Provisioning may be accomplished by a variety of methods, but the typical approach uses Microsoft's Exchange Connector for Notes in conjunction with Quest's Notes Migrator for Exchange. The Microsoft Connector extracts data from the Notes/Domino environment to create mail-enabled security objects or contacts in AD for all Notes users. Quest programs can then provision groups in AD, merge security objects and contacts into mail-enabled objects, and mailbox-enable the AD accounts.
If you are setting up a new Active Directory environment from scratch, the provisioning process should be straightforward using Microsoft's Connector and Quest's Directory Export Wizard and AD Groups Provisioning Wizard. But if the migrating users already use AD security objects for network authentication, Microsoft's Connector may create new contacts in AD corresponding to the existing objects. In this case, you should use Quest's AD Object Merging Wizard prior to migration to consolidate such duplicates, to merge the contacts and existing security objects into a single mail-enabled object per user.