While setting up Self Service Password Reset (SSPR) in FIM 2010 I initially encountered some problems so I started verifying my configuration. One of the more elaborate configuration steps of the SSPR functionality is the configuration of DCOM and WMI. The FIM scriptbox has some PowerShell scripts who can do it for you: WMI and DCOM (Brad Turner) Nevertheless I choose to do it manually.

If you’re in doubt whether your FIM Service account has all the required permissions you can perform the following steps:

1. Make sure your FIM Service account has “allow logon locally” on your FIM Synchronization Server, this is just so we can do the “runas /u cmd”. Besides that this is not a required privilege for SSPR to work.
2. Start a cmd and execute: runas /u:domain\fim_svcacct cmd
3. In the new cmd, execute: WBEMTEST
4. An utility which looks like this will be launched:
   
5. Connect to root\MicrosoftIdentityIntegrationServer
6. Click Query…
7. Execute this query: select * from MIIS_CSObject WHERE Domain='domain' and Account='fim_svcacct'
   
8. Double click the result and copy paste the MaGuid and PartitionGuid to a temporary notepad window. You can easily copy them by selecting the property and choosing “Edit Property”.
     
9. Back to “Query….”: execute the following query:SELECT * FROM MIIS_ManagementAgent WHERE guid='{ma guid}'
10. You should see your AD MA
11. Get the __PATH of that object (e.g. \\FIMSERVER\root\MicrosoftIdentityIntegrationServer:MIIS_ManagementAgent.Name="AD")
12. Back to WBEMTEST, choose “Execute Method”
13. Type the entire path from (11)
14. Change the Method to “GetServerStatus”
     
15. Click “Edit In Paramaters…”
16. Change PartitionGuid: Edit Property –> Not null –> {partition guid} –> save property –> save object
17. Execute
18. You should see success as return value:
    
19. Don’t forget to edit out the parameter!

As usual I didn’t figured this out all by myself. The procedure was found at http://social.technet.microsoft.com/Forums/en-US/ilm2/thread/618a78ae-e150-4269-a2eb-5ccc40229e7e and originally provided by Anthony Ho. It’s more or less a copy paste of his information. Thanks Anthony!