-
Title
How to add another UPN to the ADLDS instance after initial Setup -
Description
A new UPN (User Principal Name) has been added to a Target domain after the Source – Target Domain Pair has been configured in QMMAD (Quest Migration Manager for Active Directory). The new UPN needs to be stamped on the synchronized and migrated users in the Target domain. Certain domain changes are not picked up by QMMAD. -
Cause
Environment Changes -
Resolution
Workaround
Manually add the new UPN to the AD LDS database using ADSI Edit. Modify the Directory Synchronization settings. Perform a full resynchronization of Source – Domain pair.
Steps
1. Backup the AD LDS Instance. Please see the following Microsoft document on AD LDS Backup and Restore process: https://technet.microsoft.com/en-us/library/cc754582.aspx
2. Gather the following information from the Open Project screen in DMM:
a. ADAM or AD LDS Server name
b. Port
c. Project name
3. Launch ADSI Edit on the server hosting the AD LDS Instance.
4. Connect to the AD LDS instance.
a. In ADSI Edit, click on Action, then select Connect To…
b. Under Connection Point, select the option for ‘Select or type a Distinguished Name or Naming Context:’
c. Enter the Project name in the format of CN=ProjectName
d. Under Computer, select the option for ‘Select or type a domain or server: (Server | Domain [:port])
e. Enter the AD LDS Server name and port in the format of: ServerFQDN:PortNumber
f. Click OK.
5. Expand the Default naming context.
6. Expand the Project (CN=ProjectName).
7. Expand CN=Projects
8. Locate the Domain Pair. It will be in the format of CN=
a. In the Properties of the Domain Pair, you will see a parameter of ‘aelita-Amm-Name’. This will have the name of the Domain Pair.
9. Open the Properties of the Domain Pair and locate the parameter ‘aelita-Amm-TargetUPNs’ and click Edit.
10. Enter the new UPN. Click on Add, then click on OK.
11. Click OK to accept the change to the Domain Pair. Close ADSI Edit.
12. Launch QMMAD.
13. Expand the Domain Pair and open Synchronization Properties.
14. Under Set Security Settings, select the new UPN under ‘Set the domain suffix of the UPNs to:’ Click OK.
15. When prompted, click OK to the notice that the change will go into effect after a resynchronization.
16. Stop the Synchronization Job.
17. Once the Synchronization Job is stopped, right-click and select ‘Start and Re-Sync’