On Demand Migration Current - Active Directory Domain Rewrite Quick Start Guide

On Demand Project

This section explains how to add a Microsoft 365 tenant and configure a domain rewrite project using On Demand Migration. During project setup an Office 365 Global Administrator account is initially required to add each tenant to the project.

How to add a Microsoft 365 tenant

Follow these steps to add each Microsoft 365 tenant for On Demand Migration. If there is an existing tenant from another project, it can be reused. 

1. Log in to On Demand

2. Navigate to Tenants

3. Choose the Add Tenant button

4. Select Commerical Tenant, and choose Add Commerical or GCC Tenant and choose OK.

5. Log in to Office 365 with a Global Administrator account for the source tenant.

6. Accept the requested Application Permissions

7. Choose Finish

8. Repeat steps 2 – 8 for the target tenant

Setting up the Domain Rewrite Project

Follow these steps to setup the Domain Rewrite Project.

1. Log in to On Demand

2. Navigate to Migration

3. Select an existing migration project

4. Click on Domain Rewrite from the Project Dashboard

   

5. Once the On Demand Migration Domain Rewrite module is loaded, click on the Domain Rewrite icon in the main dash view.

   

6. Click the New Project button and bring up the project setup wizard

7. Provide a name and description for the project and click Next

8. Click on the New button to create a new environment or choose any existing environments from the list. Click Next once you have at least two environments selected.

   

   Important Tip: When adding a new environment, On Demand will automatically detect if the tenant is Hybrid or Cloud Only.  Hybrid Environments require additional configuration for each local Active Directory attached to the tenant.

    

   

    

9. Choose the source and target environments from the dropdown menu and click Next.

   

10. Configure the domain mapping for your project and click Next.

    

    Important Tip: Domain Mapping will be used to match objects and allows On Demand Migration Domain Rewrite to add the source domain to all matched target objects.

11. Configure the attributes to use to match users and groups. Once complete, click Next

    

    Important Tip: Multiple attributes can be selected and On Demand Migration will evaluate each one until it finds a matching source and target object.  If more than one attribute is selected, the first attribute that matches is used.

     

12. If there are Hybrid Environments, download the Directory Sync agent and copy the Registration URL and Registration Keys for each environment. These will be used during the agent installation and configuration.

    

13. Select Yes, Let’s Do it to continue with Domain Rewrite project configuration.

    

     

14. Now we need to configure the DKIM signature for your domain.

    

15. Copy the DNS record into a notepad and create a TXT record for your domain.  For the purpose of this guide we will create the TXT record for each domain in Azure DNS Zone.

• Demo2.mcslab.qsftdemo.com

  

• Demo3.mcslab.qsftdemo.com

  

   

16. On Demand Migration Domain Rewrite will validate the TXT record and update the DNS Publish Status.  After the TXT Records are published, Click on Next to continue.

    

17. Upload a SSL Certificate for each environment.  On Demand Migration will ensure mail delivered during a domain rewrite is always encrypted, secure and private by using this SSL Certificate.  Click Next once the certificates are uploaded.

    

    Important Tip: A single subject certificate with both private and public key must be used.

     

18. Review the project configuration settings and click Next

19. Enter an email address and click on Start Discovery to finish the project setup

Validating Object Matches

This section provides a step-by-step guide on how to validate object matching.

1. Log in to On Demand

2. Navigate to Migration, select the project and click on Domain Rewrite.

3. Select the Domain Rewrite project previously configured.

4. From the Domain Rewrite Project dashboard, verify the Users, Groups and Domain Matching information:

   

5. Click on the total users link to see all Users, then click on Filter and select the Matched checkbox.

   

6. Validate that the users are correctly matched, as shown below.

   

Enable Rewrite

This section explains how to enable domain rewrite service for your users using On Demand Migration Domain Rewrite. Be sure to review the Frequently Asked Questions section.

Enable Rewrite Target Address

1. Log in to On Demand

2. Navigate to Migration, select the project and click on Domain Rewrite.

3. Select the Domain Rewrite project previously configured.

4. Click on the Total Users link.  Then select a matched user and click on the Email Rewrite drop down action menu.  Click Apply Action.

   

5. Select Rewrite with Target Address option and click on Submit.

   

6. Allow the Email Rewrite Prepare job to finish.  After the job is completed, the User Status should be set to Enabled Rewrite, and Rewrite Status should be set to Target Address.

   

7. Review the prepare job log and validate the users setting in Exchange Online.

   1. The target tenant mailbox should have a forwarding rule configured and pointed to the source mailbox’s PrimarySMTPAddress

      

   2. The source tenant mailbox should be part of BT-InegrationPro-DayOne group

      

Enable Rewrite Source Address

1. Log in to On Demand

2. Navigate to Migration, select the project and click on Domain Rewrite.

3. Select the Domain Rewrite project previously configured.

4. Click on the Total Users link.  Then select a matched user and click on the Email Rwrite drop down action menu.  Click Apply Action.

   

5. Select Rewrite with Source Address option and click on Submit.

   

6. Allow the Email Rewrite Prepare job to finish.  After the job is completed, the User Status should be set to Enabled Rewrite, and Rewrite Status should be set to Source Address.

   

7. Review the prepare job log and validate the users setting in Exchange Online.

   1. The Source tenant mailbox should have a forwarding rule configured and pointed to the target mailbox’s PrimarySMTPAddress

      

   2. The source tenant mailbox should be part of BT-InegrationPro-DayTwo group