Does anyone know of a matrix showing the various FIM components and the version numbers associated with them across the various fixes that are out there? I only really need the ones since RTM ... This would be make it easier to check which patches/fixes have been installed and verify that all components have been updated to the same patch levels.

As of today the following updates and hotfixes are available FIM 2010 Update1 - build 4.0.3531.2 hotfix rollup package - build 4.0.3547.2 hotfix rollup package - build 4.00.3558.02 - replaces previous hotfix hotfix rollup package - build 4.0.3561.2 - includes previous hotfix /Matthias/Matthias

As of today the following updates and hotfixes are available FIM 2010 Update1 - build 4.0.3531.2 hotfix rollup package - build 4.0.3547.2 hotfix rollup package - build 4.00.3558.02 - replaces previous hotfix hotfix rollup package - build 4.0.3561.2 - includes previous hotfix /Matthias/Matthias

Search the Microsoft Support website for: "forefront identity manager 2010" update or hotfix. It will provide you with the list of updates and hotfixes Matthias is referring to. When you click the single updates and hotfixes, you'll get the exact details of the components updated/fixed. HTH, PeterPeter Geelen (Traxion) - Sr. Consultant IDA (http://www.fim2010.be) [If a post helps to resolve your issue, please click the "Mark as Answer" of that post or "Helpful" button of that post. By marking a post as Answered or Helpful, you help others find the answer faster.]

Thanks- The reason I was checking was that I had a company that had two FIM Service servers and only one of the two received Update 1 via Update. The second service failed to start because the RTM version FIM Service won't work against the upgraded database. Easy fix of course.. just do the update to the other Service.

I would really advise against installing updates with Windows Update for MS products other than the base OS. Like with update 1 (http://support.microsoft.com/kb/978864 ) there are several steps to verify before and after the actual update. Perhaps if you don't "auto-install/reboot" you can go that way. But I prefer downloading those updates manually and properly test them. I also think the manual run of the installer will provide better logging than the install using windows update. Like how does that interact with you to confirm whether you want the FIM Service to be stopped?...http://setspn.blogspot.com