Sign in with Microsoft
Sign in or create an account.
Select a different account.
You have multiple accounts
Choose the account you want to sign in with.


A hotfix rollup package (build 5.3.721.0) is available for Microsoft Forefront Identity Manager 2010 and Microsoft Forefront Identity Manager 2010 R2. This hotfix rollup package resolves some Lotus Domino connector issues and adds some features and functionality. These are described in the "More Information" section.

Update information

A supported update is available from Microsoft. We recommend that all customers apply this update to their production systems.

This update is available from the following Microsoft websites:

Microsoft Download Center

Forefront Identity Manager Connector for Lotus Domino 8.x

Microsoft Support

If this update is available for download from Microsoft Support, there is a "Hotfix download available" section at the top of this Knowledge Base article. If this section does not appear, contact Microsoft Customer Service and Support to obtain the hotfix. Additionally, you can obtain the update from Microsoft Update or from Microsoft Update Catalog.

Note If additional issues occur or if any troubleshooting is required, you might have to create a separate service request. The usual support costs will apply to additional support questions and issues that do not qualify for this specific hotfix. For a complete list of Microsoft Customer Service and Support telephone numbers or to create a separate service request, go to the following Microsoft website: The "Hotfix download available" form displays the languages for which the hotfix is available. If you do not see your language, it is because a hotfix is not available for that language.


To apply this update, you must have the following installed:

  • The Lotus Notes client

  • The Microsoft .NET Framework 4.0

  • The Forefront Identity Manager Synchronization Service in one of the following:

    • Microsoft Forefront Identity Manager 2010 R2

    • Microsoft Forefront Identity Manager 2010 Update 2 (build 4.0.3606.2 or a later build)

Additionally, a user account on the same server as the service account of the Lotus Domino connector must start Lotus Notes one time. Also, the default Lotus Domino Lightweight Directory Access Protocol (LDAP) schema database (Schema.nsf) must exist on the Domino Directory server.

Note You can install the default Lotus Domino LDAP schema database by running or restarting the LDAP service on the Domino server.

File information

The global version of this update has the file attributes (or later file attributes) that are listed in the following table. The dates and times for these files are listed in Coordinated Universal Time (UTC). When you view the file information, it is converted to local time. To find the difference between UTC and local time, use the Time Zone tab in the Date and Time item in Control Panel.

File name

File size







lotusconnector\synchronization service\extensions





lotusconnector\synchronization service\extensions





lotusconnector\synchronization service\uishell\xmls\packagedmas

More Information

Important With the introduction of this hotfix rollup, the Domino Connector is now a 64-bit Connector and it has some new settings. After you have applied this hotfix rollup, you have to take some additional steps before the Connector will work.

  1. Open the Connector’s properties. On the Properties page under Architecture, change the value from x86 to Process.

  2. Go to the Connectivity screen and enter the password for the Connector.

  3. On the Global parameters page, notice the new Enable creation of _Contact objects drop-down list. This was a check box in earlier releases. If you have previously used this feature, select the Non-reference values option.

  4. On the same page, verify that the Use AdminP for updating references option is selected. This enables the same behavior as in earlier releases.

  5. For more information about the new properties, see the "New features" section.

  6. Save the Connector.

We recommend that you also apply FIM Synchronization Service hotfix 2889529 to resolve an issue in which the password for the Domino Connector is unavailable.

Issues fixed

This hotfix rollup fixes the following issues that were not previously documented in the Microsoft Knowledge Base.

Issue 1

The connector removes leading and trailing spaces when strings are exported. This triggers an "exported-change-not-reimported" warning message when you confirm the import.

Issue 2

If the AdminP process doesn't respond in a timely manner, the Synchronization Service seems to stop responding (hang). After you apply this hotfix rollup, the Connector now times out the AdminP request after 15 seconds, and the operation is kept in the Connector Space. At the next export or during confirmation of the import when the change is processed by AdminP, the Connector merges the change.

New Features

Feature 1

Logging for the Connector has moved from text files in the extension folder to ETW logging. This was done for consistency with other Connectors from Microsoft. This also addresses an issue in which the FIM Synchronization Service reported an error because of changes in the extension folder.

Feature 2

By default, the Domino Connector uses the directory assistance service in Lotus Domino to detect secondary address books. When this service is not enabled, you can now manually add the secondary address books. To do this, enter the secondary address books in the Additional address books to add to the partition list on the Global property page. The Synchronization Service uses these address books in addition to those returned by the directory assistance service.

Feature 3

There's a new Use AdminP for updating references option. By default, this option is enabled and lets AdminP keep referential integrity intact. In case AdminP is not configured to maintain referential integrity, you can now export reference attributes as they appear in the connector space and thereby bypass AdminP.

Feature 4

In earlier releases, the Connector assumes that all references can be resolved to the names.nsf primary address book. When Lotus Domino is configured to have separate address books with different distinguished names representing the same object, it's now possible to also create _Contact objects for all reference values that are found in an address book. On the Global parameters page under Enable creation of _Contact objects, select the new Reference and Non-Reference Values option.

Feature 5

The Connector now runs in a 64-bit process.

The third-party products that this article discusses are manufactured by companies that are independent of Microsoft. Microsoft makes no warranty, implied or otherwise, about the performance or reliability of these products.


Learn about the terminology Microsoft uses to describe software updates.

Need more help?

Want more options?

Explore subscription benefits, browse training courses, learn how to secure your device, and more.

Communities help you ask and answer questions, give feedback, and hear from experts with rich knowledge.

Was this information helpful?

What affected your experience?
By pressing submit, your feedback will be used to improve Microsoft products and services. Your IT admin will be able to collect this data. Privacy Statement.

Thank you for your feedback!