Introduction
Device migration between two Active Directory or Microsoft Entra ID tenants can be complex because Active Directory and Entra ID do not natively support directly moving a device from one tenant to another. Device migration between tenants usually involves re-enrolling devices from a source tenant to a target Tenant which may be needed during:
- Mergers and acquisitions
- Tenant consolidation or divestitures
- Rebranding or organizational changes
On Demand Migration Self-Service (ODMSS) is a powerful and easy to use service that helps end users schedule and manage their own asset migrations. This feature is optional and requires the Migration Administrators to configure the service.
ODMSS Device Migration enables end users to schedule their own device migrations between source and target tenants that use the same directory systems like Active Directory and EntraID, or hybrids where one is an on-premise and the other is a cloud tenant.
|
|
NOTE: The acronym AD used in the document refers to both Active Directory and Microsoft Entra ID.
The acronym ODMAD when used by itself in this document refers to the On Demand Migration Active Directory portal that you can access when you log in to Om Demand and go to Migrate > Active Directory.
The terms workstations and devices are used interchangeably in this document. |
Before You Begin
You Quest Sales Team has already explained the services and features available to you. The following topics are a ready reference about important concepts in Quest On Demand.
|
|
IMPORTANT:
There is no license requirement for this service. It is available for free to all customer who have an Azure T5/T7 subscription or Active Directory License.
There are no additional consents required for the source or target tenants. All the necessary consents are derived from ODMAD with the existing permissions. |
Migration Steps at a glance
- Planning
- Audit current devices in the source tenant.
- Decide which devices need migration.
- Inform users about reauthentication, profile changes, and data backup.
- Device Preparation
- Backup data.
- Reset device (optional but cleanest approach).
- Discover your workstations or devices through the ODMAD portal.
- Migration with ODMAD Self Service
- Review discovered workstations and migration eligibility.
- Set up a migration schedule or migrate immediately.
- Monitor the migration.
- Inform users about the migration.
Signing in to Quest On Demand
To get access to On Demand Migration Self-Service, you must sign up for the Quest On Demand service.
- Go to the web page quest-on-demand.
- On the Welcome to Quest On Demand page, click Sign in with Microsoft.
|
|
NOTE: Signing in using your Microsoft MFA-enabled account
If your organization requires multi-factor authentication and you receive an authorization error, your conditional access policy may not be configured correctly. You can take one of two actions:
- Contact your IT administrator to deactivate MFA during migrations.
- Contact "Azure Identity" support for help with configuring conditional access policies.
|
- Accept the Software Transaction Agreement before using this product.
- As part of the login process with Microsoft Entra ID, you must consent to the set of minimal permissions required by the Quest On Demand application.
- Create an organization. See Creating an organization for detailed steps.
Organizations and Regions
When you sign up for the On Demand service for the first time, you create an organization and you are granted the On Demand Administrator role. You can add additional organizations and administrators.
For more information about managing your organization see Managing organizations and regions in the On Demand Global Settings User Guide.
Some common actions with Organizations are reproduced here for your reference:
Creating an organization
- Sign in to Quest On Demand.
- If you have not yet created an organization, click Create Organization.
If you have created one or more organizations, the Choose an Organization page opens. Click Create New Organization.
If you have already selected an organization, click your email address at the top right-hand corner of the page and the select Create Organization.
- In the Create Organization page, specify the following information:
- Organization Name - name of your organization. For example, Big Box Inc.
- Deployment Region - A Microsoft Azure region or geographic area where data centers are deployed. Not all On Demand modules are available in all regions.
- Click Create Organization.
Switching to another organization
If you have multiple organizations associated with your email address, you can select an organization from the Choose an Organization page when you sign in. If you have already selected an organization but want to work with another organization, you can switch to another organization.
- Click your email address at the top right-hand corner of the page.
- Select Switch Organization. The Choose an Organization page opens.
- Highlight and click the organization to which you want to switch.
Renaming an organization
You can rename the organization to which you are currently signed in. You must be an On Demand Administrator to rename an organization.
- Sign in and select the organization that you want to change.
- Click your email address at the top right-hand corner of the page.
- Click the organization name. The Edit Organization page opens.
- In the Organization Name field, enter the new name.
- Click Update Organization Name. The organization name is updated.
Deleting an organization
|
|
Caution: Deleting an organization cannot be undone. |
- Sign in and select the organization that you want to change.
- Click your email address at the top right-hand corner of the page
- Click the organization name. The Edit Organization page opens.
- Click Delete Organization. A confirmation page opens.
- Select the following check boxes to confirm that you understand the impact of deleting an organization.
- All tenants will be removed
- All user information will be lost
- Click Delete Organization.
Tenants
Each On Demand migration project needs a source and target tenant. These are Commercial tenants. Commercial tenants are exclusively hosted and managed by Microsoft. For users in the United States deployment region, On Demand Migration offers two options depending on the type of Microsoft 365 tenant that you want to add:
- Commercial or GCC Tenant - choose this option if you want to add either a Microsoft 365 commercial tenant hosted on the Azure public cloud or a Microsoft 365 GCC (Government Community Cloud) tenant with moderate cyber-security and compliance standards hosted on the Azure Government cloud. For more information about worldwide endpoints, see Microsoft 365 Worldwide endpoints.
- GCC High Tenant - choose this option if you want to add a Microsoft 365 GCC High tenant with advanced cyber-security and compliance standards like NIST 800-171, FedRAMP High and ITAR hosted on the Azure Government cloud. For more information, see Microsoft 365 U.S. Government GCC High endpoints.
|
|
NOTE: When you create a migration project, a GCC or GCC High tenant can be used as the target tenant only. Currently, only the On Demand Migration module supports GCC and GCC High tenants. |
For more information about adding, removing and managing tenants, see Managing your Azure tenants and on-premises domains in the On Demand Global Settings Current User Guide.
Adding a tenant
- Log in to On Demand using the credentials you used to sign up for On Demand.
- If you have multiple organizations you must select an organization. If you have a single organization it will be automatically selected.
- If there are no tenants in your organization, click Add Tenant.
-or-
In the navigation panel on the left, click Tenants. The Office 365 Tenants page opens. Then click Add Tenant.
- The Add Tenant page opens.
- Enter your Azure AD Global Administrator credentials for the source tenant and click Next. A page opens with the list of permissions that you are granting.
- Close this page since no new consents are required for On Demand Migration Self-Service. All the necessary consents are from ODMAD with the existing permission.
