Migration Manager for AD 8.15 - Resource Processing Guide

Using Delegation Mode

Step 1. Set Task Properties

In this step you are prompted to specify a task name and description.

Step 2. Configure Delegation Options

In this step you can specify the account of the trusted person you want to delegate the task to. You can specify one or more accounts and assign them the appropriate rights to perform the task.

To delegate the rights to the trusted accounts, complete the following steps:

1. Click the Delegate button.
2. Specify the account and the role you want to delegate. Click OK.

The following option is available:

• Revoke. Click to remove the selected account from the list and deprive it of the rights to process Active Directory. Note that you cannot remove accounts if their permissions are inherited.

Step 3. Complete the Wizard

After you create the list of delegates, click Next and then Finish to apply your changes and close the wizard.

Running Active Directory Update

To start an Active Directory processing task from Migration Manager, select the task in the project tree, right-click the task, and select the Start command from the shortcut menu.

To view the task execution progress, select the task object in the project tree and switch to the Information tab in the right-hand pane.

Stopping a Task

If for some reason you want to interrupt Active Directory processing, click the Cancel button in the wizard that starts after you run the task.

If you stop processing by clicking the Cancel button, or the task execution is stopped due to an error, the task acts as follows:

• If you stop the task during permissions update, further re-permissioning will be stopped. Objects already processed by that moment will have new (target) permissions. Objects not yet processed will keep old permissions. If you want to completely restore the system state, reconfigure and run the task with the Revert to the original group membership, linked attributes, and object permissions option.
• If you stop the task while reverting changes, further re-permissioning will be stopped. Objects already processed by that moment will have source permissions. Objects not yet processed will keep target permissions. If you want to restore the system state, reconfigure and run the task with the Reassign group membership, linked attributes, and object permissions to target users option.
• If you stop the task while cleaning up permissions, further processing will be stopped. Permissions of the objects already processed by that moment will be cleaned up. Objects not yet processed will be left intact.

Log File

The Active Directory processing task log is stored in the QsActiveDirectoryProcessingWizard_<timestamp>.log file in the %temp% folder.

Reconfiguring a Task

To reconfigure the task, right-click the task object and select Properties. The Active Directory Processing Wizard will start and let you specify different options for the task. Refer to the steps above for more information on the available options.

Exchange Server Processing

When user accounts are migrated, the messaging system must be updated to comply with the changes. Exchange Processing Wizard updates Exchange permissions to grant the migrated accounts in the target domain the permissions assigned to the source accounts. For example, Exchange Processing Wizard updates client and administrative permissions on mailboxes, public folders, and all other Exchange objects. Client permissions get automatically granted to the target users when they log into their old mailbox.

When and Where to Use Exchange Processing Wizard

Exchange Processing Wizard (EPW) is a tool for updating permissions on Exchange mailboxes and public folders during Active Directory migrations to align the permissions with the new user configuration. EPW updates the following:

For mailboxes:

• Client permissions
• Mailbox contents

For public folders:

• Client permissions
• Administrative rights
• Public folder contents

There are a variety of situations where the use of EPW is necessary. In general, you need it whenever you want to give migrated user accounts the same level of access to mailboxes and public folders as they had before Active Directory migration.

This section describes three common scenarios for using EPW. Other real-life scenarios are similar, and some elements of the scenarios in this document can be reused in them.

• Intra-Forest Domain Migration
• Inter-forest migration scenarios involving an Exchange resource forest (ERF):
  • Source Forest Becomes an ERF
  • Users Change Forest in an ERF Topology