Chat now with support
Chat with Support

Binary Tree Migrator for Notes 20.11 - User Guide

Section 1. Introduction Section 2. Pre-migration Activities Section 3. User Provisioning Section 4. Email Repliability Section 5. Migrating Mail Files Section 6. Rooms and Resources Database Migration Section 7. Mail-in Database Migration Section 8. Setting Migration Status Section 9. Access and Delegation Migration Section 10. All Accounts Section 12. Logs Appendix A: Staging Replicas Appendix B: Pre-Migration Troubleshooting Appendix C: Work with Files (Import/Export) Appendix D: Item Processing Results Appendix E: Migration Result Statuses Appendix F: Recovery Process Appendix G: Automatic Migration Restart Appendix H: Folder Processing Order Third Party Components

9.5 Active Delegation – Operation

9.1  Access and Delegation Migration Overview

Delegation migration migrates access to Exchange mailboxes, such as Send As/Manager access and access to specific folders like Calendars and Contacts. Delegation migration attempts to set access control on objects in Exchange based on the Access Control List (ACL) in Notes which dictates overall access to the Exchange mailbox. The delegation migration can be run by a scheduled process or manually on selected documents.

The following is required for delegation migration:

  • Address translation must be fully populated when migrating Access and Delegation. The SMTP address must match the primary SMTP in Exchange

  • PowerShell 4 must be installed on the workstation/server that the migration process is to run from

  • The Administration account for the CAS Server has the ApplicationImpersonation role in the domain

  • Exchange delegates must have domain accounts and be mailbox-enabled

     


  • Delegation migration to Mail-in databases are treated like other mail files

  • The access control for Rooms and Resources is not included in delegation migration

  • Automatic Forwarding settings in the Notes client are not migrated

  • For ACL Groups permissions migrations, Notes groups must migrate to a security mail-enabled group in Exchange and have an Internet Address assigned or be converted to Multi-Purpose groups

  • In hybrid Exchange installations, with both Office 365 and on-prem Exchange servers:

    • Delegation access can only be set for users on the same system; Office 365 users can set delegation access to the mailbox to other Office 365 users, but not to Exchange users; Exchange users can set delegation access to other Exchange accounts, but not to Office 365 users; Access delegation is not supported between Exchange on-prem users and Office 365 accounts

    • You must set application impersonation in each domain (once for the on-prem Exchange servers, and once in the Office 365 tenant); Impersonation in the on-prem servers does not automatically propagate to Office 365 because they are separate domains and AD objects

 

Delegation also allows you to audit the user's mail files for database ACL and delegation data and send an email containing the user's current delegation settings, so the user can determine if the settings are valid for migration to Outlook.

9.2  Migrate Delegation – Scheduled

The scheduled delegation migration and the scheduled delegation migration agent must be enabled in the Delegation settings. When enabled, the agent will attempt to migrate delegation data for all mailboxes that have been successfully migrated to an Exchange Server since the last delegation migration.

Scheduled delegation migration runs in the background on a workstation or server. If running locally, Notes must be running and background agents must be enabled on the client.

When enabled the scheduled delegation migration agent runs once a day at 3:00 AM.  Note that if the agent is changed to run at a time interval that is too short, the PowerShell tasks may not have time to complete.

The status of the delegation migration can be viewed on the Delegation Migration view:

Delegation Migration View

The status for delegation migration can be successful, incomplete (partially migrated), or a failure. If the status is either incomplete or failed, the delegation migration will be retried until it reaches the successful status, or until the retry limit is exceeded. If the retry limit is exceeded, it will go in to suspended status, where it can be reset and re-queued for background processing.

The failure or incomplete status will occur if one or more delegates does not exist, because either the delegate does not exist as a mailbox-enabled AD account or security enabled group in the target domain.   


Failed scheduled delegation migrations will continue to be retried until successful or until the schedule migration is suspended.

For user delegation this will only be applied once the account that is a delegate has a mailbox. Not all delegation is expected to complete successfully until all Notes accounts are migrated.

It is recommended to schedule migrations for users and delegates who require access to email or calendar data in the same migration batch.

9.3  Enable and Suspend Scheduled Migration

Enable and suspend scheduled migration options are available under Optional Actions:

Select one or more mailboxes and click Optional Actions | Suspend scheduled migration to stop the scheduled delegation migration

Select one or more mailboxes and click Optional Actions | Enable scheduled migration to set the scheduled delegation migration attempts; you may want to use this option after attempting a manual delegation migration

9.4  Migrate Delegation – Manual

Delegation data for selected mailboxes can also be manually migrated immediately using the local machine. Manually migrating delegation data will remove the mailbox from the scheduled state and it must then be validated by the same machine. As stated in the Access and Delegation Migration Overview, PowerShell 4 must be installed on the workstation/server that the migration process is to run from. You can use the Enable scheduled migration option to reset to the scheduled state.

To manually migrate delegation data:

  1. On the Delegation Migration view, select one or more mailbox and click the Migrate Delegation button; the local machine immediately attempts to migrate delegate information

9.5  Active Delegation – Operation

Audit the mailfiles*

This process can be run in conjunction with the Active Mailbox process; after the mail file audit process has completed, select the Delegation Migration option to switch to the following view:     

This view displays the mail file owner, a list of people assigned delegate access, the level of access in ACL terms, and whether the calendar is “open” for public viewing.


This view only shows a maximum of nine delegates per user. If there are more, these can be viewed by opening the person document and switching to the Delegation Information tab.

 

The values “1, 2, 3, 4, 5, 6, 7, 8, 9” refer to the “tick” settings in the database ACL as shown below:

This form also displays the Forward Meeting Notice settings as configured in the delegation settings of the mail file associated with this user:

9.6  Merge ACL Details

Merging ACL details is an optional process to populate the I am a Delegate for section of the person document. Once the Audit process has completed, it is necessary to run an agent to consolidate the data from these users. This agent displays if the user is also a “Delegate For” another user. To run this agent, click on the Merge ACL Details option under the Optional Actions button in the action bar at the top of the view. This agent runs against all documents in the view and can be rerun at any time. If the mail file audit agent is run again, Merge ACL Details must also be run.

Once the agent has run, the view displays data in the I am a Delegate for section. This view is limited to nine delegates per person. Open the person document for full details.

9.7  Send Delegation Settings email

At this point, if you do not intend to migrate mailbox delegation, you can send the end users a report of their delegation settings; select the users from the view and click on the Optional Actions | Send Delegation Settings Email; you will be asked for confirmation before proceeding:

When you click Yes, the selected users receive an email message similar to the one shown below:

At this stage, you can work with your users to audit and tidy up delegation settings in Notes prior to migration. If users update their delegation settings, you need to rerun the audit agent and the Merge ACL Details agent to capture the most updated data.

9.6 Merge ACL Details

9.1  Access and Delegation Migration Overview

Delegation migration migrates access to Exchange mailboxes, such as Send As/Manager access and access to specific folders like Calendars and Contacts. Delegation migration attempts to set access control on objects in Exchange based on the Access Control List (ACL) in Notes which dictates overall access to the Exchange mailbox. The delegation migration can be run by a scheduled process or manually on selected documents.

The following is required for delegation migration:

  • Address translation must be fully populated when migrating Access and Delegation. The SMTP address must match the primary SMTP in Exchange

  • PowerShell 4 must be installed on the workstation/server that the migration process is to run from

  • The Administration account for the CAS Server has the ApplicationImpersonation role in the domain

  • Exchange delegates must have domain accounts and be mailbox-enabled

     


  • Delegation migration to Mail-in databases are treated like other mail files

  • The access control for Rooms and Resources is not included in delegation migration

  • Automatic Forwarding settings in the Notes client are not migrated

  • For ACL Groups permissions migrations, Notes groups must migrate to a security mail-enabled group in Exchange and have an Internet Address assigned or be converted to Multi-Purpose groups

  • In hybrid Exchange installations, with both Office 365 and on-prem Exchange servers:

    • Delegation access can only be set for users on the same system; Office 365 users can set delegation access to the mailbox to other Office 365 users, but not to Exchange users; Exchange users can set delegation access to other Exchange accounts, but not to Office 365 users; Access delegation is not supported between Exchange on-prem users and Office 365 accounts

    • You must set application impersonation in each domain (once for the on-prem Exchange servers, and once in the Office 365 tenant); Impersonation in the on-prem servers does not automatically propagate to Office 365 because they are separate domains and AD objects

 

Delegation also allows you to audit the user's mail files for database ACL and delegation data and send an email containing the user's current delegation settings, so the user can determine if the settings are valid for migration to Outlook.

9.2  Migrate Delegation – Scheduled

The scheduled delegation migration and the scheduled delegation migration agent must be enabled in the Delegation settings. When enabled, the agent will attempt to migrate delegation data for all mailboxes that have been successfully migrated to an Exchange Server since the last delegation migration.

Scheduled delegation migration runs in the background on a workstation or server. If running locally, Notes must be running and background agents must be enabled on the client.

When enabled the scheduled delegation migration agent runs once a day at 3:00 AM.  Note that if the agent is changed to run at a time interval that is too short, the PowerShell tasks may not have time to complete.

The status of the delegation migration can be viewed on the Delegation Migration view:

Delegation Migration View

The status for delegation migration can be successful, incomplete (partially migrated), or a failure. If the status is either incomplete or failed, the delegation migration will be retried until it reaches the successful status, or until the retry limit is exceeded. If the retry limit is exceeded, it will go in to suspended status, where it can be reset and re-queued for background processing.

The failure or incomplete status will occur if one or more delegates does not exist, because either the delegate does not exist as a mailbox-enabled AD account or security enabled group in the target domain.   


Failed scheduled delegation migrations will continue to be retried until successful or until the schedule migration is suspended.

For user delegation this will only be applied once the account that is a delegate has a mailbox. Not all delegation is expected to complete successfully until all Notes accounts are migrated.

It is recommended to schedule migrations for users and delegates who require access to email or calendar data in the same migration batch.

9.3  Enable and Suspend Scheduled Migration

Enable and suspend scheduled migration options are available under Optional Actions:

Select one or more mailboxes and click Optional Actions | Suspend scheduled migration to stop the scheduled delegation migration

Select one or more mailboxes and click Optional Actions | Enable scheduled migration to set the scheduled delegation migration attempts; you may want to use this option after attempting a manual delegation migration

9.4  Migrate Delegation – Manual

Delegation data for selected mailboxes can also be manually migrated immediately using the local machine. Manually migrating delegation data will remove the mailbox from the scheduled state and it must then be validated by the same machine. As stated in the Access and Delegation Migration Overview, PowerShell 4 must be installed on the workstation/server that the migration process is to run from. You can use the Enable scheduled migration option to reset to the scheduled state.

To manually migrate delegation data:

  1. On the Delegation Migration view, select one or more mailbox and click the Migrate Delegation button; the local machine immediately attempts to migrate delegate information

9.5  Active Delegation – Operation

Audit the mailfiles*

This process can be run in conjunction with the Active Mailbox process; after the mail file audit process has completed, select the Delegation Migration option to switch to the following view:     

This view displays the mail file owner, a list of people assigned delegate access, the level of access in ACL terms, and whether the calendar is “open” for public viewing.


This view only shows a maximum of nine delegates per user. If there are more, these can be viewed by opening the person document and switching to the Delegation Information tab.

 

The values “1, 2, 3, 4, 5, 6, 7, 8, 9” refer to the “tick” settings in the database ACL as shown below:

This form also displays the Forward Meeting Notice settings as configured in the delegation settings of the mail file associated with this user:

9.6  Merge ACL Details

Merging ACL details is an optional process to populate the I am a Delegate for section of the person document. Once the Audit process has completed, it is necessary to run an agent to consolidate the data from these users. This agent displays if the user is also a “Delegate For” another user. To run this agent, click on the Merge ACL Details option under the Optional Actions button in the action bar at the top of the view. This agent runs against all documents in the view and can be rerun at any time. If the mail file audit agent is run again, Merge ACL Details must also be run.

Once the agent has run, the view displays data in the I am a Delegate for section. This view is limited to nine delegates per person. Open the person document for full details.

9.7  Send Delegation Settings email

At this point, if you do not intend to migrate mailbox delegation, you can send the end users a report of their delegation settings; select the users from the view and click on the Optional Actions | Send Delegation Settings Email; you will be asked for confirmation before proceeding:

When you click Yes, the selected users receive an email message similar to the one shown below:

At this stage, you can work with your users to audit and tidy up delegation settings in Notes prior to migration. If users update their delegation settings, you need to rerun the audit agent and the Merge ACL Details agent to capture the most updated data.

9.7 Send Delegation Settings email

9.1  Access and Delegation Migration Overview

Delegation migration migrates access to Exchange mailboxes, such as Send As/Manager access and access to specific folders like Calendars and Contacts. Delegation migration attempts to set access control on objects in Exchange based on the Access Control List (ACL) in Notes which dictates overall access to the Exchange mailbox. The delegation migration can be run by a scheduled process or manually on selected documents.

The following is required for delegation migration:

  • Address translation must be fully populated when migrating Access and Delegation. The SMTP address must match the primary SMTP in Exchange

  • PowerShell 4 must be installed on the workstation/server that the migration process is to run from

  • The Administration account for the CAS Server has the ApplicationImpersonation role in the domain

  • Exchange delegates must have domain accounts and be mailbox-enabled

     


  • Delegation migration to Mail-in databases are treated like other mail files

  • The access control for Rooms and Resources is not included in delegation migration

  • Automatic Forwarding settings in the Notes client are not migrated

  • For ACL Groups permissions migrations, Notes groups must migrate to a security mail-enabled group in Exchange and have an Internet Address assigned or be converted to Multi-Purpose groups

  • In hybrid Exchange installations, with both Office 365 and on-prem Exchange servers:

    • Delegation access can only be set for users on the same system; Office 365 users can set delegation access to the mailbox to other Office 365 users, but not to Exchange users; Exchange users can set delegation access to other Exchange accounts, but not to Office 365 users; Access delegation is not supported between Exchange on-prem users and Office 365 accounts

    • You must set application impersonation in each domain (once for the on-prem Exchange servers, and once in the Office 365 tenant); Impersonation in the on-prem servers does not automatically propagate to Office 365 because they are separate domains and AD objects

 

Delegation also allows you to audit the user's mail files for database ACL and delegation data and send an email containing the user's current delegation settings, so the user can determine if the settings are valid for migration to Outlook.

9.2  Migrate Delegation – Scheduled

The scheduled delegation migration and the scheduled delegation migration agent must be enabled in the Delegation settings. When enabled, the agent will attempt to migrate delegation data for all mailboxes that have been successfully migrated to an Exchange Server since the last delegation migration.

Scheduled delegation migration runs in the background on a workstation or server. If running locally, Notes must be running and background agents must be enabled on the client.

When enabled the scheduled delegation migration agent runs once a day at 3:00 AM.  Note that if the agent is changed to run at a time interval that is too short, the PowerShell tasks may not have time to complete.

The status of the delegation migration can be viewed on the Delegation Migration view:

Delegation Migration View

The status for delegation migration can be successful, incomplete (partially migrated), or a failure. If the status is either incomplete or failed, the delegation migration will be retried until it reaches the successful status, or until the retry limit is exceeded. If the retry limit is exceeded, it will go in to suspended status, where it can be reset and re-queued for background processing.

The failure or incomplete status will occur if one or more delegates does not exist, because either the delegate does not exist as a mailbox-enabled AD account or security enabled group in the target domain.   


Failed scheduled delegation migrations will continue to be retried until successful or until the schedule migration is suspended.

For user delegation this will only be applied once the account that is a delegate has a mailbox. Not all delegation is expected to complete successfully until all Notes accounts are migrated.

It is recommended to schedule migrations for users and delegates who require access to email or calendar data in the same migration batch.

9.3  Enable and Suspend Scheduled Migration

Enable and suspend scheduled migration options are available under Optional Actions:

Select one or more mailboxes and click Optional Actions | Suspend scheduled migration to stop the scheduled delegation migration

Select one or more mailboxes and click Optional Actions | Enable scheduled migration to set the scheduled delegation migration attempts; you may want to use this option after attempting a manual delegation migration

9.4  Migrate Delegation – Manual

Delegation data for selected mailboxes can also be manually migrated immediately using the local machine. Manually migrating delegation data will remove the mailbox from the scheduled state and it must then be validated by the same machine. As stated in the Access and Delegation Migration Overview, PowerShell 4 must be installed on the workstation/server that the migration process is to run from. You can use the Enable scheduled migration option to reset to the scheduled state.

To manually migrate delegation data:

  1. On the Delegation Migration view, select one or more mailbox and click the Migrate Delegation button; the local machine immediately attempts to migrate delegate information

9.5  Active Delegation – Operation

Audit the mailfiles*

This process can be run in conjunction with the Active Mailbox process; after the mail file audit process has completed, select the Delegation Migration option to switch to the following view:     

This view displays the mail file owner, a list of people assigned delegate access, the level of access in ACL terms, and whether the calendar is “open” for public viewing.


This view only shows a maximum of nine delegates per user. If there are more, these can be viewed by opening the person document and switching to the Delegation Information tab.

 

The values “1, 2, 3, 4, 5, 6, 7, 8, 9” refer to the “tick” settings in the database ACL as shown below:

This form also displays the Forward Meeting Notice settings as configured in the delegation settings of the mail file associated with this user:

9.6  Merge ACL Details

Merging ACL details is an optional process to populate the I am a Delegate for section of the person document. Once the Audit process has completed, it is necessary to run an agent to consolidate the data from these users. This agent displays if the user is also a “Delegate For” another user. To run this agent, click on the Merge ACL Details option under the Optional Actions button in the action bar at the top of the view. This agent runs against all documents in the view and can be rerun at any time. If the mail file audit agent is run again, Merge ACL Details must also be run.

Once the agent has run, the view displays data in the I am a Delegate for section. This view is limited to nine delegates per person. Open the person document for full details.

9.7  Send Delegation Settings email

At this point, if you do not intend to migrate mailbox delegation, you can send the end users a report of their delegation settings; select the users from the view and click on the Optional Actions | Send Delegation Settings Email; you will be asked for confirmation before proceeding:

When you click Yes, the selected users receive an email message similar to the one shown below:

At this stage, you can work with your users to audit and tidy up delegation settings in Notes prior to migration. If users update their delegation settings, you need to rerun the audit agent and the Merge ACL Details agent to capture the most updated data.

Section 10. All Accounts

Section 11.  Customer Status Reports

Migration status reports can be manually run or scheduled. Manual reports require Microsoft Excel installed on any workstation when reports are run. Scheduled reports are CSV files and do not require Microsoft Excel. Please ensure that you have populated the Migration Status Report section of the Additional tab in the Required Settings document.

To manually run migration status reports:

  1. Go to the Customer Status Reports view in the Navigation Pane; options to remove entries from the view, refresh the migration status of entries, and set/clear migration status, group, or workstation are available

  2. Click the Customer Status Report button; the drop-down menu displays four options:Customer Status Reports View

    The following table describes each menu option:

Option

Description

Send All Migration Status Reports

Sends both the customer and operator status reports in XLS format; This process is run from the local client

Send Migration Status Report to Customer

Sends the customer status reports (simplified) in XLS format; This process is run from the local client

Send Migration Status Report to Operators

Sends the operator status reports (detailed with errors) in XLS format; This process is run from the local client

Compose Final Migration Status Report

Exports all documents in the "Customer Status" view to a CSV file then composes a new memo with the migration summary in the body; Then, it opens the CSV file for any manual editing that maybe required; After which, the file can be saved and attached to the status report

 

To schedule migration status reports:

  1. From the Customer Status Reports view in the Navigation Pane

  2. Click the Enable or Disable Scheduled Agents button. The drop-down menu displays four options

The following table describes each menu option:

Option

Description

Enable Refresh Migration Status

Runs on a local MCC server/workstation and retrieves the current status of the migrating accounts for the scheduled status reports to operate without requiring manual refreshes

Enable Customer Status Report

Runs on the Domino server and creates a CSV (text) file on the server, composes an email, populates the body with the migration summary totals designed for customers and then sends the message to the customer

Enable Operator Status Report

Runs on the Domino server and creates a CSV (text) file on the server, composes an email, populates the body with the migration summary totals with all errors for an operator to review in details and then sends the message to the operator

Disable Refresh Migration Status

The Refresh Migration Status process is disabled

Disable Customer Status Report

The Customer Status Report process is disabled

Disable Operator Status Report

The Operator Status Report process is disabled

 


When selecting agents to run from the local workstation, background agents must be enabled.  To enable this option in Notes:

  1. From the Notes File menu, click Preferences

  2. Expand Accounts and click Basic Notes Client Configuration

  3. Check Enable scheduled local agents

  4. Click OK

To view status report logs.

  1. Click Logs under Customer Status Reports in the Navigation Pane; the logs view is displayed; the information here is the same as what’s shown in Section 11. Logs.

Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating