Home » IT - Microsoft » Deploy the MIM Password Change Notification Service on a domain controller

Deploy the MIM Password Change Notification Service on a domain controller

Escribe tu dirección de correo electrónico para suscribirte a este blog, y recibir notificaciones de nuevos mensajes por correo.

Join 5 other followers

June 2016
« May   Jul »



All messages posted to this blog are provided "AS IS" with no warranties, and confer no rights. The content of this site are personal opinions and might not represent the Microsoft Corporation view. Regarding any sample code that we provide: This Sample Code is provided for the purpose of illustration only and is not intended to be used in a production environment. THIS SAMPLE CODE AND ANY RELATED INFORMATION ARE PROVIDED "AS IS" WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESSED OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE IMPLIED WARRANTIES OF MERCHANTABILITY AND/OR FITNESS FOR A PARTICULAR PURPOSE. This blog serves 2 purposes. Firstly, I want to share information with other IT pros about the technologies we work with and how to solve problems we often face. Secondly, I use my blog as a notebook. There's so much to learn and remember in our jobs that it's impossible to keep up. By blogging, I have a notebook that I can access from anywhere. Anything you do to your IT infrastructure, applications, services, computer or anything else is 100% down to your own responsibility and liability. Mcselles bears no responsibility or liability for anything you do. Please independently confirm anything you read on this blog before doing whatever you decide to do.

Install the Password Change Notification Service

The Password Change Notification Service (PCNS) is a service that you install on the domain controllers that enables synchronization of passwords by MIM to other systems, such as another vendor’s directory server. For password synchronization, install the PCNS on each domain controller server.

  1. Login as a domain administrator to a Server running on Windows Server with the role of an Active Directory Domain Services.

  2. Copy the Password Change Notification Service setup folder to the computer.

  3. Locate the Password Change Notification Service.msi file, right click on it, and create a shortcut.

  4. Locate the shortcut file, right click, and bring up its Properties.

  5. In the Target field add the preamble msiexec.exe /i before the path to the msi file, and the suffix SCHEMAONLY=TRUE after the msi path. For example, if the setup folder is C:\PCNS the command to run would look like this: (all in one line).

    msiexec.exe /i "C:\PCNS\x64\Password Change Notification Service.msi" SCHEMAONLY=TRUE
  6. Save changes to the shortcut file.

  7. Run the shortcut file to start the PCNS installation in schema extension mode. When the following screen appears, click Next.

  8. You will be notified that Setup will now update the Active Directory schema for the Password Change Notification Service. Click OK to proceed with the schema update.

  9. When the Schema extension process completes, and the following screen appears, clickFinish.

  10. Run the Password Change Notification Service.msi file again – this time directly (no run string is needed). When the following screen appears, click Next.

  11. Accept the license agreement and click Next.

  12. Click to begin the installation.

  13. When the installation completes successfully screen appears, click Finish.

  14. Restart your computer for the configuration changes made to MIM Password Change Notification Service to take effect. You can do it by clicking Yes in the pop-up window that appears, or you can restart later.

Configuring the Password Change Notification Service

Once reconnected to the DC server as a domain administrator, go to C:\Program Files\Microsoft Password Change Notification. Run pcnscfg.exe.

Source: https://docs.microsoft.com/en-us/microsoft-identity-manager/deploy-use/deploying-mim-password-change-notification-service-on-domain-controller

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out /  Change )

Google photo

You are commenting using your Google account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s

Microsoft on the Issues

News and perspectives on legal, public policy and citizenship topics

Mike Crowley's Whiteboard

“There are no limits to what you can accomplish when you are supposed to be doing something else."


There Be Dragons

Ken Cenerelli

My life in software development

VMware, Windows, Virtualization

When I find time (Wenn ich Zeit habe)

Just a random "Microsoft Server / Client Tech" info..

"Feeding Your Training and Technology Obsessions"


WordPress.com is the best place for your personal blog or business site.


Documentación técnica, notas y apuntes sobre Administración de Sistemas, Servidores, Redes y más

Microsoft Taste

Mary's Blog

%d bloggers like this: