サポートと今すぐチャット
サポートとのチャット

On Demand Migration Current - Active Directory Express User Guide

Migration Profiles

What is a Migration Profile?  

A Migration Profile is a collection of common settings used to manage the domain join process during Device Cutover which can be defined once and then applied to multiple Devices. Migration Profiles are used for AD and Hybrid Microsoft Entra ID device migrations.

 

How are Migration Profiles created?  

To create a Migration Profile:

  1. On the Migration section of the Profiles page, click the Add button. The Add Your Migration Profile window appears.

  2. Enter values for the following fields, then click Next:

  • Profile Name - A name to identify this profile (for example, "10 Second Reboot Delay").

  • Domain Join Delay - The delay time a Device agent processing a Cutover job applies before attempting to change the computer's domain to join the new domain.

  • Reboot Delay - The time for a Device agent processing a Cutover job to delay after joining the new domain before rebooting the computer.

    Note: If set to any value other than zero (0), the user will receive a pop-up notification informing them that the workstation will be rebooted when the Cutover is performed. If set to zero, no notification will appear.

  1. Enter values for the following fields, then click Next:

  • Empty Recycle Bin? - How to handle the Recycle Bin during Cutover, either Empty or Don't Empty.

Note: End users may get an error message that their Recycle Bin has been corrupted after migration if the Recycle Bin is not empty. See Troubleshooting for more information about this issue.

  • Specify Target OU - The target OU where the Device will be created. If this field is left blank, they will default to the Computers container.

  • Join to Existing Computer Account - Select Yes if you expect to join the Device to the existing target Computer during Cutover. Select No if you want the Device to be created in the target by the Cutover job.

  1. Click Save Profile. The new migration profile is added to the list.

Microsoft Entra Join Profiles

What is an Microsoft Entra Join Profile?

A Microsoft Entra Join Profile is a collection of settings used to manage the Entra join process during Device Cutover which can be defined once and then applied to multiple Devices. Microsoft Entra Join Profiles are used for AD to Entra device migrations.

 

How are Microsoft Entra Join Profiles created?

To add an Microsoft Entra Join Profile:

  1. On the Microsoft Entra Join section of the Profiles page, Click the Add button. The Add Your Microsoft Entra Join Profile window appears.
  2. Enter a Profile Name to identify this Microsoft Entra Join Profile.
  3. Enter a value in the following field:

  • Bulk Enrollment Package File Name - The name of the Microsoft Entra bulk enrollment package in packagename.ppkg format, which has been created by the client administrator using the Windows Configuration Designer and copied to the network share defined in the Microsoft Entra Bulk Enrollment Repository

  1. Select an option from the following drop-down list:

  • Target Environment – The cloud-only Azure environment associated with the Azure bulk enrollment package used in this Profile

  1. Select a Device Name Option:

  • If you choose Device Name Defined Per Provisioning Package, the device will be migrated to Entra using the dynamic naming convention configured in the Microsoft Entra bulk enrollment package used in this Profile

  • If you choose Keep Original Device Name, the dynamic name assigned by the Microsoft Entra bulk enrollment package will be overwritten and replaced with the original device name when migrating to Entra

  1. Select the Enroll Into Intune Management option to enroll the device for Intune management with the first logged on user after cutover as the PrimaryUser.
  2. Select the Auto-Pilot/Intune Cleanup option to clear existing Auto-Pilot/Intune provisioning information from the device as part of the cutover.
  3. Select the Source Directory is Active Directory Joined or Hybrid Microsoft Entra ID Joined option if you wish to include Active Directory Joined or Hybrid Microsoft Entra Joined devices.
  4. Enter values in the following fields under Source Domain Credentials:

  • FQDN of Domain - The domain FQDN of the source in source.domain.com format.

  • Username - The username to access the source domain in domain\username or UPN (username@domain.com) format.

  • Password - The password credential to access the source domain.

  1. Under Preflight Check Validation, select the Skip Source Local Active Directory Validation option to not validate the source local Active Directory.
  2. Click Save Profile. The Microsoft Entra Join Profile is added to the list.

Credential Profiles

What is a Credential Profile?  

A Credential Profile is a set of source and target domain credentials used for Cutover which can be defined once and then applied to multiple Devices.

 

How are Credential Profiles created?  

The specified credentials must be able to join and disjoin a computer from the specified domain as well as disable a computer in the specified domain. A trust between the source and target domain is not required.

To add a Credential Profile:

  1. On the Credentials section of the Profiles page, Click the Add button. The Add Your Credentials Profile window appears.

  2. Enter a Credential Name to identify this Credentials Profile.

  1. Enter values in the following fields under Source Domain Credentials:

  • FQDN of Domain - The domain FQDN of the source in source.domain.dom format.

  • Username - The username to access the source domain in domain\username or UPN (username@domain.dom) format.

  • Password - The password credential to access the source domain.

  1. Enter values in the following fields under Target Domain Credentials

  • FQDN of Domain - The domain FQDN of the target in target.domain.dom format.

  • Username - The username to access the target domain in domain\username or UPN (username@domain.dom) format.

  • Password - The password credential to access the target domain.

  1. Check Source Device is EntraID Joined if the source device is disable the entered Source Domain Credentials.
  2. Click Save Profile. The Credential Profile is added to the list.

Credential Cache Profiles

What is a Credential Cache Profile?  

A Credential Cache Profile is a collection of settings related to the target domain controller used for caching a user’s target credentials prior to completing an Offline Domain Join cutover which can be defined once and then applied to multiple Devices.

 

How are Credential Cache Profiles created?  

To add a Credential Cache Profile:

  1. On the Credential Cache section of the Profiles page, Click the Add button. The Add Your Credential Cache Profile window appears.

  2. Enter a Credential Cache Name to identify this Credential Cache Profile.

  3. Enter values in the following fields:

    • Target Domain Controller IP Address – The IP address of the target Domain Controller.

    • Target Domain Controller Ping Interval - The number of seconds the script will sleep between pings to the defined target domain controller. The default value is 300 seconds.

    • Timeout Before Job Failure – The number of minutes to wait after Credential Cache job is downloaded by the agent before marking the job a failure due to timeout. The default value is 180 minutes.

    • Timeout for User Credential Prompt – The number of minutes to prompt the user with a dialog box to enter their target domain credentials for caching. The default value is 5 minutes

  4. Check the Hide Cancel/Close/Taskbar Icons options to stop the icons from appearing.

  5. Click Save Profile. The Credential Cache Profile is added to the list.

関連ドキュメント

The document was helpful.

評価を選択

I easily found the information I needed.

評価を選択