Chat now with support
Chat mit Support

On Demand Migration Current - Active Directory Release Notes

Release Notes

Quest® On Demand Migration – Active Directory 20.12.15

Release Notes

May 21, 2024

This release of Quest® On Demand Migration – Active Directory includes the following solutions:

  • Directory Sync

    Directory Sync can set up and maintain an Active Directory sync, an Microsoft Entra ID sync, or even a sync between Active Directory and Microsoft Entra ID. Users in merging organizations can find each other in a unified Global Address List (GAL).

  • Active Directory

    Active Directory enables you to migrate Active Directory to accelerate your enterprise M&A and modernization initiatives. Quest® On Demand Migration – Active Directory is a solution that integrates and migrates Active Directory, Microsoft Entra ID, and hybrid directory environments without requiring trusts, SQL, network connectivity, or installing servers.

  • Domain Move

    Domain Move provides the “Domain Cutover” or move functionality. This powerful feature guides the migration operator through the entire domain move process and automates many of the steps.

  • Domain Rewrite

    On Demand Migration provides the “Domain Rewrite” or Email Rewrite (ERS) functionality. This powerful feature allow end users to communicate from a common email domain from Day One—on both inbound and outbound mail—so you present as a unified, cohesive brand. And, you get all of this without downtime — so you won’t have critical gaps in communication.

View the online Quest® On Demand Migration – Active Directory User Guide for more information: https://support.quest.com/technical-documents/on-demand-migration/current/active-directory-user-guide

 

These release notes provide information about the Quest® On Demand Migration – Active Directory release.

 

Topics:

 

Enhancements

The following is a list of enhancements implemented in this deployment.

General enhancements

Enhancement Issue ID
The ability to select the displayed columns in the Devices and Serves view has been added. Select the gear icon above the "Ready Devices" list to select the columns to display. 45819
The ability to remove an Autopilot-provisioned device from Entra ID has been added. 47740
The ability to set Intune Primary User after the Device Cutover has been added.

47741

Initial release of Migration for Active Directory Express is now generally available. n/a

Known Issues

The following is a list of issues, including those attributed to third-party products, known to exist at the time of this deployment.

Directory Sync known issues

Known Issue Issue ID
An attempt to install an older version of the agent software will fail if a newer version has already been successfully installed. If, for some reason, the older version is needed, first uninstall the newer version, then remove all registry references to the agent. 8060
The agent installer cannot accept a password with a first character of !. 8122
When discovery discovers an environment, it will read in the OU structure of all domains within the forest. The UI will show all domains and you can select them for use in all workflows. However, if a DC for that domain is not included, or the agent account does not have read access to the objects, they will not be read into the database. 8077
Cloud Only Security Groups are not read in when reading a cloud endpoint. 22453
User thumbnail photos do not sync to cloud environments. 8069
The PowerShell User Group should be added to the Tenant Group Filter as the Group Owner. A security group should not be used. 8070
An account with access to all domains within the forest is needed if you want to sync all domains within a single forest with a single agent. Using an enterprise admin account is the most efficient method for doing this. 8073
Mapping functions do not work with multivalued attributes. For example, (results(proxyaddresses,"x500:") will not return a true even if an X500 address is present. 8075
When a workflow for a cloud environment has been run once, but then has been idle for longer than 30 days, an error will be encountered when the job starts, and the job will fail and loop repeatedly until the retry count has been reached. 8079
In the German and Chinese Office365 tenants, Directory Sync will always do full synchronizations because the delta sync functionality is not available in these local tenants. 8095
An "Object with ID xyz was not found" error may occur when reading recently created Azure guest users due to the longer length of time for guest users to propagate. 8101
Remote Mailboxes from the source are incorrectly created in the target as Users instead of MailUsers. 8102
Delta syncs are limited to 30 days. To avoid full synchronization, a read in should be performed for all cloud environments every 29 days or less. 8108
Password sync does not support AES hashes. 21796
A template configured to sync a binary attribute to a non-binary attribute will not sync correctly. For example, if syncing Binary (ThumbnailPhoto) to String(ExtensionAttribute), the target attribute will be synced as "System.Byte[]" instead of the expected binary value converted into a string. 15683
A security group cannot be used as a filter group. 8057
When using filter groups for Cloud environments you need to ensure that a group containing any newly created objects is present in the environment filter. This can be accomplished by having a source and target filter group with the same name so they will match and synchronize between the environments. If these objects are not read in after creation, they will not have any additional updates synchronized and they will not be matched. 8076
When synchronizing local AD groups to Office 365 as Office 365 groups (Unified Groups) any contact in the source group will record an error in the logs and the contact will not appear in the target group. 8081
Office 365 Group settings are not copied to the target Office 365 Group. 8104
Likes for Office 365 Group conversations are not migrated. 8122
Custom schema attributes can be added to template mappings but are not visible in the drop-down selection list. 8072
All domains within an Active Directory Forest are visible within an environment when adding a single domain even though the agent account credentials may not have access to all domains. 8074
The DS-Core-Propagation-Data attribute is not synchronized by Directory Sync. The DS-Core-Propagation-Data attribute is a system attribute which is used by the Active Directory service and cannot and should not be modified by anything other than the directory itself. 34400
The mapping does not update the mailnickname attribute of Non mail-enabled security groups. 34481
Attribute filters cannot be applied to Security Groups. 14933
Cloud Environments that use Object Filter Exclusion options may see Unlicensed or Disabled Accounts read in when configured to Exclude Unlicensed or Disabled Accounts. This is because the AccountDisabled and SKUAssigned properties in Exchange Online Management are not always updated to reflect the true state of the object in Office365. 35957, 36574
Updates of non mail-enabled Security groups in Cloud to Local syncs fail due to an empty samAccountName value. 37254
Custom schema attributes can be added to template mappings, but are not visible in the drop-down selection list. 52326
Directory Sync will attempt to add Group Object as Owner to Teams/M365 and Distribution Group when the Group object shares similar name as the Group Owner. For M365 Groups and Teams, an error will be logged for these groups as they cannot be added as an owner. 41463
Password sync will fail for objects with non-English characters in the sAMAccountName. 41570
A directory operation error occurs when running a cloud to local workflow. 42444

The RC4 encryption (Rivest Cipher 4 or RC4-HMAC) is an element of Microsoft Kerberos authentication that Quest migration products require to sync Active Directory passwords between Source and Target environments. Disabling the use of the RC4 protocol enabled makes password syncing between environments impossible.

Beginning on November 8, 2022 Microsoft recommended an out of band (OOB) patch be employed to set AES as the default encryption type. The enabling and disabling use of the RC4 encryption protocol has potential impact beyond the function of password syncing of Quest migration tooling and should be considered carefully.

N/A
Comment fields that exceed the maximum length of 4000 characters will cause an error. 44556
When mail contacts are deleted from Exchange Online, the deletion is not reflected in the product. Workflows with 'Delete Objects' steps will not process contact deletes. 45392

Active Directory known issues

Known Issue Issue ID
The Server 2016 Rollback action may break a user's profile if the user is not a member of the BUILTIN\Administrators group on the target machine. 29544
The Cleanup job should not be used with bi-directional match/sync configurations as it may incorrectly remove target ACLs. 32588
On a Windows 10 or Windows 11 device, when performing the Entra Cutover action, the migrated user profiles may lose some of the installed Windows Store application or other Provisioned AppX Packages. These packages will need to be reinstalled by the user after they logon to their target profile. 36079
An Microsoft Entra ID device cannot be ReACLed if there is no matching group in mapping file. 36124
For Entra Device Cutover, Windows Hello for Business Setup cannot be completed when Source Account is a Direct Member of the Device BUILTIN\Administrators Group. 36627
The ODMAD Device Agent has not been designed to take special requirements of application servers, such as Exchange, SharePoint, Remote Desktop Services, IIS, etc. into consideration. Applications should be analyzed to determine if domain migration will be supported by each individual application and what remediation(s) may be required. Recreating/redeploying Application Servers in the target environment is recommended for best results. 43466
An group with the name of two or less characters cannot be assigned to a migration wave. 45514
Certificates are not migrated with Device Cutover. 46002
Rollback is not supported for Cloud to On-Prem and Cloud to Cloud Device Migration. 46422
When installing a provisioning package that has been renamed (filename is different from the package name in the package metadata), the cutover script will fail when trying to verify that installation was successful. 47517

Domain Move known issues

Known Issue Issue ID
Domain Move can not move the domain if it is being used for Active Directory Federation Service(ADFS) between on-prem Active Directory and Microsoft Entra ID. 35529

Domain Rewrite known issues

Known Issue Issue ID
Signed and encrypted messages will not be rewritten by the email rewrite service (ERS). 8004
When ERS is disabled, external email addresses of MEU's are not removed. 40937
Cloud Rewrite workflows will not run when prepare jobs are queued for both hybrid and cloud-only target objects. 44319
Forwarding from mailbox cannot be removed if ERS was enabled using skip setting up forwarding. 47362

Release History

The following lists the new features and resolved issues by deployment.

20.12.14.6

Enhancements

Enhancement Issue ID
The ability to de-associate a cloud environment on the local environment setting page has been added. To remove the association, select the "None" option from the drop-down list of cloud environments. 37844
The EntraID Device Add-on license requirement for Entra ID Device migration has been removed. 48497
The "Remove Device(s)" feature is now enabled for all users. 49303

Resolved issues

Resolved Issue Issue ID
Credential format "domain-with-dashes\User" is not valid. 48656

20.12.14.5

Enhancements

Enhancement Issue ID
A pre-check assessment step has been added to the Domain Move process. The pre-check assessment occurs while using the Domain Cutover wizard and is also available by using the "Pre-Flight Validation" button when hovering over a Domain Cutover which has not started. 37553
The ability to cancel queued jobs in Devices and Servers has been added. 47354
The ability to perform a Device ReACL when the Group Mapping is empty has been added. 47643

Resolved issues

Resolved Issue Issue ID
ReACL errors when the release id is "22H2" on Windows 10. 46195
Unable to update the license total count of Azure AD license subtype. 47537
Require Azure AD SKU to read devices when source and target environment is local to local. 47619
ReACL consumes all licenses for objects that are read in csv file, even if the create unmatched objects in target during workflow run option is not selected. 47927
The Directory Sync agent auto upgrade check fails behind proxy. 48011
Skipping delete request error in data retention. 48056
The wrong expiration date is set on the Directory Sync license when there are separate Entra ID and Directory Sync licenses. 48057

20.12.14.3

Enhancements

Enhancement Issue ID
Changes to address QiB retirement and Entra ID coexistence. 47610

20.12.14.2

Resolved issues

Resolved Issue Issue ID
When MailboxLocations is longer than 2000 chars, the private API fails to update the User record and logs an error. The solution is for private API to prune MailboxLocations if it is more than 2000 bytes. Pruning will be accomplished by trimming records that appear multiple times (types "AuxPrimary", "AuxArchive", and "SubstrateExtension-Teams"), until the total size is 2000 bytes or less. 47592

20.12.14.1

Resolved issues

Resolved Issue Issue ID
Using filters to select devices to assign to a wave, adds other non-selected devices to the wave. 47492
Self-Service-Tools
Knowledge Base
Benachrichtigungen und Warnmeldungen
Produkt-Support
Software-Downloads
Technische Dokumentationen
Benutzerforen
Videoanleitungen
RSS Feed
Kontakt
Unterstützung bei der Lizenzierung
Technische Support
Alle anzeigen
Verwandte Dokumente

The document was helpful.

Bewertung auswählen

I easily found the information I needed.

Bewertung auswählen