SMART Active Directory Migrator 9.2

Transcription

1 SMART Active Directry Migratr 9.2 User Guide MAY 2016

2 Table f Cntents Sectin 1. Intrductin Abut SMART Active Directry Migratr Audience fr SMART Active Directry Migratr Getting Mre Infrmatin... 5 Sectin 2. Migratin Prject Management SMART Active Directry Migratr Architecture Planning the Migratin Prject Best Practices... 7 Sectin 3. Cnfiguring the Active Directry Migratr Prfile Launching SMART Directry Sync Adding an AD Migratin/Synchrnizatin Prfile Active Directry Migratr Sync Reprt Sectin 4. Using the SMART Active Directry Migratr Cnsle Launching the Active Directry Migratr Cnsle Refreshing Data Creating Mapping Files Migratin Grups Using Blacklists Gruping, Srting, and Filtering Tables Custmizing Clumns Selecting Multiple Table Rws Triggering a Sync Exprting the Grid Sectin 5. Migrating Users Sectin 6. Migrating Rms Sectin 7. Migrating Cntacts Sectin 8. Migrating Grups Sectin 9. Settings Migratin Optins Cutver Credentials Netwrk Prfiles Device ReACL Prfiles NAS ReACL Prfiles Menu Actins Custm Menu Actin Example Glbal Variables Sectin 10. Migrating Devices SMART ACTIVE DIRECTORY MIGRATOR 9.2 USER GUIDE 2

3 Sectin 11. Migrating NAS Sectin 12. Reprts Sectin 13. Using the SMART Directry Sync Lg Viewer Searching Lg Entries Pausing a Lg Shwing Lg Entries fr a Time Perid Filtering the Lg Gruping the Lg by Clumn Viewing Lg Entry Details Exprting Lg Entries Clearing Lg Entries Sectin 14. Trubleshting Appendix A. AD Surce AD Target Default Mapping Appendix B. Custmizing Overrides Appendix C. Cutver Jb Result Cdes Appendix D. SMART Active Directry Reprter Appendix E. Advanced Netwrk Requirements Appendix F. SMART AD Migratr SQL Re-permissin Appendix G. Creating Linked Exchange Accunt Abut Binary Tree SMART ACTIVE DIRECTORY MIGRATOR 9.2 USER GUIDE 3

4 Sectin 1. Intrductin 1.1 Abut SMART Active Directry Migratr Whether yur cmpany is perfrming an Active Directry Migratin as a result f an acquisitin, merger, r divestiture, r simply as part f rebuilding an existing Active Directry restructure t meet technical r rganizatinal needs, SMART Active Directry Migratr (SMART AD Migratr) dramatically reduces risks, cmplexity, time, and csts assciated with migrating and synchrnizing their Active Directry envirnment t an existing r new Active Directry envirnment. SMART AD Migratr Is a cmprehensive sftware slutin that seamlessly migrates AD bjects, settings and prperties Has a back-end migratin and synchrnizatin engine Has a frnt-end management cnsle prviding cmplete cntrl f the migratin Ensures security and reliability f the prduct Prvides cmplete migratin f relevant bjects and prperties Migrates AD bjects even if the surce and target servers are nt cnnected and are n islated netwrks Allws fr migratins t ccur during business hurs with minimal effect n user prductivity Allws administratrs t perfrm all migratin-related tasks during business hurs, reducing the administratr s wrklad Maintains transparent interperability during the migratin Prvides users access t all netwrk resurces, regardless f the migratin status Includes passwrd and SID Histry synchrnizatin capabilities that prvide real-time data Prvides the ability t reverse the changes after key steps in the migratin prcess Can be used fr any migratin scenari, frm cnslidatin t a restructuring f AD Can be custmized t meet unique requirements f any rganizatin Is highly cnducive fr migratin f wrkstatins in a distributed wrkfrce Key Features Cmplete migratin Minimal dwntime r interruptins t users Prvides cexistence Synchrnizatin f AD bjects Safe with ability t recver riginal state Flexible migratin Highly custmizable Synchrnizes SID histry SMART ACTIVE DIRECTORY MIGRATOR 9.2 USER GUIDE 4

5 Ability t cpy Passwrds Highly cnducive fr migratin f wrkstatins in a distributed wrkfrce Imprtant! - Windws 10 is NOT SUPPORTED at this time. 1.2 Audience fr SMART Active Directry Migratr This dcument assumes the reader has sme experience using Active Directry and sme basic Administratin skills. A fundamental understanding f SIDs (Security Identifiers) is als beneficial. 1.3 Getting Mre Infrmatin Fr additinal resurces, refer t Supprt: SMART ACTIVE DIRECTORY MIGRATOR 9.2 USER GUIDE 5

6 Sectin 2. Migratin Prject Management 2.1 SMART Active Directry Migratr Architecture The first step twards success n a prject using SMART AD Migratr is t understand the prduct architecture and hw this architecture will perate in yur envirnment. SMART Active Directry Migratr cnsists f the fllwing cmpnents: A directry synchrnizatin engine A REST based web service A management interface A lightweight agent fr wrkstatins and member servers A database running n Micrsft SQL Server The directry synchrnizatin engine, the web service, and the management interface will all access the same SQL database. In mst scenaris, these cmpnents will be installed n the same system. In larger r mre cmplex netwrk envirnments, the cmpnents can be distributed acrss multiple systems. If the directry synchrnizatin engine, the web service r the management interface is installed n a separate system, it is imprtant t ensure that all three cmpnents retain access t the same SQL database. The directry synchrnizatin engine is prvided by Binary Tree s SMART Directry Sync. SMART Directry Sync is included as part f SMART AD Migratr. SMART Directry Sync is respnsible fr synchrnizing users and grups between surce and target Active Directry dmains. SMART Directry Sync als handles migrating key user prperties such as SID Histry and user passwrds. User wrkstatins and member servers are called devices in SMART AD Migratr. Devices cmmunicate with the SMART Active Directry Migratr web service using the SMART AD Migratr Agent. The SMART AD Migratr Agent is a lightweight applicatin that installs as a service n Windws devices. Upn installatin, the agent has the ability t autdiscver the lcatin f the SMART Active Directry Migratr web service. T ensure that n firewall exceptins are required, the web service des nt call the wrkstatins r servers t be migrated. Instead, the SMART AD Migratr Agents cntact the web service at defined plling intervals, using standard HTTPS r HTTP requests t recvers jbs. Jbs include key tasks such as system discvery, updating the perating system, file system and user prfile permissins, and migrating the device t the new dmain. 2.2 Planning the Migratin Prject A typical migratin prject using SMART AD Migratr can be brken up int phases. Phase 1: Installing and Creating the Synchrnizatin Prfile within SMART Directry Sync Phase 2: Register Devices (Cncurrent with Phase 3) Phase 3: Identify Users, Rms, Cntacts, and Grups t Migrate (Cncurrent with Phase 2) Phase 4: ReACL Devices and NAS Phase 5: Cutver Devices Phase 6: Cleanup SMART ACTIVE DIRECTORY MIGRATOR 9.2 USER GUIDE 6

7 The Cleanup prcess typically ccurs several mnths after the cmpletin f the prject. 2.3 Best Practices Best practices fr each phase f the migratin prject are presented belw: Phase 1: Installing and Creating the Synchrnizatin Prfile within SMART Directry Sync SMART Directry Sync is used t synchrnize bjects and must be installed befre installing the SMART Active Directry Migratr Cnsle and Web Service. The Active Directry Migratr synchrnizatin prfile shuld be set up t include every device. Hwever, nt every device needs t be migrated immediately. This prcess ensures they are in the database, ready t install the SMART AD Migratr agent and register themselves. Devices can be blacklisted if yu d nt want t immediately migrate them. Carefully cnsider the Grup Cllisin ptin (Merge, Skip, Rename). It is recmmended that this ptin is nt changed nce migratins have been started. Additinally, it is strngly recmmended t nt select the Skip ptin. The Merge and Rename ptins are better in mst cases. Synchrnizing SID Histry is recmmended. Phase 2: Register Devices (Cncurrent with Phase 3) The Device Agent shuld be pushed ut t devices via Grup Plicy (GPO) r third party tl and sufficient time shuld be allwed t address any issues with device registratin with the server. Crrecting registratin issues can take mre time than expected. A typical large cmpany with a large number f devices may need a cuple f weeks f ff and n wrk t reslve registratin issues with all devices. Phase 3: Identify Users, Rms, Cntacts, and Grups t Migrate (Cncurrent with Phase 2) Befre migrating users and grups, d sme planning and analysis t see what users, rms, cntacts, and grups shuld be migrated, what grups need t be cnslidated, hw duplicates will be handled, etc. Mre than ne synchrnizatin prfile can be used t cntrl the target destinatins f users, rms, cntacts, and grups. User Accunts shuld be disabled in the target. Identifying users, rms, cntacts, and grups t Migrate can be accmplished cncurrently with reslving device registratin issues in Phase 2. Phase 4: ReACL Devices and NAS Run a ReACL n as many devices as pssible early in the prcess. Trublesht any devices that did nt ReACL. ReACL again clse t the actual cutver date. This will allw yu t cmplete mst f the ReACL prcess early and prvide time t reslve any issues with things such as Anti-Virus sftware and Grup Plicies. ReACL is a nn-destructive prcess that can be repeated as ften as necessary. SMART ACTIVE DIRECTORY MIGRATOR 9.2 USER GUIDE 7

8 Phase 5: Cutver Devices Create sme test users, grups, and devices t verify a successful user and grup migratin and device cutver. Typically, a final ReACL wuld ccur the weekend befre the cutver t ensure any new users and ther changes are prcessed. A wrkstatin rebt is required after the target accunt is enabled, surce accunt is disabled, and the wrkstatin cutver is cmplete. This is usually cmpleted in the evening when fewer users are affected. The affected users shuld be alerted that this rebt is necessary. Phase 6: Cleanup The cleanup phase typically takes place abut tw mnths after all device cutver is cmplete. Cleanup includes remving all permissins frm the surce dmain and remving the SMART AD Migratr Agent frm the devices. Befre executing the cleanup jb, it is recmmended t disable SID filtering/quarantine t verify there are n issues with applicatin access befre cmpleting the cleanup prcess. SMART ACTIVE DIRECTORY MIGRATOR 9.2 USER GUIDE 8

9 Sectin 3. Cnfiguring the Active Directry Migratr Prfile 3.1 Launching SMART Directry Sync T launch the SMART Directry Sync: 1. Duble-click the SMART Directry Sync Cnsle desktp shrtcut. OR Select SMART Directry Sync Cnsle in the Start menu. 2. The SMART Directry Sync Cnsle screen appears briefly and the applicatin pens. 3.2 Adding an AD Migratin/Synchrnizatin Prfile T add an AD Migratin/Synchrnizatin prfile: 1. On the Prfiles tab, click Add Prfile. SMART ACTIVE DIRECTORY MIGRATOR 9.2 USER GUIDE 9

10 2. In the Prfile Type Selectin windw, select AD Migratin/Synchrnizatin and then click OK. The fllwing Prfile Types are als available: Exchange Migratin used in supprt f an Exchange migratin utilizing Binary Tree s E2E Cmplete prduct. Active Directry t Dmin Directry used t synchrnize bjects frm an Active Directry surce t a Dmin directry target. Dmin Directry t Active Directry used t synchrnize bjects frm a Dmin directry surce t an Active Directry target. Windw Server Migratin used in supprt f a Windws Server migratin utilizing Binary Tree s Windws Server Migratin prduct. SMART ACTIVE DIRECTORY MIGRATOR 9.2 USER GUIDE 10

11 3. A new pane appears at the bttm f the cnsle which prvides the ability t cnfigure ptins fr synchrnizatin. 4. On the General tab, enter a name t identify the prfile in the Name field. 5. Select the scpe f the prfile frm the Scpe drp-dwn list: Inter-Frest (default) will synchrnize dmains in different frests. Intra-Frest will synchrnize dmains within a frest. If selected, the Add x500 Prxy t Surce and Resurce Frest ptins must be set t N and msexch mappings are invalid. Befre the prfile can be saved with Intra-Frest chsen as the scpe, the mappings fr all f the msexch attributes will need t be remved. 6. Select the status f the prfile frm the Status drp-dwn list: Active will synchrnize manually r as scheduled as sn as the prfile is saved Suspended Nt active, will nt synchrnize 7. Select the lgging level f the prfile frm the Lgging drp-dwn list: Lw nly errrs are lgged Medium errrs and warnings are lgged High all messages (errrs, warnings, infrmatin, etc.) are lgged (shuld be used fr trubleshting purpses nly) 8. Select an Audit Lgging ptin frm the drp-dwn list: Enabled Recrds bject and attribute changes in the Audit Lg Disabled Object and attribute changes will nt be recrded in the Audit Lg SMART ACTIVE DIRECTORY MIGRATOR 9.2 USER GUIDE 11

12 9. Fr Schedule, select the schedule: By frequency enter the apprpriate frequency r the specific time fr the synchrnizatin prcess t run fr yur envirnment. Zer (0) is nt a valid value fr frequency. The minimum interval is 15 minutes. At specific times(s) enter ne r mre specific times r select times frm the drp-dwn list f times. A selected time can be deleted by selecting the time and clicking the Delete key. Manual nly the synchrnizatin prcess will nt run until it is manually started. If yu chse the By frequency ptin, SMART Directry Sync will initiate a synchrnizatin when an active prfile is saved. Select the At specific time(s) ptin and select a time in the future r select the Manual nly ptin if yu want t save an active prfile withut it syncing right away. This wuld be helpful if yu wanted t run a Sync Reprt r inspect items in SQL befre pulling them int the target Active Directry. 10. Click the AD Surce tab enter credentials that have read/write access t the surce Active Directry. The required read access must extend t the Deleted Accunts cntainer, which can require a privileged accunt. 11. In the User Name field, enter the Active Directry User Name. The credential shuld be entered as a user principal name (fr example, jsmith@acmecrp.cm) SMART ACTIVE DIRECTORY MIGRATOR 9.2 USER GUIDE 12

13 12. In the Passwrd field, enter the passwrd assigned t the Active Directry user. 13. In the Glbal Catalg Server field, enter the IP Address r fully qualified dmain name f the server (FQDN) fr the Glbal Catalg Server r a Dmain Cntrller that will be used fr all read/write peratins. The entered credentials and Glbal Catalg Server/Dmain Cntrller must have access t all Dmains and subdmains that are required t synchrnize. If SID Histry will be synchrnized, SMART Directry Sync will require access t the dmain cntrller hlding the PDC Emulatr Active Directry FSMO rle in all surce and target dmains. 14. Select an Attribute Change Detectin ptin frm the drp-dwn list: Enabled Only attributes changed n the surce bject will be synchrnized Disabled All attributes n the surce bject will be synchrnized 15. Select an Autmatically Mark Objects as Ready t Sync ptin frm the drp-dwn list: N (default) Objects are nt marked as Ready t Sync. N shuld be selected if yu are using SMART AD Migratr t perfrm an AD migratin. Objects can be marked as ready t sync in the SMART AD Migratr Cnsle. Yes Objects are marked as Ready t Sync. Objects will be synced during the synchrnizatin. Yes shuld be selected if yu are perfrming an AD t AD directry synchrnizatin and nt a full AD migratin. 16. Click Add OU(s) t display a list f OU(s) (rganizatinal units) available t synchrnize. Nte that a synchrnizatin prfile that includes the OU where the cmputer bjects reside shuld be created. SMART ACTIVE DIRECTORY MIGRATOR 9.2 USER GUIDE 13

14 17. Select the apprpriate surce OU s and click OK. The selected surce OUs are displayed in the Surce OUs table. T deselect an OU frm the surce, select it and then click the Remve OU buttn and cnfirm r click the Delete key. 18. The fllwing Surce OU fields display at the bttm f the screen used in the abve example. Surce OU Reflects the OU selected frm the tree view. Sub OUs Select this ptin t synchrnize Sub-OUs. The checkbx is selected by default. Clear this ptin if yu d nt want t synchrnize sub-ous. Grups The checkbx is selected by default. Clear this ptin t skip grups frm being synchrnized. Disabled Users Select this ptin t synchrnize Disabled Users. The checkbx is selected by default. Clear this ptin t prevent Disabled Users frm being synchrnized. Nn-Mail Enabled Select this ptin t synchrnize Nn-mail enabled bjects. The checkbx is nt selected by default. Clear this ptin t skip Nn-mail enabled bjects frm being synchrnized. User Filter This is an LDAP filter and can be used t filter synchrnizatin t specific bject types r thse bjects exhibiting specific attribute prperties. See the Using the User, Grup, and Device LDAP Filters tpic in the SMART Directry Sync dcumentatin fr mre infrmatin. Grup Filter This is a LDAP filter and can be used t filter grups based n the entered criteria. See the Using the User, Grup, and Device LDAP Filters tpic in the SMART Directry Sync dcumentatin fr mre infrmatin. Device Filter This is a LDAP filter and can be used t filter devices based n the entered criteria. See the Using the User, Grup, and Device LDAP Filters tpic in the SMART Directry Sync dcumentatin fr mre infrmatin. It is recmmended that yu test the LDAP filter syntax prir t saving yur changes and running a synchrnizatin. 19. Click the Surce DCs tab t define the list f Surce Dmain Cntrllers (DCs) used fr synchrnizatin. SMART ACTIVE DIRECTORY MIGRATOR 9.2 USER GUIDE 14

15 20. Click Add DC(s) t pen the Active Directry DC Selectin windw. Click Refresh DCs t find all available Dmain Cntrllers. Available ptins include Ping Servers t test the availability f the selected Dmain Cntrllers and Test Cnnectins t test the cnnectin t the LDAP server. Select ne r mre Dmain Cntrller and click OK t add the Dmain Cntrllers t the list f Surce DCs. If yur Active Directry frest cntains mre than ne dmain it may be necessary t add at least ne dmain cntrller frm each dmain. When SMART Directry Sync attempts t reslve bjects, such as grup members r a user's manager, that are in anther Dmain (than the ne specified n the Surce tab), it will reference the dmain cntrllers list t find a valid DC t use. T ensure that grup membership and manager/subrdinate relatinships are prperly recreated, it is recmmended t add the apprpriate DC s fr alternate dmains t the Surce DC s tab. SMART ACTIVE DIRECTORY MIGRATOR 9.2 USER GUIDE 15

16 21. The Active Directry DC Selectin windw clses and the selected Dmain Cntrllers appear in the Surce DC s list. The rder the dmain cntrllers are used fr each Dmain can be selected by entering a number value in the Pririty clumn (lwest number = first). If the highest pririty DC is unavailable, Directry Sync will use the next DC. Dmain Cntrllers with n pririty set will be used after thse with a pririty. If n pririty is set fr the servers in a Dmain, they will be used in the rder listed in the table. A Dmain Cntrller that is the Glbal Catalg Server selected n the AD Surce tab is given tp pririty regardless f the value in the Pririty field. N tw DC s in a Dmain can have the same pririty. 22. Click the AD Target tab. 23. In the User Name field, enter the name f the Active Directry user that has the required rights t the Target directry. The credential shuld be entered as a user principal name (fr example, jsmith@acmecrp.cm) 24. In the Passwrd field, enter the passwrd f the Active Directry user. These credentials shuld have write access t target OU, as well as any Dmains r subdmains that may cntain matched users. SMART ACTIVE DIRECTORY MIGRATOR 9.2 USER GUIDE 16

17 25. In the Glbal Catalg Server field, enter the IP Address r fully qualified dmain name f the server (FQDN) f the Glbal Catalg Server r Dmain Cntrller that will be used fr all write peratins. 26. In the Target OU, Click Brwse t select a target OU. Any newly created bjects will be written t this OU. 27. Check the D nt create surce OUs in target ptin if yu d nt want the surce OU structure t be created as bjects are synchrnized t the target. All bjects will be created directly in the Target OU specified fr that prfile. 28. Select an ptin frm the Synchrnize Passwrds drp-dwn list: N (default) Passwrds will nt be cpied t the target Yes Passwrds will be cpied t the target. The passwrd plicy n the surce must meet r exceed the passwrd plicy strength n the target. An errr will ccur if the Administratr passwrd cntains duble qutes (") when perfrming passwrd synchrnizatin. T wrk arund this, ensure the administratr passwrd des nt cntain duble qutes. 29. Enter a default passwrd fr new users in the Default Passwrd field. The default passwrd cannt exceed 128 characters in length. Even if Passwrds are being cpied, and default passwrd value is still required as the initial accunt is created with the default passwrd, and then the surce passwrd is cpied ver. 30. Select an ptin frm the Preserve Objects in Target drp-dwn list t cntrl what happens t target bjects when the crrespnding surce bjects are deleted: N (default) When bjects are deleted in the surce, the crrespnding bjects will be deleted frm the target. This nly applies t bjects created in the target by SMART Directry Sync. Yes Objects that are deleted in the surce will nt be deleted in the target. 31. Select an ptin frm the Preserve Deleted Objects in Target As Is drp-dwn list t cntrl what happens t target bjects if they are deleted: N (default) If an bject previusly synchrnized is deleted n the target, it will be recreated. Yes If an bject previusly synchrnized is deleted n the target, it will nt be recreated. 32. Click the AD Target Optins tab. SMART ACTIVE DIRECTORY MIGRATOR 9.2 USER GUIDE 17

18 33. Click the Users sub-tab. 34. Select an ptin frm the Create Mail Enabled Users as drp-dwn list: Fr Inter-Frest: As Is (default) Mail-Enabled Users in the surce will be Mail-Enabled Users in the target Mailbx-Enabled Users in the surce will becme Mail-Enabled Users in the target The Active Directry User Accunt Cntrl prperty fr enabled r disabled will be cpied as is. In ther wrds, user accunts that are enabled in the surce, will be enabled in the target. Mail-Enabled Cntacts in the surce will be Mail-Enabled Cntacts in the target Mail-Enabled, AD Enabled The Active Directry User Accunt Cntrl prperty fr enabled r disabled will always be set t Enabled. In ther wrds, user accunts that are disabled in the surce, will be enabled in the target Mail-Enabled Users in the surce will be Mail-Enabled Users in the target Mailbx-Enabled Users in the surce will becme Mail-Enabled Users in the target Mail-Enabled Cntacts in the surce will be Mail-Enabled Cntacts in the target Mail-Enabled, AD Disabled The Active Directry User Accunt Cntrl prperty fr enabled r disabled will always be set t Disabled. In ther wrds, user accunts that are enabled in the surce, will be disabled in the target. Mail-Enabled Users in the surce will be Mail-Enabled Users in the target SMART ACTIVE DIRECTORY MIGRATOR 9.2 USER GUIDE 18

19 Cntact Fr Intra-Frest: Mailbx-Enabled Users in the surce will becme Mail-Enabled Users in the target Mail-Enabled Cntacts in the surce will be Mail-Enabled Cntacts in the target This ptin IS NOT RECOMMENDED fr Active Directry Migratr prjects as user accunts will NOT be created in the target Cntacts, Mailbx-Enabled Users, Mail-Enabled Users will be created as Mail Enabled Cntacts in the target This ptin des nt have lgn capabilities, but can be used fr maintaining mail flw fr existing users, cntacts and distributin lists Micrsft Exchange cannt have duplicate bjects in the same rganizatin. As a result, all mail-enabled bjects will have Micrsft Exchange prperties remved, effectively creating nn-mail enabled bjects regardless f the surce bject type. As Is (default) Mail-Enabled Users in the surce will be nn-mail enabled users in the target Mailbx-Enabled Users in the surce will becme nn-mail enabled users in the target The Active Directry User Accunt Cntrl prperty fr enabled r disabled will be cpied as is. In ther wrds, user accunts that are enabled in the surce, will be enabled in the target Mail-Enabled Cntacts in the surce will be Nn-Mail Enabled Cntacts in the target Mail-Disabled, AD Enabled The Active Directry User Accunt Cntrl prperty fr enabled r disabled will always be set t Enabled. In ther wrds, user accunts that are disabled in the surce, will be enabled in the target Mail-Enabled Users in the surce will be Nn-Mail Enabled Users in the target Mailbx-Enabled Users in the surce will becme Nn-Mail Enabled Users in the target Mail-Enabled Cntacts in the surce will be Nn-Mail Enabled Cntacts in the target Mail-Disabled, AD Disabled The Active Directry User Accunt Cntrl prperty fr enabled r disabled will always be set t Disabled. In ther wrds, user accunts that are enabled in the surce, will be disabled in the target. Mail-Enabled Users in the surce will be Nn-Mail Enabled User in the target Mailbx-Enabled Users in the surce will becme Nn-Mail Enabled Users in the target Mail Enabled Cntacts in the surce will be Nn-Mail Enabled Cntacts in the target SMART ACTIVE DIRECTORY MIGRATOR 9.2 USER GUIDE 19

20 Cntact This ptin IS NOT RECOMMENDED fr Active Directry Migratr prjects as user accunts will NOT be created in the target. Cntacts, Mailbx-Enabled Users, Mail-Enabled Users will be created as Nn-Mail Enabled Cntacts in the target. This ptin des nt have lgn capabilities, but can be used fr maintaining mail flw fr existing users, cntacts and distributin lists. The Mail-Enabled, AD Enabled ptin creates Active Directry users with lgn capabilities in the target dmain and all prperties frm the surce s bject, including mail addresses. The Mail-Enabled, AD Enabled ptin can verride the prperties fund in the Surce AD envirnment. Fr example, a Disabled Mail-Enabled User fund in the surce will be enabled in the target if the Mail- Enabled, AD Enabled ptin is selected. Cnversely, an enabled user fund in the surce will be disabled in the target if the Mail-Enabled, AD Disabled ptin is selected. Directry Sync will nt create Mailbx-Enabled Users in the target directry. Due t a samaccuntname size limit f 20 characters in Active Directry, user bjects with calculated samaccuntname names greater than 20 characters in length are truncated t 20 characters. Truncated samaccuntnames will be appended with a randm number frm 1 t 9999 t ensure uniqueness. This des nt apply t grup bjects. 36. Select an ptin frm the Create Nn-Mail Enabled Users as drp-dwn list: As Is (default) The Active Directry User Accunt Cntrl prperty fr enabled r disabled will be cpied as is. Enabled The Active Directry User Accunt Cntrl prperty fr enabled r disabled will always be set t Enabled fr Nn-Mailed Enabled Cntacts and Users. Nn-Mailed Enabled cntacts are always cpied as is. Disabled The Active Directry User Accunt Cntrl prperty fr enabled r disabled will always be set t Disabled fr Nn-Mailed Enabled Users. Nn-Mailed Enabled cntacts are always cpied as is. 37. Select an ptin fr handling user accunt cllisins when tw users f the same name are fund frm the Users Cllisins drp-dwn list: Update (default) If a user with the same name is fund in the target dmain, the users will be updated in the target AD. User cllisins are determined based n the ptins selected n the Matching tab f the prfile. Skip The user will nt be synchrnized int the target AD and a warning entry will be entered int the lg entry stating that the surce user will nt be synchrnized t the target directry. A user that was previusly synchrnized t the target will fail t sync if a manual /repushpull /resync is run. This ccurs because a target bject with a matching samaccuntname will already exist. If this is nt the desired behavir, befre running the /repushpull and /resync cmmands, administratrs shuld clear the target directry f any previusly created bjects. SMART ACTIVE DIRECTORY MIGRATOR 9.2 USER GUIDE 20

21 Rename - This allws yu t define a prefix r suffix t be added t the samaccuntname f the user when it is written in the target directry. This ptin creates a new user using the existing name and the prefix r suffix t bypass the user cllisin when selected. Prefix is selected by default. T define a specific value fr the prefix r suffix, select the Specific Value ptin and enter the value. T use a value frm an internal field, select the Internal Field ptin and select a field frm the drp-dwn list. If selecting an internal field, a Blean (True/False) field r an empty field shuld nt be selected. User accunts where the samaccuntname exceeds 20 characters will nt be created in the Target and an errr will be lgged. 37. Select an ptin frm the D nt verwrite target Prxy Addresses drp-dwn list: Yes Prxy Addresses will nly be updated during initial sync if the target bject has n prxy addresses. Prxy addresses will nt be updated n subsequent syncs. N (default) Prxy Addresses n the target are verwritten. 38. Select an ptin frm the Sync Objects drp-dwn list: One-Time bjects are synced nce after being marked as "Ready t Sync" in the SMART AD Migratr cnsle. Additinal syncs are nt perfrmed if there are changes in the surce. Grups are nt cntinuusly synced. Hwever, grup membership is cntinuusly updated. Cntinuus (default) bjects are cntinually synced between the surce and target after being marked as "Ready t Sync" in the SMART AD Migratr cnsle. 39. Select an ptin frm the Synchrnize SID Histry drp-dwn list: Yes SID histry is synchrnized. This ptin is nt available fr Intra-Frest prfiles. Review the Requirements fr mre infrmatin n Synchrnizing SID Histry Prerequisites. N (default) SID histry is nt migrated. Synchrnizing SID Histry is recmmended. SMART ACTIVE DIRECTORY MIGRATOR 9.2 USER GUIDE 21

22 40. Click the Grups sub-tab. 41. Select an ptin frm the Create Dmain Lcal Grups as drp-dwn list: Dmain Lcal (default) Dmain Lcal Grups in the surce will be Dmain Lcal Grups in the target. Universal Dmain Lcal Grups in the surce will be Universal Grups in the target. D Nt Create Dmain Lcal Grups in the surce will nt be created in the target. 42. Select an ptin frm the Create Glbal Grups as drp-dwn list: Glbal (default) Glbal Grups in the surce will be Glbal Grups in the target. Universal Glbal Grups in the surce will be Universal Grups in the target. D Nt Create Glbal Grups in the surce will nt be created in the target. 43. Select an ptin frm the Create Universal Grups as drp-dwn list: Universal (default) Universal Grups in the surce will be Universal Grups in the target. Dmain Lcal Universal Grups in the surce will be Dmain Lcal Grups in the target. D Nt Create Universal Grups in the surce will nt be created in the target. 44. Select an ptin fr handling grup cllisins when tw grups f the same name are fund frm the Grup Cllisins drp-dwn list: Merge If a grup with the same name is fund in the target dmain, the members f the surce grup will be added t the target grup. Grup cllisins are determined based n Name first, then based n the ptins selected n the Matching tab f the prfile. Skip The grup will nt be synchrnized int the target AD and a warning entry will be entered int the lg entry stating that the surce grup will nt be synchrnized t the target grup. SMART ACTIVE DIRECTORY MIGRATOR 9.2 USER GUIDE 22

23 A grup that was previusly synchrnized t the target will fail t sync if a manual /repushpull /resync is run. This ccurs because a target bject with a matching samaccuntname will already exist. If this is nt the desired behavir, befre running the /repushpull and /resync cmmands, administratrs shuld clear the target directry f any previusly created bjects. Rename - This allws yu t define a prefix r suffix t be added t the name f the grup when it is written in the target directry. This ptin creates a new grup using the existing name and the prefix r suffix t bypass the grup cllisin when selected. Prefix is selected by default. T define a specific value fr the prefix r suffix, select the Specific Value ptin and enter the value. T use a value frm an internal field, select the Internal Field ptin and select a field frm the drp-dwn list. If selecting an internal field, a Blean (True/False) field r an empty field shuld nt be selected. N ptin is selected by default fr the Grup Cllisins field and an errr message will appear if attempting t save the prfile withut selecting an ptin. Directry Sync will attempt t add a grup member t the target if it can find the member in the surce. If the member in the surce is in a different Dmain than the grup, the member will nly be added t the grup in the target if it already exists in the target. If Directry Sync cannt find the member in the surce, the member will nt be added t the grup in the target. The Sync Reprt will explain why a member culd r culd nt be synchrnized. 45. Click the Devices sub-tab. SMART ACTIVE DIRECTORY MIGRATOR 9.2 USER GUIDE 23

24 A separate Synchrnizatin Prfile must be used when synchrnizing device bjects, and the Autmatically Mark Objects as Ready t Sync ptin n the AD Surce tab shuld be left as the default N, s the device bjects are nt inadvertently created in the target. 46. Select an ptin frm the Create Devices as drp-dwn list: As Is - (default) Enabled devices in the surce will be enabled devices in the target. Disabled devices in the surce will be disabled devices in the target. Enabled - Enabled and disabled devices in the surce will be enabled devices in the target. Disabled - Enabled and disabled devices in the surce will be disabled devices in the target. 47. Select an ptin fr handling user accunt cllisins when tw devices f the same name are fund frm the Device Cllisins drp-dwn list: Update (default) If a device with the same name is fund in the target AD, the device will be updated in the target AD. Skip If a device with the same name is fund in the target AD, the device will nt be added t the target AD. Rename This allws yu t define a prefix r suffix t be added t the name f the device when it is written in the target directry. This ptin creates a new device using the existing name and the prefix r suffix t bypass the device cllisin when selected. Prefix is selected by default. T define a specific value fr the prefix r suffix, select the Specific Value ptin and enter the value. T use a value frm an internal field, select the Internal Field ptin and select a field frm the drp-dwn list. If selecting an internal field, a Blean (True/False) field r an empty field shuld nt be selected. Devices where the samaccuntname exceeds 20 characters will nt be created in the Target and an errr will be lgged. Child bjects f an AD cmputer bject will be migrated, specifically cnnectinpint Object class items, during synchrnizatin with the target. This is a ne-time migratin f these item bjects. SMART ACTIVE DIRECTORY MIGRATOR 9.2 USER GUIDE 24

25 48. Click the Exchange Target Optins tab. 49. Select an ptin frm the GAL Visibility drp-dwn list: Visible (default) Users and grups are visible in the GAL. Hidden Users and grups are hidden in the GAL. As Is Users and grups that are hidden in the GAL in the surce are hidden in the GAL in the target. Users and grups that are visible in the GAL in the surce are visible in the GAL in the target. When synchrnizing bjects int Exchange 2003 (nly), the ptin t hide frm the GAL will nt functin if the Recipient Update Service (RUS) is enabled. If synchrnizing t an Active Directry that des nt have Exchange in the envirnment, select the Hidden ptin t avid Active Directry cnstraint errrs. This ptin des nt apply t Intra-Frest prfiles. If yu select Yes fr the Only Update Mailbx Enabled Objects ptin, nly mailbx-enabled bjects in the target directry will be updated with values frm the surce bject based n the mapping table settings. If this is set t N (default), mailbx-enabled bjects in the target directry will be skipped and nted in the sync reprt. If yu intend t update bth, yu must use tw separate prfiles. CAUTION: This is nt a cmmnly ccurring preference as the authritative bject is mst ften where the mailbx is lcated. 50. The Add x500 Prxy t Surce ptin allws yu t add the LegacyExchangeDN f any mail enabled bject in the target as an additinal X500 prxy address t the surce mailbxes. If Yes is selected, an x500 prxy address is added t all crrespnding bjects in the AD Surce frest. If selecting Yes, yu must check the statement f understanding that appears belw the ptin. N is selected by default. SMART ACTIVE DIRECTORY MIGRATOR 9.2 USER GUIDE 25

26 This ptin must be set t N fr Intra-Frest prfiles. 51. The Resurce Frest ptin allws yu t define the AD Target as a Resurce Frest. This is required if yu plan t later migrate mailbxes t yur Target frest. If Yes is selected, the Master Accunt SID will be set n the AD Target bjects. N is selected by default. This ptin must be set t N fr Intra-Frest prfiles. 52. The Allw Enable/Disable f Mailbx Enabled Surce Objects ptin allws yu t define if enabling r disabling Mailbx Enabled Surce bjects is allwed. If Yes is selected, the enabling r disabling f Mailbx Enabled Surce bjects is allwed. N is selected by default. This ptin shuld be set t Yes if the ability t change the User Accunt Cntrl (UAC) n the Surce accunt is desired. If this is nt changed, the Disable/Enable Surce Actins in SMART AD Migratr will nt wrk (fr the Surce accunt). 53. Select Address Plicy ptins fr Users, Cntacts, and Grups: Unselected (default) Directry Sync will nt enable the target bject attribute t Autmatically update addresses based n address plicy in Exchange. Selected Directry Sync will enable the target bject attribute t Autmatically update addresses based n address plicy in Exchange. Directry Sync will nly apply the attribute t Autmatically update addresses based n address plicy t the target bject. It cannt apply the address plicy. This ptin des nt apply t Intra-Frest prfiles. 55. If selected the Address Plicy ptin fr User, Cntacts, r Grups, a drp-dwn list appears with the fllwing ptins: Enable plicy fr bjects created by DirSync Enable plicy fr bjects updated by DirSync Enable plicy fr bjects created r updated by DirSync Disable plicy fr bjects created by DirSync Disable plicy fr bjects updated by DirSync Disable plicy fr bjects created r updated by DirSync 56. Click the Target DCs tab t define the list f target Dmain Cntrllers (DC s) t use when Directry Sync is searching fr matched bjects. SMART ACTIVE DIRECTORY MIGRATOR 9.2 USER GUIDE 26

27 57. Click Add DC(s) t pen the Active Directry DC Selectin windw. Click Refresh DCs t find all available Dmain Cntrllers. Available ptins include Ping Servers t test the availability f the selected Dmain Cntrllers and Test Cnnectins t test the cnnectin t the LDAP server. Select ne r mre Dmain Cntrller (use Ctrl+Click t select mre than ne) and click OK t add the Dmain Cntrllers t the list f Target DCs. SMART ACTIVE DIRECTORY MIGRATOR 9.2 USER GUIDE 27

28 If yu selected Dmain level matching in the Target tab, nly select Dmain Cntrllers fr the target Dmain. N ther Dmains will be searched. If yu have selected Frest level matching in the Target tab, yu must add at least ne Dmain Cntrller fr each Dmain that shuld be searched fr matched bjects. If yu d nt select at least ne Dmain Cntrller fr a Dmain, that Dmain will nt be searched during synchrnizatin. Select mre than ne Dmain Cntrller in a Dmain fr failver purpses. Additinally, defined Dmain Cntrllers are nly searched fr matches if the previus Dmain Cntrller is unavailable. 58. The Active Directry DC Selectin windw clses and the selected Dmain Cntrllers appear in the Target DC s list. The rder the dmain cntrllers are used can be selected by entering a number value in the Pririty clumn (lwest number = first). Available ptins include Ping Servers t test the availability f the selected Dmain Cntrllers and Test Cnnectins t test the cnnectin t the LDAP server. Dmain Cntrllers with n pririty set will be used after thse with a pririty. If n pririty is set fr the servers in a Dmain, they will be used in the rder listed in the table. A Dmain Cntrller that is the Glbal Catalg Server selected n the AD Target tab is given tp pririty regardless f the value in the Pririty field. N tw DC s in a Dmain can have the same pririty. 59. Click the Matching tab. SMART ACTIVE DIRECTORY MIGRATOR 9.2 USER GUIDE 28

29 AD attributes used fr matching shuld be indexed. Fllw the prcedure at t index AD attributes. 60. Select an ptin frm the Matching Level drp-dwn list: Frest (default) Matching is dne against the target Frest Dmain Matching is dne against the target Dmain This ptin is set t Dmain fr Intra-Frest prfiles. 61. Select an ptin frm the Matching Actin drp-dwn list: Create r Update (default) Creates bjects that d nt have matching bjects in the Target and updates bjects that have matching bjects in the Target. Create nly Creates bjects that d nt have matching bjects in the Target. Objects that have matching bjects in the Target are NOT updated, unless the bject was created by Directry Sync. This means that even during an initial sync r a sync after a reset, bjects previusly created by Directry Sync will be updated. Update nly Updates bjects that have matching bjects in the Target. Objects that d nt have matching bjects in the Target are NOT created. Match nly, N Update Matching bjects are updated in SQL, but n updates are dne in the Target and n new bjects are created in the Target. 62. Select the Match bject types ptin t enable bject type matching. Object types are Users, Cntacts, Grups, and Devices. This ptin is enabled (checked) by default. 63. The default surce t target attribute matching pairs are displayed. This defines what attributes Directry Sync will use t match bjects in the Surce t bjects in the Target, as well as the rder in which they will be used. The belw table displays the default matching attribute pairs: Surce Target samaccuntname mail cn samaccuntname mail cn T custmize the matching, select attributes frm the drp-dwn lists under Surce and/r Target r type in the names f attributes in the fields. The matching pairs are either/r statements (nt and statements) with the first match attempted n the tp rw pair (Default: samaccuntname -> samaccuntname) and then prceeding in descending rder t the next rw pair and s n. At least ne matching pair is required fr the prfile t be saved. SMART ACTIVE DIRECTORY MIGRATOR 9.2 USER GUIDE 29

30 64. Select an ptin frm the Re-Link drp-dwn list: Enabled (default) SMART Directry Sync will attempt t re-link bjects in the target by first lking fr an bject that has the admindisplayname stamped with the surce bject's unique identifier. If an bject is fund, then thse tw bjects are linked and n ther attempts at matching are perfrmed. If an bject is nt fund, then the prcess attempts t match t an bject by searching based n the matching criteria. If a matching bject is nt fund, then a new bject is created. Disabled SMART Directry Sync will nt attempt t re-link bjects in the target and will always match based n the matching criteria. Whenever SMART Directry Sync creates a new bject in the target r matches t an existing bject in the target, it stamps the admindisplayname attribute (fr Active Directry) r the $BTSurceDirectryID prperty (fr Dmin) f the target bject with the surce bject's unique identifier (bjectguid fr AD bjects and UNID fr Dmin bjects). This effectively links these tw bjects tgether. This link is als maintained between the tw bjects in the SQL database and future updates are based n this SQL link. Hwever, when a prfile is reset, these SQL recrds are deleted. When Re-Link is enabled, perfrmance can be imprved by indexing the admindisplayname attribute. Fllw the prcedure at t index AD attributes. 65. If the Re-Link ptin is enabled, select an ptin frm the Restre Ready t Sync drp-dwn list: Yes (default) The re-link prcess will set all re-linked bjects t Ready T Sync. N The re-link prcess will nt reset the Ready T Sync setting n re-linked bjects. This wuld allw yu t prevent changes t bjects until they are prepared. 66. Click the Mapping tab t view the default mapping r t edit hw attributes shuld be translated frm the surce t the target Active Directry. Review the table and make the apprpriate changes fr yur envirnment. Duble-click a cell in the mapping table select a different field r type frm a drp-dwn list. Click abve the first rw t create a new entry. Duble-click n a cell in the Cmments clumn t enter a cmment. Appendix A cntains the default mapping. T revert t the default mappings, use CTRL+A t select all mappings, delete the mappings (Delete key), and click Yes when prmpted t remve all entries. The default mapping fr attributes will be applied unless deleted. When creating custm mapping fr an attribute, the default mapping fr the attribute shuld be deleted. There are tw Target Type clumns in the table. This allws yu t restrict the type f bject in the target directry that can be updated. If yu set bth types t the same value, then this mapping will nly apply t that bject type. If yu set ne t persn and the ther t grup, the mapping will apply t user and grup bjects nly. If bth are set t any, the mapping is unrestricted and will apply t all bject types. The msexch mappings are nt valid fr Intra-Frest prfiles. SMART ACTIVE DIRECTORY MIGRATOR 9.2 USER GUIDE 30

31 Values that can be used fr either mapping r matching can be entered manually r imprted frm a CSV file in the Mapped Values dialg bx. Mapped values fr device bjects is nt currently supprted. This feature will be supprted in a future release. 1. Click the Mapped Values buttn. The Mapped Values windw appears. 2. Values can be entered manually by clicking n the first rw. 3. Values can als be imprted frm a CSV file by clicking the Imprt buttn. 4. Select a CSV file that has Surce fields and values, Target fields and values, and the applicatin f the mapping r matching. The final value f each rw can be Match, Map, r MatchMap. MatchMap applies bth matching and mapping. SMART ACTIVE DIRECTORY MIGRATOR 9.2 USER GUIDE 31

32 67. Click Save t verify all required fields are ppulated and save the prfile. Yu can save an incmplete prfile as lng as it is suspended. 68. Click Overrides t pen the table f mapping verrides. These represent default system mappings specifically fr the internal SQL fields, and are used t transpse values during creatin and synchrnizatin. Overrides are custmizable and apply t all prfiles. See Appendix B fr mre infrmatin n editing Overrides. Overrides fr device bjects is nt currently supprted. This feature will be supprted in a future release. 69. Create additinal synchrnizatin prfiles as needed. T cpy an existing prfile, right-click n a prfile in the table and select Cpy. All prfile settings will be cpied int a new prfile that can then be edited as necessary. New prfiles created by cpy are suspended by default. Select the prfile in the table and click Activate Prfile. 3.3 Active Directry Migratr Sync Reprt Overview The Sync Reprt has tw primary functins. The first is as an analytical tl used prir t synchrnizing any bjects int a target directry, and the secnd is as a lgging feature t view the details f each synchrnizatin. Prir t synchrnizing any bject int the target, the surce directry(ies) must be analyzed t identify any bjects that culd be prblematic. This is a critical step t a successful sync and shuld nt be verlked. The Sync Reprt reads the surce directry(ies) and writes the data int SQL. This is the same actin taken if yu were t initiate a Push cmmand. The surce data is analyzed t determine the result if yu were t Pull the data int the target directry. The Sync reprt shuld be run prir t the first sync, as well as prir t running a sync after yu have made a change t the prfile, t cnfirm the intended results. SMART ACTIVE DIRECTORY MIGRATOR 9.2 USER GUIDE 32

33 Cmmn issues that must be crrected prir t synchrnizing Active Directries. SMTP Addresses Unique Match Values Duplicate SMTP Addresses - These bjects will be skipped with a warning that the SMTP address is already in SQL. Any bject yu wish t sync must have a valid and unique SMTP Address. SMART Directry Sync allws yu t define up t 4 field/attribute pairs t match bjects in the surce t bjects in the target. If the surce value matches t mre the ne target bject value, SMART Directry Sync will skip the bject. This must be crrected if yu intend fr this bject t synchrnize t the target directry. The Sync Reprt allws yu t see the matched bjects between the surce and target. These shuld be reviewed t ensure that yur match criteria are valid fr yur envirnment. Running a Sync Reprt T run a Sync Reprt: 1. Once yu have created a prfile, Click the Sync Reprt buttn. This pens the Sync Reprt windw. The example in this sectin is a Dmin t Active Directry prfile. 2. Click Run Reprt and Yes t cnfirm. Click the Refresh buttn t ppulate the UI with the mst recent data. A sync reprt perfrms a Push int SQL, s it is imprtant that yu reset the prfile prir t running a sync if yu have made any changes t the surce data r the prfile settings. If yu d nt clear the prfile, the data that is in SQL frm the Sync Reprt will be pulled t the target directry. SMART ACTIVE DIRECTORY MIGRATOR 9.2 USER GUIDE 33

34 Objects tab This cntains all f the bjects in the surce and the actin that wuld have been taken had the prfile been synched t the target. All f the clumns can be srted, filtered r rerdered (drag and drp). Review any bjects that were skipped (in the Operatins clumn, as well as any warnings in the Status clumn. Yu can duble click n any entry t pen the details fr that bject. The Details windws displays all f the details fr the bject, including the attributes and values that wuld be written t Active Directry. The Internal Fields tab displays the values that are written t SQL. Once crrected, yu can run anther sync reprt t validate the changes. Members tab The Members tab displays details fr grup synchrnizatin. Here yu can see each member f all f the grups that wuld be synched t Active Directry. Yu can filter the Status clumn fr warnings t easily view any issues that shuld be reslved. SMART ACTIVE DIRECTORY MIGRATOR 9.2 USER GUIDE 34

35 Object Summary tab The Object Summary tab display a summary f each bject type, the peratin perfrmed, the status and the bject cunt. Members Summary tab The Members Summary tab displays a summary f grup membership synchrnizatin. It displays the number f members added t grups, number f skipped members and the ttal number f errrs r warnings. SMART ACTIVE DIRECTORY MIGRATOR 9.2 USER GUIDE 35

36 Prfile tab The Prfile tab lists all f the settings fr the prfile fr which the sync was run. This can be easily exprted fr trubleshting purpses. Surce DCs tab The Surce DCs tab displays the Dmain Cntrllers listed in the Surce AD tab f the prfile. Target DCs tab The Target DCs tab will display all f the Dmain Cntrllers cnfigured in the Target DC's tab. It als shws the pririty in which they will be used. The default will always be used unless it is unreachable. SMART ACTIVE DIRECTORY MIGRATOR 9.2 USER GUIDE 36

37 Sectin 4. Using the SMART Active Directry Migratr Cnsle 4.1 Launching the Active Directry Migratr Cnsle T launch the Active Directry Migratr cnsle: 1. Duble-click the SMART AD Migratr Cnsle desktp shrtcut. OR Select SMART AD Migratr Cnsle in the Start menu. 2. The SMART Active Directry Migratr screen appears briefly and the applicatin pens. The SMART AD Migratr Cnsle will nt launch until a license fr AD Migratin/Synchrnizatin is applied in the SMART Directry Sync Cnsle. 4.2 Refreshing Data Use the Refresh buttn t refresh the data currently displayed in the table. The refreshed data will display all previus changes t the database and the currently available right click-ptins. All selected filter ptins will nt be affected by refreshing. T refresh the data displayed in the table: 1. Click the Refresh buttn. 4.3 Creating Mapping Files Use the Create Mapping Files buttn t generate the User Mapping File (Map.usr) and Grup Mapping File (Map.gg). These files are autmatically created during the ReACL prcess s the nly time they need t be created manually is when re-permissining SQL databases. This prcess is therwise nt required. SMART ACTIVE DIRECTORY MIGRATOR 9.2 USER GUIDE 37

38 T create the mapping files: 1. Click the Create Mapping Files buttn. 2. The Mapping Files windw appears and displays the lcatin f the created Map.usr and Map.gg files. Click OK. Each time the Create Mapping Files prcess is run, the Map.usr and Map.gg files are verwritten. If the Active Directry envirnment is nn-english, the values in the samaccuntname clumn f the BT_SystemGrup table in the SQL database will need t be changed after SMART Directry Sync is installed t have the apprpriate nn-english values. 4.4 Migratin Grups Objects in the table can be gruped int Migratin Grups fr migratin prcess management. Migratin Grups allw yu t filter and sync smaller grups f bjects. An item can be part f a single Migratin Grup nly. T set Migratin Grup fr bjects: 1. Click n table rws t select ne r mre bjects in the list. (Use Ctrl-Click t select mre than ne rw.) 2. Right-Click t view the ptins menu and select Set Migratin Grup. 3. Select a migratin grup frm the drp-dwn list r click New t create a new Migratin Grup fr the selected bjects. T remve a previusly select migratin grup, select <Nne> frm the drp-dwn list. 4. If creating a new Migratin Grup, enter a Migratin Grup Name. 5. Click Save. The Migratin Grup clumn is ppulated fr the selected bjects. SMART ACTIVE DIRECTORY MIGRATOR 9.2 USER GUIDE 38

39 Imprt Migratin Grups The imprt Migratin Grups feature allws yu t imprt a CSV file with bjects and their matching migratin grups Duplicate bjects in the CSV will nt be stamped with a migratin grup. Objects names can be the samaccuntname (fr Users, Rms, Grups, and Devices) r the Distinguished Name (fr Users, Rms, Cntacts, Grups, and Devices). T imprt Migratin Grup values: 1. Click the Imprt Migratin Grups buttn. 2. Select a CSV file cntaining the Migratin Grup names and click Open. The CSV file shuld have tw clumns. The first clumn is Object Name and the secnd clumn is Migratin Grup Name. An example file is belw: jsmith,windws 7 Grup mjnes,windws 7 Grup jtaylr,windws 8 Grup An example file entry fr Cntacts is belw: CN=Jhn Smith,DC=dmain,DC=dm,Windws 7 Cntacts 3. Click OK n the cnfirmatin windw. Click Exprt Results t exprt a file cntaining the matching results. 4.5 Using Blacklists Objects can be added t the blacklist. Blacklisted bjects will nt be displayed unless the "Shw Blacklisted" ptin is selected. Blacklisted bjects cannt have actins perfrmed n them, except Set Migratin Grup and Mark as Migrated. T add bjects t the blacklist: 1. Click n table rws t select ne r mre bjects in the list. (Use Ctrl-Click t select mre than ne rw.) 2. Right-Click t view the ptins menu and select Add t Blacklist. The selected bjects are remved frm the displayed list. 3. Select the Shw Blacklisted ptin t view the blacklisted bjects. T remve bjects frm the blacklist: 1. Select the Shw Blacklisted ptin t view the blacklisted bjects. 2. Click n table rws t select ne r mre bjects in the list. (Use Ctrl-Click t select mre than ne rw.) 3. Right-Click t view the ptins menu and select Remve frm Blacklist. The selected bjects are remved frm the displayed list. 4. Deselect the Shw Blacklisted ptin t view the nn-blacklisted bjects. SMART ACTIVE DIRECTORY MIGRATOR 9.2 USER GUIDE 39

40 4.6 Gruping, Srting, and Filtering Tables The data table can be gruped by clumn headers, srted by clumn r filtered. Gruping T grup the data table by clumn headers: 1. Click and drag a clumn header t the area abve the clumn headers t grup by that clumn header. 2. Click and drag additinal clumn headers t create child grups. 3. T remve a gruping, rllver and click the "X" in the gruped by clumn heading. Srting T srt the data table by clumn headers: 1. Click a clumn header t srt the table by the clumn in ascending rder. 2. Click the clumn header again t srt the table by the clumn in descending rder. 3. Click the clumn header a third time t remve the clumn srt and return t the default srt. Filtering T filter the data table with the clumn filters: 1. Click the filter icn in the clumn header. The filter ptins windw appears. SMART ACTIVE DIRECTORY MIGRATOR 9.2 USER GUIDE 40

41 2. Select filter ptins and then click Filter. The table is updated as yu select the ptins. The filter icn is darkened when applied. 3. T remve the clumn filter, click the filter icn and click Clear Filter. 4. T clear all clumn filters, click the Clear All Clumn Filters buttn r right-click n the header rw and select Clear All Clumn Filters. T filter the data table by DirSync Prfile: 1. Select a prfile frm the DirSync Prfiles drp-dwn list. The table is updated t display nly bjects assciated with the selected DirSync prfile. By default, bjects frm All Prfiles are displayed. T filter the data table by Migratin Grup: 1. Select a migratin grup frm the Migratin Grup drp-dwn list. The table is updated t display nly bjects in the selected migratin grup. By default, bjects frm All batches are displayed. 4.7 Custmizing Clumns The default data tables d nt display every available clumn. Hwever, the displayed clumns can be custmized. Als the clumn rder can als be changed. SMART ACTIVE DIRECTORY MIGRATOR 9.2 USER GUIDE 41

42 T chse displayed clumns: 1. Click the Chse Clumns buttn in the table header r right click n the header rw and select Chse Clumns. The Chse Clumns windw appears. 2. Select the clumns t display in the table. 3. Click OK. The table is updated with the selected clumns. T change the rder f clumns: 1. Click and drag the clumn header and drp it in a new lcatin. The table is updated. 4.8 Selecting Multiple Table Rws There are several ways t select multiple table rws. T select all table rws: 1. Click the Select All buttn in the table header r use Ctrl+A. The first 1000 rws are selected by default. By default, the first 1000 rws are selected. This setting can be changed in SQL in the ADM_Setting table field SelectAllLimit. 2. Perfrm a right-click actin t the selected rws. If attempting t select mre than 1000 rws at time, perfrm the actin n the first 1000, filter the list based n the actin, and then select all again. SMART ACTIVE DIRECTORY MIGRATOR 9.2 USER GUIDE 42

43 T select mre than ne table rw: Use Ctrl+Click t select mre than ne rw. Use Shift+Up/Dwn Arrw t select additinal rws befre r after the currently selected rw. Use Shift+Pg Up/Pg Dn t select all rws befre r after the currently selected rw. The fllwing key shrtcuts d nt wrk: Shift+Ctrl+End, Shift+Ctrl+Hme, Shift+Ctrl+Page Dwn, Shift+Ctrl+Page Up, Shift+Left Click, Click+Shift+Left Click. 4.9 Triggering a Sync Use the Sync buttn t sync the data currently displayed in the table. Select a different DirSync Prfile befre starting a sync t synchrnize just that cnfigured Surce t Target. If All Prfiles is selected, all f the DirSync AD Migratr prfiles will be synchrnized. If the DirSync AD Migratr prfile has been set t synchrnize n a schedule, manually starting a sync is nt necessary. Only bjects marked as "Ready t Sync" will be synced t the target. T sync the data displayed in the table: 1. Click the Sync buttn. 2. After clicking the Sync buttn the fllwing cnfirmatin fr the synchrnizatin f the selected DirSync Prfile will be displayed. 3. If All Prfiles are selected the prmpt will appear as fllws: 4. If a sync is already running the fllwing will be displayed: SMART ACTIVE DIRECTORY MIGRATOR 9.2 USER GUIDE 43

44 4.10 Exprting the Grid The view as it is currently srted and filtered can be exprted t a file. T exprt the grid: 1. Click the Exprt Grid buttn. 2. Click OK n the Exprt All? cnfirmatin windw. Select a lcatin, enter a file name, select a type and then click SMART ACTIVE DIRECTORY MIGRATOR 9.2 USER GUIDE 44

45 Sectin 5. Migrating Users The Users screen allws yu t sync users t the target as well as enable and disable users n the surce and target befre cutver ccurs. Sync Users T sync users t the target: 1. Click n table rws t select ne r mre users in the list (Use Ctrl-Click t select mre than ne rw). 2. Right-Click t view the ptins menu and select Ready t Sync. The Ready t Sync clumn fr the selected users becmes checked. The selected users are synced during the next sync cycle (scheduled in SMART Directry Sync r triggered manually with the Sync buttn in SMART AD Migratr). If the Ready t Sync clumn desn t display all f the check marks expected, click n the Refresh buttn t refresh the data in the table. 3. T prevent the users frm syncing, select the users and select Nt Ready t Sync frm the right-click menu. Enable and Disable Users T enable/disable users n the surce r target. 1. Click n table rws t select ne r mre users in the list (Use Ctrl-Click t select mre than ne rw). 2. Right-Click t view the ptins menu and select ne f the fllwing ptins: Enable n Target nly Enable n Target/Disable n Surce Enable n Surce nly Enable n Surce/Disable n Target The Surce UAC and/r Target UAC clumns f the selected users is updated. SMART ACTIVE DIRECTORY MIGRATOR 9.2 USER GUIDE 45

46 A sync must be perfrmed befre the selected Enable/Disable User ptin takes effect. The Allw Enable/Disable f Mailbx Enabled Surce Objects ptin in the AD Migratr Directry Sync Prfile must be set t Yes if the ability t change the User Accunt Cntrl (UAC) n the Surce accunt is desired. If this is ptin is set t N, the Disable/Enable Surce Actins in AD Migratr will nt wrk (fr the Surce accunt). Set as Migrated As a way t mark the User Accunts that are fully cmpleted, that require n further actin, they can be set as migrated: 1. Click n table rws t select ne r mre users in the list. 2. Right-Click t view the ptins menu and select Set as Migrated. 3. Click Save. The Migrated clumn f the selected users is checked. User Clumns The fllwing clumns appear n the Users screen by default: Migratin Grup- The Migratin Grup name. Use the Right-click Set Migratin Grup ptin t change. First Name - the first name attribute f the surce user accunt Last Name - the last name attribute f the surce user accunt samaccuntname - the samaccuntname attribute f the surce user accunt Display Name - the display name attribute f the surce user accunt Distinguished Name - the distinguished name attribute f the surce user accunt Target Distinguished Name - the distinguished name attribute f the target user accunt. This clumn is ppulated when a user is synced. Descriptin - the descriptin attribute f the surce user accunt Migrated An ptinal tag that can be manually set t track migratin prgress. Use the Right-click Set as Migrated ptin t change. SMART ACTIVE DIRECTORY MIGRATOR 9.2 USER GUIDE 46

47 Ready t Sync - This is checked if the user accunt is currently ready t sync. Use the Right-click Ready t Sync ptin r Nt Ready t Sync ptin t change. Created - This is checked if the user accunt has been created in the target Surce UAC - Indicates if the user accunt is enabled in the surce. Use the Right-click Enable/Disable User ptins t change. Target UAC - Indicates if the user accunt is enabled in the target. Use the Right-click Enable/Disable User ptins t change. Last Sync - Displays the date/time f the last sync. The fllwing additinal fields can be displayed by custmizing the clumns: ID - SQL recrd number Migratin Grup ID Blacklisted - This is checked if the user is currently n the blacklist. Use the Right-click Add t Blacklist ptin r Remve frm Blacklist ptin t change. Alias Assistant Cmpany Cuntry Cuntry Cde Cuntry Name Deleted Item Flags Delivery Cntent Length Department Department Number Divisin Emplyee ID Emplyee Number Emplyee Type Extensin 1-15 Manager Object SID SMART ACTIVE DIRECTORY MIGRATOR 9.2 USER GUIDE 47

48 Sectin 6. Migrating Rms The Rms screen allws yu t sync rms t the target. Sync Rms T sync rms and resurces t the target: 1. Click n table rws t select ne r mre rms in the list (Use Ctrl-Click t select mre than ne rw). 2. Right-Click t view the ptins menu and select Ready t Sync. The Ready t Sync clumn fr the selected rms becmes checked. The selected rms are synced during the next sync (scheduled in SMART Directry Sync r triggered manually with the Sync buttn). 3. T prevent the rms frm syncing, select the rms and select Nt Ready t Sync frm the right-click menu. Rm Clumns The fllwing clumns appear n the Rms screen by default: Migratin Grup - The Migratin Grup name. Use the Right-click Set Migratin Grup ptin t change. Rm Number - the rm number attribute f the surce rm Display Name - the display name attribute f the surce rm Distinguished Name - the distinguished name attribute f the surce rm Target Distinguished Name - the distinguished name attribute f the target rm. This clumn is ppulated when a rm is synced. Descriptin - the descriptin attribute f the surce rm Ready t Sync - This is checked if the rm is currently ready t sync. Use the Right-click Ready t Sync ptin r Nt Ready t Sync ptin t change. Created - This is checked if the rm has been created in the target. Last Sync - Displays the date/time f the last sync. SMART ACTIVE DIRECTORY MIGRATOR 9.2 USER GUIDE 48

49 The fllwing additinal fields can be displayed by custmizing the clumns: ID - SQL recrd number Migratin Grup ID Blacklisted - This is checked if the rm is currently n the blacklist. Use the Right-click Add t Blacklist ptin r Remve frm Blacklist ptin t change. Alias Assistant Cmpany Cuntry Cuntry Cde Cuntry Name Deleted Item Flags Delivery Cntent Length Department Department Number Divisin Extensin 1-15 Manager Object SID SMART ACTIVE DIRECTORY MIGRATOR 9.2 USER GUIDE 49

50 Sectin 7. Migrating Cntacts The Cntacts screen allws yu t sync cntacts t the target. Sync Cntacts T sync cntacts t the target: 1. Click n table rws t select ne r mre cntacts in the list (Use Ctrl-Click t select mre than ne rw). 2. Right-Click t view the ptins menu and select Ready t Sync. The Ready t Sync clumn fr the selected cntacts becmes checked. The selected cntacts are synced during the next sync (scheduled in SMART Directry Sync r triggered manually with the Sync buttn). 3. T prevent the cntacts frm syncing, select the cntacts and select Nt Ready t Sync frm the right-click menu. Cntact Clumns The fllwing clumns appear n the Cntacts screen by default: Migratin Grup - The Migratin Grup name. Use the Right-click Set Migratin Grup ptin t change. First Name - the first name attribute f the surce cntact Last Name - the last name attribute f the surce cntact Display Name - the display name attribute f the surce cntact Distinguished Name - the distinguished name attribute f the surce cntact Target Distinguished Name - the distinguished name attribute f the target cntact. This clumn is ppulated when a cntact is synced. Descriptin - the descriptin attribute f the surce cntact Ready t Sync - This is checked if the cntact is currently ready t sync. Use the Right-click Ready t Sync ptin r Nt Ready t Sync ptin t change. Created - This is checked if the cntact has been created in the target. Last Sync - Displays the date/time f the last sync. SMART ACTIVE DIRECTORY MIGRATOR 9.2 USER GUIDE 50

51 The fllwing additinal fields can be displayed by custmizing the clumns: ID - SQL recrd number Migratin Grup ID Blacklisted - This is checked if the cntact is currently n the blacklist. Use the Right-click Add t Blacklist ptin r Remve frm Blacklist ptin t change. Alias Assistant Cmpany Cuntry Cuntry Cde Cuntry Name Deleted Item Flags Delivery Cntent Length Department Department Number Divisin Emplyee ID Emplyee Number Emplyee Type Extensin 1-15 Manager Object SID SMART ACTIVE DIRECTORY MIGRATOR 9.2 USER GUIDE 51

52 Sectin 8. Migrating Grups The Grups screen allws yu t sync grups t the target. Hw different types f grups (Dmain Lcal, Glbal, and Universal Grup) are created n the target and hw grup cllisins are handled is defined n the AD Target Optins tab f the Active Directry Migratr synchrnizatin prfile. Sync Grups T sync grups t the target: 1. Click n table rws t select ne r mre grups in the list (Use Ctrl-Click t select mre than ne rw). 2. Right-Click t view the ptins menu and select Ready t Sync. The Ready t Sync clumn fr the selected grups becmes checked. The selected grups are synced during the next sync (scheduled in SMART Directry Sync r triggered manually with the Sync buttn). 3. T prevent the grups frm syncing, select the grups and select Nt Ready t Sync frm the right-click menu. Grup Clumns The fllwing clumns appear n the Grups screen by default: Migratin Grup - The Migratin Grup name. Use the Right-click Set Migratin Grup ptin t change. samaccuntname - the samaccuntname attribute f the surce grup accunt Display Name - the display name attribute f the surce grup accunt Grup Type - The type f grup f the surce grup accunt Distinguished Name - the distinguished name attribute f the surce grup accunt Target Distinguished Name - the distinguished name attribute f the target grup accunt. This clumn is ppulated when a grup is synced. Descriptin - the descriptin attribute f the surce grup accunt Ready t Sync - This is checked if the grup is currently ready t sync. Use the Right-click Ready t Sync ptin r Nt Ready t Sync ptin t change. SMART ACTIVE DIRECTORY MIGRATOR 9.2 USER GUIDE 52

53 Created - This is checked if the grup accunt has been created in the target. Last Sync - Displays the date/time f the last sync. The fllwing additinal fields can be displayed by custmizing the clumns: ID - SQL recrd number Migratin Grup ID Blacklisted - Checked if the grup is currently n the blacklist. Use the Right-click Add t Blacklist ptin r Remve frm Blacklist ptin t change. Alias Assistant Cmpany Cuntry Cuntry Cde Cuntry Name Deleted Item Flags Delivery Cntent Length Department Department Number Divisin Extensin 1-15 Managed By Object SID SMART ACTIVE DIRECTORY MIGRATOR 9.2 USER GUIDE 53

54 Sectin 9. Settings The Settings screen allws yu t define the settings used when the device Cutver prcess is started, create ReACL Prfiles, and add custm Menu Actins. 9.1 Migratin Optins T add migratin ptins: 1. Click the Migratin Optins tab. 2. Click the Add buttn. The Migratin Optins windw appears. SMART ACTIVE DIRECTORY MIGRATOR 9.2 USER GUIDE 54

55 3. Enter values in the fllwing fields: Optin Name - the name t identify the ptins (fr example, "10 Secnd Rebt Delay") Dmain Jin Delay - the delay (in secnds) befre jining the dmain Rebt Delay - the delay (in secnds) befre rebting If set t any value ther than zer (0), the user will receive a pp-up ntificatin infrming them that the wrkstatin will be rebted when the cutver is perfrmed. If set t zer, n ntificatin will appear. Recycle Bin - select hw t handle the Recycle Bin during cutver, either Empty r Dn't Empty Users may get an errr message that their Recycle Bin has been crrupted after migratin if the Recycle Bin is nt empty. See Trubleshting fr mre infrmatin abut this issue. Target OU - the target OU where the devices will be created. If yu leave this field blank, the devices will default t the Cmputers cntainer. 4. Check Jin t Existing Device if yu want the device t jin t the existing target cmputer during cutver. 5. Click Save. The migratin ptins are added t the list. SMART ACTIVE DIRECTORY MIGRATOR 9.2 USER GUIDE 55

56 9.2 Cutver Credentials The specified credentials must be able t jin and disjin a cmputer frm the specified dmain and well as disable a cmputer in the specified dmain. A trust between the surce and target dmain is nt required. T add cutver credentials: 1. Click Cutver Credentials tab. 2. Click the Add buttn. The Cutver Credentials windw appears. 3. Enter values in the fllwing fields: Name - the name t identify the cutver credentials (fr example, "DmA t DmB Admins") Surce Dmain FQDN - the dmain FQDN f the surce in surce.dmain.dm frmat Surce Username - the username t access the surce dmain in dmain\username r UPN (username@dmain.dm) frmat Surce Passwrd - the passwrd t access the surce dmain Target Dmain FQDN - the dmain FQDN f the target in target.dmain.dm frmat Target Username - the username t access the target dmain in dmain\username r UPN (username@dmain.dm) frmat Target Passwrd - the passwrd t access the target dmain 4. Click Save. The cutver credentials are added t the list. 9.3 Netwrk Prfiles T add netwrk prfiles: 1. Click the Netwrk Prfiles tab. SMART ACTIVE DIRECTORY MIGRATOR 9.2 USER GUIDE 56

57 2. Click the Add buttn. The Netwrk Prfiles windw appears. 3. Enter values in the fllwing fields: Prfile Name - the name t identify the netwrk prfile Obtain DNS server address autmatically? - ptins include N Change, Manually Assign, r Use DHCP If yu manually assign DNS settings, be sure that the DNS server(s) that yu include here can reslve the ADM Agent SRV recrd. Preferred DNS Server - the preferred DNS server Alternate DNS Server - the alternate DNS server Append primary and cnnectin specific DNS suffixes - ptins include N Change, Obtain frm NIC, r Manually Assign. DNS Suffixes - Enabled if Manually Assign is selected t the Append primary and cnnectin specific DNS suffixes ptin. The list f DNS suffixes. Enter each suffix and then press Enter. DNS Suffix fr this Cnnectin - the DNS suffix nce cutver is cmplete Register the cnnectin's addresses in DNS - ptins include N Change, N, r Yes Use this cnnectin's DNS suffix in DNS registratin - Enabled if Yes is selected t the Register the cnnectin's addresses in DNS ptin, select N Change, Dn't register manual DNS suffix, r Register manual DNS suffix. Preferred WINS Server - the preferred WINS server SMART ACTIVE DIRECTORY MIGRATOR 9.2 USER GUIDE 57

58 Alternate Wins Server - the alternate WINS server 4. Click Save. The netwrk prfile is added t the list. 9.4 Device ReACL Prfiles The default Device ReACL prfile is used if a different prfile is nt defined and set n the devices. The default Device ReACL prfile can be edited. T add Device ReACL prfiles: 1. Click the Device ReACL Prfiles tab. 2. Click the Add buttn. The Device ReACL Prfile windw appears. 3. In the Prfile Name field, enter a name t identify the Device ReACL Prfile. 4. Under the Basic tab: SMART ACTIVE DIRECTORY MIGRATOR 9.2 USER GUIDE 58

59 In the Blacklist Flders bx, enter flder paths that will nt be included in the ReACL prcess. Wild card characters (* and?) can be used when specifying blacklist flders. Separate the paths by pressing Enter. By default, the fllwing flders are blacklisted: \Windws \WINNT \I386 \Windws\I386 \Prgram Files \PROGRAM FILES (x86) \MSOCACHE \System Vlume Infrmatin \Recycler \$RECYCLE.BIN \CONFIG.MSI \RECOVERY \OEM \Quarantine \BOOT Select an ptin frm the Lgging Level drp-dwn list. Optins include Inf (default) and Debug. 5. Click the Advanced tab. SMART ACTIVE DIRECTORY MIGRATOR 9.2 USER GUIDE 59

60 The Advanced tab allws yu a mre granular selectin f the cmpnents t be included r excluded frm the ReACL prcess. Select the cmpnents t be included by checking the desired items. We recmmend that yu leave the Windws Services Accunts bx UNCHECKED. A change in the ACL f the services accunts f the target may have an impact n the applicatins currently running. Althugh the ReACL prcess can usually be rlled back in case f issues, there culd be a temprary disruptin in service until reslved. If yu select Raming Prfiles, users must be lgged ut f their raming prfiles during the ReACL prcess. 6. If the Lcal/Files flders bx is selected n the left, nrmally all files and flders are included in the ReACL prcess. If yu prefer t prvide a specific list, enter the list in the Only ReACL These Lcal Flders bx. Separate each entry by pressing Enter. Yu may use just a file path using backslashes, r prvide an exact drive letter. If yu prvide a drive letter, the ReACL is limited t that exact path. SMART ACTIVE DIRECTORY MIGRATOR 9.2 USER GUIDE 60

61 Nte that if yu chse t list flders here, these are the ONLY flders that will be included in the ReACL prcess. (The exceptin is if yu check the User Prfiles bx: thse Prfiles will always be included autmatically in additin t yur list.) 7. Select an ptin frm the Elevate Failure Actin drp-dwn list t chse the actin that shuld be taken if any part f the ReACL prcess encunters errrs. In rder t successfully adjust permissins, AD Migratr must create a prcess with a security tken that has been assigned additinal permissins. The tken is said t have elevated rights/permissins. If this prcess fails, it is likely that the ReACL will be largely unsuccessful in updating the perating system fr use by target user accunts. The default is Terminate ReACL, meaning the ReACL prcess fr that device is stpped as sn as an errr ccurs. This is a time-saving ptin. The ReACL prcess is reprted as Failed in the Devices View. A device cannt be Cutver if the ReACL prcess reprts as Failed. This is the recmmended setting. If yu chse Errr, the entire prcess will attempt t cmplete when an Elevate Failure errr is encuntered, but the prcess will still be reprted as Failed. This selectin may take significantly mre time than Terminate ReACL, as the entire prcess will attempt t finish befre reprting as Failed. If yu chse Warn, a warning entry will be lgged, hwever the prcess will be reprted as Successful. This chice allws experienced migratin architects t analyze the lgs and chse t Cutver anyway based n their analysis f the results. If yu chse Inf, an inf entry will be lgged, hwever the prcess will be reprted as Successful. This chice allws experienced migratin architects t analyze the lgs and chse t Cutver anyway based n their analysis f the results. We suggest chsing Warn ver Inf as this will make the entries easier t lcate in the lg. 8. Select an ptin frm the Invalid/Duplicate Target Prfile Actin drp-dwn list t chse the actin that shuld be taken when an invalid r duplicate prfile exists in the target. The default is Terminate ReACL, meaning the ReACL prcess fr that device is stpped as sn as an errr ccurs. This is a time-saving ptin. The ReACL prcess is reprted as Failed in the Devices View. A device cannt be Cutver if the ReACL prcess reprts as Failed. This is the recmmended setting. If yu chse Errr, the entire prcess will attempt t cmplete when an Elevate Failure errr is encuntered, but the prcess will still be reprted as Failed. This selectin may take significantly mre time than Terminate ReACL, as the entire prcess will attempt t finish befre reprting as Failed. If yu chse Warn, a warning entry will be lgged, hwever the prcess will be reprted as Successful. This chice allws experienced migratin architects t analyze the lgs and chse t Cutver anyway based n their analysis f the results. If yu chse Inf, an inf entry will be lgged, hwever the prcess will be reprted as Successful. This chice allws experienced migratin architects t analyze the lgs and chse t Cutver anyway based n their analysis f the results. We suggest chsing Warn ver Inf as this will make the entries easier t lcate in the lg. 9. Select an ptin frm the Add Rllback Metadata drp-dwn list. AD Migratr inserts a "breadcrumb during the ReACL prcess t allw seamless rllback f the ReACL prcess if needed. Yu can cntrl the insertin f these breadcrumbs (which are remved during the Cleanup prcess) if desired, here. SMART ACTIVE DIRECTORY MIGRATOR 9.2 USER GUIDE 61

62 The default is Always and des nt affect perfrmance. We recmmend this setting. This is the nly setting where the changes perfrmed by the ReACL prcess can be rlled back, r undne, in all scenaris. If yu chse Only If Ambiguus, metadata will nly be included when the rllback settings wuld be ambiguus. Only If Ambiguus results in the additin f fewer breadcrumbs, preserving usage fr times when it may be impssible t determine the riginal file r flder permissins. This wuld ccur, fr example, when users have accunts in multiple dmains that will be cnslidated int a single dmain. Nte that Only If Ambiguus guarantees a ReACL can be rlled back t the riginal state nly when the file system permissins remained unchanged. Mdificatin f ACLs n the file system culd create a state where a rllback cannt cmplete with 100% success. T ensure the ability fr a ReACL Rllback in all scenaris, Always shuld be selected. If yu are an experienced migratin architect, yu may chse Never t never include metadata. If this is selected, a cmplete rllback may nt be pssible. 10. Check the Simulatin Only (N Actual Changes) bx t simulate the results f the ReACL prcess withut actually making any changes t the ACL. Visit the lgs/reprts t determine any ptential issues and crrect them befre an actual ReACL prcess. Yu might use this t create a Device ReACL Prfile specifically fr testing purpses. 11. Click Save. The Device ReACL Prfile is added t the list. Click the Restre Defaults buttn t reset the prfile values back t the default settings. 9.5 NAS ReACL Prfiles The default NAS ReACL prfile is used if a different prfile is nt defined and set n the NAS devices. The default NAS ReACL prfile can be edited. T add NAS ReACL prfiles: 1. Click the NAS ReACL Prfiles tab. 2. Click the Add buttn. The NAS ReACL Prfile windw appears. SMART ACTIVE DIRECTORY MIGRATOR 9.2 USER GUIDE 62

63 3. In the Prfile Name field, enter a name t identify the NAS ReACL Prfile. 4. Under the Basic tab: In the Blacklist Flders bx, enter flder paths that will nt be included in the ReACL prcess. Wild card characters (* and?) can be used when specifying blacklist flders. Separate the paths by pressing Enter. By default, the fllwing flders are blacklisted: \Windws \WINNT \I386 \Windws\I386 \Prgram Files \PROGRAM FILES (x86) \MSOCACHE \System Vlume Infrmatin \Recycler \$RECYCLE.BIN SMART ACTIVE DIRECTORY MIGRATOR 9.2 USER GUIDE 63

64 \CONFIG.MSI \RECOVERY \OEM \Quarantine \BOOT Select an ptin frm the Lgging Level drp-dwn list. Optins include Inf (default) and Debug. 5. Click the Advanced tab. The Advanced tab allws yu a mre granular selectin f the cmpnents t be included r excluded frm the ReACL prcess. Select the cmpnents t be included by checking the desired items. 6. Enter the netwrk errrs that will trigger a retry in the Netwrk Errr Retry List field. By default errrs 53 and 64 will trigger a retry. SMART ACTIVE DIRECTORY MIGRATOR 9.2 USER GUIDE 64

65 7. Enter the number f retries t attempt in the Netwrk Errr Retry Cunt field. The default retry cunt is 10 retries. 8. Enter the number f secnds between netwrk errr retries in the Netwrk Errr Retry Interval Secnds field. The default interval is 1 secnd. 9. Select an ptin frm the Elevate Failure Actin drp-dwn list t chse the actin that shuld be taken if any part f the ReACL prcess encunters errrs. In rder t successfully adjust permissins, AD Migratr must create a prcess with a security tken that has been assigned additinal permissins. The tken is said t have elevated rights/permissins. If this prcess fails, it is likely that the ReACL will be largely unsuccessful in updating the perating system fr use by target user accunts. The default is Terminate ReACL, meaning the ReACL prcess fr that device is stpped as sn as an errr ccurs. This is a time-saving ptin. The ReACL prcess is reprted as Failed in the Devices View. A device cannt be Cutver if the ReACL prcess reprts as Failed. This is the recmmended setting. If yu chse Errr, the entire prcess will attempt t cmplete when an Elevate Failure errr is encuntered, but the prcess will still be reprted as Failed. This selectin may take significantly mre time than Terminate ReACL, as the entire prcess will attempt t finish befre reprting as Failed. If yu chse Warn, a warning entry will be lgged, hwever the prcess will be reprted as Successful. This chice allws experienced migratin architects t analyze the lgs and chse t Cutver anyway based n their analysis f the results. If yu chse Inf, an inf entry will be lgged, hwever the prcess will be reprted as Successful. This chice allws experienced migratin architects t analyze the lgs and chse t Cutver anyway based n their analysis f the results. We suggest chsing Warn ver Inf as this will make the entries easier t lcate in the lg. 10. Select an ptin frm the Add Rllback Metadata drp-dwn list. AD Migratr inserts a "breadcrumb during the ReACL prcess t allw seamless rllback f the ReACL prcess if needed. Yu can cntrl the insertin f these breadcrumbs (which are remved during the Cleanup prcess) if desired, here. The default is Always and des nt affect perfrmance. We recmmend this setting. This is the nly setting where the changes perfrmed by the ReACL prcess can be rlled back, r undne, in all scenaris. If yu chse Only If Ambiguus, metadata will nly be included when the rllback settings wuld be ambiguus. Only If Ambiguus results in the additin f fewer breadcrumbs, preserving usage fr times when it may be impssible t determine the riginal file r flder permissins. This wuld ccur, fr example, when users have accunts in multiple dmains that will be cnslidated int a single dmain. Nte that Only If Ambiguus guarantees a ReACL can be rlled back t the riginal state nly when the file system permissins remained unchanged. Mdificatin f ACLs n the file system culd create a state where a rllback cannt cmplete with 100% success. T ensure the ability fr a ReACL Rllback in all scenaris, Always shuld be selected. If yu are an experienced migratin architect, yu may chse Never t never include metadata. If this is selected, a cmplete rllback may nt be pssible. SMART ACTIVE DIRECTORY MIGRATOR 9.2 USER GUIDE 65

66 11. Check the Simulatin Only (N Actual Changes) bx t simulate the results f the ReACL prcess withut actually making any changes t the ACL. Visit the lgs/reprts t determine any ptential issues and crrect them befre an actual ReACL prcess. Yu might use this t create a Device ReACL Prfile specifically fr testing purpses. 12. Click Save. The NAS ReACL Prfile is added t the list. Click the Restre Defaults buttn t reset the prfile values back t the default settings. 9.6 Menu Actins Menu Selectins and Menu Actins New menu selectins that appear as a right-click ptin n Devices r NAS screens can be created in the Menu Actins tab. Menu selectins are a sequence f menu actins t cmplete a prcess. The Menu Selectin area will allw yu t create a new right-click jb menu fr devices r NAS shares. Existing r new Menu Actin entries shuld be dragged ver t the desired Menu Selectin item t cmplete the custm jb prcess. The Menu Actin area will allw yu t create the actin(s) that will be dwnladed and executed against devices r NAS shares. Yu can assciate a single actin r multiple actins with a Menu Selectin bject by dragging each Menu Actin item ver t the desired Menu Selectin. It is imprtant t nte that system menu selectins and actins can nly be viewed r cpied, they are nt editable. Adding r cpying a Menu Actin T add r cpy a menu actin: Abve the Menu Actin table, click Add r select an existing menu actin and click Cpy (r right-click and select Cpy). Check Shw System t view and select an existing system menu actin. SMART ACTIVE DIRECTORY MIGRATOR 9.2 USER GUIDE 66

67 Menu Actin Name (Required): Enter a name fr the menu actin. The Menu Actin Name cannt begin with "BT-" which is used t identify system menu actins. Menu Actin Type (Required): Select ne f the ptins frm the drp-dwn list. PwerShell Script: Allws yu t define a PwerShell script fr the prcess n the Cmmand and Rllback tabs. Glbal Variables can be added and used in the script. Cmmand Line: Allws yu t define a Cmmand line fr the prcess n the Cmmand and Rllback tabs. Glbal Variables can be added and used in the cmmand line. Dwnlad File: Dwnlads a file t the predefined Dwnlads flder. Descriptin: Enter a descriptin fr the menu actin. SMART ACTIVE DIRECTORY MIGRATOR 9.2 USER GUIDE 67

68 General tab: Mark r unmark the fllwing checkbxes and enter the fllwing ptins if adding r cpying a PwerShell Script r Cmmand Line: Autmatic Rllback: if checked, autmatic rllback is added t the menu actin. Requires Cutver Credentials: if checked, the script r cmmand line includes the $CutverCredentials_XXXXX parameters. Requires Netwrk Prfile: if checked, the script r cmmand line includes the $NetwrkPrfile_XXXXX parameters. Requires Migratin Optins: if checked, the script r cmmand line includes the $MigratinOptin_XXXXX parameters. Requires Glbal Variables: if checked, the script r cmmand line includes the Glbal Variables. Timeut (Secnds): Fr PwerShell Script r Cmmand Line, enter the number f secnds the prcess will be attempted befre timing ut. Retry Cunt: Fr PwerShell Script r Cmmand Line, enter the number f times the prcess will be retried. Update Interval (Secnds): Fr PwerShell Script r Cmmand Line, enter the number f secnds between prcess runs. Cmmand tab: Enter a PwerShell scrip t cmmand line. If creating a PwerShell Script, click Starter Script t ppulate the entry bx with the basic framewrk f a script. Enter r edit the cmmand line r PwerShell Script. Text is required. Rllback tab: Enter a PwerShell scrip t cmmand line. If creating a PwerShell Script, click Starter Script t ppulate the entry bx with the basic framewrk f a script. Enter r edit the cmmand line r PwerShell Script. Text is required. Dwnlad tab: Enter the fllwing ptins if adding r cpying a Dwnlad File menu actin. When a new dwnlad jb is created fr a managed wrkstatin, the specified file that is stred n the SMART AD Migratr server (c:\prgram files\binary Tree\ADMigratr\Dwnlads\) will be dwnladed t c:\prgram files\binary Tree\ADMigratr Agent\Dwnlads\ n the wrkstatin s lcal disk. File Name (required): The file name. Based n the File Lcatin fr Dwnlad Jbs used during installatin The File Name cannt cntain invalid file characters and cannt use reserved file names: map.usr, map.gg, ReACL-cnfig.jsn. Target Lcatin: The target lcatin f the dwnlad jb. The Target Lcatin cannt cntain invalid file characters and cannt use reserved file names: map.usr, map.gg, ReACL-cnfig.jsn. Retry Cunt: Fr PwerShell Script r Cmmand Line, enter the number f times the prcess will be retried. Update Interval (Secnds): Fr PwerShell Script r Cmmand Line, enter the number f secnds between prcess runs. Timeut (Secnds): Fr PwerShell Script r Cmmand Line, enter the number f secnds the prcess will be attempted befre timing ut. The lcal dwnlad flder n an AD Migratr managed machine will be secured with permissins nly fr the BUILTIN\Administratrs grup. SMART ACTIVE DIRECTORY MIGRATOR 9.2 USER GUIDE 68

69 If rights ther than BUILTIN\Administratrs are required then the administratr will need t make a change n the lcal dwnlads flder (c:\prgram files\binary Tree\ADMigratr Agent\Dwnlads\) n the Agent machine. Adding r cpying a Menu Selectin T add r cpy a menu selectin: abve the Menu Selectin table, click Add r select an existing menu selectin and click Cpy (r right-click and select Cpy). Check Shw System t view and select an existing system menu selectin. Cver adding menu actins t menu selectins (drag and drp), expand, cllapse, sequence. Menu Selectin Name (Required): Enter a name fr the menu selectin. The Menu Actin Name must be unique. Display Name: Enter the name that appears in the right-click menu n the Devices r NAS screen. Object Type: Select ne f the ptins frm the drp-dwn list. Device: The menu selectin will appear in the right-click menu n the Devices screen. NAS: The menu selectin will appear in the right-click menu n the NAS screen. SMART ACTIVE DIRECTORY MIGRATOR 9.2 USER GUIDE 69

70 Activity: Select ne f the ptins frm the drp-dwn list. The Activity determines what validatins are applicable t the jb, and which status clumns are updated when the jb runs. fr example, a custm menu selectin with the ReACL activity, it will have the same validatins as the system ReACL menu selectin. Discvery: Gathers prperties frm the device. ReACL: Updates device dmain user prfiles fr use by the matching target user after cutver. ReACLRllback: Rlls back all changes made by the ReACL prcess. ReACLShare: Updates the NAS s dmain user prfiles fr use by the matching target user after cutver. ReACLRllbackShare: Rlls back all changes made by the ReACL prcess. Cutver: Mves a device frm the surce dmain t the new target dmain. Cleanup: Remves the Surce SIDs after the Cutver prcess cmpletes. CleanupShare: Remves the Surce SIDs after the Cutver prcess cmpletes. ExplicitRllback: Rejins a device back t the surce dmain. UpladLgs: Uplads lg files frm the AD Migratr Device Agent t the AD Migratr Web Server using Micrsft BITS. Other (default): An activity nt related t any system activity. N predefined validatins are applicable. By default, new menu selectins are assigned as Other. Menu Selectin Type: This ptin is nt editable. System types are read-nly. User types can be edited. Descriptin: Enter a descriptin fr the menu actin. Adding Menu Actins t Menu Selectins Drag and drp system r custm menu actins frm the Menu Actin list t the menu selectin in the Menu Selectin list. Menu actins are listed in the rder in which they will be executed. Drag and drp menu actins t rerder them. Menu Actins can be viewed, cpied, r remved by clicking the selecting the menu actin and clicking the apprpriate buttn r by right-clicking and selecting an ptin frm the menu. Activating Menu Selectins Only menu selectins marked as Active will appear in the right-click menus. Click the Deactivate r Activate buttn t change the active status f the menu selectin. Inactive menu selectins can be displayed in the table by marking the Shw Inactive check bx. Yu may want t create a new menu selectin, activate it, and then deactivate the system menu selectin. SMART ACTIVE DIRECTORY MIGRATOR 9.2 USER GUIDE 70

71 9.7 Custm Menu Actin Example Scenari: The administratr wants t dwnlad the Get-DiskSpace.ps1 file n selected wrkstatins. Steps: 1. Cpy the Get-DiskSpace.ps1 file in the file lcatin fr dwnlad jbs selected during the installatin f SMART AD Migratr, c:\prgram files\binary Tree\ADMigratr\Dwnlads\ by default. 2. Under the Menu Actins tab in Settings, add a menu actin. 3. Select the "Dwnlad File" Menu Actin Type and enter the File Name. The full path t the file shuld nt be entered. SMART ACTIVE DIRECTORY MIGRATOR 9.2 USER GUIDE 71

72 4. Add a menu selectin. The Display Name is hw the ptin will appear in the right-click menu. Select the "Device" Object Type s the menu ptin will appear n the Devices screen. 5. Drp and drag the new menu actin t under the new menu selectin and ensure the menu selectin is active. The menu selectin can be expanded t view the assciated menu actin. 6. On the Devices screen, select the devices and then select the new "Get Disk Space" ptin frm the right-click menu. When the new dwnlad jb is run successfully against a managed machine, the Get-DiskSpace.ps1 file will reside lcally n disk at c:\prgram files (x86)\binary Tree\ADMigratr Agent\Dwnlads. 9.8 Glbal Variables Glbal variables can be defined and be used acrss multiple scripts when defining menu actins. Fr example, yu may add a glbal variable t add the current date t multiple scripts. Glbal variables will appear when selecting a starter script when creating a Menu Actin if the Requires Glbal Variables ptin is selected. SMART ACTIVE DIRECTORY MIGRATOR 9.2 USER GUIDE 72

73 Adding a Glbal Variable T add a Glbal Variable click Add under the Glbal Variables tab. Variable Name (Required): Enter a name fr the glbal variable. The name must cntain alphanumeric and underscres nly. Variable Value (Required): The value f the glbal variable. Check the Encrypted bx t encrypt the value in the database and hide the variable value in the interface. SMART ACTIVE DIRECTORY MIGRATOR 9.2 USER GUIDE 73

74 Sectin 10. Migrating Devices Wrkstatins and Servers are referred t as Devices in SMART AD Migratr. The Devices screen allws yu t register devices, change the plling interval, and manage the device Discvery, ReACL, Cutver, and Cleanup prcesses. The SMART AD Migratr Agent must be installed n the device befre a device can be registered r any actins taken n it. Refer t Installing the SMART AD Migratr Agent n Devices tpic fr mre infrmatin. Jb Scheduling Optins The Jb Scheduling ptin allws the administratr t effectively manage the server and wrkstatin envirnment during the migratin event by scheduling device jbs t run at specific pints f time in the future. Each jb that is available by right-clicking a device will surface the ability t set a D nt start befre date and time. If a jb is scheduled, then it sits in the queue and is nt an active jb fr the device as it plls in lking fr jbs based n the cnfigured plling interval. SMART ACTIVE DIRECTORY MIGRATOR 9.2 USER GUIDE 74

75 View Jbs T view device jbs: 1. Click n table rws t select ne r mre devices in the list (Use Ctrl-Click t select mre than ne rw). 2. Right-Click t view the ptins menu and select View Jbs. The Device Jbs windw appears. 3. The Device Jbs table includes the fllwing clumns: Jb ID - the ID f the jb Queued Timestamp - the date and time the jb was queued Cmmand Name - the cmmand name f the jb Status - the current status f the jb Cancel Requested - checked in a cancel f the jb has been requested Message - Result cdes and messages fr the jb Timeut (sec) - the timeut in secnds Retry Cunt - the number f times the jb has been retried Rllback Status - the status f a rllback Rllback Message - the status f a rllback 4. T cancel a jb, select the jb and click the Cancel buttn r select Cancel frm the right-click menu. T refresh the jbs list, click the Refresh buttn. SMART ACTIVE DIRECTORY MIGRATOR 9.2 USER GUIDE 75

76 Jbs can be canceled when the Status r Rllback Status is either Queued, Scheduled, Started, r In Prgress. View Prperties After the Discvery prcess has been cmpleted fr a device, yu view the prperties f the device. T view a device s prperties: 1. Click n table rws t select a device in the list. 2. Right-Click t view the ptins menu and select View Prperties. The Device Prperties windw appears displaying the prperties f the device and the user prfiles assciated with the device. 3. Click the Exprt All buttn t exprt the cntent f the windw in Excel, text, CSV, r HTML frmat. Plling Interval The plling interval is set t 900 secnds (15 minutes) by default. The plling interval tells devices hw frequently t cntact the SMART AD Migratr Server and check fr jbs. If the plling interval is set t a high number, such as secnds (4 hurs), it is pssible that any cmmand sent t the device may nt execute fr up t fur hurs. Yu may decide t set the plling interval t a high number t keep the lad ff f the web servers until devices are clser t the actual date f cutver. A lengthy time between sending a cmmand t a device and the device executing the cmmand is nt likely t be effective n the day f cutver. T ensure adequate respnse time n the day f cutver, it is recmmended t decrease this interval in advance f the Cutver prcess. Devices will nly btain an updated plling interval when next cntacting the SMART Active Directry Migratr web service. SMART ACTIVE DIRECTORY MIGRATOR 9.2 USER GUIDE 76

77 T set plling interval: 1. Click n table rws t select ne r mre devices in the list (Use Ctrl-Click t select mre than ne rw). 2. Right-click t view the ptins menu and select Set Plling Interval. The Set Plling Interval windw appears. 3. Edit the Plling Interval (secnds) field and click Save. The plling interval default fr all newly registered devices can be changed in SQL in the ADM_Setting table field PllIntervalSecnds. If upgrading frm a release prir t SMART Active Directry Migratr 9.2, the plling interval default was secnds. This default value will nt be changed during an upgrade and will need t be updated in the ADM_Setting table per abve. Set ReACL Prfile T set ReACL Prfile: 1. Click n table rws t select ne r mre devices in the list (Use Ctrl-Click t select mre than ne rw). 2. Right-click t view the ptins menu and select Set ReACL Prfile. The Set ReACL Prfile windw appears. 3. Select the ReACL Prfile and click Save. Discvery The Discvery prcess gathers prperties (OS versins, netwrk prperties, and s n) frm the device t allw additinal future functinality. The first discvery prcess begins fr a device when the device becmes registered which will autmatically ccur after the Device Agent has been installed, as lng as the envirnment is prperly cnfigured. T start the device Discvery prcess manually: 1. Click n table rws t select ne r mre devices in the list (Use Ctrl-Click t select mre than ne rw). 2. Right-Click t view the ptins menu and select Discvery. 3. In Jb Scheduling Optins windw, click OK t begin the Discvery prcess as sn as pssible. Check D nt start befre and then enter r select a date and time when the prcess will begin. If using the D nt start befre ptin, the Discvery Status will be displayed as Queued in the Devices table and the D Nt Start Befre clumn in the Device Jbs table will be ppulated with the selected date. SMART ACTIVE DIRECTORY MIGRATOR 9.2 USER GUIDE 77

78 4. The Queue Summary windw appears. 5. Click OK. The Discvery Status clumn is ppulated with the current status. Use the Right-click View Jbs ptin r duble-click a rw in the Devices table t view the list f jbs fr the specific Device. ReACL The ReACL prcess updates the device s dmain user prfiles fr use by the matching target user after cutver. At least ne grup must be migrated t ppulate the map.gg file r the ReACL prcess will fail. Befre ReACL can ccur, the target users and grups which have permissins set n the device must be migrated t the target. T start the device ReACL prcess: 1. Click n table rws t select ne r mre devices in the list (Use Ctrl-Click t select mre than ne rw). 2. Right-Click t view the ptins menu and select ReACL. 3. In Jb Scheduling Optins windw, click OK t begin the ReACL prcess as sn as pssible. Check D nt start befre and then enter r select a date and time when the prcess will begin. If using the D nt start befre ptin, the ReACL Status will be displayed as Queued in the Devices table and the D Nt Start Befre clumn in the Device Jbs table will be ppulated with the selected date. 4. The Queue Summary windw appears. 5. Click OK. The ReACL Status clumn is ppulated with the current status. Use the Right-click View Jbs ptin r duble-click a rw t view the list f jbs. SMART ACTIVE DIRECTORY MIGRATOR 9.2 USER GUIDE 78

79 Tw checks are perfrmed at the start f the ReACL prcess. The first check is against invalid Surce Prfiles, which will be lgged as a WARNING and thse prfiles will be skipped. The secnd check is against invalid Target Prfiles, where a user may create a prfile with the target accunt befre their machine is ReACL d and cutver. By default, this is lgged as a FATAL ERROR and will halt the ReACL prcess. Hwever, it can be changed t a WARNING with the t switch passed by editing the cmmand in SQL. The ReACL Agent will autmatically create tw files n the device being ReACL d, map.usr and map.gg. These files are used t find the surce permissins and add the apprpriate target permissins during the ReACL prcess. System grups, such as Dmain\Dmain Admins and Dmain\Dmain Users are included in the map.gg file fr updating the grup permissins during the ReACL prcess. If the Active Directry envirnment is nn-english, the values in the samaccuntname clumn f the BT_SystemGrup table in the SQL database will need t be changed after SMART Directry Sync is installed t have the apprpriate nn-english values. If the Mapped Netwrk Drive is being mapped via GPO r using an integrated credential such as the current windws lgn sessin, ReACL will create a warning entry in the lg WARNING: The UserName value fr drive U was empty and culd nt be mapped t the target user. This warning des nt mean that the mapped drive cannt be accessed after Cutver. Cutver The Cutver prcess mves a device frm the surce dmain t the new target dmain. T start the Cutver prcess: 1. Click n table rws t select ne r mre devices in the list (Use Ctrl-Click t select mre than ne rw). 2. Right-Click t view the ptins menu and select Cutver. 3. The Cutver Optins windw appears. Select Cutver Credentials, a Netwrk Prfile, and Migratin Optin frm the drp-dwn lists. 4. Check D nt start befre and then enter r select a date and time when the prcess will begin. If using the D nt start befre ptin, the Cutver Status will be displayed as Queued in the Devices table and the D Nt Start Befre clumn in the Device Jbs table will be ppulated with the selected date. The Cutver prcess will begin as sn as pssible if nt using this ptin. 5. The Queue Summary windw appears. 6. Click OK. The Cutver Status clumn is ppulated with the current status. Use the Right-click View Jbs ptin r duble-click a rw t view the list f jbs. The Cutver Optins are set n the Settings screen. Rllback The Rllback prcess mves a device back t the riginal surce dmain and restres any mdified netwrk settings. The device must have attempted Cutver fr this explicit Rllback prcess t wrk. T start the Rllback prcess: 1. Click n table rws t select ne r mre devices in the list (Use Ctrl-Click t select mre than ne rw). 2. Right-Click t view the ptins menu and select Rllback. SMART ACTIVE DIRECTORY MIGRATOR 9.2 USER GUIDE 79

80 3. In Jb Scheduling Optins windw, click OK t begin the Rllback prcess as sn as pssible. Check D nt start befre and then enter r select a date and time when the prcess will begin. If using the D nt start befre ptin, the D Nt Start Befre clumn in the Device Jbs table will be ppulated with the selected date. 4. Click OK. The Queue Summary windw appears. 5. Click OK. The selected devices are sent back t their riginal dmain and any mdified netwrk settings are restred. The Cutver Status clumn is updated with the current status. Cleanup The Cleanup prcess remves the Surce SIDs after the Cutver prcess cmpletes. Cleanup shuld be dne when the migratin prject is cmpleted. Befre running the Cleanup prcess, it is recmmended t disable SID filtering/quarantine t verify there are n issues with applicatin access befre cmpleting the cleanup prcess. T start the Cleanup prcess: 1. Click n table rws t select ne r mre devices in the list (Use Ctrl-Click t select mre than ne rw). 2. Right-Click t view the ptins menu and select Cleanup. 3. In Jb Scheduling Optins windw, click OK t begin the Cleanup prcess as sn as pssible. Check D nt start befre and then enter r select a date and time when the prcess will begin. If using the D nt start befre ptin, the Cleanup Status will be displayed as Queued in the Devices table and the D Nt Start Befre clumn in the Device Jbs table will be ppulated with the selected date. 4. The Queue Summary windw appears. 5. Click OK. The Cleanup Status clumn is ppulated with the current status. Use the Right-click View Jbs ptin r duble-click a rw t view the list f jbs. ReACL Rllback The ReACL Rllback feature rlls back all changes made by the ReACL prcess. ReACL Rllback can be perfrmed n devices that have cmpleted the ReACL prcess. T rllback ReACL: 1. Click n table rws t select ne r mre devices in the list (Use Ctrl-Click t select mre than ne rw). 2. Right-click t view the ptins menu and select ReACL Rllback. 3. In Jb Scheduling Optins windw, click OK t begin the ReACL Rllback prcess as sn as pssible. Check D nt start befre and then enter r select a date and time when the prcess will begin. If using the D nt start befre ptin, the D Nt Start Befre clumn in the Device Jbs table will be ppulated with the selected date. 4. View rllback results by viewing the device's jb view. Device Clumns The fllwing clumns appear n the Devices screen by default: Migratin Grup - The Migratin Grup name. Use the Right-click Set Migratin Grup ptin t change. samaccuntname - the samaccuntname attribute f the surce device SMART ACTIVE DIRECTORY MIGRATOR 9.2 USER GUIDE 80

81 Distinguished Name - the distinguished name attribute f the surce device Registered - This is checked if the device is registered with the server. Agent Last Cntact - Displays the time and date f the last cntact between the agent and the SMART AD Migratr Server. Descriptin - the descriptin attribute f the surce device Plling Interval - The time interval (in secnds) between plls. This is set t 900 secnds (15 minutes) by default. Use the Right-click Set Plling Interval ptin t change. The SMART AD Migratr agent will pick up the new plling interval value the next time it cntacts the Web Service. Discvery Status - The status f the discvery prcess. Use the Right-click Discvery ptin t start the Discvery prcess. ReACL Status - The status f the ReACL prcess. Use the Right-click ReACL ptin t start the ReACL prcess. ReACL Prfile - The ReACL Prfile set fr the device. Use the Right-click Set ReACL Prfile ptin t change. Device ReACL Prfiles are defined in Settings. Cutver Status - The status f the Cutver prcess. Use the Right-click Cutver ptin t start the Cutver prcess. Cleanup Status - The status f the Cleanup prcess. Use the Right-click Cleanup ptin t start the Cleanup prcess. Last Jb Message - The last jb status. The fllwing additinal fields can be displayed by custmizing the clumns: ID - SQL recrd number Migratin Grup ID - The Migratin Grup ID. Agent Versin - The versin f the agent installed n the device. Blacklisted - checked if the device is currently n the blacklist. Use the Right-click Add t Blacklist ptin r Remve frm Blacklist ptin t change. Uplad Lgs Lg files frm the AD Migratr Device Agent can be upladed t the AD Migratr Web Server using Micrsft BITS. T enable this functinality, the installer will enable BITS Server Extensins fr IIS and create a virtual directry called DeviceLgs where all upladed files will be stred. T uplad Lg files frm the AD Migratr Device Agent: 1. Click n table rws t select ne r mre devices in the list (Use Ctrl-Click t select mre than ne rw). 2. Right-Click t view the ptins menu and select Uplad Lgs. 3. In Jb Scheduling Optins windw, click OK t begin the Uplad Lgs prcess as sn as pssible. Check D nt start befre and then enter r select a date and time when the prcess will begin. If using the D nt start befre ptin, the D Nt Start Befre clumn in the Device Jbs table will be ppulated with the selected date. 4. Review the device jbs t see when the Uplad Lgs jb has cmpleted. SMART ACTIVE DIRECTORY MIGRATOR 9.2 USER GUIDE 81

82 The lgs will be stred at the fllwing lcatin: C:\Prgram Files\Binary Tree\ADMigratr\DeviceLgs The device lgs will be zipped, and the file names will be in the fllwing frmat with a unique file name: SMART-WIN7X86-1_ SMART ACTIVE DIRECTORY MIGRATOR 9.2 USER GUIDE 82

83 Sectin 11. Migrating NAS The NAS screen allws yu t ReACL NAS (Netwrk Attached Strage) devices via a netwrk share. Add a NAS T add a NAS device: 1. Click the Add buttn. The Netwrk Strage windw appears. SMART ACTIVE DIRECTORY MIGRATOR 9.2 USER GUIDE 83

84 2. Enter values in the fllwing fields: UNC Path - the UNC path that will be the starting lcatin fr ReACL n the NAS device Device Name - The name f the device used t access the NAS device. This device must be lcal (same netwrk, regin, and s n) t the NAS device. This is a samaccuntname, nt an FQDN. Username - The username t access the NAS device. UserPrincipalName values (user@dmain.dm) r dmain\username frmat are supprted Passwrd - the passwrd t access the NAS device 3. Click Save. The NAS device is added t the list. Edit a NAS T edit a NAS device: 1. Click n a table rws t select ne a NAS device in the list. 2. Click the Edit buttn r select Edit frm the right-click menu. The Netwrk Access Strage windw appears. 3. Edit the values. 4. Click OK. The NAS device is updated in the list. Delete a NAS T delete a NAS device: 1. Click n table rws t select ne r mre NAS devices in the list (Use Ctrl-Click t select mre than ne rw). 2. Click the Delete buttn r select Delete frm the right-click menu. The NAS device is remved frm the list. Set ReACL Prfile T set ReACL Prfile: 1. Click n table rws t select ne r mre devices in the list (Use Ctrl-Click t select mre than ne rw). 2. Right-click t view the ptins menu and select Set ReACL Prfile. The Set ReACL Prfile windw appears. 3. Select the ReACL Prfile and click Save. ReACL The ReACL prcess updates the NAS s dmain user prfiles fr use by the matching target user after cutver. T start the device ReACL prcess: 1. Click n table rws t select ne r mre NAS devices in the list (Use Ctrl-Click t select mre than ne rw). 2. Right-Click t view the ptins menu and select ReACL. 3. In Jb Scheduling Optins windw, click OK t begin the ReACL prcess as sn as pssible. Check D nt start befre and then enter r select a date and time when the prcess will begin. If using the D nt start befre ptin, the ReACL Status will be displayed as Queued in the NAS table and the D Nt Start Befre clumn in the NAS Device Jbs table will be ppulated with the selected date. 4. The Queue Summary windw appears. SMART ACTIVE DIRECTORY MIGRATOR 9.2 USER GUIDE 84

85 5. Click OK. Use the Right-click View Jbs ptin t view the list f jbs. Cleanup The Cleanup prcess remves the Surce SIDs after the Cutver prcess cmpletes. T start the Cleanup prcess: 1. Click n table rws t select ne r mre NAS devices in the list. (Use Ctrl-Click t select mre than ne rw r Shift-Click t select a range f rws.) 2. Right-Click t view the ptins menu and select Cleanup. 3. In Jb Scheduling Optins windw, click OK t begin the Cleanup prcess as sn as pssible. Check D nt start befre and then enter r select a date and time when the prcess will begin. If using the D nt start befre ptin, the Cleanup Status will be displayed as Queued in the NAS table and the D Nt Start Befre clumn in the NAS Device Jbs table will be ppulated with the selected date. 4. The Queue Summary windw appears. 5. Click OK. The Cleanup Status clumn is ppulated with the current status. Use the Right-click View Jbs ptin t view the list f jbs. View Jbs T view NAS device jbs: 1. Click n table rws t select ne r mre NAS devices in the list (Use Ctrl-Click t select mre than ne rw). 2. Right-Click t view the ptins menu and select View Jbs. The Device Jbs windw appears. 3. The Device Jbs table includes the fllwing clumns: Jb ID - the ID f the jb Queued Timestamp - the date and time the jb was queued Cmmand Name - the cmmand name f the jb Status - the current status f the jb Cancel Requested - checked in a cancel f the jb has been requested Message - Result cdes and messages fr the jb Timeut (sec) - the timeut in secnds Retry Cunt - the number f times the jb has been retried Rllback Status - the status f a rllback Rllback Message - the status f a rllback 4. T cancel a jb, select the jb and click the Cancel buttn r select Cancel frm the right-click menu. T refresh the jbs list, click the Refresh buttn. SMART ACTIVE DIRECTORY MIGRATOR 9.2 USER GUIDE 85

86 ReACL Rllback The ReACL Rllback feature rlls back all changes made by the ReACL prcess. ReACL Rllback can be perfrmed n NAS devices that have cmpleted the ReACL prcess. T rllback ReACL: 1. Click n table rws t select ne r mre NAS devices in the list (Use Ctrl-Click t select mre than ne rw). 2. Right-click t view the ptins menu and select ReACL Rllback. 3. In Jb Scheduling Optins windw, click OK t begin the ReACL Rllback prcess as sn as pssible. Check D nt start befre and then enter r select a date and time when the prcess will begin. If using the D nt start befre ptin, the D Nt Start Befre clumn in the NAS Device Jbs table will be ppulated with the selected date. 4. View rllback results by viewing the NAS device's jb view. NAS Clumns The fllwing clumns appear n the NAS screen by default: ID - the migratin ID Device Name - The name f the device used t access the NAS device. This device must be lcal t the NAS device. UNC Path - the UNC path t the netwrk share used t access the NAS device Username - the username t access the NAS device ReACL Status - The status f the ReACL prcess. Use the Right-click ReACL ptin t start the ReACL prcess. Cleanup Status - The status f the Cleanup prcess. Use the Right-click Cleanup ptin t start the Cleanup prcess. SMART ACTIVE DIRECTORY MIGRATOR 9.2 USER GUIDE 86

87 Sectin 12. Reprts The Reprts screen allws yu t view reprts fr the current AD migratin, devices, migratin grups, and users. Reprts are available nly if the Reprting feature was installed and cnfigured. Dashbard The Dashbard reprt is a high level status reprt f the current AD Migratin. T view the Dashbard reprt: 1. Select Dashbard frm the drp-dwn list. 2. T filter the reprt t display a specific Migratin Grup, select an ptin frm the Select Migratin Grup drp-dwn list and click the View Reprt buttn. If n Migratin Grups have been created, the nly ptin available is ALL which displays all bjects. The reprt displays the fllwing data: User Preparatin Status - Displays the number f users prepared and nt prepared fr migratin. User Migratin Status - Displays the number f users migrated and nt migrated. Device Preparatin Status - Displays the number f devices prepared and nt prepared fr cutver. Device Cutver Status - Displays the number f devices that have cmpleted cutver and have nt cmpleted cutver. Devices that Failed t Cutver - Displays the number f devices that failed cutver and cmpleted cutver. User Prfiles t Device Relatinship - Displays the users that have lgged nt each device. SMART ACTIVE DIRECTORY MIGRATOR 9.2 USER GUIDE 87

88 Device Detail Reprt The Device Detail Reprt is a detailed reprt f device infrmatin. T view the Device Detail Reprt: 1. Select Device Detail Reprt frm the drp-dwn list. 2. T filter the reprt t display a specific recrd, select an ptin frm ne r mre drp-dwn lists and click the View Reprt buttn. The reprt displays the fllwing data fr each device: Migratin Grup - The Migratin Grup name. Name - The samaccuntname attribute f the surce device. Device Nt Checking In - Is the device checking in with the server. Surce DN - The distinguished name attribute f the surce device. Registered - Is the device registered with the server. Discvery - The status f the Discvery prcess. ReACL - The status f the ReACL prcess. Cutver - The status f the Cutver prcess. Cleanup - The status f the Cleanup prcess. Prepared fr Migratin - The device has successfully started the cutver prcess. Last Cntact - The time and date f the last cntact between the agent and the SMART AD Migratr Server. This reprt includes an extra blank page that can be ignred. SMART ACTIVE DIRECTORY MIGRATOR 9.2 USER GUIDE 88

89 Devices that Failed t Cutver The Devices that Failed t Cutver reprt is a reprt displaying devices that did nt successfully cmplete the cutver prcess. T view the Devices that Failed t Cutver reprt: 1. Select Devices that Failed t Cutver frm the drp-dwn list. 2. T filter the reprt t display a specific Migratin Grup, select an ptin frm the Select Migratin Grup drp-dwn list and click the View Reprt buttn. If n Migratin Grups have been created, the nly ptin available is ALL which displays all devices. The reprt displays the fllwing data fr each device: Device Name - The samaccuntname attribute f the surce device. Migratin Status - The status f the migratin. Last Jb Message - The last jb status. SMART ACTIVE DIRECTORY MIGRATOR 9.2 USER GUIDE 89

90 Migratin Grup Status The Migratin Grup Status reprt displays metrics infrmatin abut all migratin bjects. T view the Migratin Grup Status reprt: 1. Select Migratin Grup Status frm the drp-dwn list. 2. T filter the reprt t display a specific Migratin Grup, select an ptin frm the Select Migratin Grup drp-dwn list and click the View Reprt buttn. If n Migratin Grups have been created, the nly ptin available is ALL which displays all bjects. User Status Reprt The User Status Reprt is a detailed reprt f user infrmatin. T view the User Status Reprt: 1. Select User Status Reprt frm the drp-dwn list. 2. T filter the reprt t display a specific recrd, select an ptin frm ne r mre drp-dwn lists and click the View Reprt buttn. SMART ACTIVE DIRECTORY MIGRATOR 9.2 USER GUIDE 90

91 The reprt displays the fllwing data fr each user: Migratin Grup - The Migratin Grup name. Display Name - The display name attribute f the surce user accunt. Surce User ID - The User ID f the surce user accunt. Target User ID - The User ID f the target user accunt. Surce DN - The distinguished name attribute f the surce user accunt. Target DN - The distinguished name attribute f the target user accunt. Surce UAC - Indicates if the user accunt is enabled in the surce. Target UAC - Indicates if the user accunt is enabled in the target. Migrated - This clumn shws any users that have been manually tagged with the Migrated status. This is an ptinal tag fr tracking purpses and des nt necessarily represent a successful user migratin. Prepared fr Migratin - A value f True verifies that the user has been synchrnized with the target. Ready t Sync - User has been marked as Ready-t-Sync. Failed t Sync - If the Ready-t-Sync value is true, AND Failed t Sync is a value f True, this means that the synchrnizatin has actually failed. Examine the lg fr details. If the Ready-t-Sync value is False, and Failed t Sync is a value f True, this means that synchrnizatin has nt yet been attempted fr this user. Status Message - The last status. N message is displayed if Failed t Sync is False. Migratin Grup ID - The ID f the Migratin Grup. User Prfiles t Device Relatinship Reprt The User Prfiles t Device Relatinship Reprt is a reprt shwing the users that have lgged nt each device. T view the User Prfiles t Device Relatinship Reprt: 1. Select User Prfiles t Device Relatinship frm the drp-dwn list. 2. T filter the reprt t display a specific Migratin Grup, select an ptin frm the Migratin Grup drp-dwn list and click the View Reprt buttn. If n Migratin Grups have been created, the nly ptin available is ALL which displays all devices. SMART ACTIVE DIRECTORY MIGRATOR 9.2 USER GUIDE 91

92 The reprt displays the fllwing data fr each user: Device Name - The name f the device. samaccuntname - The samaccuntname f the user. First Name - The first name f the surce user. Last Name - The last name f the surce user. Prfile Last Used - The last date the prfile was used. Reprt Optins Reprt ptins are available abve the displayed reprt. Paging - Click the First Page, Previus Page, Next Page, and Last Page arrws t page thrugh a multi-page reprt. Refresh - Click the Refresh icn t update the data in the reprt. This ptin is als available in the right-click menu while hvering ver the reprt. Print - Click the Print icn t pen printing ptins. This ptin is als available in the right-click menu while hvering ver the reprt. Print Layut - Click the Print Layut icn t view the reprt as it will be printed. This ptin is als available in the right-click menu while hvering ver the reprt. Page Setup - Click the Page Setup icn t pen paper, rientatin, and margin ptins. This ptin is als available in the right-click menu while hvering ver the reprt. Exprt - Click the Exprt icn t select a frmat t exprt. This ptin is als available in the right-click menu while hvering ver the reprt. Zm - Click the drp-dwn list and select a zm ptin. This ptin is als available in the right-click menu while hvering ver the reprt. Find / Next - Enter a value t search fr in the reprt and click Find. Click Next t find the next instance f the value. SMART ACTIVE DIRECTORY MIGRATOR 9.2 USER GUIDE 92

93 Sectin 13. Using the SMART Directry Sync Lg Viewer The SMART Directry Sync Lg Viewer allws yu t view, search, exprt, and clear synchrnizatin lgs. T pen and view lgs in the SMART Directry Sync Lg Viewer: 1. In the SMART Active Directry Migratr cnsle, click the Lgs icn. The SMART Directry Sync Lg Viewer pens. 2. The Synchrnizatin prfile is autmatically selected and lg entries assciated with the prfile are displayed. T change the prfile, select a different prfile frm the Prfile drp-dwn list. Click the Refresh icn next t the Prfile drp-dwn list t refresh the list f prfiles and the lg grid Searching Lg Entries T search fr lg entries: Enter a search term in the Search field and then click the Find icn. The table refreshes t shw the search results Pausing a Lg Yu can stp the cntinuus scrlling f the lg t allw fr easier reading. This feature pauses the display nly, nt the lgging functin. T pause the lg: SMART ACTIVE DIRECTORY MIGRATOR 9.2 USER GUIDE 93

94 1. Click the Pause icn. 2. T restart the lg display, click the Play icn (next t Paused ) Shwing Lg Entries fr a Time Perid T shw all lg entries fr a time perid: Select a Shw... ptin frm the drp-dwn list near the upper right crner f the cnsle. The table refreshes t shw all lg entries fr the selected time perid Filtering the Lg T filter the lg: 1. Click the filter buttn n any clumn header t pen the filter windw. 2. Enter the filter criteria, and then click Filter. The table refreshes t the filtered lg entries. SMART ACTIVE DIRECTORY MIGRATOR 9.2 USER GUIDE 94

95 3. User the Clear Filter buttn t clear the filter Gruping the Lg by Clumn T grup the lg by a clumn: Drag a clumn header t the bar abve the lg table t grup the lg by a specific clumn. The table refreshes gruped by the selected clumn Viewing Lg Entry Details T view lg entry details: Click the plus icn in the lg entry. The entry expands t display the details f the lg entry Exprting Lg Entries T exprt the lg entries f the currently selected prfile: 1. Click Exprt All. SMART ACTIVE DIRECTORY MIGRATOR 9.2 USER GUIDE 95

96 2. Enter a File name, lcatin, a file type, and then click Save Clearing Lg Entries T clear ld lg entries f the currently selected prfile: 1. Click Clear. The Clear Lg windw pens. 2. Select a number and time unit (Weeks, Days, r Hurs) frm the drp-dwn list t clear the lg f lder entries and then click OK. 3. Als, yu have the ptin t clear the lg entries f all prfiles lder than the selected time autmatically by selecting Clear lg autmatically (applies t all prfiles Binary Tree recmmends that the lgs be set t clear autmatically t prevent the accumulated data frm becming t large. T clear all lg entries f the currently selected prfile: Click Clear All. All lg entries f the currently selected prfile are cleared. SMART ACTIVE DIRECTORY MIGRATOR 9.2 USER GUIDE 96

97 Sectin 14. Trubleshting Prblem: What d yu d when a user tries t use a netwrk printer pst ReACL prcess and/r cutver and receives an access denied errr? Slutin: Synchrnize the SID Histry fr that user t reslve the prblem. Prblem: ASP.NET will smetimes nt register prperly with IIS, which can cause errrs when the SMART AD Migratr agent tries t cmmunicate with the Web Service. Hw d I address this? Slutin: During installatin, the installer needs t enable the IIS feature fr the server if the feature was nt enabled s that web-service can be installed and cnfigured. T address this prblem, yu shuld manually reregister the ASP.NET with IIS. T d this, run the belw cmmand n the server under C:\Windws\Micrsft.NET\Framewrk\v4.5.2: aspnet_regiis -i Prblem: What d I d if the Agent_<datetime>.lg shws an Errr: Lgin failed fr user 'IIS APPPOOL\ADM AppPl' in System.Data.SqlClient.SqlExceptin? Slutin: T fix this: 1. Open SQL Management Studi where DirSync databases were setup. 2. G t SQL Server Security -> Lgins. 3. New Lgin. 4. User name: IIS APPPOOL\ADM AppPl. 5. Click n User Mappings. 6. Select BTCdex fr the database. 7. Select db_datareader and db_datawriter fr Rles. 8. Click OK. 9. Restart the agent n the wrkstatin r wait fr the next plling interval Prblem: Observed Access Denied errr when trying t ReACL a Windws NAS Shared Drive. Slutin: T fix this: 1. Add the user credential in the NAS screen in the SMART AD Migratr Cnsle. This user shuld be installed n a wrkstatin with Lcal Admin Rights. 2. After the agent installed n the wrkstatin, change the SMART AD Migratr Agent Service accunt frm Lcal System t the user credential specified in step 1. This user shuld als be lgged in n the wrkstatin as well. 3. Turn ff UAC n the wrkstatin. 4. ReACL the Windws NAS Shared Drive. Prblem: Users are getting an errr message that their Recycle Bin has been crrupted nce their cmputer has been migrated. Slutin: This is a cmmn issue with Dmain Migratins and is caused when the Recycle Bin is nt empty. This is happening because the name f the Recycle Bin is the user s SID and the Recycle Bin cannt be reacl d. After the wrkstatin has been reacl d and migrated when the user lgs n, if the existing Recycle Bin is nt empty SMART ACTIVE DIRECTORY MIGRATOR 9.2 USER GUIDE 97

98 the user cannt access it. But if the existing Recycle Bin is empty a new ne is created and the Target user s SID is the name f the Recycle Bin. Reslutin: Empty the Recycle Bin as part f the Cutver prcess. Prblem: SMART Directry Sync des nt start if SQL Authenticatin methd is used with Windws Authenticatin. Slutin: Manually add the cmputer accunt t the SQL server and granted with the sysadmin rle. T accmplish this, perfrm the fllwing steps. 1. Via the SQL Management Studi, pen a new query windw. Enter the belw script. 2. CREATE LOGIN [Dmain\machine_name$] FROM WINDOWS 3. Via the Security and Lgins, lcated the newly created Cmputer Name. 4. Grant this user with sysadmin rle. Prblem: A wrkstatin that has been successfully cutver n lnger respnds t any additinal jbs, such as Cleanup. Slutin: If a wrkstatin that has been successfully cutver nw fails t respnd t any additinal jbs, such as Cleanup, check the Applicatin event lg. If yu see a "The remte name culd nt be reslved" errr, this mst likely means that the SRV recrd fr the ADM server can n lnger be reslved due t a DNS lkup failure. If yu cannt "Ping" the ADM server frm any ther machines in the target dmain, then yu will need t remedy this n a mre glbal scale, such as creating a cnditinal frwarder n the target machines' current DNS server pinting t the apprpriate lcatin. If yu are able t "Ping" the ADM server, then check the Netwrk Prfile that was used during the Cutver t verify that the DNS settings were crrect in that prfile. Passwrd Sync Trubleshting Prblem: If yu encunter "Access is denied" errrs when syncing passwrds with Directry Sync. Slutin: This is mst likely because the utility (psexec.exe) used fr remte calls t the Glbal Catalg is failing. Sme things yu can try are: 1. Try the GC server's IP address, FQDN and Shrtname. IP address ften wrks when thers d nt. 2. Frm the Directry Sync machine brwse t \\[GC]\admin$ with the admin username\passwrd. 3. Run the Directry Sync service with credentials that have access t the GC instead f as LcalSystem. 4. Firewalls\Anti-Virus sftware shuld nt be a prblem but turning them ff may help. AD Migratr BITS Trubleshting Prblem: The AD Migratr UI issued the Uplad Lgs cmmand t the Agent fr a device, but nthing was upladed t the web server. Slutins: IIS Web Server where ADM Web Service is installed: SMART ACTIVE DIRECTORY MIGRATOR 9.2 USER GUIDE 98

99 1. Open IIS Manager. 2. Verify that Default Web Site > adm > DeviceLgs exists. a. Verify there is a BITS Uplads ptin icn in the Feature View (at the bttm). If nt, use PwerShell t install. Imprt-Mdule ServerManager Add-WindwsFeature BITS-IIS-Ext b. Verify in the BITS Uplad view, that "Allw clients t uplad files" is checked. 1. Open IIS Manager. 2. G t Default Web Site -> adm -> DeviceLgs. 3. Click n Basic Settings in the right pane. a. Verify the Applicatin Pl is set t "ADM AppPl". 4. Click n Edit Permissins -> Security tab a. Verify the IUSR accunt is in the list and has the fllwing permissins: Mdify, Ready & execute, List flder cntents, Read, Write On the Device where the Uplad Lgs cmmand was issued: 1. Navigate t C:\Prgram Files (x86)\binary Tree\ADMigratr Agent\Files. 2. Open the agent_<date>.lg in Ntepad. a. Verify the URI fr the server /api and /devicelgs lcatin is crrect. 1. Navigate t C:\Prgram Files (x86)\binary Tree\ADMigratr Agent\Files. 2. Open the PwerShell-<date>-<time>-BT-UpladLgs.lg file. a. Check fr prblems r errrs. 1. G t Start -> Run -> services.msc. 2. Verify the Backgrund Intelligent Transfer Service is started. SMART ACTIVE DIRECTORY MIGRATOR 9.2 USER GUIDE 99

100 Appendix A. AD Surce AD Target Default Mapping The belw table displays the default values f the AD Surce t AD Target mapping table. Surce Field Internal Field Target Field S urc e Ty pe Targ et Typ e 1 Tar get Typ e 2 Cmments accuntexpires AccuntExpires accuntexpires any any altrecipient FrwardingAddress altrecipient any any assistant Assistant any any authorig AuthOrig authorig any any C CuntryAbbreviatin C any any cn CmmnName cn any any C CuntryName C any any cdepage CdePage cdepage any any Cmment Cmment Cmment any any cmpany Cmpany cmpany any any cuntrycde CuntryCde cuntrycde any any deleteditemflags DeletedItemFlags deleteditemflags any any delivcntlength DelivCntLength delivcntlength any any department Department department any any departmentnumber DepartmentNumber departmentnumber any any descriptin Descriptin descriptin any any SMART ACTIVE DIRECTORY MIGRATOR 9.2 USER GUIDE 100

101 Surce Field Internal Field Target Field S urc e Ty pe Targ et Typ e 1 Tar get Typ e 2 Cmments displayname DisplayName displayname any any divisin Divisin divisin any any dlmemsubmitperms DLMemSubmitPerms dlmemsubmitperms any any dlmemrejectperms DLMemRejectPerms dlmemrejectperms any any emplyeeid EmplyeeID emplyeeid any any emplyeenumber EmplyeeNumber emplyeenumber any any emplyeetype EmplyeeType emplyeetype any any extensinattribute1 Extensin1 extensinattribute1 any any These are Exchange defined custm attributes. extensinattribute10 Extensin10 extensinattribute10 any any These are Exchange defined custm attributes. extensinattribute11 Extensin11 extensinattribute11 any any These are Exchange defined custm attributes. extensinattribute12 Extensin12 extensinattribute12 any any These are Exchange defined custm attributes. SMART ACTIVE DIRECTORY MIGRATOR 9.2 USER GUIDE 101

102 Surce Field Internal Field Target Field S urc e Ty pe Targ et Typ e 1 Tar get Typ e 2 Cmments extensinattribute13 Extensin13 extensinattribute13 any any These are Exchange defined custm attributes. extensinattribute14 Extensin14 extensinattribute14 any any These are Exchange defined custm attributes. extensinattribute15 Extensin15 extensinattribute15 any any These are Exchange defined custm attributes. extensinattribute2 Extensin2 extensinattribute2 any any These are Exchange defined custm attributes. extensinattribute3 Extensin3 extensinattribute3 any any These are Exchange defined custm attributes. extensinattribute4 Extensin4 extensinattribute4 any any These are Exchange defined custm attributes. SMART ACTIVE DIRECTORY MIGRATOR 9.2 USER GUIDE 102

103 Surce Field Internal Field Target Field S urc e Ty pe Targ et Typ e 1 Tar get Typ e 2 Cmments extensinattribute5 Extensin5 extensinattribute5 any any These are Exchange defined custm attributes. extensinattribute6 Extensin6 extensinattribute6 any any These are Exchange defined custm attributes. extensinattribute7 Extensin7 extensinattribute7 any any These are Exchange defined custm attributes. extensinattribute8 Extensin8 extensinattribute8 any any These are Exchange defined custm attributes. extensinattribute9 Extensin9 extensinattribute9 any any These are Exchange defined custm attributes. facsimiletelephnenum ber OfficeFAXNumber facsimiletelephnenum ber any any generatinqualifier Suffix generatinqualifier any any givenname FirstName givenname any any SMART ACTIVE DIRECTORY MIGRATOR 9.2 USER GUIDE 103

104 Surce Field Internal Field Target Field S urc e Ty pe Targ et Typ e 1 Tar get Typ e 2 Cmments hmephne HmePhneNumber hmephne any any HmePstalAddress HmePstalAddress HmePstalAddress any any Inf Inf Inf any any initials Initials initials any any internatinalisdnnumb er InternatinalISDNNumb er internatinalisdnnumb er any any internetencding internetencding internetencding any any ipphne IPPhne ipphne any any jpegpht JPEGPht jpegpht any any l OfficeCity l any any language Language language any any legacyexchangedn LegacyExchangeDN legacyexchangedn any any lcaleid LcaleID lcaleid any any mail InternetAddress mail any any mailnickname PrimaryAlias mailnickname any any manager Manager any any SMART ACTIVE DIRECTORY MIGRATOR 9.2 USER GUIDE 104

105 Surce Field Internal Field Target Field S urc e Ty pe Targ et Typ e 1 Tar get Typ e 2 Cmments mapirecipient MAPIRecipient mapirecipient any any middlename MiddleName middlename any any mbile CellPhneNumber mbile any any msds- PhneticCmpanyName msdsphneticcmpany Name msds- PhneticCmpanyName any any msds- PhneticDepartment msdsphneticdepartme nt msds- PhneticDepartment any any msds- PhneticDisplayName msdsphneticdisplayna me msds- PhneticDisplayName any any msds- PhneticFirstName msdsphneticfirstname msds- PhneticFirstName any any msds- PhneticLastName msdsphneticlastname msds- PhneticLastName any any msexchaddressbkflag s msexchaddressbkflag s msexchaddressbkflag s any any msexchalobjectversin msexchalobjectversin msexchalobjectversin any any msexcharchiveguid msexcharchiveguid msexcharchiveguid any any msexcharchivename msexcharchivename msexcharchivename any any msexchassistantname msexchassistantname msexchassistantname any any SMART ACTIVE DIRECTORY MIGRATOR 9.2 USER GUIDE 105

106 Surce Field Internal Field Target Field S urc e Ty pe Targ et Typ e 1 Tar get Typ e 2 Cmments msexchblckedsenders Hash msexchblckedsenders Hash msexchblckedsenders Hash any any msexchbypassaudit msexchbypassaudit msexchbypassaudit any any msexchelcexpirysuspen sinend msexchelcexpirysuspen sinend msexchelcexpirysuspen sinend any any msexchelcexpirysuspen sinstart msexchelcexpirysuspen sinstart msexchelcexpirysuspen sinstart any any msexchelcmailbxflags msexchelcmailbxflags msexchelcmailbxflags any any msexchexternaloofopti ns msexchexternaloofopti ns msexchexternaloofopti ns any any msexchhidefrmaddres slists msexchhidefrmaddres slists msexchhidefrmaddres slists any any msexchmailbxauditena ble msexchmailbxauditena ble msexchmailbxauditena ble any any msexchmailbxauditlg AgeLimit msexchmailbxauditlg AgeLimit msexchmailbxauditlg AgeLimit any any msexchmailbxguid msexchmailbxguid msexchmailbxguid any any msexchmdbrulesquta msexchmdbrulesquta msexchmdbrulesquta any any msexchmessagehygiene Flags msexchmessagehygiene Flags msexchmessagehygiene Flags any any SMART ACTIVE DIRECTORY MIGRATOR 9.2 USER GUIDE 106

107 Surce Field Internal Field Target Field S urc e Ty pe Targ et Typ e 1 Tar get Typ e 2 Cmments msexchmessagehygiene SCLDeleteThreshld msexchmessagehygiene SCLDeleteThreshld msexchmessagehygiene SCLDeleteThreshld any any msexchmessagehygiene SCLJunkThreshld msexchmessagehygiene SCLJunkThreshld msexchmessagehygiene SCLJunkThreshld any any msexchmessagehygiene SCLQuarantineThreshl d msexchmessagehygiene SCLQuarantineThreshl d msexchmessagehygiene SCLQuarantineThreshl d any any msexchmessagehygiene SCLRejectThreshld msexchmessagehygiene SCLRejectThreshld msexchmessagehygiene SCLRejectThreshld any any msexchmderatinflags msexchmderatinflags msexchmderatinflags any any msexchpliciesexcluded msexchpliciesexcluded msexchpliciesexcluded any any msexchpliciesincluded msexchpliciesincluded msexchpliciesincluded any any msexchprvisiningflag s msexchprvisiningflag s msexchprvisiningflag s any any msexchrecipientdisplay Type msexchrecipientdisplay Type msexchrecipientdisplay Type any any This mapping is ignred and msexchrecipi entdisplayty pe is set t 6 when the prfile is set t sync users as Mail- Enabled Users r Disabled Mail-Enabled Users, r the SMART ACTIVE DIRECTORY MIGRATOR 9.2 USER GUIDE 107

108 Surce Field Internal Field Target Field S urc e Ty pe Targ et Typ e 1 Tar get Typ e 2 Cmments prfile is set t sync users As-Is and the bject in the surce is Mailbx- Enabled. msexchrecipienttypede tails msexchrecipienttypede tails msexchrecipienttypede tails any any This mapping is ignred and msexchreci pienttyped etails is set t 128 when the prfile is set t sync users as Mail- Enabled Users r Disabled Mail- Enabled Users, r the prfile is set t sync users As-Is and the bject in the surce is Mailbx- Enabled. msexchrequireauthts endt msexchrequireauthts endt msexchrequireauthts endt any any SMART ACTIVE DIRECTORY MIGRATOR 9.2 USER GUIDE 108

109 Surce Field Internal Field Target Field S urc e Ty pe Targ et Typ e 1 Tar get Typ e 2 Cmments msexchresurcecapacit y msexchresurcecapacit y msexchresurcecapacit y any any msexchresurcedisplay msexchresurcedisplay msexchresurcedisplay any any msexchresurcemetada ta msexchresurcemetada ta msexchresurcemetada ta any any msexchresurcesearchp rperties msexchresurcesearchp rperties msexchresurcesearchp rperties any any msexchsaferecipientsh ash msexchsaferecipientsh ash msexchsaferecipientsh ash any any msexchsafesendershas h msexchsafesendershas h msexchsafesendershas h any any msexchtransprtrecipie ntsettingsflags msexchtransprtrecipie ntsettingsflags msexchtransprtrecipie ntsettingsflags any any msexchumdtmfmap msexchumdtmfmap msexchumdtmfmap any any msexchumspkenname msexchumspkenname msexchumspkenname any any msexchuserculture msexchuserculture msexchuserculture any any msexchversin msexchversin msexchversin any any name Name name any any O O O any any SMART ACTIVE DIRECTORY MIGRATOR 9.2 USER GUIDE 109

110 Surce Field Internal Field Target Field S urc e Ty pe Targ et Typ e 1 Tar get Typ e 2 Cmments bjectguid AdminDisplayName admindisplayname any any therfacsimiletelephn enumber OtherFacsimileTelephn enumber therfacsimiletelephn enumber any any therhmephne OtherHmePhne therhmephne any any theripphne OtherIpPhne theripphne any any thermbile OtherMbile thermbile any any therpager OtherPager therpager any any thertelephne OtherTelephne thertelephne any any pager PagerNumber pager any any persnalpager PersnalPager persnalpager any any persnaltitle PersnalTitle persnaltitle any any Pht Pht Pht any any physicaldeliveryofficena me Lcatin physicaldeliveryofficena me any any Imprtant, particularly fr printers. popcharacterset POPCharacterSet popcharacterset any any popcntentfrmat POPCntentFrmat popcntentfrmat any any pstaladdress PstalAddress pstaladdress any any SMART ACTIVE DIRECTORY MIGRATOR 9.2 USER GUIDE 110

111 Surce Field Internal Field Target Field S urc e Ty pe Targ et Typ e 1 Tar get Typ e 2 Cmments pstalcde OfficeZip pstalcde any any pstofficebx PstOfficeBx pstofficebx any any preferreddeliverymeth d PreferredDeliveryMeth d preferreddeliverymeth d any any primaryinternatinalisd NNumber PrimaryInternatinalISD NNumber primaryinternatinalisd NNumber any any primarytelexnumber PrimaryTelexNumber primarytelexnumber any any prxyaddresses PrxyAddresses any any rmnumber RmNumber rmnumber any any samaccuntname SAMAccuntName samaccuntname any any The fllwing restricted chars will be replaced with underscres:, + " < > ; = / [ ] : *? \ shwinadvancedviewon ly ShwInAdvancedViewO nly shwinadvancedviewon ly any any sn LastName sn any any Smetimes used as surname. st OfficeState st any any SMART ACTIVE DIRECTORY MIGRATOR 9.2 USER GUIDE 111

112 Surce Field Internal Field Target Field S urc e Ty pe Targ et Typ e 1 Tar get Typ e 2 Cmments street Street street any any streetaddress OfficeStreetAddress streetaddress any any telephneassistant TelephneAssistant telephneassistant any any telephnenumber OfficePhneNumber telephnenumber any any terminalserver TerminalServer terminalserver any any textencdedoraddress TextEncdedORAddress textencdedoraddress any any thumbnaillg ThumbnailLg thumbnaillg any any thumbnailpht * ThumbnailPht * thumbnailpht * any any title JbTitle title any any unauthorig UnauthOrig unauthorig any any url WebSite url any any usercert UserCert usercert any any usercertificate UserCertificate usercertificate any any userprincipalname UserPrincipalName userprincipalname any any usersmimecertificate UserSMIMECertificate usersmimecertificate any any wwwhmepage WWWHmePage wwwhmepage any any SMART ACTIVE DIRECTORY MIGRATOR 9.2 USER GUIDE 112

113 Surce Field Internal Field Target Field S urc e Ty pe Targ et Typ e 1 Tar get Typ e 2 Cmments managedby ManagedBy gr up gru p cn tact gruptype GrupType gruptype gr up gru p * thumbnailpht values are synced directly frm the Surce t the Target. SMART ACTIVE DIRECTORY MIGRATOR 9.2 USER GUIDE 113

114 Appendix B. Custmizing Overrides T add a View Override: 1. Frm the Mapping tab, click Overrides. The View Overrides windw appears. 2. Click Add. The Override dialg appears. 3. Select a Persn r Grups frm the View drp-dwn list. 4. Enter a Field Name fr the new verride. This must be a valid internal field name in SQL. 5. Enter a Field Value fr the new verride. This must be a crrectly frmatted SQL statement. 6. Enter Cmments fr the new verride. 7. Click Save. 8. Click Yes fr the cnfirmatin message. SMART ACTIVE DIRECTORY MIGRATOR 9.2 USER GUIDE 114

115 When yu save an verride, SMART Directry Sync re-generates the Persn r Grups view. It des this by dynamically generating a single SQL statement using the snippet f SQL cde that is part f all verrides. The max size fr this SQL statement is 8000 ttal characters. If many new verrides are added, this limit culd be exceeded and an errr when adding the verrides will ccur. In additin t the default verrides, apprximately mre Persn and Grup verrides can be added befre hitting the size limit. T edit a mapping verride: 1. Frm the Mapping tab, click Overrides. The View Overrides windw appears. 2. Select an Override and click Edit. The Override dialg appears. 3. Edit the Field Value fr the verride. The View and Field Name cannt be edited. 4. Edit Cmments fr the verride. 5. Click Save. 6. Click Yes fr the cnfirmatin message. SMART ACTIVE DIRECTORY MIGRATOR 9.2 USER GUIDE 115

116 T delete a mapping verride: 1. Frm the Mapping tab, click Overrides. The View Overrides windw appears. 2. Select an Override and click Delete. 3. Click Yes fr the cnfirmatin message. Cntrlling actins with Overrides SMART Directry Sync uses the TypeOfTransactin clumn frm the BT_Persn table, r the Operatin clumn frm the BT_Grups table t determine what actin t perfrm n the target bject. These may have verrides applied t them, t cntrl what actins Directry Sync will take fr an bject. The belw image shws an example f this kind f verride. SMART ACTIVE DIRECTORY MIGRATOR 9.2 USER GUIDE 116

117 Matching user accunts with Overrides The values used fr matching can have verrides applied t them. This is accmplished by setting up a new verride using the field names MatchValue1, MatchValue2, MatchValue3 and MatchValue4. Each MatchValue1-4 crrespnds the respective Surce and Target pair n the matching tab. These values are used fr matching nly. Values that get written t the target are based n the mappings, nt the matching. Example Overrides Field Name Field Value Descriptin TargetAddre ss TargetAddre ss CASE EntryType WHEN 'user' THEN 'SMTP:' + P.BTCustm020 + '@dmin.cnts.cm' ELSE 'SMTP:' + db.replacedmain(internetaddress,'dmin.cnts.cm') END 'SMTP:' + db.updateinternetaddress(internetaddress,'dmin.') This frmula will dynamically set the targetaddress value based n the EntryType. This frmula will set the TargetAddress value based n the InternetAddress and prefix the dmain with the SMART ACTIVE DIRECTORY MIGRATOR 9.2 USER GUIDE 117

118 Field Name Field Value Descriptin value specified, in this case "dmin.". TargetAddre ss TargetAddre ss CmmnNa me ' 'SMTP:' + db.replacedmain(internetaddress,'dmin.cnts.cm') CASE WHEN InternetAddress LIKE '%@kdak.cm' THEN 'smtp:' + db.updateinternetaddress(p.internetaddress, 'dmin.') WHEN InternetAddress LIKE '%@kntes.cnts.cm' THEN 'smtp:' + db.replacedmain(p.internetaddress, 'dmin.cnts.cm') ELSE P.InternetAddress END CASE EntryType WHEN 'user' THEN 'd$$' + SurceDirectryID WHEN 'sharedmail' THEN 'd$$' + SurceDirectryID ELSE CmmnName END This frmula will set the TargetAddress value based n the InternetAddress and replace the dmain with the value specified, in this case "dmin.cnts.c m". This frmula will dynamically set the targetaddress value based n the existing InternetAddress dmain name value. If the first dmain is fund then the TargetAddress will be set t ne value, if the secnd dmain is fund anther value will be used and if neither dmain is fund then the TargetAddress will be set the same as the current InternetAddress value. This frmula will dynamically set the CmmnName SMART ACTIVE DIRECTORY MIGRATOR 9.2 USER GUIDE 118

119 Field Name Field Value Descriptin value based n the EntryType. CmmnNa me PrxyAddres ses CASE WHEN LEN(CmmnName) > 64 THEN LTRIM(RTRIM(LEFT(CmmnName,64))) ELSE CmmnName END CASE PrxyAddresses WHEN '' THEN 'smtp:' + db.replacedmain(internetaddress,'@cnts.mail.nmicrsft. cm;smtp:') + db.updateinternetaddress(internetaddress,'dmin.') ELSE PrxyAddresses + ';smtp:' + db.replacedmain(internetaddress,'@cnts.mail.nmicrsft. cm;smtp:') + db.updateinternetaddress(internetaddress,'dmin.') END This frmula will limit the CmmnName value t 64 characters if it exceeds that limit. This frmula will set r append t the list f PrxyAddresses values the cexistence ruting addresses. This example specifically is designed fr Office 365. Cmpany LTRIM(RTRIM(LEFT(cmpany, 50))) This frmula will Trim, then limit the string value by 50 characters. BTCustm0X X BTCustm0X X BTCustm0X X "this is a string" REPLACE(InternetAddress,'@','.') LEFT(InternetAddress,CHARINDEX('@',InternetAddress)-1) This frmula will set any string value t the any SQL field. This frmula will replace the '@' symbl with a perid '.' t create a string like s. (i.e. first.last.cnts.c m) This frmula will extract the lcalpart f InternetAddress. SMART ACTIVE DIRECTORY MIGRATOR 9.2 USER GUIDE 119

120 Appendix C. Cutver Jb Result Cdes Cutver Jb Result Cdes Result Cde Errr Rllback Pssible 1 Unidentified Errr - PwerShell Cmmand Errr N 2 Surce Dmain culd nt be cntacted N 4 Bad Surce Credentials N 8 Target Dmain culd nt be cntacted N 16 Bad Target Credentials N 32 Target DNS Server culd nt be cntacted r culd nt reslve the target DNS dmain N 64 Change Obtain DNS by DHCP 128 Set DNS Server IPs 256 Set WINS Servers 512 Register NIC with DNS 1024 Clear DNS Suffix Search List / Set t use NIC 2048 Set Alternate DNS Suffix List 4096 Enable Dynamic DNS Registratin 8192 Set NIC Specific DNS Suffix Dmain Disjin Failed Dmain Jin Failed Surce dmain name des nt match the system's dmain N Cmputer Rebt failed Target Dmain Name culd nt be reslved via existing DNS, and new DNS Servers were nt prvided N SMART ACTIVE DIRECTORY MIGRATOR 9.2 USER GUIDE 120

121 An dd number result cdes represents an errr running the Cutver PwerShell script. The mst cmmn cause f an dd numbered result cde during cutver is that the device either has n netwrk card with default gateway r mre than ne netwrk card with a default gateway. Result cdes are additive. There are likely multiple errrs if the result cde is nt represented in the table. Uplad Lgs Result Cdes This table includes result cdes fr BT-UpladLgs PwerShell jbs. Result Cde Errr Rllback Pssible 32 (zip flder) culd nt be created. N 64 Failed t Zip lg files n device. N 128 Uplad failed t cntact the server. Please verify the URL (url) is crrect and BITS is enabled. N SMART ACTIVE DIRECTORY MIGRATOR 9.2 USER GUIDE 121

122 Appendix D. SMART Active Directry Reprter Overview SMART Active Directry Reprter (AD Reprter) prvides a query-based interface that allws netwrk administratrs and IT persnnel t easily build custm queries fr issues specific t their netwrk. AD Reprter queries Windws 2003/2003 R2/2008/2008 R2/2012 Active Directries acrss frests frm a central cnsle, allwing yu t perfrm custmized searches by dmain, bject, bject prperty and by using wildcards. AD Reprter search results can be set t any r all bject prperties. Installing AD Reprter T install AD Reprter: 1. Open the zip file and then launch the Setup.exe. SMART ACTIVE DIRECTORY MIGRATOR 9.2 USER GUIDE 122

123 2. Select the Install SMART Active Directry Reprter Sftware checkbx and click Install. 3. Select the Installatin Drive and Path and click n Select. SMART ACTIVE DIRECTORY MIGRATOR 9.2 USER GUIDE 123

124 4. Wait fr installatin t cmplete. Uninstalling AD Migratr T uninstall AD Reprter: 1. Select Uninstall frm the Start menu. SMART ACTIVE DIRECTORY MIGRATOR 9.2 USER GUIDE 124

125 2. Click n OK t cntinue with the uninstall. 3. Select ADReprter and click n OK SMART ACTIVE DIRECTORY MIGRATOR 9.2 USER GUIDE 125

126 4. Click n Exit when the uninstall is cmplete. Opening AD Reprter T pen AD Reprter: 1. Click Start, click Binary Tree, click the AD Migratr Suite flder and then right-click n the AD Reprter icn and select t Run as administratr. Setting the screen size Yu can change the size f the AD Reprter applicatin t better fit yur screen. T set the screen size: 1. On the Cnfiguratin menu, click Set Screen Size. 2. In the Screen Size Optins, select a screen size reslutin. 3. Click OK. 4. Clse and repen the applicatin t view the applicatin in the selected size. Cnfiguring AD Reprter Cnfiguring AD Reprter requires yu t define ne r mre active directry dmains and select the current active directry dmain t search. SMART ACTIVE DIRECTORY MIGRATOR 9.2 USER GUIDE 126

127 T cnfigure AD Reprter: 1. On the Cnfiguratin menu, click Add Active Directry Dmain. 2. In the Dmain Cnfiguratin Wizard, enter the dmain NetBIOS name in the Active Directry Dmain NetBIOS in Upper Case field, and then click Verify. 3. Click Add. 4. On the Cnfiguratin menu, click Set Current Active Directry Dmain. 5. Select the current active dmain t search, and then click OK. Searching T search: 1. Click the type f bject t search fr frm the Object Type list. The list includes: Dmain User Grup Organizatinal Unit (OU) Cmputer Print Queue Vlume (Shared Flders) Cntact Exchange (user prperties) 2. Select the prperty t search fr frm the Search Fr list. 3. Select ne r mre prperties t return in the results frm the Return results list. Use Ctrl-Click r Shift-Click t select mre than ne prperty t return. 4. Click Begin Search. Yu can als click Search Active Directry n the Active Directry Search and Reprt menu. 5. In the Narrw Search Optin windw, enter knwn prperty infrmatin t narrw the search criteria. Wildcards can be used in the search criteria. The default "All" will search fr all f the instances f the selected prperty. 6. Click OK. The results are displayed. If results appear t take a lng time t retrieve, DNS server may nt be prperly cnfigured, there may be brken trust relatinships the dmain AD Reprter is querying is nt reachable, r the accunt r prxy accunt may nt have adequate rights t the dmain being queried (check user rights). Results Viewing results T view results: SMART ACTIVE DIRECTORY MIGRATOR 9.2 USER GUIDE 127

128 In the results list, click a clumn header t srt by the clumn. Click and drag the clumn headers t increase the width f each clumn. Use the scrll bars t view infrmatin that is nt displayed in the windw. Saving results as a text file T save results as a text file: On the File menu, click Save Search Results as Text File. The results file is saved in the ADReprter\Reprts flder. If yu have searched fr a large amunt f infrmatin, we recmmend yu save results as an MS Excel file as the text file des nt have clumns. Once yu save the results as an MS Excel file, yu can easily frmat the clumns t a mre readable frmat. Viewing and managing results saved as a text file T view and manage results saved as a text file: 1. On the View and Manage Saved Results menu, click View and Manage Text File Reprts. 2. In the AD Reprter Manage Reprts windw, select a reprt and click View t view the file. Yu can als click Delete t remve the file. Printing results T print results: 1. On the File menu, click Print Search Results. 2. Select a printer and then click Print. Exprting results as an Excel file T exprt results as Excel file: 1. On the File menu, click Exprt Results as MS Excel File. 2. Enter a name fr the file, and then click OK. The results file is saved in the ADReprter\Reprts flder. Viewing and managing results exprted as an Excel file T view and manage results exprted as an Excel file: Excel must be installed. 1. On the View and Manage Saved Results menu, click View Saved Micrsft Excel File. 2. In the Saved Reprts windw, select a reprt and click Open t view the file in Excel. SMART ACTIVE DIRECTORY MIGRATOR 9.2 USER GUIDE 128

129 Advanced Optins Editing Object Prperties T edit bject prperties: 1. On the Advanced Optins menu, click Edit Object Prperties. 2. In the AD Reprter Advance Prperties windw, select an bject type t mdify and then click Mdify. 3. T remve an bject prperty, select the prperty and click Remve. T add an bject prperty, enter the prperty name and click Add. Added prperties must exist, are case-sensitive, and must be ppulated t return infrmatin. 4. Select the bject prperty t update the list f bject prperties. Backing up and restring Object Prperties T back up and restre Object Prperties: 1. On the Advanced Optins menu, click BackUp/Restre Object Prperties, and then select ne f the fllwing ptins: 2. Click OK. BackUp Current Object Prperties backs up current bject prperties t a.zip file at the installatin lcatin Restre Default Object Prperties restres the default bject prperties Restre Object Prperties Frm BackUp restres the bject prperties frm the saved back up 3. Select the Object Prperty t update the list f bject prperties. AD Reprt Tls Cnvert Raw Active Directry Data t Textual Frmat T cnvert Raw Active Directry Data t textual frmat: 1. Create a reprt that includes results in Raw data frmat (SID, GUID, LgnHurs, Date, GrupType). 2. In the results list, duble-click the searched fr bject prperty. 3. In the Select Item t Send t Clipbard list, select the raw data t cnvert frm the list and then click OK. 4. On the AD Reprt Tls menu, click Cnvert Raw Active Directry Data t Textual Frmat. 5. In the Cnversin windw, select the cnversin type fr the raw data n yur clipbard and then click OK. 6. Right-click and select Paste. The raw data is inserted. 7. Click OK. The cnverted data is displayed. Get all current bject prperties by Object Type T get all current bject prperties by bject type: SMART ACTIVE DIRECTORY MIGRATOR 9.2 USER GUIDE 129

130 1. On the AD Reprt Tls menu, click Get All Current Object Prperties by Object Type. 2. Select an bject type and then click OK. 3. Select ne r mre prperties t add t AD Reprter and click OK. 4. The AD Reprter Available Prperties windw appears with the selected prperties added t the list f prperties. Yu can als remve r add prperties n this screen. 5. Click Clse t clse the windw. Active Directry Reprts AD Reprter includes several predefined reprts allwing quick searches fr frequently used infrmatin. On the Active Directry Reprts menu, pint t user Reprts, grup Reprts, r cmputer Reprts, and then click a reprt. The search results appear. On the Active Directry Reprts menu, click Generate User Mapping File t generate a list f unmatched samaccuntname values n the Surce and Target based n the input f a matching attribute. Active Directry Reprts include: User Reprts Disabled users all users with the Accunt Status = Accunt Disabled User never lgged n all users with the Lgn Status = 0 (zer) r blank All users withut an address all users with the Status = N address Duplicate Surce and Target Users duplicate same-named user accunts in the surce and target. At least tw dmains must be cnfigured t run this reprt. Grup Reprts Grups with n members all grups with the Membership Status= n grup members All security grups all security grups with Grup Type value displayed All distributin grups all distributin grups with Grup Type value displayed Duplicate Surce and Target Grups duplicate same-named grup accunts in the surce and target. At least tw dmains must be cnfigured t run this reprt. Cmputer Reprts All XP cmputers All XP cmputers with Cmputer Type value displayed All Vista cmputers All Vista cmputers with Cmputer Type value displayed All Windws 7 cmputers All Windws 7 cmputers with Cmputer Type value displayed All Windws 8 cmputers All Windws 8 cmputers with Cmputer Type value displayed All Windws 2000 Servers-Wrkstatins All Windws 2000 Servers-Wrkstatins with Cmputer Type value displayed All Windws 2003 Servers All Windws 2003 Servers with Cmputer Type value displayed All Windws 2008 Servers All Windws 2008 Servers with Cmputer Type value displayed SMART ACTIVE DIRECTORY MIGRATOR 9.2 USER GUIDE 130

131 All Windws 2008 R2 Servers All Windws 2008 R2 Servers with Cmputer Type value displayed All Windws 2012 Servers All Windws 2012 Servers with Cmputer Type value displayed All Cmputers withut a descriptin - All Cmputers with the Cmputer Descriptin = N Descriptin Generate User Mapping File The User Mapping File is a list f unmatched samaccuntname values n the Surce and Target based n the input f a matching attribute. If using an attribute t link the surce and target user accunts tgether, ensure that the values f the attribute n the Surce are unique s there are nt multiple matches generated. If the values f the attribute n the Target are nt unique, the reprt will thrw an errr and will nt allw the creatin f the UsersMapping.map file at the end f the prcess. T generate a User Mapping File: 1. On the Active Directry Reprts menu, click Generate User Mapping File. 2. Select a Surce Dmain and click OK. 3. Select a Target Dmain and click OK. 4. Enter the LDAP name f the AD attribute yu want the accunts t match n and click OK. The matching results appear. 5. Click Yes t create a mapping file frm the results. A mapping file cannt be created if ne r mre f the results have multiple target matches. AD Reprter Best Practices Check Access Rights Yu must be lgged n t a Windws 2003/2008/2012 Dmain. If yu are nt lgged n t a Windws 2003/2008/2012 Dmain, yu cannt cnnect t Active Directry t set AD bject attributes. If yu are searching a single dmain, yu must have Dmain Admin rights t the dmain. If yu are searching dmains and child dmains, yu must have Enterprise Admin rights t the dmain tree. Ensure that nn-existent r brken trusts relatinships d nt exist. If there are nn-existent r brken trust relatinships, AD Reprter will attempt t query nn-existent dmains, slwing the search. T Query Share Infrmatin When Querying Share (Vlume) infrmatin, Shares must be published t Active Directry. AD Reprter searches Active Directry infrmatin, nt cmputer infrmatin; if the Shares are nt published t Active Directry, AD Reprter will nt retrieve results. SMART ACTIVE DIRECTORY MIGRATOR 9.2 USER GUIDE 131

132 Appendix E. Advanced Netwrk Requirements SMART Active Directry Migratr Prt Requirements Surce Target Prts Prtcl AD Migratr Web Service SQL Server hlding primary database 1433 TCP & UDP AD Migratr Cnsle SQL Server hlding primary database 1433 TCP & UDP Client servers and wrkstatins AD Migratr Web Service 80 r 443 (Cnfigurable) TCP SMART Directry Sync t SQL Server Access Surce Target Prts Prtcl Directry Sync SQL Server hlding the primary database 1433 TCP & UDP Directry Sync SQL Server hlding the lgging database 1433 TCP & UDP SMART Directry Sync Prfile Specific Scenari Requirements Directry Sync Match Only r Update Only Prfile (n bject creatin) Surce Target Prts Prtcl Directry Sync Surce Dmain cntrllers 389, 445*, 3268 Directry Sync Target Dmain cntrllers 389, 445, 3268 TCP (all) UDP (389) TCP (all) UDP (389) * Prt 445 nly needs t be pen t the Surce Dmain Cntrller during Directry Sync Prfile creatin Directry Sync Prfile with Create Only r Create/Update Matching Optin Surce Target Prts Prtcl Directry Sync Surce Dmain cntrllers 389, 445*, 3268 TCP (all) UDP (389) SMART ACTIVE DIRECTORY MIGRATOR 9.2 USER GUIDE 132

133 Surce Target Prts Prtcl Directry Sync Target Dmain cntrllers 139, 389, 445, 3268 TCP (all) UDP (389) * Prt 445 nly needs t be pen t the Surce Dmain Cntrller during Directry Sync Prfile creatin Directry Sync Prfile with Synchrnize Passwrds selected Surce Target Prts Prtcl Directry Sync Surce r Target Dmain cntrllers 139, 389, 445, 3268 TCP (all) UDP (389) Directry Sync Prfile with SID Histry Synchrnizatin selected Surce Target Prts Prtcl Directry Sync Surce r Target Dmain cntrllers running Windws 2008 r newer 135, 137, 139, 389, 445, 3268 and TCP (all) UDP (389) Directry Sync Surce r Target Dmain cntrllers running Windws , 137, 139, 389, 445, 3268 and TCP (all) UDP (389) SMART ACTIVE DIRECTORY MIGRATOR 9.2 USER GUIDE 133

134 Appendix F. SMART AD Migratr SQL Repermissin Use the SMART AD Migratr SQL Re-permissin utility t update a SQL Server s Surce AD Windws Authenticatin Grup Lgin permissins and their assciated database users fr the Target dmain the user and grup bjects have been migrated t. Prir t re-permissining SQL servers, accunts must be migrated and Mapping Files created using SMART Active Directry Migratr. 1. Dwnlad the Binary Tree SQL Repermissin.msi file frm the FTP lcatin prvided. 2. Run the installer n the SMART Active Directry Migratr server r any machine that will have access t the SQL Server instance and databases t be re-permissined. 3. The Welcme screen appears. Click Next t cntinue. SMART ACTIVE DIRECTORY MIGRATOR 9.2 USER GUIDE 134

135 4. The Ready t Install screen appears. Click Install t begin the installatin. 5. When the installatin cmpletes, the InstallShield Wizard Cmplete message appears. Click Finish t clse the wizard. 6. Cpy the map.usr and map.gg files created using SMART Active Directry Migratr t a flder n the same machine. SMART ACTIVE DIRECTORY MIGRATOR 9.2 USER GUIDE 135

136 7. Launch the SQL Repermissin utility frm the Start menu. 8. Select the SQL Lgn Methd. If SQL Server Authenticatin is selected, enter the Username and Passwrd. If Windws Authenticatin will be used, yu must be lgged nt the machine with an accunt that has access t the SQL Server instance and databases t be re-permissined. 9. Click n Brwse t select the SQL Server instance t be re-permissined. SMART ACTIVE DIRECTORY MIGRATOR 9.2 USER GUIDE 136

137 10. Select the SQL server instance frm the list and click n OK. 11. Click n the Cnnect buttn. If cnnectin is successful, the Lgging message shuld read SQL Server Cnnected and there shuld be databases available t pick frm in the drp-dwn list. Nte: If the lgin infrmatin is incrrect, the fllwing errr will be received. The credentials t cnnect t the SQL server instance shuld be crrected, and then the Cnnect shuld be retried. 12. Once successfully cnnected t the SQL server instance, in the drp dwn select either <ALL> r a specific database that needs t be re-permissined. 13. Click n the Generate SQL buttn. If the Open script in Ntepad ptin is left checked, the results will be displayed when cmpleted. SMART ACTIVE DIRECTORY MIGRATOR 9.2 USER GUIDE 137

138 14. The Lgging infrmatin will display the name f the SQL file created in the directry that the applicatin is lcated. 15. If the ptin t pen the file in Ntepad was nt checked, navigate t where the file was saved and right-click and chse Open with Ntepad. 16. The results f the prcess can be reviewed prir t actually executing it n the SQL Server instance. 17. When the SQL file has been reviewed, either pen the file in SQL Server Management Studi r create a new Query in SQL Server Management Studi and cpy/paste the cntents f the file int the Query. 18. Execute the Query and the new target credentials will be created. SMART ACTIVE DIRECTORY MIGRATOR 9.2 USER GUIDE 138

139 Appendix G. Creating Linked Exchange Accunt This prcess supprts custmers that require cmpleting their AD migratin befre their Exchange migratin by creating a linked Exchange accunt. This allws users t lg int their mailbx that still resides in the surce Dmain, using their target credentials. After an accunt has been migrated, the device reacl d and cutver t the target, fllw the next steps in rder t link the target accunt t the Exchange mailbx still residing in the surce. In AD Migratr Cnsle: 1. Run the actin n the migrated accunts Enable n Target/Disable n Surce. 2. Execute Sync in AD Migratr fr that Dirsync Prfile. 3. Run the Mark as Migrated actin n the abve user accunts. 4. Filter n the Migrated clumn as True and verify nly the accunts t be actined are in the grid. 5. Exprt the AD Migratr Grid t a CSV. In SMART Directry Sync, n the Exchange Target Optins tab, make sure the Allw Enable/Disable f Mailbx Enabled Surce Object ptin is set t Yes. On the Surce Exchange server: 1. Dwnlad the script file t a lcal directry and rename BT-CnvertMBX-t-Linked.ps1. The script can be btained by cntacting supprt@binarytree.cm. 2. Cpy the updated CSV created frm exprt f the AD Migratr grid t the same lcal directry. 3. Run the fllwing Exchange PwerShell cmmand replace red date with actual data..\bt-cnvertmbx-t-linked.ps1 InputCsvPath c:\temp\exprt.csv OutputFlder c:\temp\utputlg SurceDmainDC E2E-DC1.DOM1.E2E.dm SurceDmainGC E2E-DC1.DOM1.E2E.dm TargetDmainCntrller QA-E2E-DC1.QA-Dm1.QA-E2E.dm Results: Lg utput will als be created in the directry specified in the PwerShell cmmand. SMART ACTIVE DIRECTORY MIGRATOR 9.2 USER GUIDE 139

140 Verificatin: Check the fllwing AD attributes: 1. msexchmasteraccuntsid f the surce accunt shuld cntain the target accunt bjectsid value. 2. Check that the legacyexchangedn n the bth the surce and target accunt has nt changed. Check mailbx using Outlk 1. Lg in t device using target accunt. 2. Launch Outlk. 3. Outlk shuld launch withut prmpting fr credentials (shuld us pass-thrugh authenticatin). 4. Check that any additinal prxyaddress are still present n the surce user mailbx. 5. Spt check in Outlk fr the retentin f signatures, tl bar edits, etc. Additinal: Once all f the abve has been cmpleted and verified, migrate the mailbx t the target Exchange and verify that it is still accessible. SMART ACTIVE DIRECTORY MIGRATOR 9.2 USER GUIDE 140