During the upgrade of of the FIM Portal and Service to FIM 2010 R2 in a controlled environment, the installer kept bailing and the MSIEXEC log file really didn’t provide a lot of errors. Perhaps there was something in the release notes (I mean I read them but I didn’t *READ* them) but the account that was being used for the upgrade wasn’t a domain admin. Once domain admin rights were added, the installation worked fine and the system upgraded.

Just a bit of a heads up for those of you who may be scratching their heads. To get the system to write a log, the command was

MSIEXEC –i “Service and Portal.msi” –lv “.\fim_install_log.txt”

A snippet of the log file that was showing the system trying to log on locally which seemed odd:

(UNKNOWN)     System.Reflection.TargetInvocationException: Exception has been thrown by the target of an invocation. —> System.UnauthorizedAccessException: General access denied error
(UNKNOWN)     
(UNKNOWN)      at System.DirectoryServices.Interop.UnsafeNativeMethods.IAdsContainer.GetObject(String className, String relativeName)
(UNKNOWN)      at System.DirectoryServices.DirectoryEntries.Find(String name, String schemaClassName)
(UNKNOWN)      at Microsoft.IdentityManagement.ServerCustomActions.CustomActions.ChangeUserMembershipInGroup(Session session, Boolean addUser)
(UNKNOWN)      — End of inner exception stack trace —
(UNKNOWN)      at System.RuntimeMethodHandle._InvokeMethodFast(Object target, Object arguments, SignatureStruct& sig, MethodAttributes methodAttributes, RuntimeTypeHandle typeOwner)
(UNKNOWN)      at System.Reflection.RuntimeMethodInfo.Invoke(Object obj, BindingFlags invokeAttr, Binder binder, Object parameters, CultureInfo culture, Boolean skipVisibilityChecks)
(UNKNOWN)      at System.Reflection.RuntimeMethodInfo.Invoke(Object obj, BindingFlags invokeAttr, Binder binder, Object parameters, CultureInfo culture)
(UNKNOWN)      at Microsoft.Deployment.WindowsInstaller.CustomActionProxy.InvokeCustomAction(Int32 sessionHandle, String entryPoint, IntPtr remotingDelegatePtr)

Advertisements
This entry was posted in Forefront Identity Manager 2010. Bookmark the permalink.

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s