This article describes a best approach for Synchronization of Linked Attributes with Quest Migration Manager for AD.
When Migrating a Group from Source to Target, the Target Group Membership should also be updated. Meaning that the User and Group Objects in the Target Domain, corresponding to the User and Group objects in the Source Domain that are Members of the Source Group, should also be added to the Target Group Membership List.
Since Group Membership is a list of Linked Attributes, this process is called "Link Resolving".
Examples of the Linked Attributes are:
- member/memberOf
- manager/directReports
- managedBy/managedObjects
Migration Manager resolves links when migrating or synchronizing objects. If objects should be added to the Target Group Membership (attribute: member) or set as a manager (attribute: manager) for objects that do not exist in the Target Domain, Group Membership and Manager information will not be updated for these objects. These objects will be placed into the unresolved links queue. To resolve the links in the future once all Group Members are migrated to the target, you can re-migrate and merge the groups or run Full Resynchronization.
To verify that all links (group membership, Manager, Managed by, etc.) are successfully resolved from the beginning, without full resynchronization, it is recommended that group members be migrated first. Then migrate a group or migrate a group and its members together, in the same session.
NOTE: Full Resync will cause Target objects to be overwritten with Source Attributes. If Sync is not configured properly the Target may be overwritten in an undesirable way. This all depends on overall process. Be sure this outcome is desired before implementing a Full Resynch.
If everything mentioned has been checked and the attribute is still not populating in the target Domain, it has been seen that some third party software that injects attributes into Active Directory (Human resource software as an example) may be overwriting the attribute.
The Link resolver log would show whether the attribute was truly written or there was an issue with the translation. the Link Resolver log can be found in the same directory as the DSA log on the DSA Agent host in this path:
Installation path %ProgramFiles%\Quest Software\Migration Manager\DSA\CONFIGS\
© 2024 Quest Software Inc. ALL RIGHTS RESERVED. Feedback Terms of Use Privacy Cookie Preference Center