Power365 Current - GAL Sync Setup Quick Start Guide

Best Practices

Best practices for each phase of the migration project are presented below:

Phase 1: Installing and Creating the Synchronization Profile within Directory Sync Pro for Active Directory

• Directory Sync Pro for Active Directory is used to synchronize objects and must be installed before installing the Migrator Pro for Active Directory Console and Web Service.
• The AD Migration/Synchronization profile should be set up to include every computer. However, not every computer needs to be migrated immediately. This process ensures they are in the database, ready to install the Migrator Pro for Active Directory Agent and register themselves. Computers can be blacklisted if you do not want to immediately migrate them.
• Carefully consider the Group Collision option (Merge, Skip, Rename). It is recommended that this option is not changed once migrations have been started. Additionally, it is strongly recommended to not select the Skip option. The Merge and Rename options are better in most cases.
• Synchronizing SID History is recommended.

Phase 2: Register Computers (Concurrent with Phase 3)

• The Migrator Pro for Active Directory Agent should be pushed out to computers via Group Policy (GPO) or third party tool.
• Sufficient time should be allowed to address any issues with computer registration with the server. Correcting registration issues can take more time than expected. A typical large company with a large number of computers may need a couple of weeks of off and on work to resolve registration issues with all computers.
• Resolving computer registration issues can be accomplished concurrently with identifying users, rooms, contacts, and groups to Migrate in Phase 3.

Phase 3: Identify Users, Rooms, Contacts, and Groups to Migrate (Concurrent with Phase 2)

• Before migrating users and groups, do some planning and analysis to see what users, rooms, contacts, and groups should be migrated, what groups need to be consolidated, how duplicates will be handled, etc.
• More than one synchronization profile can be used to control the target destinations of users, rooms, contacts, and groups.
• User Accounts should be disabled in the target.
• Identifying users, rooms, contacts, and groups to Migrate can be accomplished concurrently with resolving computer registration issues in Phase 2.

Phase 4: ReACL Computers and NAS

• Run a ReACL on as many computers as possible early in the process.
• ReACL is a non-destructive process that can be repeated as often as necessary up until Cutover in Phase 5.
• Troubleshoot any computers that did not successfully complete ReACL.
• Run a ReACL again close to the actual cutover date. This will allow you to complete most of the ReACL process early and provide time to resolve any issues with things such as anti-virus software and Group Policies.

Phase 5: Cutover Computers

• Create some test users, groups, and computers to verify a successful user and group migration and computer cutover.
• Create any custom jobs that may be required to run against users, rooms, groups, contacts or computers.
• Typically, a final ReACL would be run the weekend before the cutover to ensure any new users and other changes are processed.
• A workstation reboot is required after the target account is enabled, the source account is disabled, and the workstation cutover is complete. This is usually completed in the evening when fewer users are affected. The affected users should be alerted that this reboot is necessary.

Phase 6: Cleanup

• The cleanup phase typically takes place about two months after all device cutovers are complete. During the Cleanup phase, all permissions should be removed from the source domain and then the Migrator Pro for Active Directory Agent should be removed from the devices.

• Before executing the cleanup job to complete the cleanup process it is recommended that you disable SID filtering/quarantine to verify that there are no issues with application access.