On Demand Migration Current

The On Demand Migration service for Accounts migration support for the listed attributes of user account types is indicated in the table below:

Attribute	Non Mail Enabled User	Mail Enabled User	Mailbox Enabled User	Notes
AccountStatus	✔	✔	✔
Alias	✖	✔	✔
City	✔	✔	✔
Country	✔	✔	✔
Department	✔	✔	✔
DisplayName	✔	✔	✔
ExternalEmailAddress	✔	✔	✔
Fax	✔	✔	✔
HomePhone	✔	✔	✔	includes Business Phone and Mobile Phone.
LastName	✔	✔	✔
MailNickname	✔	✔	✔
Name	✔	✔	✔
PhysicalDeliveryOfficeName	✔	✔	✔
PostalCode	✔	✔	✔
PreferredDataLocation	✔	✔	✔
RecipientTypeDetails	✔	✔	✔
StateOrProvince	✔	✔	✔
StreetAddress	✔	✔	✔
TelephoneNumber	✔	✔	✔
UserPrincipalName	✔	✔	✔
Visibility	✔	✔	✔
UsageLocation	✔	✔	✔

The On Demand Migration service for Accounts migrates discovered user accounts and the following types of discovered groups:

Microsoft 365 Groups
- ownership (for accounts that have a pair on the target tenant )
- membership (for accounts that have a pair on the target tenant )
- email address for migrated Microsoft 365 Groups will be created in default target domain. See Microsoft Teams Migration for details on how to migrate Microsoft 365 Groups associated with Teams.
Security groups
- ownership (for accounts that have a pair on the target tenant )
- membership (for accounts that have a pair on the target tenant )
Mail-enabled security groups
- ownership (for accounts that have a pair on the target tenant )
- membership (for accounts that have a pair on the target tenant )
- membership approval
- delivery management
- message approval
- MailTip
- group delegation
- visibility in GAL
Distribution lists
- ownership (for accounts that have a pair on the target tenant )
- membership ( for accounts that have a pair on the target tenant )
- membership approval
- delivery management
- message approval
- MailTip
- group delegation
- SendAs and SendOnBehalf group delegates
- visibility in GAL

Migrating distribution lists with group delegations

On Demand migrates distribution lists with group delegations like SendAs and SendOnBehalf, including scenarios where the distribution list in the target exists or does not exist, or exists and does or does not have group delegations. When the distribution list with group delegations exists in the target then only newly added group delegations are migrated, and group delegations are ignored if anything is deleted at the source. Existing SendAs and SendOnBehalf group delegations on the target, either preexisting before On Demand migration or migrated by On Demand will be left intact and merged with the one migrated from the source.

Delegated accounts are migrated as follows:

	Mail User	Mail Box	Mail Enabled Security Group	Distribution List
SendAs	Y	Y	Y
SendOnBehalf	Y	Y	Y	Y

NOTE: Microsoft does not support the following delegated account types so they do not apply to the migration.

For SendAS: AAD User, External/Guest User, Distribution List, Security Group
For SendOnBehalf: AAD User, External / Guest User, Security Group

NOTE: The temporary Migration Manager account of the target tenant will be added as an owner to all target mail-enabled security groups, distribution groups and Microsoft 365 Groups.

Accounts and User Data Migration Workspace

In this topic:

Dashboard
Accounts List View
Accounts Assessment
Account Details

NOTE: The Accounts and User Data migration workspace is common for the Accounts, Mailbox and OneDrive migration services, and the Desktop Agents.

Dashboard

The components of the dashboard are as described below:

Notification panel - presents relevant information and shortcuts to migration activities.

Dashboard Menu - contains the following links to common activities in the migration process.

Configure connections - You can configure granular permissions for the source and target tenants in addition to advanced configurations such as concurrent PowerShell connections and custom EWS URL specification. For more information see Configuring Connections.
Discover accounts - Starts the New Account Discovery Task wizard to collect information about accounts in the source tenant. For more information see Discovering Accounts.
Enable calendar sharing - Starts the New Calendar Sharing Task wizard to allow users to retrieve calendar availability information after migration. For more information see Calendar Sharing.
Browse accounts - Opens the Accounts List view where you can search and filter for accounts, and manage all the account migration activities. For more information see
Download agent - Allows you to download a lightweight user desktop application (update agent) for users workstations that is needed to complete a migration project.

Dashboard Tiles

Getting Started - Presents quick start links to the various actions for preparing and migrating accounts.
Accounts - Presents a summary of the accounts in various migration states. Click Show All to open the Accounts List view to inspect the accounts.
Mailboxes - Presents a summary of the mailboxes in various migration states. Click Show All to open the Mailboxes List view to inspect the mailboxes.
OneDrive - Presents a summary of users with OneDrive in various migration states. Click Show All to open the OneDrive List view to inspect the OneDrive information.
Tasks - Displays the five most recent tasks that were completed in the Accounts and User Data migration workspace. The title displays the total number of tasks. Click Show All to open the Tasks List view.
Events - Displays the five most recent events that were completed in the Accounts and User Data migration workspace. The title displays the total number of events. Click Show All to open the Events List view .

Accounts List View

The Accounts List View is comprised of the following components:

Notification panel - presents relevant information and shortcuts to migration activities.

Filter panel - consists of predefined filters for the Accounts List view and tabs to switch between the Accounts List view and the Assessment view. See Filtering for more information about working with filters. The predefined filters are:

Account State - returns a list of Accounts by specific state values. See Account State column description in the List View below for a list of values.
Matching - returns a list of Accounts by source accounts that are matched with a target account. Valid values are Any, Matched and Not matched.
Source Type and Target Type - search by specific account types as defined in Active Directory.
- Any
- User accounts like Guest, Mailbox-enabled, Mail-enabled and Non-mail-enabled.
- Resource mailboxes like Equipment, Room, Scheduled and Shared.
- Groups like Distribution, Mail-enabled-security, Microsoft 365 Group - Dynamic, Microsoft 365 - Assigned, Security - Dynamic, Security - Assigned, Teams - Dynamic and Teams - Assigned.
Environment - returns a list of Accounts by location of the Active Directory with which the account is synchronized. Valid values are Synced with Active Directory (synchronized with on-premise Active Directory) and In Cloud (synchronized with Azure Active Directory). This filter corresponds to the Sync Status column in the Accounts list.
ODM Licensed - returns a list of Accounts by license utilization. Valid values are Yes, No, Not required.

List View Actions Menu - contains links to account migration activities and the search box. Each action is explained in greater detail in subsequent topics. See Searching for more information about working with the search box.

List View - displays information about accounts in the source tenant and the migration status of each account. Some columns are hidden by default. Use Edit Columns to show or hide columns in the list. The columns are as described below:

NOTE: If you don't see the Sync Status or object description in the Type column, rerun the account discovery task as indicated in the Notification panel.

Sync Status - indicates whether the account is synchronized with the on-premise Active Directory or Azure Active Directory. The tool tip displays the status value.
Name - name of the account
Source Type - account type defined in Microsoft Active Directory for the source tenant. The account type can be one of the following:
- Any
- User accounts like Guest, Mailbox-enabled, Mail-enabled and Non-mail-enabled.
- Resource mailboxes like Equipment, Room, Scheduled and Shared.
- Groups like Distribution, Mail-enabled-security, Microsoft 365 Group, Security Group, Teams.
Target Type - account type defined in Microsoft Active Directory for the target tenant. The account type can be one of the following:
- Any
- User accounts like Guest, Mailbox-enabled, Mail-enabled and Non-mail-enabled.
- Resource mailboxes like Equipment, Room, Scheduled and Shared.
- Groups like Distribution, Mail-enabled-security, Microsoft 365 Group, Security Group, Teams.
ODM Licensed - indicates whether or not an On Demand Migration license has been consumed when the migration task is started. Values are Yes, No, Not required.
Status - status of the most recent task that was run for this account. Valid values are New, Stopped, In Progress, Failed and Completed. The Status column displays a progress bar that tracks the update for each account when the Matching and Migration tasks are running.

Account State - tracks the state of the account from discovery to migration from source to target tenant. The column values are as follows:

Column Value	Description
Discovered	Account has been discovered in the source tenant.
Match failed	Account matching failed
Matched	Account has been successfully matched.
Matching	Account is being matched.
Matching Stopped	Account matching task was stopped by a user.
Mapped	Account mapping is complete and successful.
Mapping	Account mapping of this object has started.
Mapping Failed	Account mapping did not succeed.
Mapping Stopped	Account mapping task was stopped by a user.
Migrated	Account migration is complete and successful.
Migrated with Issues	Account migration completed with errors.
Migrating	Account migration of this object has started.
Migration failed	Account migration did not succeed
Migration stopped	Account migration canceled by the user

Source UPN - account name in the source tenant in the format of an email address based on the Internet standard RFC 822.
Target UPN - account name in the target tenant in the format of an email address based on the Internet standard RFC 822.
Source Mailbox - account mailbox in the source tenant.
Target Mailbox - account mailbox in the target tenant.
Source Group Type - group membership type in the source tenant. Valid values are Assigned or Dynamic.
- Assigned - indicates that members are manually added or removed from the group.
- Dynamic - indicates that users are added or removed dynamically once the membership rules are defined.
Target Group Type - group membership type in the target tenant. Valid values are Assigned or Dynamic.
- Assigned - indicates that members are manually added or removed from the group.
- Dynamic - indicates that users are added or removed dynamically once the membership rules are defined.
Title - Job title of the user account. Does not apply to group accounts.
Department - department of the user account. Does not apply to group accounts.
Country - country of the user account. Does not apply to group accounts.
City - city of the user account. Does not apply to group accounts.

Accounts Assessment

Contains summary reports about the discovered data to analyze your domain structure and track potential problems, misconfiguration, and risks that might adversely affect the migration. For more information see Assessment.

Account Details

When you select an account from the List View, the Account Detail pane opens. The information in the pane is described below:

Source Email - email address of the selected account in the source tenant.
Target Email - email address of the selected account in the target tenant.
Collections - list of collections that contain the selected account.
Status - status of the selected account. Valid values are New, In Progress, Failed and Completed.
Events - count of the events that occurred during account processing through one or more tasks.
Tasks - list of tasks invoked for the selected account.

Configuring Connections

Discovering Accounts

Discovering accounts is a critical first step before a migration to enumerate, update and retrieve relevant information about accounts from the source tenant. The discovery task collects the necessary account data and statistics on connected mailboxes from your source tenant to avoid misconfiguration and prevent possible issues.

NOTE: Account discovery is deactivated if basic migration consents are missing from either the source or the target tenant.

If there are user or group accounts from a previous discovery task that you don't want anymore, you can manually delete the accounts from the Accounts list (Accounts tab > List View). If there are changes to an account from a previous discovery, the account will be updated if the account is rediscovered by the task.

In this topic:

Discovering all accounts automatically
Discovering accounts from a file
Discovering accounts from a file using security groups
Refreshing Selected Accounts
Reviewing the Account Discovery Task
Reviewing the Account Discovery Task Events

Discovering all accounts automatically

Log in to Quest On Demand and choose an organization if you have set up multiple organizations.
From the navigation pane, click Migration to open the My Projects list.
Create a new project or open an existing project.
From the Accounts tile on the project dashboard click Open. The Accounts and User Data migration workspace opens.
Open the Accounts tab . From the List View menu, click Discovery and then select Discover All. The New Account Discovery Task wizard starts.
Step 1: Notification
1. Send notification email once the task is completed - select this option to send a notification email when a discovery task completes.
  - Only in a case of failure - Select this option to send the email if the discovery task fails to complete successfully.
2. Recipients - enter the email address of the recipients of this email. You can specify multiple recipient email addresses separated by semicolon.
3. Click Next.
Step 2: Schedule
1. Choose from one of three options to schedule the task. The scheduler will be activated only after you complete the task wizard.
  - Run now - task runs immediately.
  - Run later - task must be started manually.
  - Schedule - task will be started at a future date and time entered in the corresponding calendar field.
2. Click Next.

Step 3: Summary
1. Verify the task specifications as described below:
  - Name - name of the task. You can specify a custom name. Default name is Account Discovery Task.
  - Source tenant - name of the source tenant in this project.
  - Discover Type - discovery option that is selected. Value is set to All.
  - Scheduled start - date and time when the task will start. Now indicates that the task will start immediately.
2. Click Back to revise or review a previous step or click Finish to complete the task wizard. The task will start as scheduled.

The migration task is created. You can track its progress from the Tasks tab, view the summary on the Dashboard or monitor alerts and notifications from the Events tab. When the discovery task is complete, a summary about the accounts discovered in the source tenant is available on the project dashboard.

Discovering accounts from a file

When you have a large set of accounts but you want to discover a subset of those accounts, the CSV file lets you specify the accounts (users and Microsoft 365 groups) that you want to discover and ignore the rest. You can then use this file in the New Account Discovery Task wizard.

To prepare the CSV file:

Log in to the Microsoft 365 admin center (https://admin.microsoft.com) with the credentials of your source tenant administrator.
Export Users:
1. From the navigation pane, click Active users.
2. If needed, you can filter the set of users that you want to export. Then click Export. A Users_<timestamp>.csv file will be downloaded to your computer.
Export Groups:
1. From the navigation pane, click Active teams and groups.
2. Select the Microsoft 365 tab in the Active teams and groups page.
3. If needed, you can filter the set of groups that you want to export. Click Export and then click Export groups in this list. A Groups.csv file will be downloaded to your computer.

Create a new CSV file and add the user accounts and groups with accounts you want to discover. You can use any of the two formats shown below:

NOTE:

You can download a CSV template for either of the two formats when you start the New Account Discovery Task wizard and click Download Example File from the Discovery Options step.
CSV file names with non-ASCII characters are not supported.

Format 1

UserPrincipalName - Column header for the login name for a user account based on the Internet standard RFC 822. Do not use a mail nickname or proxy address.

Format 2

ObjectId - Column header for the globally unique identifier (GUID) of the user or group object. When you use ObjectId as the column header, you must specify object GUIDs only. You cannot specify UPNs.

Type - Column header for the type of account: user or Microsoft 365 group.

Save the CSV file. You may rename the file if needed.

To run the account discovery task:

Log in to Quest On Demand and choose an organization if you have set up multiple organizations.
From the navigation pane, click Migration to open the My Projects list.
Create a new project or open an existing project.
From the Accounts tile on the project dashboard click Open. The Accounts and User data migration workspace opens.
Open the Accounts tab . From the List View menu, click Discovery and then select Discover From File. The New Account Discovery Taskwizard starts.
Step 1: Discovery Options
1. Click Browse to choose the comma-separated values (CSV) file that contains the lists of user accounts and group identifiers.
2. Click Next.
Step 2: Notification
1. Send notification email once the task is completed - select this option to send a notification email when a discovery task completes.
  - Only in a case of failure - Select this option to send the email if the discovery task fails to complete successfully.
2. Recipients - enter the email address of the recipients of this email. You can specify multiple recipient email addresses separated by semicolon.
3. Click Next.
Step 3: Schedule
1. Choose from one of three options to schedule the task. The scheduler will be activated only after you complete the task wizard.
  - Run now - task runs immediately.
  - Run later - task must be started manually.
  - Schedule - task will be started at a future date and time entered in the corresponding calendar field.
2. Click Next.

Step 4: Summary
1. Verify the task specifications as described below:
  - Name - name of the task. You can specify a custom name. Default name is Account Discovery Task.
  - Source tenant - name of the source tenant in this project.
  - Discover Type - discovery option that is selected. Value is set to Using CSV file.
  - Scheduled start - date and time when the task will start. Now indicates that the task will start immediately.
2. Click Back to revise or review a previous step or click Finish to complete the task wizard. The task will start as scheduled.

The migration task is created. You can track its progress from the Tasks tab, view the summary on the Dashboard or monitor alerts and notifications from the Events tab. When the discovery task is complete, a summary about the accounts discovered in the source tenant is available on the project dashboard.

Discovering accounts from a file using security groups

When you need to limit an application's access to a specific set of mailboxes, use this option to include the security groups in a CSV file. You can then use this file in the New Discovery Task as described in this topic to discover the accounts from the source tenant. Application access policies can be assigned to these discovered groups to restrict access to the group members only.

To prepare the CSV file:

Log in to the Microsoft 365 admin center (https://admin.microsoft.com) with the credentials of your source tenant administrator.
Export Security Groups:
1. From the navigation pane, click Teams and groups.
2. Select the Mail-enabled security tab in the Active teams and groups page.
3. If needed, you can filter the set of groups that you want to export. Click Export and then click Export groups in this list. A Groups.csv file will be downloaded to your computer.

Create a new CSV file and add the email ids of the security groups with the member accounts you want to discover.

NOTE:

You can download a CSV template when you select Discover From Security Groups and start the New Account Discovery Task wizard.
CSV file names with non-ASCII characters are not supported.

MailEnabledSecurityGroupEmailID - Column header for email IDs of the security groups.

Save the CSV file that you created.

To run the account discovery task:

Log in to Quest On Demand and choose an organization if you have set up multiple organizations.
From the navigation pane, click Migration to open the My Projects list.
Create a new project or open an existing project.
From the Accounts tile on the project dashboard click Open. The Accounts and User data migration workspace opens.
Open the Accounts tab . From the List View menu, click Discovery and then select Discover From Security Groups. The New Account Discovery Taskwizard starts.
Step 1: Discovery Options
1. Click Browse to choose the comma-separated values (CSV) file that contains the list of email IDs of the security groups.
2. Create application access policy for provided groups - select this option to create an application access policy for groups when it is necessary to restrict access to group members only, when migrating account mailboxes . The new application access policy can take up to 30 minutes to take effect on Azure groups. For more information see Limiting application permissions to specific Exchange Online mailboxes.
3. Click Next.
Step 2: Notification
1. Send notification email once the task is completed - select this option to send a notification email when a discovery task completes.
  - Only in a case of failure - Select this option to send the email if the discovery task fails to complete successfully.
2. Recipients - enter the email address of the recipients of this email. You can specify multiple recipient email addresses separated by semicolon.
3. Click Next.
Step 3: Schedule
1. Choose from one of three options to schedule the task. The scheduler will be activated only after you complete the task wizard.
  - Run now - task runs immediately.
  - Run later - task must be started manually.
  - Schedule - task will be started at a future date and time entered in the corresponding calendar field.
2. Click Next.

Step 4: Summary
1. Verify the task specifications as described below:
  - Name - name of the task. You can specify a custom name. Default name is Account Discovery Task.
  - Source tenant - name of the source tenant in this project.
  - Discover Type - discovery option that is selected. Value is set to Using Mail-enabled Security Group(s).
  - Scheduled start - date and time when the task will start. Now indicates that the task will start immediately.
2. Click Back to revise or review a previous step or click Finish to complete the task wizard. The task will start as scheduled.

Refreshing Selected Accounts

For all source and target accounts , the task will refresh the UPN, Primary Email Address and Object Type of selected accounts. The task will not modify the migration state of the accounts.

To start the refresh task:

Log in to Quest On Demand and choose an organization if you have set up multiple organizations.
From the navigation pane, click Migration to open the My Projects list.
Create a new project or open an existing project.
From the Accounts tile on the project dashboard click Open. The Accounts and User data migration workspace opens.
Open the Accounts tab . From the List View menu, click Discovery and then select Refresh Selected Accounts. The New Refresh Selected Accounts Task wizard starts.
Step 1: Notification
1. Send notification email once the task is completed - select this option to send a notification email when a discovery task completes.
  - Only in a case of failure - Select this option to send the email if the discovery task fails to complete successfully.
2. Recipients - enter the email address of the recipients of this email. You can specify multiple recipient email addresses separated by semicolon.
3. Click Next.
Step 2: Schedule
1. Choose from one of three options to schedule the task. The scheduler will be activated only after you complete the task wizard.
  - Run now - task runs immediately.
  - Run later - task must be started manually.
  - Schedule - task will be started at a future date and time entered in the corresponding calendar field.
2. Click Next.
Step 3: Summary
1. Verify the task specifications as described below:
  - Name - name of the task. You can specify a custom name. Default name is Refresh Selected Accounts Task.
  - Source tenant - name of the source tenant in this project.
  - Discover Type - discovery option that is selected. Value is set to Refresh Selected.
  - Scheduled start - date and time when the task will start. Now indicates that the task will start immediately.
2. Click Back to revise or review a previous step or click Finish to complete the task wizard. The task will start as scheduled.

Reviewing the Account Discovery Task

Open the Tasks tab.
Select the account discovery task that you want to review.
In the task details pane that opens, the information presented is as described below:
1. Type - Type of the task. The type is Discovery Task.
2. Created - Date and time when the task was created.
3. Modified - Date and time when the task was last updated.
4. State - State of the task.
5. Last Operation - The action that was most recently performed in this task.
6. Schedule - Date and time when the task started. Now indicates that the task started immediately after the task was created.
7. Accounts (number) - The number of accounts that were selected for matching and the number of accounts passing through the various states of the task from New to Completed..
8. Events (number) - Number indicates the count of events that the task encountered. The values indicate the type of the events and the event count for each type.

Reviewing the Account Discovery Task Events

Open the Tasks tab.
Select the account discovery task for which you want to review the events.
In the task details pane that opens, click Events (number). The Events tab opens with a filtered list of events for the selected task.
Select an event that you want to review. In the task details pane that opens, the information presented is as described below:
1. Object - name of the account object if applicable.
2. Task - name of the task.
3. Time - date and time when the event occurred.
4. Category - type of task. For account discovery tasks, the category is Discover.
5. Summary - a descriptive statement about the event.

You are now ready for the Premigration Assessment.