If you need to delegate a resource processing task, you can create a setup package for the task. The setup package is a standard MSI installation file. There are two types of the setup packages:
To create an MSI installation file, take the following steps:
When you have successfully created the task setup package, locate the MSI file in the specified folder and send it to the delegated administrator.
The delegated administrator should then install the package and perform the resource processing as specified in the task configuration. He or she cannot change the configuration of the task. Note that the custom packages must be installed using an administrative account with elevated privileges.
You can create the INI files for the following resource updating tools:
To create an INI file for a resource updating tool
Here are the factors to keep in mind when doing resource updates:
Caution: Please consider that when resources are processed remotely, computers are handled in turns. In comparison with agent-based resource processing, remote processing takes significantly more time.
It is recommended that you create separate lists for end-user workstations and servers, and process the workstations first and the servers next.
Access to Active Directory objects is regulated with security descriptors (SDs) and group membership. After migration, the SDs and group membership of all objects must be modified so that the access that was granted to the source accounts is given to the target accounts as well.
Active Directory Processing Wizard allows you to update group membership, linked attributes, and Active Directory permissions to conform to the Active Directory reconfiguration after migration. Active Directory Processing Wizard uses mappings between the migrated source and target accounts stored in ADAM or AD LDS for updating permissions. Active Directory Processing Wizard also allows you to process Microsoft Exchange directory permissions and clean up SIDHistory of the migrated objects.