Discovering accounts is a critical first step before a migration to enumerate, update and retrieve relevant information about accounts from the source tenant. The discovery task collects the necessary account data and statistics on connected mailboxes from your source tenant to avoid misconfiguration and prevent possible issues.
|
NOTE: Account discovery is deactivated if basic migration consents are missing from either the source or the target tenant. If there are user or group accounts from a previous discovery task that you don't want anymore, you can manually delete the accounts from the Accounts list (Accounts tab > List View). If there are changes to an account from a previous discovery, the account will be updated if the account is rediscovered by the task. |
- Discovering all accounts automatically
- Discovering accounts from a file
- Discovering accounts from a file using security groups
- Refreshing Selected Accounts
- Reviewing the Account Discovery Task
- Reviewing the Account Discovery Task Events
Discovering all accounts automatically
- Log in to Quest On Demand and choose an organization if you have set up multiple organizations.
- From the navigation pane, click Migration to open the My Projects list.
- Create a new project or open an existing project.
- From the Accounts tile on the project dashboard click Open. The Accounts and User Data migration workspace opens.
- Open the Accounts tab . From the List View menu, click Discovery and then select Discover All. The New Account Discovery Task wizard starts.
- Notification
- Send notification email once the task is completed - select this option to send a notification email when a discovery task completes.
- Only in a case of failure - Select this option to send the email if the discovery task fails to complete successfully.
- Recipients - enter the email address of the recipients of this email. You can specify multiple recipient email addresses separated by semicolon.
- Click Next.
- Send notification email once the task is completed - select this option to send a notification email when a discovery task completes.
- Schedule
- Choose from one of three options to schedule the task. The scheduler will be activated only after you complete the task wizard.
- Run now - task runs immediately.
- Run later - task must be started manually.
- Schedule - task will be started at a future date and time entered in the corresponding calendar field.
- Click Next.
- Choose from one of three options to schedule the task. The scheduler will be activated only after you complete the task wizard.
- Summary
- Verify the task specifications as described below:
- Name - name of the task. You can specify a custom name. Default name is Account Discovery Task.
- Source tenant - name of the source tenant in this project.
- Discover Type - discovery option that is selected. Value is set to All.
- Scheduled start - date and time when the task will start. Now indicates that the task will start immediately.
- Click Back to revise or review a previous step or click Finish to complete the task wizard. The task will start as scheduled.
- Verify the task specifications as described below:
The migration task is created. You can track its progress from the Tasks tab, view the summary on the Dashboard or monitor alerts and notifications from the Events tab. When the discovery task is complete, a summary about the accounts discovered in the source tenant is available on the project dashboard.
Discovering accounts from a file
When you have a large set of accounts but you want to discover a subset of those accounts, the CSV file lets you specify the accounts (users and Microsoft 365 groups) that you want to discover and ignore the rest. You can then use this file in the New Account Discovery Task wizard.
To prepare the CSV file:
- Log in to the Microsoft 365 admin center (https://admin.microsoft.com) with the credentials of your source tenant administrator.
- Export Users:
- From the navigation pane, click Active users.
- If needed, you can filter the set of users that you want to export. Then click Export. A Users_<timestamp>.csv file will be downloaded to your computer.
- Export Groups:
- From the navigation pane, click Active teams and groups.
- Select the Microsoft 365 tab in the Active teams and groups page.
- If needed, you can filter the set of groups that you want to export. Click Export and then click Export groups in this list. A Groups.csv file will be downloaded to your computer.
- Create a new CSV file and add the user accounts and groups with accounts you want to discover. You can use any of the two formats shown below:
NOTE:
- You can download a CSV template for either of the two formats when you start the New Account Discovery Task wizard and click Download Example File from the Discovery Options step.
- CSV file names with non-ASCII characters are not supported.
Format 1
UserPrincipalName - Column header for the login name for a user account based on the Internet standard RFC 822. Do not use a mail nickname or proxy address.
Format 2
ObjectId - Column header for the globally unique identifier (GUID) of the user or group object. When you use ObjectId as the column header, you must specify object GUIDs only. You cannot specify UPNs.
Type - Column header for the type of account: user or Microsoft 365 group.
- Save the CSV file. You may rename the file if needed.
To run the account discovery task:
- Log in to Quest On Demand and choose an organization if you have set up multiple organizations.
- From the navigation pane, click Migration to open the My Projects list.
- Create a new project or open an existing project.
- From the Accounts tile on the project dashboard click Open. The Accounts and User data migration workspace opens.
- Open the Accounts tab . From the List View menu, click Discovery and then select Discover From File. The New Account Discovery Taskwizard starts.
- Discovery Options
- Click Browse to choose the comma-separated values (CSV) file that contains the lists of user accounts and group identifiers.
- Click Next.
- Notification
- Send notification email once the task is completed - select this option to send a notification email when a discovery task completes.
- Only in a case of failure - Select this option to send the email if the discovery task fails to complete successfully.
- Recipients - enter the email address of the recipients of this email. You can specify multiple recipient email addresses separated by semicolon.
- Click Next.
- Send notification email once the task is completed - select this option to send a notification email when a discovery task completes.
- Schedule
- Choose from one of three options to schedule the task. The scheduler will be activated only after you complete the task wizard.
- Run now - task runs immediately.
- Run later - task must be started manually.
- Schedule - task will be started at a future date and time entered in the corresponding calendar field.
- Click Next.
- Choose from one of three options to schedule the task. The scheduler will be activated only after you complete the task wizard.
- Summary
- Verify the task specifications as described below:
- Name - name of the task. You can specify a custom name. Default name is Account Discovery Task.
- Source tenant - name of the source tenant in this project.
- Discover Type - discovery option that is selected. Value is set to Using CSV file.
- Scheduled start - date and time when the task will start. Now indicates that the task will start immediately.
- Click Back to revise or review a previous step or click Finish to complete the task wizard. The task will start as scheduled.
- Verify the task specifications as described below:
The migration task is created. You can track its progress from the Tasks tab, view the summary on the Dashboard or monitor alerts and notifications from the Events tab. When the discovery task is complete, a summary about the accounts discovered in the source tenant is available on the project dashboard.
Discovering accounts from a file using security groups
When you need to limit an application's access to a specific set of mailboxes, use this option to include the security groups in a CSV file. You can then use this file in the New Discovery Task as described in this topic to discover the accounts from the source tenant. Application access policies can be assigned to these discovered groups to restrict access to the group members only.
To prepare the CSV file:
- Log in to the Microsoft 365 admin center (https://admin.microsoft.com) with the credentials of your source tenant administrator.
- Export Security Groups:
- From the navigation pane, click Teams and groups.
- Select the Mail-enabled security tab in the Active teams and groups page.
- If needed, you can filter the set of groups that you want to export. Click Export and then click Export groups in this list. A Groups.csv file will be downloaded to your computer.
- Create a new CSV file and add the email ids of the security groups with the member accounts you want to discover.
NOTE:
- You can download a CSV template when you select Discover From Security Groups and start the New Account Discovery Task wizard.
- CSV file names with non-ASCII characters are not supported.
MailEnabledSecurityGroupEmailID - Column header for email IDs of the security groups.
- Save the CSV file that you created.
To run the account discovery task:
- Log in to Quest On Demand and choose an organization if you have set up multiple organizations.
- From the navigation pane, click Migration to open the My Projects list.
- Create a new project or open an existing project.
- From the Accounts tile on the project dashboard click Open. The Accounts and User data migration workspace opens.
- Open the Accounts tab . From the List View menu, click Discovery and then select Discover From Security Groups. The New Account Discovery Taskwizard starts.
- Discovery Options
- Click Browse to choose the comma-separated values (CSV) file that contains the list of email IDs of the security groups.
- Create application access policy for provided groups - select this option to create an application access policy for groups when it is necessary to restrict access to group members only, when migrating account mailboxes . The new application access policy can take up to 30 minutes to take effect on Azure groups. For more information see Limiting application permissions to specific Exchange Online mailboxes.
- Click Next.
- Notification
- Send notification email once the task is completed - select this option to send a notification email when a discovery task completes.
- Only in a case of failure - Select this option to send the email if the discovery task fails to complete successfully.
- Recipients - enter the email address of the recipients of this email. You can specify multiple recipient email addresses separated by semicolon.
- Click Next.
- Send notification email once the task is completed - select this option to send a notification email when a discovery task completes.
- Schedule
- Choose from one of three options to schedule the task. The scheduler will be activated only after you complete the task wizard.
- Run now - task runs immediately.
- Run later - task must be started manually.
- Schedule - task will be started at a future date and time entered in the corresponding calendar field.
- Click Next.
- Choose from one of three options to schedule the task. The scheduler will be activated only after you complete the task wizard.
- Summary
- Verify the task specifications as described below:
- Name - name of the task. You can specify a custom name. Default name is Account Discovery Task.
- Source tenant - name of the source tenant in this project.
- Discover Type - discovery option that is selected. Value is set to Using Mail-enabled Security Group(s).
- Scheduled start - date and time when the task will start. Now indicates that the task will start immediately.
- Click Back to revise or review a previous step or click Finish to complete the task wizard. The task will start as scheduled.
- Verify the task specifications as described below:
The migration task is created. You can track its progress from the Tasks tab, view the summary on the Dashboard or monitor alerts and notifications from the Events tab. When the discovery task is complete, a summary about the accounts discovered in the source tenant is available on the project dashboard.
Refreshing Selected Accounts
For all source and target accounts , the task will refresh the UPN, Primary Email Address and Object Type of selected accounts. The task will not modify the migration state of the accounts.
To start the refresh task:
- Log in to Quest On Demand and choose an organization if you have set up multiple organizations.
- From the navigation pane, click Migration to open the My Projects list.
- Create a new project or open an existing project.
- From the Accounts tile on the project dashboard click Open. The Accounts and User data migration workspace opens.
- Open the Accounts tab . From the List View menu, click Discovery and then select Refresh Selected Accounts. The New Refresh Selected Accounts Task wizard starts.
- Notification
- Send notification email once the task is completed - select this option to send a notification email when a discovery task completes.
- Only in a case of failure - Select this option to send the email if the discovery task fails to complete successfully.
- Recipients - enter the email address of the recipients of this email. You can specify multiple recipient email addresses separated by semicolon.
- Click Next.
- Send notification email once the task is completed - select this option to send a notification email when a discovery task completes.
- Schedule
- Choose from one of three options to schedule the task. The scheduler will be activated only after you complete the task wizard.
- Run now - task runs immediately.
- Run later - task must be started manually.
- Schedule - task will be started at a future date and time entered in the corresponding calendar field.
- Click Next.
- Choose from one of three options to schedule the task. The scheduler will be activated only after you complete the task wizard.
- Summary
- Verify the task specifications as described below:
- Name - name of the task. You can specify a custom name. Default name is Refresh Selected Accounts Task.
- Source tenant - name of the source tenant in this project.
- Discover Type - discovery option that is selected. Value is set to Refresh Selected.
- Scheduled start - date and time when the task will start. Now indicates that the task will start immediately.
- Click Back to revise or review a previous step or click Finish to complete the task wizard. The task will start as scheduled.
- Verify the task specifications as described below:
Reviewing the Account Discovery Task
- Open the Tasks tab.
- Select the account discovery task that you want to review.
- In the task details pane that opens, the information presented is as described below:
- Type - Type of the task. The type is Discovery Task.
- Created - Date and time when the task was created.
- Modified - Date and time when the task was last updated.
- State - State of the task.
- Last Operation - The action that was most recently performed in this task.
- Schedule - Date and time when the task started. Now indicates that the task started immediately after the task was created.
- Accounts (number) - The number of accounts that were selected for matching and the number of accounts passing through the various states of the task from New to Completed..
- Events (number) - Number indicates the count of events that the task encountered. The values indicate the type of the events and the event count for each type.
Reviewing the Account Discovery Task Events
- Open the Tasks tab.
- Select the account discovery task for which you want to review the events.
- In the task details pane that opens, click Events (number). The Events tab opens with a filtered list of events for the selected task.
- Select an event that you want to review. In the task details pane that opens, the information presented is as described below:
- Object - name of the account object if applicable.
- Task - name of the task.
- Time - date and time when the event occurred.
- Category - type of task. For account discovery tasks, the category is Discover.
- Summary - a descriptive statement about the event.
You are now ready for the Premigration Assessment.