On Demand Migration Current - Desktop Update Agent User Guide

Before you begin a migration project and agent deployment, ensure that your systems meet the following minimum requirements.

General Requirements

Client has been licensed for On Demand Migration.
Access to a Global Administrator account for each Microsoft 365 tenant.
Disable policies that prevent Outlook Profile, OneDrive for Business, and Microsoft Teams application changes or creation.
If applicable, users have been provided new or temporary password for the account in the new target destination Microsoft 365 tenant.
Source and target users have matching attribute values to identify and pair objects together for mailbox and OneDrive content synchronization.

TIP: Try Password Sync for On Demand Migration Active Directory to keep your migrated hybrid users synchronized so when they are moved, they keep their existing password.

License Requirements

Before starting a migration, each target user account must be licensed for each application that will be reconfigured using Desktop Update Agent. The following licenses are required:

Exchange Online if configuring Outlook profiles.
SharePoint Online if configuring OneDrive for Business application.
Microsoft Teams if configuring Microsoft Teams application.

NOTE: On Demand Migration can automatically assign these licenses to target user accounts during the email and OneDrive migration process.

Software Requirements

NOTE: If OneDrive for Business, Microsoft Teams, Outlook, or Office are not installed on the workstation, those applications will be skipped and not impact any other applications present during the reconfiguration.

The minimum version requirements for software installed on user’s workstations:

Outlook 2016 (32-bit or 64-bit) or higher
OneDrive for Business (Most recent updates recommended)
Microsoft Teams
Windows 10 (32-bit or 64-bit) or Windows 11
.NET 4.7.2 or higher
Microsoft 365 Apps (Office Click-to-Run Version Only)

NOTE:

Microsoft Office Professional Plus is not supported for Office license reset.
Azure Active Directory is now Microsoft Entra ID.

Network Requirements

The minimum network requirements to run Desktop Update Agent:

The On Demand Migration API for the Desktop Update Agent is secured by Microsoft Entra ID through a Quest tenant. If your network restricts access to Microsoft Entra ID tenants, ensure that the Quest tenant "quest.com"/91c369b5-1c9e-439c-989c-1867ec606603 is added to the permitted tenant list.
Internet access using port 443.
Internet access to download the executable (optional).
Internet access to connect to Microsoft 365.
Internet access to On Demand Migration Endpoints. (NOTE: Proxies or security applications that intervene in network access may prevent the agent from connecting to On Demand Migration. Check the agent logs for details if this occurs.)
- Internet access to Exchange Online "Autodiscover" endpoints at:
  - Global: https://autodiscover-s.outlook.com/autodiscover
    
    Optionally, you can use the equivalent ‘.us’ Government Community Cloud (GCC) endpoints, when applicable.
  - US:
    - https://odmduaproduspublicapi.azurewebsites.net/api/v2.0/GetSwitchAppsOptions
    - https://odmduaproduspublicapi.azurewebsites.net/api/v2.0/SetSwitchAppsResults
  - Europe:
    - https://odmduaprodeupublicapi.azurewebsites.net/api/v2.0/GetSwitchAppsOptions
    - https://odmduaprodeupublicapi.azurewebsites.net/api/v2.0/SetSwitchAppsResults
  - Canada:
    - https://odmduaprodcapublicapi.azurewebsites.net/api/v2.0/GetSwitchAppsOptions
    - https://odmduaprodcapublicapi.azurewebsites.net/api/v2.0/SetSwitchAppsResults
  - UK:
    - https://odmduaprodukpublicapi.azurewebsites.net/api/v2.0/GetSwitchAppsOptions
    - https://odmduaprodukpublicapi.azurewebsites.net/api/v2.0/SetSwitchAppsResults
  - Australia:
    - https://odmduaprodaupublicapi.azurewebsites.net/api/v2.0/GetSwitchAppsOptions
    - https://odmduaprodaupublicapi.azurewebsites.net/api/v2.0/SetSwitchAppsResults
- Local access to read\write the following registry keys on the end-user's workstation:
  - Outlook 2016: HKEY_CURRENT_USER\Software\Microsoft\Office\16.0
  - Outlook 32-bit: HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Office
  - Outlook 64-bit: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office

NOTE: During this process, the Outlook Profile will be copied to a new Profile directed to the target account. Due to this configuration, a new OST download will occur based on each user's current cache settings, if enabled. To avoid network congestion try disabling or curtailing the cache settings to a lower amount of data then slowly increase it as needed. This can be accomplished through policies.

Supported Authentication

On Demand Migration Desktop Update Agent supports environments that use:

Active Directory Federation Services (AD FS)
Single Sign On (SSO) with mixed authentication modes, such as:
- Modern Authentication (ADAL)
- Forms Authentication
- Windows Integrated Authentication

Working with On Demand Migration Desktop Update Agent (DUA)

Desktop Update Agent provides the following agent deployment capabilities:

Ability to manage users' application reconfiguration activities from a single view within On Demand Migration. Migration administrators can configure which applications will be reconfigured, track each application’s status, and send notices to remind users if required.
Support for OneDrive for Business and Microsoft Teams.
Support for Microsoft 365 Apps license reset.
Support for various client authentication mechanisms.
Support for Outlook Profile reconfiguration.

Workflow

The workflow required to run a desktop application migration includes both administrators and users:

From On Demand Migration, the migration administrator configures and deploys the agent as part of setting up a migration project. For details on agent deployment and configuration options, see Deploying Agents and Configuring the Switch Application Task.
From a user's workstation, Desktop Update Agent runs to reconfigure applications and complete the migration process. For details, see Running Desktop Update Agent.

The diagram below describes each of the steps to complete the migration project and application reconfiguration:

Deploying Agents

To complete a migration project and reconfigure a user's applications, agents must be configured and deployed by administrators, then run on users' workstations.

To deploy Desktop Update Agent to users' workstations, you need to:

Download the agent. (On Demand Migration Desktop Update Agent Installer MSI)
Generate an access token to be used by the agent.
Share the installation through a Group Policy Object.

NOTE:You can also install the agent using a command line script. See the FAQ section of the Desktop Update Agent Release Notes.

NOTE: Desktop Update Agent can be downloaded either during the configuration of the Switch Application task or prior to the configuration.

To download the agent and generate the required token:

On the On Demand Migration Project page, click Desktop Agent.
Click the Download Agent button.
Under New Agent Authentication Token, specify a passphrase. Ensure that you keep this passphrase as it is required when you deploy the agent.
If required, enter an email address to send notifications for DUA tokens that are set to expire in 14 days or have been manually revoked.
Click Generate Token. A new task will be created to generate the token.
Click Download Agent and save a copy of the new token for use during the agent deployment.

To deploy the agent with a GPO:

NOTE: To install the agent using a GPO you need to convert the Desktop Update Agent MSI package and the parameters into an MST file. The following procedure uses Microsoft Orca to create the MST file. Orca installation is available in Windows SDK Components for Windows Installer Developers.

Download the On Demand Migration Desktop Update Agent Installer MSI file. (See the "To download the agent and generate the required token" procedure above.)
Right-click the On Demand Migration Desktop Update Agent Installer MSI file and select Edit with Orca.
From within Orca, select Transform | New Transform.
Navigate to the Property table and add the following:
1. Add a Row with property of TOKEN and the token value. The token value previously created in the Agent Download page.
2. Add a Row with property of PASSPHRASE and the passphrase value. The passphrase value previously created in the Agent Download page.
Select Transform | Generate Transform to complete the MST file creation.
Right-click the share that contains the ODM Desktop Update Agent MSI, and choose Properties.
Select the Sharing tab, and select Share.
Select the required users.
NOTE:

Ensure the users have Read access.
Choose Share.
Choose Done.
Select the Security tab and ensure Authenticated Users security group has the Read and NTFS permissions.
From the Start menu, go to Administrative Tools and choose Group Policy Management.
Right-click the domain or OU you are migrating and choose Create a GPO in this domain, and link it here.
In the New GPO dialog, enter a name for the GPO and choose OK.
Select the new GPO and choose OK.
Right-click the GPO and select Edit.
Open Computer Configuration | Policies | Software Settings, right-click Software Installation, go to New, and choose Package.
In the File Name field, enter the UNC path to the On Demand Migration Desktop Update Agent Installer MSI file and choose Open.
Select the On Demand Migration Desktop Setup Agent and choose Open.
In the Deploy Software dialog, select Advanced as the deployment method, and select OK.
Under the Modifications tab, add the previously created MST file, and click OK.
Restart the computer for the applied group policy to complete the agent installation.

To configure Desktop Update Agent to run at User Logon using a Group Policy Object:

From the Start menu, go to Administrative Tools and choose Group Policy Management.
Right-click the domain or OU you are migrating and choose Create a GPO in this domain, and link it here.
In the New GPO dialog, enter a name for the GPO and choose OK.
Select the new GPO and choose OK.
Right-click the GPO and select Edit.
Open Computer Configuration | Policies | Administrative Template | System | Logon ,and right select Run these programs at user logon, and select Edit.
Select Enabled | Show and enter the applications you want to run when a user logs in, select OK, then OK again. You must use the full path to the application.
Restart the computer for the applied group policy to complete the installation.

On Demand Migration Desktop Update Agent will now open automatically when the user logs in.

On Demand Migration Current - Desktop Update Agent User Guide

About this Guide

System requirements

General Requirements

License Requirements

Software Requirements

Network Requirements

Supported Authentication

Working with On Demand Migration Desktop Update Agent (DUA)

Workflow

Deploying Agents

请选择您的产品：

为向您提供更好的服务，请填写'Purpose of your Chat'（联系目的）：

针对您的问题建议的解决方案

On Demand Migration Current - Desktop Update Agent User Guide

About this Guide

System requirements

General Requirements

License Requirements

Software Requirements

Network Requirements

Supported Authentication

Working with On Demand Migration Desktop Update Agent (DUA)

Workflow

Deploying Agents