Chat now with support
Chat with Support

Migration Manager for AD 8.14 - Resource Processing Guide

Introduction to Resource Update Distributed Updates in Resource Updating Manager Common Resource Update Workflows Active Directory Processing Exchange Server Processing SMS Processing SQL Server Processing Cluster Server Migration Command-Line Resource Update SharePoint Processing

Creating an INI File for Resource Update

You can create the INI files for the following resource updating tools:

  • Exchange Processing Wizard
  • SQL Processing Wizard
  • SMS Processing Wizard
  • Active Directory Processing Wizard

To create an INI file for a resource updating tool

  1. In the Resource Updating Manager console, create a new collection or choose an existing one.
  2. Right-click on the collection and choose Create Task | Processing. In the Create Processing Task wizard, specify the processing settings you need.
  3. Click on the Tasks tab in the right pane.
  4. Right-click on the task and select Export Settings to File.
  5. Save the INI file in the desired location.

Resource Update Considerations

Here are the factors to keep in mind when doing resource updates:

  • The more objects a computer has (in most cases, this means the more files and folders), the longer it takes to process. Thus, it takes much longer to process a file server than a workstation. You may want to perform server processing during non-business hours to ensure that no users are affected by a possible server slowdown.
  • Updating file system permissions requires a lot of disk access (I/O) operations and can slow the server for a period of time.
  • Each computer in a set is processed by its own agent. Thus, all the computers are processed in parallel and it takes about as much time to process a dozen workstations as a thousand.

    Caution: Please consider that when resources are processed remotely, computers are handled in turns. In comparison with agent-based resource processing, remote processing takes significantly more time.

  • Expect about 10% (depending on the environment) of your workstations to require troubleshooting due to various reasons: they may be offline, the Server service may not be running, the domain administrators may be absent from the local Administrators group, and so on.

It is recommended that you create separate lists for end-user workstations and servers, and process the workstations first and the servers next.

Active Directory Processing

Access to Active Directory objects is regulated with security descriptors (SDs) and group membership. After migration, the SDs and group membership of all objects must be modified so that the access that was granted to the source accounts is given to the target accounts as well.

Active Directory Processing Wizard allows you to update group membership, linked attributes, and Active Directory permissions to conform to the Active Directory reconfiguration after migration. Active Directory Processing Wizard uses mappings between the migrated source and target accounts stored in ADAM or AD LDS for updating permissions. Active Directory Processing Wizard also allows you to process Microsoft Exchange directory permissions and clean up SIDHistory of the migrated objects.

When and Where to Use Active Directory Processing Wizard

Generally, if you want the new users to have the same level of access as the old users after Active Directory migration, you need to run Active Directory Processing Wizard (ADPW) in all domains where the old users had specifically configured access rights. This is as good as obligatory in most Active Directory migrations, at least for the initial transition period.

The following are examples of activities that you may need to perform in ADPW to restore users' resource access levels:

  • Add target users to source groups
    This is the most common operation for ADPW.
  • Update linked attributes other than group membership
    For that, ADPW modifies forward links so that back links are resolved as you expect. All linked attributes are supported.

NOTE: Commonly-used important linked attributes include:

  • The managedBy attribute of groups
  • Links (to users) that role-based administration in Exchange 2007 and later is based on
  • Update permissions on objects such as OUs
  • If an Exchange resource forest topology is set up in the environment, update Active Directory in the Exchange resource forest
    For details about handling Exchange resource forests, see the When and Where to Use Exchange Processing Wizard topic.
Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating