SMART Directory Sync 4.5. Comprehensive User Guide for Domino-Active Directory Synchronization

SMART Direry Sync 4.5 Cmprehensive User Guide fr Dmin-Aive Direry Synchrnizatin February 2016

Table f Cntents Sein 1. Intrduin... 4 1.1 Purpse... 4 1.2 Audience fr Dmin - Aive Direry Synchrnizatin... 4 1.3 Abut SMART Direry Sync fr Dmin - Aive Direry Synchrnizatin... 4 Key Features and Funins... 4 Sein 2. Cnfiguring Synchrnizatin... 6 2.1 Applying a License... 6 2.2 Adding a Dmin Direry t Aive Direry Synchrnizatin Prfile... 7 2.3 Adding an Aive Direry t Dmin Direry Synchrnizatin Prfile... 21 2.4 Imprting and Exprting a Prfile... 32 2.5 Suspending and Aivating a Prfile... 33 2.6 Remving a Prfile... 33 2.7 Resetting a Prfile... 33 Sein 3. Running Sync Reprts... 35 Sein 4. Running Direry Sync... 43 4.1 Manually Starting a Synchrnizatin using a Sync Prfile... 43 4.2 Manually Starting a Synchrnizatin Prcess using the Right-Click Menu... 43 4.3 Manually Starting a Synchrnizatin Prcess frm a Cmmand Line... 44 Sein 5. Using the SMART Direry Sync Lg Viewer t View Lgs and Audits... 45 5.1 Using the SMART Direry Sync Lg Viewer t View Lgs and Audits... 45 5.2 Searching Lg r Audit Entries... 45 5.3 Pausing a Lg... 46 5.4 Shwing r Audit Lg Entries fr a Time Perid... 46 5.5 Filtering the Lg r Audits... 47 5.6 Gruping the Lg r Audits by Clumn... 47 5.7 Viewing Lg r Audit Entry Details... 48 5.8 Exprting Lg r Audit Entries... 49 5.9 Clearing Lg r Audit Entries... 49 Sein 6. Updating the Grups t Ignre List in SQL... 51 6.1 Updating the Grups t Ignre List in SQL fr Dmin - Aive Direry Synchrnizatin... 51 6.2 Default List f Grups in the Grups t Ignre List fr Dmin - Aive Direry Synchrnizatin.. 51 6.3 Updating the Grups t Ignre List with the SQL Server Management Studi (SSMS)... 53 6.4 Updating the Grups t Ignre List with the SQL Imprt and Exprt Tl... 55 2

6.5 Excluding Security Grups frm Synchrnizatin with the Grup Filter... 59 Appendix A: Using the User and Grup LDAP Filters... 60 Appendix B: Additinal Cnfiguratin Optins... 61 Changing the attribute used fr "Created by Dirsync" r "Updated by Dirsync"...61 Setting msexchrecipientdisplaytype and msexchrecipienttypedetails Exchange attributes...61 Appendix C: Default Mapping... 64 Dmin Surce AD Target Default Mapping... 64 AD Surce Dmin Target Default Mapping... 73 Appendix D: Custmizing Overrides... 83 Cntrlling ains with Overrides... 86 Matching user accunts with Overrides... 86 Example Overrides... 87 Appendix E: Direry Sync Fields with Special Prcessing... 90 AD Direry Sync Fields with Special Prcessing... 90 Writing Users t AD... 90 Writing Grups t AD... 92 Additinal Ntes... 94 Dmin Direry Sync Fields with Special Prcessing... 95 Abut Binary Tree... 97 3

Sein 1. Intrduin 1.1 Purpse The purpse f this dcument is t prvide infrmatin n hw t use Binary Tree SMART Direry Sync t perfrm synchrnizatins between Dmin and Aive Direry. 1.2 Audience fr Dmin - Aive Direry Synchrnizatin It is assumed the reader has the fllwing technical expertise: Advanced Dmin Administratin Advanced Aive Direry & Exchange Administratin Windws Administratin SQL Administratin LDAP SMTP Ruting DNS 1.3 Abut SMART Direry Sync fr Dmin - Aive Direry Synchrnizatin SMART Direry Sync allws yu t synchrnize bjes frm Dmin t Aive Direry r Aive Direry t Dmin. Direry Sync has been carefully designed and crafted t meet the challenging requirement fr a slutin that can deliver a reliable, secure, and autmated slutin that synchrnizes and transfrms direry data between Exchange 2003, 2007, 2010, 2013, 2016, and Dmin 7.x r higher envirnments. Key Features and Funins Sync Reprts allw yu t view hw bjes will appear in the target direry befre synchrnizing a prfile. This allws fr the remediatin f any data issues withut impaing the target direry User Synchrnizatin Synchrnize user bjes frm between Aive Direry and Dmin Create Aive Direry bjes as Cntas r Mail-Enabled Objes Ability t match and update existing bjes Custmizable attribute matching lgic Ability t mail-enable matched users in the target Aive Direry Ability t synchrnize, mail-in databases, rms and resurces frm Dmin t Aive Direry Ability t synchrnize shared mailbxes, rms and resurces frm Aive Direry t Dmin 4

Grup Synchrnizatin Synchrnize grups int the target direry as member-ppulated grups r as cntas Cnfli reslutin ptins Create External Members as Cntas in AD 5

Sein 2. Cnfiguring Synchrnizatin The SMART Direry Sync Cnsle prvides an easy t fllw wizard fr creating direry synchrnizatin prfiles between Dmin and Aive Direry. It als allws yu t quickly manage prfiles and immediately start synchrnizatin. T begin cnfiguring the synchrnizatin, start the installed SMART Direry Sync Cnsle. 2.1 Applying a License All SMART Direry Sync prfile types are licensed fr the number f bjes t be synchrnized. Sme ptins are either enabled r disabled (fr example, Grup migratin). A license key must be added in rder t synchrnize bjes t a Target.T apply a license: 1. On the SMART Direry Sync Cnsle, click the License buttn. The License dialg windw appears. 2. Click the Apply License buttn. 3. Brwse t and sele the license (.lic) file btained frm Binary Tree, and then click Open. 4. The license details appear in the dialg windw. Click Clse t clse the windw. 6

2.2 Adding a Dmin Direry t Aive Direry Synchrnizatin Prfile T add a Dmin direry t Aive Direry synchrnizatin prfile: 1. Click Add Prfile. 2. In the Prfile Type Selein windw, sele Dmin Direry t Aive Direry and then click OK. The fllwing Prfile Types are als available: AD Migratin/Synchrnizatin used fr bth AD t AD direry synchrnizatin and in supprt f an Aive Direry migratin utilizing Binary Tree s SMART Aive Direry Migratr prdu. Exchange Migratin used in supprt f an Exchange migratin utilizing Binary Tree s E2E Cmplete prdu. Aive Direry t Dmin Direry used t synchrnize bjes frm an Aive Direry surce t a Dmin direry target. Windw Server Migratin used in supprt f a Windws Server migratin utilizing Binary Tree s Windws Server Migratin prdu. 7

3. A new pane appears at the bttm f the cnsle which prvides the ability t cnfigure ptins fr synchrnizatin. 4. On the General tab, enter a name t identify the prfile in the Name field. 5. Sele the status f the prfile frm the Status drp-dwn list: Aive will synchrnize as scheduled Suspended Nt aive, will nt synchrnize 6. Sele the lgging level f the prfile frm the Lgging drp-dwn list: Lw nly errrs are lgged Medium errrs and warnings are lgged High all messages (errrs, warnings, infrmatin, etc.) are lgged (shuld be used fr trubleshting purpses nly) 7. Sele an Audit Lgging ptin frm the drp-dwn list: Enabled Recrds bje and attribute changes in the Audit Lg Disabled Obje and attribute changes will nt be recrded in the Audit Lg 8. Fr Schedule, sele the schedule: By frequency enter the apprpriate frequency r the specific time fr the synchrnizatin prcess t run fr yur envirnment. Zer (0) is nt a valid value fr frequency. The minimum interval is 15 minutes. At specific times(s) enter ne r mre specific times r sele times frm the drp-dwn list f times. A seleed time can be deleted by seleing the time and clicking the Delete key. Manual nly the synchrnizatin prcess will nt run until it is manually started. If yu chse the By frequency ptin, SMART Direry Sync will initiate a synchrnizatin when an aive prfile is saved. Sele the At specific time(s) ptin and sele a time in the future r sele the Manual nly ptin if yu want t save an aive prfile withut it syncing right away. This wuld be helpful if yu wanted t run a Sync Reprt r inspe items in SQL befre pulling them int the target Aive Direry. 8

9. Click the Dmin Surce tab. 10. Sele an Attribute Change Detein ptin frm the drp-dwn list: Enabled Only fields changed n the surce Dmin direry will be synchrnized Disabled All fields n the surce Dmin direry will be synchrnized 11. Sele the Binary Tree Dmin server frm the Dmin Server drp-dwn list. 12. Sele r enter the Dmin direries t synchrnize in the fllwing ways: Click Add Direry t sele Dmin direries t synchrnizatin. Sele the Dmin direries t synchrnize, sele the Synchrnize Users, Synchrnize Rms/Resurces, Synchrnize Grups, and Synchrnize MailInDBs ptins if yu want users, grups, rms/resurces, and MailInDBs t synchrnize, and then click OK. Use Ctrl+click t sele mre than ne direry. 9

Click a rw in the table t manually enter a direry file name (example: names.nsf). Any direry added must be in the data direry f the Binary Tree Dmin server. The Sync Users, Sync Grups, Sync Rms/Resurces, and Sync MailInDBs ptins are seleed by default. Uncheck ptins if yu dn t want thse bje types t synchrnize fr the entered direry. T desele a Dmin direry frm the surce, sele it and then click Remve Direry. The Remve Direry buttn is enabled when a direry is added. 13. The fllwing surce Dmin direry fields are displayed: Title Title f the Dmin direry. File Name File name f the Dmin direry. Sync Users Sele this ptin t synchrnize users. Clear this ptin if yu d nt want t synchrnize users. Sync Grups Sele this ptin t synchrnize grups. Clear this ptin if yu d nt want t synchrnize grups. Sync Rms/Resurces Sele this ptin t synchrnize rms/resurces. Clear this ptin if yu d nt want t synchrnize rms/resurces. Sync MailInDBs Sele this ptin t synchrnize mail-in databases. Clear this ptin if yu d nt want t synchrnize mail-in databases. 10

14. Click the AD Target tab enter credentials that have read/write access t the target Aive Direry. 15. In the User Name field, enter the name f the Aive Direry user that has the required rights t the Target direry. The credential shuld be entered as a user principal name (fr example, jsmith@acmecrp.cm) 16. In the Passwrd field, enter the passwrd f the Aive Direry user. These credentials shuld have write access t target OU, as well as any Dmains r subdmains that may cntain matched users. 17. In the Glbal Catalg Server field, enter the IP Address r fully qualified dmain name f the server (FQDN) f the Glbal Catalg Server r Dmain Cntrller that will be used fr all read peratins. 18. In the Target OU, Click Brwse t sele a target OU. 19. Enter a default passwrd fr new users in the Default Passwrd field. Default Passwrd is nt required when creating users as cntas. Direry Sync des nt validate the passwrd plicies present within yur dmains. Verify that the passwrd entered cmplies with the passwrd plicy f yur target envirnment. The default passwrd cannt exceed 128 charaers in length. 20. Sele an ptin frm the Preserve Objes in Target drp-dwn list t cntrl what happens t target bjes when the crrespnding surce bjes are deleted: N (default) When bjes are deleted in the surce, the crrespnding bjes will be deleted frm the target. This nly applies t bjes created in the target by SMART Direry Sync. Yes Objes that are deleted in the surce will nt be deleted in the target. 21. Sele an ptin frm the Preserve Deleted Objes in Target As Is drp-dwn list t cntrl what happens t target bjes if they are deleted: N (default) If an bje previusly synchrnized is deleted n the target, it will be recreated. Yes If an bje previusly synchrnized is deleted n the target, it will nt be recreated. 11

22. Sele an ptin frm the Preserve Sft Deleted Objes in Target drp-dwn list t cntrl what happens t target bjes when the crrespnding surce bjes are sft deleted: N (default) Bth hard and sft deleted bjes in the surce will be deleted in the target if they were created by SMART Direry Sync. Yes Sft deleted bjes in the surce will nt be deleted in the target. Hard deleted bjes in the surce will be deleted in the target if they were created by SMART Direry Sync. 23. Click the AD Target Optins tab. 24. Click the Users sub-tab. 25. Sele an ptin frm the Create Users as drp-dwn list: Mail-Enabled, AD Enabled Users will be Mail-Enabled Users in the target. Mail Enabled, AD Disabled Users in the surce will be Disabled Mail-Enabled Users in the target. Cnta Users in the surce will be Cntas in the target. This ptin des nt have lgn capabilities, but can be used fr maintaining mail flw fr existing users, cntas and distributin lists. The Mail-Enabled User ptin creates Aive Direry users with lgn capabilities in the target dmain and all prperties frm the surce s bje, including mail addresses. Direry Sync will nt create Mailbx-Enabled Users in the target direry. Rms and Resurces in Dmin are created as User bjes in Aive Direry. Due t a samaccuntname size limit f 20 charaers in Aive Direry, user bjes with calculated samaccuntname names greater than 20 charaers in length are truncated t 20 charaers. Truncated samaccuntnames will be appended with a randm number between 1 and 9999 t ensure uniqueness. This des nt apply t grup bjes. 26. Sele an ptin frm the D nt verwrite target Prxy Addresses drp-dwn list: Yes Prxy Addresses will nly be updated during initial sync if the target bje has n prxy addresses. Prxy addresses will nt be updated n subsequent syncs. N (default) Prxy Addresses n the target are verwritten. 12

27. Click the Grups sub-tab. 28. Sele an ptin frm the Create Dmin Mail-nly and Multipurpse Grups as drp-dwn list: Cnta Dmin Mail-nly and Multipurpse Grups will be cntas in the target. Glbal Grup (default) Dmin Mail-nly and Multipurpse grups in the surce will be Glbal grups in the target. Universal Grup Dmin Mail-nly and Multipurpse grups in the surce will be Universal grups in the target. Universal grups must be used if the target grup will cntain members frm ther AD Dmains, therwise thse members will nt be added t the grup. 29. Sele an ptin frm the Create Dmin ACL Grups as drp-dwn list: Security Grup (default) Dmin ACL grups will be Security grups in the target. Glbal Grup Dmin ACL grups in the surce will be Glbal grups in the target. Universal Grup Dmin ACL grups in the surce will be Universal grups in the target. Universal grups must be used if the target grup will cntain members frm ther AD Dmains, therwise thse members will nt be added t the grup. 30. Sele an ptin fr handling grup cllisins when tw grups f the same name are fund frm the Grup Cllisins drp-dwn list: Merge If a grup with the same name is fund in the target dmain, the members f the surce grup will be added t the target grup. Grup cllisins are determined based n Name first, then based n the ptins seleed n the Matching tab f the prfile. Skip (default) The grup will nt be synchrnized int the target AD and a warning entry will be entered int the lg entry stating that the surce grup will nt be synchrnized t the target grup. A grup that was previusly synchrnized t the target will fail t sync if a manual /repushpull /resync is run. Befre running the /repushpull and /resync cmmands, administratrs shuld clear the target OU f any previusly created bjes. 13

Rename - This allws yu t define a prefix r suffix t be added t the name f the grup when it is written in the target direry. This ptin creates a new grup and grup email address using the existing name and the prefix r suffix t bypass the grup cllisin when seleed. Prefix is seleed by default. T define a specific value fr the prefix r suffix, sele the Specific Value ptin and enter the value. T use a value frm an internal field, sele the Internal Field ptin and sele a field frm the drp-dwn list. If seleing an internal field, a Blean (True/False) field r an empty field shuld nt be seleed. The Merge and Rename cllisin types are nt available when creating grups as cntas. All members in the surce grup will be synchrnized t the target grup if they are present in the target AD. If a grup member is nt synchrnized int the target grup, a warning message displays in the lg explaining the reasn why the member was nt synchrnized. 31. Sele an ptin frm the Create External Members as Cntas drp-dwn list: Yes (default) Grup members that dn't exist in the Dmin Direry are created in AD as cnta bjes. If Yes is seleed, the Target OU fr Cntas ptin appears where yu must sele the target OU where the cntas will be created. The Cnta GAL Visibility ptin is als available when Yes is seleed. N Grup members that dn't exist in the Dmin Direry are NOT created in AD as cnta bjes. 32. Fr the Target OU fr Cntas ptin (displayed if Yes is seleed fr the Create External Members as Cntas ptin), click the Brwse buttn and sele the target OU where cntas fr external members will be created. External Dmin Cntas that are created in Aive Direry by SMART Direry Sync are nt updated r deleted, they are nly initially created by SMART Direry Sync. 33. Sele an ptin frm the Cnta GAL Visibility drp-dwn list: Visible (default) Cntas are visible in the GAL. Hidden Cntas are hidden in the GAL. 14

34. Click the Exchange Target Optins tab. 35. Sele an ptin frm the GAL Visibility drp-dwn list: Visible (default) Users and grups are visible in the GAL. Hidden Users and grups are hidden in the GAL. When synching bjes int Exchange 2003 (nly), the ptin t hide frm the GAL will nt funin if the Recipient Update Service (RUS) is enabled. If synching t an Aive Direry that des nt have Exchange in the envirnment, sele the Hidden ptin t avid Aive Direry cnstraint errrs. 36. Sele an Only Update Mailbx Enabled Objes ptin, if yu sele Yes, mailbx-enabled bjes in the target direry will be updated with values frm the surce bje based n the mapping table settings. USE WITH CAUTION! This is nt a cmmnly ccurring preference as the authritative bje is mst ften where the mailbx is lcated. 37. Sele Email Address Plicy ptins fr Users, Cntas, and Grups: Unseleed (default) Direry Sync will nt enable the target bje attribute t Autmatically update email addresses based n email address plicy in Exchange. Seleed Direry Sync will enable the target bje attribute t Autmatically update email addresses based n email address plicy in Exchange. Direry Sync will nly apply the attribute t Autmatically update email addresses based n email address plicy t the target bje. It cannt apply the email address plicy. 15

38. If seleed, the Email Address Plicy ptin fr User, Cntas, r Grups, a drp-dwn list appears with the fllwing ptins: Enable email plicy fr bjes created by DirSync Enable email plicy fr bjes updated by DirSync Enable email plicy fr bjes created r updated by DirSync Disable email plicy fr bjes created by DirSync Disable email plicy fr bjes updated by DirSync Disable email plicy fr bjes created r updated by DirSync 39. Click the Target DCs tab t define the list f target Dmain Cntrllers (DC s) t use when Direry Sync is searching fr matched bjes. 40. Click Add DC(s) t pen the Aive Direry DC Selein windw. Click Refresh DCs t find all available Dmain Cntrllers. Available ptins include Ping Servers t test the availability f the seleed Dmain Cntrllers and Test Cnneins t test the cnnein t the LDAP server. Sele ne r mre Dmain Cntrllers (use Ctrl+click t sele mre than ne) and click OK t add the Dmain Cntrllers t the list f Target DCs. 16

If yu seleed Dmain level matching in the Target tab, nly sele Dmain Cntrllers fr the target Dmain. N ther Dmains will be searched. If yu have seleed Frest level matching in the Target tab, yu must add at least ne Dmain Cntrller fr each Dmain that shuld be searched fr matched bjes. If yu d nt sele at least ne Dmain Cntrller fr a Dmain, that Dmain will nt be searched during synchrnizatin. Sele mre than ne Dmain Cntrller in a Dmain fr failver purpses. Additinally defined Dmain Cntrllers are nw nly searched fr matches if the previus Dmain Cntrller is unavailable. 41. The Aive Direry DC Selein windw clses and the seleed Dmain Cntrllers appear in the Target DC s list. The rder the dmain cntrllers are used fr each Dmain can be seleed by entering a number value in the Pririty clumn (lwest number = first). If the highest pririty DC is unavailable, Direry Sync will use the next DC. Available ptins include Ping Servers t test the availability f the seleed Dmain Cntrllers and Test Cnneins t test the cnnein t the LDAP server. Dmain Cntrllers with n pririty set will be used after thse with a pririty. If n pririty is set fr the servers in a Dmain, they will be used in the rder listed in the table. A Dmain Cntrller that is the Glbal Catalg Server seleed n the AD Target tab is given tp pririty regardless f the value in the Pririty field. N tw DC s in a Dmain can have the same pririty. 42. Click the Matching tab. AD attributes used fr matching shuld be indexed. Fllw the prcedure at https://technet.micrsft.cm/enus/library/aa995762(v=exchg.65).aspx t index AD attributes. 17

43. Sele an ptin frm the Matching Level drp-dwn list: Frest (default) Matching is dne against the target Frest Dmain Matching is dne against the target Dmain 44. Sele an ptin frm the Matching Ain drp-dwn list: Create r Update (default) Creates bjes that d nt have matching bjes in the Target and updates bjes that have matching bjes in the Target. Create nly Creates bjes that d nt have matching bjes in the Target. Objes that have matching bjes in the Target are NOT updated, unless the bje was created by Direry Sync. This means that even during an initial sync r a sync after a reset, bjes previusly created by Direry Sync will be updated. Update nly Updates bjes that have matching bjes in the Target. Objes that d nt have matching bjes in the Target are NOT created. During synchrnizatin, if a surce bje matches t mre than ne target bje, the surce bje is skipped and a warning is generated in the lg. 45. This defines what fields (Dmin) and attributes (AD) Direry Sync will use t match bjes in the Surce t bjes in the Target, as well as the rder in which they will be used. The default surce t target attribute matching pairs are displayed. The belw table displays the default matching attribute pairs: Surce Target ShrtName InternetAddress FullName samaccuntname mail cn 46. T custmize the matching, sele attributes frm the drp-dwn lists under Surce and/r Target r type in the names f attributes in the fields. The matching pairs are either/r statements (nt and statements) with the first match attempted n the tp rw pair (Default: ShrtName -> samaccuntname) and then prceeding in descending rder t the next rw pair and s n. At least ne matching pair is required fr the prfile t be saved. 47. Sele an ptin frm the Re-Link drp-dwn list: Enabled (default) SMART Direry Sync will attempt t re-link bjes in the target by first lking fr an bje that has the admindisplayname stamped with the surce bje's unique identifier. If an bje is fund, then thse tw bjes are linked and n ther attempts at matching are perfrmed. If an bje is nt fund, then the prcess attempts t match t an bje by searching based n the matching criteria. If a matching bje is nt fund, then a new bje is created. Disabled SMART Direry Sync will nt attempt t re-link bjes in the target and will always match based n the matching criteria. 18

Whenever SMART Direry Sync creates a new bje in the target r matches t an existing bje in the target, it stamps the admindisplayname attribute (fr Aive Direry) r the $BTSurceDireryID prperty (fr Dmin) f the target bje with the surce bje's unique identifier (bjeguid fr AD bjes and UNID fr Dmin bjes). This effeively links these tw bjes tgether. This link is als maintained between the tw bjes in the SQL database and future updates are based n this SQL link. Hwever, when a prfile is reset, these SQL recrds are deleted. When Re-Link is enabled, perfrmance can be imprved by indexing the admindisplayname attribute. Fllw the prcedure at https://technet.micrsft.cm/en-us/library/aa995762(v=exchg.65).aspx t index AD attributes. 48. Click the Mapping tab t view the default mapping r t edit hw attributes shuld be translated frm the surce t the target Aive Direry. Review the table and make the apprpriate changes fr yur envirnment. Duble-click a cell in the mapping table sele a different field r type frm a drp-dwn list. Duble-click n a cell in the Cmments clumn t enter a cmment. See Dmin Surce AD Target Default Mapping. T revert t the default mappings, use CTRL+A t sele all mappings, delete the mappings (Delete key), and click Yes when prmpted t remve all entries. The default mapping fr attributes will be applied unless deleted. When creating custm mapping fr an attribute, the default mapping fr the attribute shuld be deleted. When creating a custm mapping, use a CustmXX field (Custm01 t Custm99) that has nt already been used fr ther mappings r in the verrides. D nt use a BTCustm0XX field. Either review this infrmatin in the SMART Direry Sync Mapping and Overrides user interface r in the SQL database. There are tw Target Type clumns in the table. This allws yu t restri the type f bje in the target direry that can be updated. If yu set bth types t the same value, then this mapping will nly apply t that bje type. If yu set ne t persn and the ther t grup, the mapping will apply user and grup bjes nly. If bth are set t any, the mapping is unrestried and will apply t all bje types. Attribute names in Dmin surce must cntain nly valid values in the Aive Direry target. Valid values are: Strings frmed with charaers frm A t Z (uppercase r lwercase), digits frm 0 t 9,!, #, $, %, &, `, *, +, -, /, =,?, ^, _, `, {,, } r ~. One r mre perids may be embedded in an alias, but each perid shuld be preceded and fllwed by at least ne f the ther charaers. Unicde charaers frm U+00A1 t U+00FF are als valid in an alias, but they will be mapped t a best-fit US-ASCII string in the e-mail address, which is generated frm such an alias. 19

Values that can be used fr either mapping r matching can be entered manually r imprted frm a CSV file in the Mapped Values dialg bx. 1. Click the Mapped Values buttn. The Mapped Values windw appears. 2. Values can be entered manually by clicking n the first rw. 3. Values can als be imprted frm a CSV file by clicking the Imprt buttn. 4. Sele a CSV file that has Surce fields and values, Target fields and values, and the applicatin f the mapping r matching. The final value f each rw can be Match, Map, r MatchMap. MatchMap applies bth matching and mapping. 49. Click Save t verify all required fields are ppulated and save the prfile. Yu can save an incmplete prfile as lng as it is suspended. 20

When synchrnizing users frm Dmin t Aive Direry where bth envirnments share the same SMTP dmain yu must utilize the Target Address fr bjes written t Aive Direry t facilitate mail ruting. Review Custmizing BT_PersnView and BT_GrupsView fr mre infrmatin. Fr bje types that have a 20 charaer limit fr the samaccunt Name in Aive Direry (all types except grups), Direry Sync autmatically truncates the samaccunt Name and appends a randm number frm 1 t 9999. T cnfrm t Aive Direry s 1024 charaer maximum, Direry Sync truncates values frm Dmin t 1024 charaers. 50. Click Overrides t pen the table f mapping verrides. These represent default system mappings that apply t all prfiles. Yu may custmize Overrides. See Custmizing Overrides fr mre infrmatin n editing Overrides. 51. Create additinal synchrnizatin prfiles as needed. T cpy an existing prfile, right-click n a prfile in the table and sele Cpy. All prfile settings will be cpied int a new prfile that can then be edited as necessary. New prfiles created by cpy are suspended by default. Sele the prfile in the table and click Aivate Prfile. 2.3 Adding an Aive Direry t Dmin Direry Synchrnizatin Prfile Direry Sync requires that all Dmin direries that will be searched fr matches, updates and cllisins be replicated t the Binary Tree Dmin server and cnfigured in Direry Assistance. Direry Sync will search all f the direries cnfigured in Direry Assistance, and stp n the first match. 21

The target Dmin direry int which Aive Direry bje will be written shuld be created prir t cnfiguring the prfile. Binary Tree recmmends using a direry separate frm the primary Dmin Direry (names.nsf), based n a standard Dmin Direry template (ntf). T add an Aive Direry t Dmin direry synchrnizatin prfile: 1. Click Add Prfile. 2. In the Prfile Type Selein windw, sele Aive Direry t Dmin Direry and then click OK. The fllwing Prfile Types are als available: AD Migratin/Synchrnizatin used fr bth AD t AD direry synchrnizatin and in supprt f an Aive Direry migratin utilizing Binary Tree s SMART Aive Direry Migratr prdu. Exchange Migratin used in supprt f an Exchange migratin utilizing Binary Tree s E2E Cmplete prdu. Dmin Direry t Aive Direry used t synchrnize bjes frm a Dmin direry surce t an Aive Direry target. Windw Server Migratin used in supprt f a Windws Server migratin utilizing Binary Tree s Windws Server Migratin prdu. 3. A new pane appears at the bttm f the cnsle which prvides the ability t cnfigure ptins fr synchrnizatin. 22

4. On the General tab, enter a name t identify the prfile in the Name field. 5. Sele the status f the prfile frm the Status drp-dwn list: Aive will synchrnize as scheduled as sn as the prfile is saved Suspended Nt aive, will nt synchrnize 6. Sele the lgging level f the prfile frm the Lgging drp-dwn list: Lw nly errrs are lgged Medium errrs and warnings are lgged High all messages (errrs, warnings, infrmatin, etc.) are lgged (shuld be used fr trubleshting purpses nly) 7. Sele an Audit Lgging ptin frm the drp-dwn list: Enabled Recrds bje and attribute changes in the Audit Lg Disabled Obje and attribute changes will nt be recrded in the Audit Lg 8. Fr Schedule, sele the schedule: By frequency enter the apprpriate frequency r the specific time fr the synchrnizatin prcess t run fr yur envirnment. Zer (0) is nt a valid value fr frequency. A minimum interval f 15 minutes is required. At specific times(s) enter ne r mre specific times r sele times frm the drp-dwn list f times. A seleed time can be deleted by seleing the time and clicking the Delete key. Manual nly the synchrnizatin prcess will nt run until it is manually started. If yu chse the By frequency ptin, SMART Direry Sync will initiate a synchrnizatin when an aive prfile is saved. Sele the At specific time(s) ptin and sele a time in the future r sele the Manual nly ptin if yu want t save an aive prfile withut it syncing right away. This wuld be helpful if yu wanted t run a Sync Reprt befre the synchrnizatin prcess begins. 23

9. Click the AD Surce tab enter credentials that have read access t the surce Aive Direry. The required read access must extend t the Deleted Accunts cntainer, which can require a privileged accunt. 10. In the User Name field, enter the Aive Direry User Name. The credential shuld be entered as a user principal name (fr example, jsmith@acmecrp.cm) 11. In the Passwrd field, enter the passwrd assigned t the Aive Direry user. 12. In the Glbal Catalg Server field, enter the IP Address r fully qualified dmain name f the server (FQDN) fr the Glbal Catalg Server r a Dmain Cntrller that will be used fr all read peratins. The entered credentials and Glbal Catalg Server/Dmain Cntrller must have access t all Dmains and subdmains that are required t synchrnize. 13. Sele an Attribute Change Detein ptin frm the drp-dwn list: Enabled Only attributes changed n the surce AD will be synchrnized Disabled All attributes n the surce AD will be synchrnized 24

14. Click Add OU(s) t display a list f OU(s) (rganizatinal units) available t synchrnize. 15. Sele the apprpriate surce OUs and click OK. The seleed surce OUs are displayed in the Surce OUs table. The synchrnized Sub OUs and ther checkbxes nly display when yu sele an OU and then click the Add OU(s) buttn. T desele an OU frm the surce, sele it and then click the Remve OU buttn r press the Delete key. Public Flder Aive Direry bjes can be synchrnized frm AD t a Dmin Direry. T synchrnize Public Flder Aive Direry bjes, the Surce OU must pint t the Micrsft Exchange System Objes cntainer, and the Users Filter value must be bjeclass=publicflder The fllwing Surce OU fields are displayed: Surce OU Refles the OU seleed frm the tree view. Sub OUs Sele this ptin t synchrnize Sub-OUs. The checkbx is seleed by default. Clear this ptin if yu d nt want t synchrnize sub-ous. Grups The Grups tab will be disabled if there are n OUs seleed fr synchrnizing grups. The checkbx is seleed by default. Clear this ptin t skip grups frm being synchrnized. Disabled Users Sele this ptin t synchrnize a Disabled User. The checkbx is seleed by default. Clear this ptin t prevent Disabled Users frm being synchrnized. Nn-Mail Enabled Sele this ptin t synchrnize Nn-mail enabled bjes. The checkbx is nt seleed by default. Clear this ptin t skip Nn-mail enabled bjes frm being synchrnized. 25

User Filter This is a LDAP filter and can be used t filter synchrnizatin t specific bje types r thse bjes exhibiting specific attribute prperties. See Using the User and Grup LDAP Filters fr mre infrmatin. Grup Filter This is a LDAP filter and can be used t filter grups based n the entered criteria. See Using the User and Grup LDAP Filters fr mre infrmatin. The default User Filter and Grup Filter values can be custmized fr yur envirnment by editing the cnfiguratin file and changing the DefaultUserOUFilter and DefaultGrupOUFilter values. Binary Tree recmmends that yu test the LDAP filter syntax prir t saving yur changes. 16. Click the Surce DCs tab t define the list f Surce Dmain Cntrllers (DCs) t use when Direry Sync is searching fr matched bjes. 17. Click Add DC(s) t pen the Aive Direry DC Selein windw. Click Refresh DCs t find all available Dmain Cntrllers. Available ptins include Ping Servers t test the availability f the seleed Dmain Cntrllers and Test Cnneins t test the cnnein t the LDAP server. Sele ne r mre Dmain Cntrllers and click OK t add the Dmain Cntrllers t the list f Surce DCs. 26

If yur Aive Direry frest cntains mre than ne dmain it may be necessary t add at least ne dmain cntrller frm each dmain. When SMART Direry Sync attempts t reslve bjes, such as grup members r a user's manager, that are in anther Dmain (than the ne specified n the Surce tab), it will reference the dmain cntrllers list t find a valid DC t use. T ensure that grup membership and manager/subrdinate relatinships are prperly recreated, it is recmmended t add the apprpriate DC s fr alternate dmains t the Surce DC s tab. 18. The Aive Direry DC Selein windw clses and the seleed Dmain Cntrllers appear in the Surce DC s list. The rder the dmain cntrllers are used fr each Dmain can be seleed by entering a number value in the Pririty clumn (lwest number = first). If the highest pririty DC is unavailable, Direry Sync will use the next DC. Available ptins include Ping Servers t test the availability f the seleed Dmain Cntrllers and Test Cnneins t test the cnnein t the LDAP server. Dmain Cntrllers with n pririty set will be used after thse with a pririty. If n pririty is set fr the servers in a Dmain, they will be used in the rder listed in the table. A Dmain Cntrller that is the Glbal Catalg Server seleed n the AD Surce tab is given tp pririty regardless f the value in the Pririty field. N tw DC s in a Dmain can have the same pririty. 19. Click the Dmin Target tab. 20. Sele the Binary Tree Dmin server frm the Dmin Server drp-dwn list. 21. Sele the Dmin direry frm the Dmin Direry drp-dwn list. This is the direry int which the Aive Direry bjes will be written. 22. In the Freign Dmain field, enter the freign dmain. This must match the dmain used in the Freign Dmain dcument created fr ruting t Exchange. 23. Sele an ptin frm the Create Grups as drp-dwn list: 27

Persn Dcuments (default) Distributin Lists will be created as Persn dcuments (members d nt synchrnize) in the target. Grup Dcuments Distributin Lists will be created as member-ppulated Mail Only grups in the target direry. Due t the manner in which Dmin Rms and Resurces are managed (requiring a dcument in the Dmin Direry, as well as a crrespnding dcument in the Rms and Reservatins database), rms and resurces will be synchrnized as Persn dcuments in the Target Dmin direry. All ther bjes types will be synchrnized as fllws: Aive Direry Dmin User Objes and Cntas Distributin Lists Shared Mailbxes Persn dcuments Mail Grups (unless specified as Persn dcuments in the prfile) Mail-in databases 24. Click Sele an ptin fr handling grup cllisins when tw grups f the same name are fund frm the Grup Cllisins drp-dwn list: Merge If a grup with the same name is fund in the target dmain, the members f the surce grup will be added t the target grup. Grup cllisins are determined based n the ptins seleed n the Matching tab f the prfile. Skip (default) The grup will nt be synchrnized int the target Dmin direry and a warning entry will be entered int the lg entry stating that the surce grup will nt be synchrnized t the target grup. A grup that was previusly synchrnized t the target will fail t sync if a manual /repushpull /resync is run. Befre running the /repushpull and /resync cmmands, administratrs shuld clear the target Dmin Direry f any previusly created bjes. Rename - This allws yu t define a prefix r suffix t be added t the name f the grup when it is written in the target direry. This ptin creates a new grup and grup email address using the existing name and the prefix r suffix t bypass the grup cllisin. This ptin creates a new grup and grup email address using the existing name and the prefix r suffix t bypass the grup cllisin. When seleed, Prefix is seleed by default. This ptin creates a new grup and grup email address using the existing name and the prefix r suffix t bypass the grup cllisin. When seleed, Prefix is seleed by default. 28

If seleing an internal field, a Blean (True/False) field r an empty field shuld nt be seleed. Direry Sync will attempt t add a grup member t the target if it can find the member in the surce. If the member in the surce is in a different Dmain than the grup, the member will nly be added t the grup in the target if it already exists in the target. If Direry Sync cannt find the member in the surce, the member will nt be added t the grup in the target. Lg messages will explain why a member culd r culd nt be synchrnized. Merge and rename are nly available when synching grups as member-ppulated Mail grups. 25. Sele an ptin frm the Preserve Objes in Target drp-dwn list t cntrl what happens t target bjes when the crrespnding surce bjes are deleted : N (default) When bjes are deleted in the surce, the crrespnding bjes will be deleted frm the target. This nly applies t bjes created in the target by SMART Direry Sync. Yes Objes that are deleted in the surce will nt be deleted in the target. 26. Sele an ptin frm the Preserve Deleted Objes in Target As Is drp-dwn list t cntrl what happens t target bjes if they are deleted: N (default) If an bje previusly synchrnized is deleted n the target, it will be recreated. Yes If an bje previusly synchrnized is deleted n the target, it will nt be recreated. 27. Click the Matching tab. 28. Sele an ptin frm the Matching Ain drp-dwn list: Create r Update (default) Creates bjes that d nt have matching bjes in the Target and updates bjes that have matching bjes in the Target. Create nly Creates bjes that d nt have matching bjes in the Target. Objes that have matching bjes in the Target are NOT updated, unless the bje was created by Direry Sync. This means that even during an initial sync r a sync after a reset, bjes previusly created by Direry Sync will be updated. 29

Update nly Updates bjes that have matching bjes in the Target. Objes that d nt have matching bjes in the Target are NOT created. During synchrnizatin, if a surce bje matches t mre than ne target bje, the surce bje is skipped and a warning is generated in the lg. 29. This defines what attributes (AD) and fields (Dmin) Direry Sync will use t match bjes in the Surce t bjes in the Target, as well as the rder in which they will be used. The default surce t target attribute matching pairs are displayed. The belw table displays the default matching attribute pairs: Surce Target samaccuntname mail cn ShrtName Internet Address FullName 30. T custmize the matching, sele attributes frm the drp-dwn lists under Surce and/r Target r type in the names f attributes in the fields. Nt all fields in Dmin are available fr matching. Sele nly frm the Dmin fields fund in the drp-dwn list r remve a field by clearing if yu d nt want t match n the field. The matching pairs are either/r statements (nt and statements) with the first match attempted n the tp rw pair (Default: samaccuntname ->ShrtName) and then prceeding in descending rder t the next rw pair and s n. At least ne matching pair is required fr the prfile t be saved. 31. Sele an ptin frm the Re-Link drp-dwn list: Enabled (default) SMART Direry Sync will attempt t re-link bjes in the target by first lking fr an bje that has the $BTSurceDireryID stamped with the surce bje's unique identifier. If an bje is fund, then thse tw bjes are linked and n ther attempts at matching are perfrmed. If an bje is nt fund, then the prcess attempts t match t an bje by searching based n the matching criteria. If a matching bje is nt fund, then a new bje is created. Disabled SMART Direry Sync will nt attempt t re-link bjes in the target and will always match based n the matching criteria. Whenever SMART Direry Sync creates a new bje in the target r matches t an existing bje in the target, it stamps the admindisplayname attribute (fr Aive Direry) r the $BTSurceDireryID prperty (fr Dmin) f the target bje with the surce bje's unique identifier (bjeguid fr AD bjes and UNID fr Dmin bjes). This effeively links these tw bjes tgether. This link is als maintained between the tw bjes in the SQL database and future updates are based n this SQL link. Hwever, when a prfile is reset, these SQL recrds are deleted. 32. Click the Mapping tab t view the default mapping r t edit hw attributes shuld be translated frm the surce Aive Direry t the target Dmin direry. Review the table and make the apprpriate changes fr yur envirnment. Duble-click a cell in the mapping table sele a different field r type frm a drp-dwn list. Duble-click n a cell in the Cmments clumn t enter a cmment. See AD Surce Dmin Target Default Mapping. 30

T revert t the default mappings, use CTRL+A t sele all mappings, delete the mappings (Delete key), and click Yes when prmpted t remve all entries. The default mapping will be applied unless deleted. When creating custm mapping fr an attribute, the default mapping fr the attribute shuld be deleted. There are tw Target Type clumns in the table. This allws yu t restri the type f bje in the target direry that can be updated. If yu set bth types t the same value, then this mapping will nly apply t that bje type. If yu set ne t persn and the ther t grup, the mapping will apply user and grup bjes nly. If bth are set t any, the mapping is unrestried and will apply t all bje types. Values that can be used fr either mapping r matching can be entered manually r imprted frm a CSV file in the Mapped Values dialg bx. 1. Click the Mapped Values buttn. The Mapped Values windw appears. 2. Values can be entered manually by clicking n the first rw. 31

3. Values can als be imprted frm a CSV file by clicking the Imprt buttn. 4. Sele a CSV file that has Surce fields and values, Target fields and values, and the applicatin f the mapping r matching. The final value f each rw can be Match, Map, r MatchMap. MatchMap applies bth matching and mapping. 33. Click Save t verify all required fields are ppulated and save the prfile. Incmplete prfiles can be suspended and cmpleted at a later time by clicking Suspend Prfile. Yu can save an incmplete prfile as lng as it is suspended. 34. Click Overrides t pen the table f mapping verrides. These represent default system mappings that apply t all prfiles. Yu may custmize Overrides. See Custmizing Overrides fr mre infrmatin n editing Overrides. 35. Create additinal synchrnizatin prfiles as needed. T cpy an existing prfile, right-click n a prfile in the table and sele Cpy. All prfile settings will be cpied int a new prfile that can then be edited as necessary. New prfiles created by cpy are suspended by default. Sele the prfile in the table and click Aivate Prfile. 2.4 Imprting and Exprting a Prfile Synchrnizatin prfiles can be imprted and exprted. The Exprt Prfile ptin exprts all f the cnfiguratin ptins fr the seleed prfile and creates a DSPrfile file that can be saved fr backup purpses. The Imprt Prfile ptin allws a DSPrfile file t be imprted and all f the cnfiguratin ptins fr a prfile restred. Imprted prfiles are suspended by default and must be aivated befre they can be synchrnized. 32

T imprt a synchrnizatin prfile: 1. Click Imprt Prfile. 2. Sele an imprt file and click Open. The imprted prfile is suspended by default and must be aivated befre it can be synchrnized. T exprt a synchrnizatin prfile: 1. When viewing a prfile, click Exprt Prfile. Yu can als right-click n a prfile in the table and sele Exprt. 2. Enter a file name fr the exprt file and click Save. 2.5 Suspending and Aivating a Prfile Suspending a synchrnizatin prfile disables the prfile frm synchrnizing. Nte that yu als cannt manually run a synchrnizatin f a suspended prfile using the Sync Prfile buttn, right-click menu, r cmmand line cmmands. Suspended prfiles remain in the list f prfiles and can be reaivated at any time. T suspend an aive synchrnizatin prfile: 1. Sele a prfile yu wish t suspend. 2. Click Suspend Prfile. The status f the prfile is changed t Suspended. T aivate a suspended synchrnizatin prfile: 1. Sele a suspended prfile yu wish t aivate. 2. Click Aivate Prfile. The status f the prfile is changed t Aive. 2.6 Remving a Prfile Remving a synchrnizatin prfile will delete it frm the list f prfiles. Remved prfiles cannt be restred. T remve a synchrnizatin prfile: 1. Sele a prfile yu wish t remve. 2. Click Remve Prfile. 3. Click Yes t cnfirm. The prfile is deleted frm the list f prfiles. 2.7 Resetting a Prfile Resetting a synchrnizatin prfile causes the database fr the prfile t be cleared. This clears the sync database, nt the prfile prperties. If there are multiple prfiles fr the same AD Surce and ne f the prfiles is reset, all data fr the AD Surce is deleted in the SQL database. 33

T reset a synchrnizatin prfile: 1. Sele a prfile yu wish t reset. 2. Click Reset Prfile. 3. Click Yes t cnfirm. The prfile is reset. 34

Sein 3. Running Sync Reprts Overview The Sync Reprt has tw primary funins. The first is as an analytical tl used prir t synchrnizing any bjes int a target direry, and the secnd is as a lgging feature t view the details f each synchrnizatin. Prir t synchrnizing any bje int the target, the surce direry(ies) must be analyzed t identify any bjes that culd be prblematic. This is a critical step t a successful sync and shuld nt be verlked. The Sync Reprt reads the surce direry(ies) and writes the data int SQL. This is the same ain taken if yu were t initiate a Push cmmand. The surce data is analyzed t determine the result if yu were t Pull the data int the target direry. The Sync reprt shuld be run prir t the first sync, as well as prir t running a sync after yu have made a change t the prfile, t cnfirm the intended results. The Sync Reprt is ppulated anytime a Sync Prfile is aually run. Infrmatin at the tp f the Sync Reprt will differentiate if the Sync Reprt is a result f a simulatin r a synchrnizatin. r Cmmn issues that must be crreed prir t synchrnizing Dmin t Aive Direry SMTP Addresses Unique Match Values External SMTP Addresses in Grups Missing SMTP Addresses -These bjes will be skipped with a warning that there is n InternetAddress. Any bje yu wish t sync must have a valid and unique SMTP Address. Duplicate SMTP Address - These bjes will be skipped with a warning that the SMTP address is already in SQL.Any bje yu wish t sync must have a valid and unique SMTP Address. SMTP Address cntains space(s) - These bjes will be skipped with a warning... Missing Lcal Part - These bjes will be skipped with a warning... Dirsync allws yu t define up t 4 field/attribute pairs t match bjes in the surce t bjes in the target. If the surce value matches t mre the ne target bje value, Dirsync will skip the bje. This must be crreed if yu intend fr this bje t synchrnize t the target direry. The Sync Reprt allws yu t see the matched bje between the surce and target. These shuld be reviewed t ensure that yur match criteria are valid fr yur envirnment. While Dmin will allw yu t add external SMTP addresses t a mail grup, Aive Direry requires that all grup members exist as bjes in Aive Direry. These external members must either be created in Dmin (and synched ver) r created in Aive Direry if yu intend fr these grups members t sync t Aive Direry. 35

Running a Sync Reprt T run a Sync Reprt: 1. Once yu have created a prfile, click the Sync Reprt buttn. This pens the Sync Reprt windw. The example in this sein is a Dmin t Aive Direry prfile. 2. Click Run Simulatin and Yes t cnfirm. Click the Refresh buttn t ppulate the UI with the mst recent data. A sync reprt perfrms a Push int SQL, s it is imprtant that yu reset the prfile prir t running a sync if yu have made any changes t the surce data r the prfile settings. If yu d nt clear the prfile, the data that is in SQL frm the Sync Reprt will be pulled t the target direry. Objes tab This cntains all f the bjes in the surce and the ain that wuld have been taken had the prfile been synched t the target. All f the clumns can be srted, filtered r rerdered (drag and drp). Review any bjes that were skipped in the Operatins clumn, as well as any warnings in the Status clumn. Yu can duble click n any entry t pen the details fr that bje. The Details windws displays all f the details fr the bje, including the attributes and values that wuld be written t Aive Direry. The Internal Fields tab displays the values that are written t SQL. The belw example shws a Sync Reprt that is filtered t shw warning fr Users (nly). Here yu can see examples f the cmmn issues listed abve, as well as the warning yu wuld see if the Dmin bje had Allw Freign Direry Sync (AFDS) set t N. This issues must be crreed in the surce direry befre they will sync t the target. Once crreed, yu can run anther sync reprt t validate the changes. 36

Obje Issues tab The Obje Issues is a filtered list shwing all issues wuld have ccurred during a simulatin r all issues that did ccur during a synchrnizatin. 37

Members tab The Members tab displays details fr grup synchrnizatin. Here yu can see each member f all f the grups that wuld be synched t Aive Direry. Yu can filter the Status clumn fr warnings t easily view any issues that shuld be reslved. The mst cmmn reasn that a member f a Dmin grup cannt be added t the grup in AD is because the member is an external SMTP address that is nt represented in the target direry. The example belw illustrates this. The external SMTP address must either be added t the Dmin surce direry (s in syncs t AD), r added t AD as a cnta bje.. 38

Member Issues tab The Member Issues is a filtered list shwing all issues wuld have ccurred during a simulatin r all issues that did ccur during a synchrnizatin. Obje Summary tab The Obje Summary tab displays a summary f each bje type, the peratin perfrmed, the status and the bje cunt. 39

Members Summary tab The Members Summary tab displays a summary f grup membership synchrnizatin. It displays the number f members added t grups, number f skipped members and the ttal number f errrs r warnings. Prfile tab The Prfile tab lists all f the settings fr the prfile fr which the Sync was run. Yu can cpy the cntents t the clipbard t easily exprt as needed. 40

Target DCs The Target DCs tab will display all f the Dmain Cntrllers cnfigured in the Target DCs tab. It als shws the pririty in which they will be used. The default will always be used unless it is unreachable. 41

Aive Direry t Dmin Sync Reprt Running a Sync Reprt n an AD t Dmin prfile fllws the same prcess as detailed abve. The nly differences are that there is lack f a Target DCs tab, and the additin f the Surce DCs tab. Surce DCs tab This tab appears n AD t Dmin r AD t AD prfiles nly and displays the Dmain Cntrllers listed in the Surce AD tab f the prfile. 42

Sein 4. Running Direry Sync There are fur ways t run Direry Sync: Scheduling Direry Sync t run prgrammatically by defining a schedule fr the synchrnizatin prfile t run. See Cnfiguring Aive Direry Synchrnizatin fr mre inf. Manually starting synchrnizatin by seleing a prfile and clicking the Sync Prfile buttn. Manually starting a synchrnizatin prcess by right-clicking n a prfile and seleing a synchrnizatin ptin. Manually run Direry Sync cmmands frm a cmmand line. 4.1 Manually Starting a Synchrnizatin using a Sync Prfile A synchrnizatin r sync reprt f a prfile cannt be started if a synchrnizatin r sync reprt f the prfile is already running. T manually start synchrnizatin: 1. Sele a prfile t synchrnize. 2. Click Sync Prfile. The synchrnizatin is started. This runs a cmplete sync f the prfile (push/pull). 4.2 Manually Starting a Synchrnizatin Prcess using the Right- Click Menu A synchrnizatin r sync reprt f a prfile cannt be started if a synchrnizatin r sync reprt f the prfile is already running. T manually start a synchrnizatin prcess: 1. Right-click a prfile t synchrnize. 2. Click ne f the fllwing ptins: Push - Pushes all changed entries in the surce t SQL Pull - Pulls all changed entries frm SQL t the target Repush - Pushes all surce entries regardless f mdificatin date t SQL (the prfile is reset prir t running a Push r a full Sync) Repull - Same as a Pull and will nly pull changed bjes r bjes that need t be resynced (fr example, because they failed n a prir pull) Repushpull - Cmbines the Repush and Repull cmmands int ne step (the prfile is reset prir t running a Push r a full Sync) Cancel - Cancels a Sync 43

Validate - Verifies that yur prfile settings are crre Cpy - Creates a cpy f the seleed prfile Exprt - Exprts the seleed prfile 4.3 Manually Starting a Synchrnizatin Prcess frm a Cmmand Line A synchrnizatin r sync reprt f a prfile cannt be started if a synchrnizatin r sync reprt f the prfile is already running. T manually start a synchrnizatin prcess frm a cmmand line: 1. Open a Cmmand Prmpt windw. 2. Navigate t %Prgram Files%\Binary Tree\Dirsync Cmmand binarytree.dirsync.exchange.exe /validate <Prfile ID> binarytree.dirsync.exchange.exe /push <Prfile ID> binarytree.dirsync.exchange.exe /pull <Prfile ID> binarytree.dirsync.exchange.exe /repush <Prfile ID> binarytree.dirsync.exchange.exe /repull <Prfile ID> binarytree.dirsync.exchange.exe /repushpull <Prfile ID> binarytree.dirsync.exchange.exe /pushpull <Prfile ID> binarytree.dirsync.exchange.exe /sync <Prfile ID> binarytree.dirsync.exchange.exe /resync <Prfile ID> Descriptin Verifies that yur settings are crre Pushes all changed entries in the surce t SQL Pulls all changed entries frm SQL t the target Pushes all surce entries regardless f mdificatin date t SQL Same as a Pull and will nly pull changed bjes r bjes that need t be resynced Cmbines the /repush and /repull cmmands int ne step Cmbines the /push and /pull cmmands int ne step Perfrms the equivalent f a /pushpull n all saved prfiles withut prmpting the user t sele ne Perfrms the equivalent f a /repushpull n all saved prfiles withut prmpting the user t sele ne Binary Tree recmmends that yu remve existing bjes frm the target OU befre running Repush, Repull, r Repushpull. If yu d nt include a Prfile ID in the cmmand, yu will be prmpted t chse ne. 44

Sein 5. Using the SMART Direry Sync Lg Viewer t View Lgs and Audits 5.1 Using the SMART Direry Sync Lg Viewer t View Lgs and Audits The SMART Direry Sync Lg Viewer allws yu t view, search, exprt, and clear synchrnizatin lgs and audit reprts n changes t all items in the target envirnment. T pen and view lgs and audits in the SMART Direry Sync Lg Viewer: 1. In the SMART Direry Sync Cnsle, click the View Lgs and Auditing buttn. The SMART Direry Sync Lg Viewer pens. 2. Sele the Lgs tab t view the synchrnizatin lgs r the Audits tab t view the audit reprts. 3. The Synchrnizatin prfile is autmatically seleed and lg entries assciated with the prfile are displayed. T change the prfile, sele a different prfile frm the Prfile drp-dwn list. Click the Refresh icn next t the Prfile drp-dwn list t refresh the list f prfiles and the lg grid. 5.2 Searching Lg r Audit Entries T search fr lg r audit entries: Enter a search term in the Search field and then click the Find icn. The table refreshes t shw the search results. 45

5.3 Pausing a Lg Yu can stp the cntinuus scrlling f the lg t allw fr easier reading. This feature pauses the display nly, nt the lgging funin. T pause the lg: 1. Click the Pause icn. 2. T restart the lg display, click the Play icn (next t Paused ). 5.4 Shwing r Audit Lg Entries fr a Time Perid T shw all lg r audit entries fr a time perid: Sele a Shw... ptin frm the drp-dwn list near the upper right crner f the cnsle. The table refreshes t shw all lg r audit entries fr the seleed time perid. 46

5.5 Filtering the Lg r Audits T filter the lg r audit: 1. Click the filter buttn n any clumn header t pen the filter windw. 2. Enter the filter criteria, and then click Filter. The table refreshes t the filtered lg entries. 3. User the Clear Filter buttn t clear the filter. 5.6 Gruping the Lg r Audits by Clumn T grup the lg r audits by a clumn: Drag a clumn header t the bar abve the table t grup the lg r audits by a specific clumn. The table refreshes gruped by the seleed clumn. 47

5.7 Viewing Lg r Audit Entry Details T view lg r audit entry details: Click the plus icn in the lg r audit entry. The entry expands t display the details f the lg r audit entry. Lg entries: Audit entries: Audit lg displaying ne entry: Audit lg displaying mdified attributes: 48

5.8 Exprting Lg r Audit Entries T exprt the lg r audit entries f the currently seleed prfile: 1. Click Exprt All. 2. Enter a File name, lcatin, a file type, and then click Save. 5.9 Clearing Lg r Audit Entries T clear ld lg r audit entries f the currently seleed prfile: 1. Click Clear. The Clear Lg windw r Clear Audits windw pens. 2. Sele a number and time unit (Weeks, Days, r Hurs) frm the drp-dwn list t clear the lg r audits f lder entries and then click OK. 3. Als fr Lg entries, yu have the ptin t clear the lg entries f all prfiles lder than the seleed time autmatically by seleing Clear lg autmatically. The Clear Lg Autmatically ptin is nt available fr Audits. Binary Tree recmmends that the lgs be set t clear autmatically t prevent the accumulated data frm becming t large. 49

T clear all lg and audit entries f the currently seleed prfile: 1. Click Clear All. All lg r audit entries f the currently seleed prfile are cleared. If an Audit Lg is cleared, the fllwing is an example f the recrd that will be displayed shwing that the entries were remved (cleared). 50

Sein 6. Updating the Grups t Ignre List in SQL 6.1 Updating the Grups t Ignre List in SQL fr Dmin - Aive Direry Synchrnizatin By default, Direry Sync is cnfigured with a list f typical Aive Direry (Exchange) and Dmin security grups that will nt be synchrnized. Yu can update the Grups t Ignre List in SQL by using either the SQL Server Management Studi (SSMS) r the SQL Imprt and Exprt Data tl. Fr an AD Surce, yu may als chse t nt synchrnize any Security grups via the Grup Filter, which will prevent all grups matching the criteria frm being entered int SQL. This must be cnfigured befre the initial synchrnizatin, r yu will have t remve all the security grups frm SQL and AD prir t using this ptin. 6.2 Default List f Grups in the Grups t Ignre List fr Dmin - Aive Direry Synchrnizatin The default list f grups in the AD Surce Grups t Ignre List includes: NT Authrity Dialup Netwrk Batch Interaive Lgn Sessin Service Annymus Prxy Enterprise Dmain Cntrllers Principal Self Authenticated Users Restried Cde Terminal Server Users Remte Interaive Lgn This Organizatin Lcal System NT Authrity Administratr Guest 51

KRBTGT Dmain Admins Dmain Users Dmain Guests Dmain Cmputers Cert Publishers Schema Admins Enterprise Admins Grup Plicy Creatr Owners RAS and IAS Servers Administratrs Users Guests Pwer Users Accunt Operatrs Server Operatrs Print Operatrs Backup Operatrs Replicatrs NTLM Authenticatin SChannel Authenticatin Digest Authenticatin NT Service Untrusted Mandatry Level Delegated Setup Discvery Management Exchange All Hsted Organizatins Exchange Organizatin Administratrs Exchange Public Flder Administratrs Exchange Recipient Administratrs Exchange Servers Exchange Trusted Subsystem Exchange View-Only Administratrs Exchange Windws Permissins ExchangeLegacyInterp Hygiene Management 52

Organizatin Management Public Flder Management Recipient Management Recrds Management Server Management UM Management View-Only Organizatin Management Updating Grups t Ignre List in SQL By default, Direry The default list f grups in the Dmin Surce Grups t Ignre List Members includes: LcalDmainServers OtherDmainServers LcalDmainAdmins OtherDmainAdmins 6.3 Updating the Grups t Ignre List with the SQL Server Management Studi (SSMS) Perfrm the fllwing steps frm SSMS t add r remve grups frm the Grups t Ignre List in SQL. This prcess is preferred if yu have a small number f changes t make. Refer t Updating the Grups t Ignre List via the SQL Imprt and Exprt Data Tl fr larger updates. T add r remve grups frm the Grups t Ignre List in SQL: 1. Launch the SQL Server Management Studi. 2. Navigate t the BTCdex server and database, expand Tables, and then right click n the db.dirsync_grupstignre. 3. Sele Edit Tp 200 Rws frm the list. 53

4. Add new entries at the bttm. 5. If yu have mre than 200 grups t ignre, yu can increase the number f rws shwn: a. Run the SQL Server Management Studi. b. Click Tls -> Optins c. Sele SQL Server Obje Explrer. Nw yu shuld be able t see the Table and View ptins: Value fr Edit Tp Rws Cmmand Value fr Sele Tp Rws Cmmand d. Set the Values t 0 t edit and sele all the recrds. 54

6. The table displays the Sele All Rws and Edit All Rws ptins. 6.4 Updating the Grups t Ignre List with the SQL Imprt and Exprt Tl T use the SQL Imprt and Exprt Data tl t update the Grups t Ignre List in SQL: 1. Expand the Micrsft SQL Server 2008 R2 flder and sele Imprt and Exprt Data (32-bit). 55

2. Sele the data surce frm which yu want t cpy data, and then click Next. 56

3. Sele the destinatin where data is t be cpied. 4. Sele Cpy data frm ne r mre tables r views, and then click Next t cntinue. 57

5. Chse ne r mre tables and views t cpy, and then click Edit Mappings. 6. Sele Append rws t the destinatin table and fill in the values in the Destinatin clumn, then click OK. 58

7. Sele Run immediately and then click Finish. 6.5 Excluding Security Grups frm Synchrnizatin with the Grup Filter Sele the apprpriate Prfile and Surce OU in the Direry Sync UI and duble-click n Grup Filter n the AD Surce tab. Replace (bjeclass=grup) with (bjeclass=grup)(!gruptype:=-2147483646) and click Save. Binary Tree recmmends that yu use the Aive Direry Users and Cmputers management cnsle t test yur filters t prevent Direry Synchrnizatin frm failing due t an invalid filter. 59

Appendix A: Using the User and Grup LDAP Filters Aive Direry prvides a pwerful way f retrieving data thrugh the use LDAP filters. Direry Synchrnizatin expses tw filters during the creatin f a synchrnizatin prfile: User OU Filter and Grup OU Filter whse defaults are: Users: (&(!(admindescriptin=created By DirSync))( (bjeclass=persn)(bjeclass=rm))(!(bjeclass=cmputer))) Grups: (&(!(admindescriptin=created By DirSync))(bjeClass=Grup)) These filters are per rganizatinal unit and apply t sub-ous when the Sync Sub-OUs ptin is seleed. Mdifying these filters requires a basic understanding f the attributes, their value representatins, and their data types. LDAP filters supprt any number f ptins including filtering by date ranges, wildcards, and the use f bitmasks as in the useraccuntcntrl prperty. The use f the bjeclass and bjecategry prperties can greatly reduce the number f recrds retrieved resulting in imprved perfrmance. Yu may use ther attributes t further restri yur results. The fllwing are cmmn examples f queries and their LDAP query syntax. Seleing users that are part f the Accunting department: (&(bjeclass=user)(bjecategry=persn)(department=accunting)) Seleing mailbx-enabled users: (&(bjeclass=user)(bjecategry=persn)(hmemdb=*)) Seleing mail-enabled users and cntas: ( (&(bjeclass=user)(bjecategry=persn)(!hmemdb=*))(bjeclass=cnta)) Seleing users created after January 1, 2011: (&(bjeclass=user)(bjecategry=persn)(whencreated>=20110101000000.0z)) Seleing distributin lists: (&(bjeclass=grup)(gruptype=2)) Binary Tree recmmends that yu use the Aive Direry Users and Cmputers management cnsle t test yur filters t prevent Direry Synchrnizatin frm failing due t an invalid filter. 60

Appendix B: Additinal Cnfiguratin Optins Changing the attribute used fr "Created by Dirsync" r "Updated by Dirsync" By default, the admindescriptin attribute (fr Aive Direry) r $BTAin (fr Dmin) is stamped n bjes n the Target that are created r updated by SMART Direry Sync with "Created by Dirsync" r "Updated by Dirsync" t define which bjes can be safely deleted frm the Target. An app setting is available in the cnfig file t allw yu t define a different attribute/field fr this purpse. T use an attribute ther than admindescriptin r $BTAin, define a new DirSyncAttribute setting in the <appsettings> sein f the cnfig file. Fr example, the belw setting will use admindisplayname instead f admindescriptin: Warning: This must be cnfigured befre the initial sync. <appsettings> <add key="dirsyncattribute" value="admindisplayname"/> </appsettings> Setting msexchrecipientdisplaytype and msexchrecipienttypedetails Exchange attributes A cnfiguratin ptin t allw yu t set msexchrecipientdisplaytype and msexchrecipienttypedetails Exchange attributes based n the value f a cnfigurable attribute is available. The cnfiguratin ptin must defined in the <appsettings> sein f the cnfig file, as shwn belw. Value= shuld be cntain the attribute t be used. (prxyaddresses shwn belw). If the value f the attribute is null, msexchrecipientdisplaytype and msexchrecipienttypedetails will be ppulated. See the list belw fr the values that will be ppulated. <appsettings> <add key="recipienttype_mailenabledattribute" value="prxyaddresses"/> </appsettings> Mail Enabled Users in the surce: msexchrecipientdisplaytype = 6 msexchrecipienttypedetails = 128 Rm Mailbx in the surce: msexchrecipientdisplaytype = 7 msexchrecipienttypedetails = 16 Resurce Mailbx in the surce: msexchrecipientdisplaytype = 8 msexchrecipienttypedetails = 32 61

Shared Mailbx in the surce: msexchrecipientdisplaytype = 0 msexchrecipienttypedetails = 4 Allw bjes with remte mailbxes t be treated as mailbx-enabled bjes A setting that allws bjes with remte mailbxes t be treated as mailbx-enabled bjes is available. T enable this feature, add the RemteMailbxAsMailbxEnabled ptin t the <appsettings> sein f the BinaryTree.DirSync.Exchange.exe.cnfig file as displayed belw. <appsettings> <add key="remtemailbxasmailbxenabled" value="true"/> </appsettings> If this setting is set t any value ther than True r if mitted frm the file, bjes with remte mailbxes will be treated as nn-mailbx-enabled. If set t True, bjes with remte mailbxes will be treated as mailbx-enabled. Disable the caching f grup members A cnfiguratin ptin can be used in the appsettings sein f the cnfig file t disable the caching f grup members. This setting shuld be added t the BinaryTree.DirSync.Exchange.exe.cnfig file. <appsettings> <add key="optimizegrupsyncmemryusage" value="true"/> </appsettings> Valid values are true and false. If this setting is mitted, r set t an invalid value, the value defaults t false. If set t false, grup members will be cached during push and pull. If set t true, grup members will nt be cached during push and pull. Disable the initializatin f the sync reprt A cnfiguratin ptin can be used in the appsettings sein f the cnfig file t disable the initializatin f the sync reprt. If disabled, a sync reprt will still be recrded, but it will nt be initialized between syncs. The result will be that an bje will shw data frm the last time it was prcessed by SMART Direry Sync, rather than just the mst recent time it was prcessed. In ther wrds, if an bje is inserted during a sync, it will shw in the sync reprt as Inserted. Assuming a secnd sync des nt tuch this bje, then if the sync reprt is initialized, a secnd sync will shw this bje as N Change, but if the sync reprt is nt initialized, the bje will still shw as Inserted. This setting shuld be added t the BinaryTree.DirSync.Exchange.exe.cnfig file. <appsettings> <add key="disablesyncreprtinitializatin" value="true"/> </appsettings> Valid values are true and false. If this setting is mitted, r set t an invalid value, the value defaults t false. If set t false, the sync reprt will be initialized. If set t true, the sync reprt will nt be initialized. 62

Set the maximum number f users and grups synced simultaneusly During pull prcessing, SMART Direry Sync will sync multiple Aive Direry user and grup bjes simultaneusly int the target AD. The maximum number f users and grups synced simultaneusly can be changed using the ThreadCunt setting in the cnfig file. If this cnfiguratin ptin is nt specified, the ThreadCunt will be set t the same number f lgical prcessr cres f the server n which SMART Direry Sync is running. The cnfiguratin ptin is nt included by default. T add, mdify the BinaryTree.DirSync.Exchange.exe.cnfig file lcated at C:\Prgram Files\Binary Tree\DirSync and add a new key t the <appsettings> sein as fllws: <appsettings> <add key="threadcunt" value="4"/> </appsettings> This ptin shuld never be set t a number greater than the number f prcessr cres n the server. Hwever, yu may need t specify a lwer number if ther applicatins als running n the server require a specific number f cres set aside fr prcessing. Best praice is t leave the setting at the default value and lwer it nly if additinal prcessing pwer is needed fr ther applicatins n the server. 63

Appendix C: Default Mapping Dmin Surce AD Target Default Mapping The belw table displays the default values f the Dmin Surce t AD Target mapping table. Surce Field Internal Field Target Field Surce Type Target Type 1 Targ et Type 2 Cmments InternetAddress InternetAddress mail any any CmpanyName Cmpany any any LegacyExchangeDN legacyexchangedn any any Created using the surce bje's Ntes ID as the CN. GrupType GrupType gruptype grup grup ListDescriptin Cmment inf grup grup cnta ListName DisplayName displayname grup grup cnta ListName must be empty in Ntes r it will be treated as a grup by the ruter. ListName PrimaryAlias mailnickname grup grup cnta ListName must be empty in Ntes r it will be treated as a grup by the ruter. ListName SAMAccuntName samaccuntname grup grup ListName must be empty in 64

Surce Field Internal Field Target Field Surce Type Target Type 1 Targ et Type 2 Cmments Ntes r it will be treated as a grup by the ruter. TargetAddress targetaddress grup cnta TargetAddress is set t the surce bje's primary SMTP inthe PrxyAddresses, the InternetAddress, r the UserPrincipleNa me f the surce bje. Cmments Cmment cmment shared Mail shared Mail cnta Descriptin Inf inf shared Mail shared Mail cnta FullName CmmnName cn shared Mail shared Mail cnta FullName PrimaryAlias mailnickname shared Mail shared Mail cnta FullName DisplayName displayname shared Mail shared Mail cnta FullName PrxyAddresses prxyaddresses shared Mail shared Mail cnta PrxyAddresses cntains the InternetAddress as the primary SMTP, the 65

Surce Field Internal Field Target Field Surce Type Target Type 1 Targ et Type 2 Cmments legacyexchange DN f bth the surce and target as X500 addresses, and any email plicies frm the target (if enabled). FullName SAMAccuntName samaccuntname shared Mail shared Mail TargetAddress targetaddress shared Mail shared Mail cnta TargetAddress is set t the surce bje's primary SMTP inthe PrxyAddress es, the InternetAddre ss, r the UserPrinciple Name f the surce bje. Cmments Cmment cmment resurc e resurc e cnta Descriptin Inf inf resurc e resurc e cnta FullName CmmnName cn resurc e resurc e cnta FullName PrimaryAlias mailnickname resurc e resurc e cnta 66

Surce Field Internal Field Target Field Surce Type Target Type 1 Targ et Type 2 Cmments FullName CmmnName displayname resurc e resurc e cnta FullName PrxyAddresses prxyaddresses resurc e resurc e cnta PrxyAddresses cntains the InternetAddress as the primary SMTP, the legacyexchange DN f bth the surce and target as X500 addresses, and any email plicies frm the target (if enabled). FullName SAMAccuntName samaccuntname resurc e resurc e ResurceCapacity msexchresurcecap acity msexchresurcecapacity resurc e resurc e cnta TargetAddress targetaddress resurc e resurc e cnta TargetAddress is set t the surce bje's primary SMTP inthe PrxyAddresses, the InternetAddress, r the UserPrincipleNa me f the surce bje. Cmments Cmment cmment rm rm cnta 67

Surce Field Internal Field Target Field Surce Type Target Type 1 Targ et Type 2 Cmments Descriptin Inf inf rm rm cnta FullName CmmnName cn rm rm cnta FullName PrimaryAlias mailnickname rm rm cnta FullName CmmnName displayname rm rm cnta FullName PrxyAddresses prxyaddresses rm rm cnta PrxyAddresses cntains the InternetAddress as the primary SMTP, the legacyexchange DN f bth the surce and target as X500 addresses, and any email plicies frm the target (if enabled). FullName SAMAccuntName samaccuntname rm rm ResurceCapacit y msexchresurceca pacity msexchresurcecapaci ty rm rm cnta TargetAddress targetaddress rm rm cnta TargetAddress is set t the surce bje's primary SMTP inthe PrxyAddresses, the 68

Surce Field Internal Field Target Field Surce Type Target Type 1 Targ et Type 2 Cmments InternetAddress, r the UserPrincipleNa me f the surce bje. CellPhneNumber CellPhneNumber user user cnta Cmment Cmment user user cnta Department Department user user cnta EmplyeeID EmplyeeID user user cnta FirstName FirstName user user cnta FullName CmmnName cn user user cnta FullName DisplayName user user cnta FullName PrxyAddresses prxyaddresses user user cnta PrxyAddresses cntains the InternetAddress as the primary SMTP, the legacyexchange DN f bth the surce and target as X500 addresses, and any email 69

Surce Field Internal Field Target Field Surce Type Target Type 1 Targ et Type 2 Cmments plicies frm the target (if enabled). JbTitle JbTitle user user cnta LastName LastName user user cnta Smetimes used as a surname. Lcatin Lcatin user user cnta Imprtant, particularly fr printers. MiddleInitial Initials user user cnta OfficeCity OfficeCity user user cnta OfficeFAXPhneN umber OfficeFAXNumber user user cnta OfficePhneNumb er OfficePhneNumber user user cnta OfficeState OfficeState user user cnta OfficeStreetAddre ss OfficeStreetAddress user user cnta OfficeZip OfficeZip user user cnta 70

Surce Field Internal Field Target Field Surce Type Target Type 1 Targ et Type 2 Cmments ShrtName PrimaryAlias mailnickname user user cnta ShrtName PrxyAddresses prxyaddresses user user cnta PrxyAddresses cntains the InternetAddress as the primary SMTP, the legacyexchange DN f bth the surce and target as X500 addresses, and any email plicies frm the target (if enabled). ShrtName SAMAccuntName user user TargetAddress targetaddress user user cnta TargetAddress is set t the surce bje's primary SMTP inthe PrxyAddresses, the InternetAddress, r the UserPrincipleNa me f the surce bje. Resurce Type BTCustm032 resurc e resurc e cnta BTCustm033 msexchrecipientdisplayt ype resurc e resurc e cnta 71

Surce Field Internal Field Target Field Surce Type Target Type 1 Targ et Type 2 Cmments BTCustm034 msexchresurcesearchpr perties resurc e resurc e cnta BTCustm034 msexchresurcedisplay resurc e resurc e cnta BTCustm035 msexchresurcemetadat a resurc e resurc e cnta Resurce Type BTCustm032 rm rm cnta BTCustm033 msexchrecipientdisplayt ype rm rm cnta BTCustm034 msexchresurcesearchpr perties rm rm cnta BTCustm034 msexchresurcedisplay rm rm cnta BTCustm035 msexchresurcemetadat a rm rm cnta 72

AD Surce Dmin Target Default Mapping The belw table displays the default values f the AD Surce t Dmin Target mapping table. Surce Field Internal Field Target Field Surce Type Targe t Type 1 Targe t Type 2 Cmment s mail InternetAddress InternetAddress any any cmpany Cmpany CmpanyName any any c OfficeCuntry OfficeCuntry cnta user department Department Department cnta user displayname DisplayName FullName cnta user emplyeeid EmplyeeID EmplyeeID cnta user facsimiletelephnenumb er OfficeFAXNumber OfficeFAXPhneNumb er cnta user givenname FirstName FirstName cnta user initials Initials MiddleInitial cnta user l OfficeCity OfficeCity cnta user mailnickname PrimaryAlias ShrtName cnta user The fllwing restried chars will be replaced with underscre s: ( ) @ [ ] " space : \ > ; 73

Surce Field Internal Field Target Field Surce Type Targe t Type 1 Targe t Type 2 Cmment s < mbile CellPhneNumber CellPhneNumber cnta user physicaldeliveryofficena me Lcatin Lcatin cnta user Imprtant, particularly fr printers. pstalcde OfficeZip OfficeZip cnta user prxyaddresses FullName FullName cnta user sn LastName LastName cnta user Smetimes used as surname. st OfficeState OfficeState cnta user streetaddress OfficeStreetAddres s OfficeStreetAddress cnta user telephnenumber OfficePhneNumb er OfficePhneNumber cnta user title JbTitle JbTitle cnta user BTCustm001 FullName cnta user c OfficeCuntry OfficeCuntry grup user department Department Department grup user displayname DisplayName ListName grup grup 74

Surce Field Internal Field Target Field Surce Type Targe t Type 1 Targe t Type 2 Cmment s emplyeeid EmplyeeID EmplyeeID grup user facsimiletelephnenumb er OfficeFAXNumber OfficeFAXPhneNumb er grup user givenname FirstName FirstName grup user inf Cmment ListDescriptin grup grup inf Cmment Cmment grup user initials Initials MiddleInitial grup user l OfficeCity OfficeCity grup user mailnickname PrimaryAlias ShrtName grup user The fllwing restried chars will be replaced with underscre s: ( ) @ [ ] " space : \ > ; < mbile CellPhneNumber CellPhneNumber grup user physicaldeliveryofficena me Lcatin Lcatin grup user Imprtant, particularly fr printers. pstalcde OfficeZip OfficeZip grup user 75

Surce Field Internal Field Target Field Surce Type Targe t Type 1 Targe t Type 2 Cmment s prxyaddresses FullName FullName grup user samaccuntname SAMAccuntName ShrtName grup user The fllwing restried chars will be replaced with underscre s: + @ [ ] " / :? \ > ; = * <, sn LastName LastName grup user Smetimes used as surname. st OfficeState OfficeState grup user streetaddress OfficeStreetAddres s OfficeStreetAddress grup user telephnenumber OfficePhneNumb er OfficePhneNumber grup user title JbTitle JbTitle grup user BTCustm001 FullName grup user T represent grup as persn. cn CmmnName FullName resurce user displayname DisplayName FullName resurce user 76

Surce Field Internal Field Target Field Surce Type Targe t Type 1 Targe t Type 2 Cmment s name LastName LastName resurce user mailnickname PrimaryAlias FullName resurce user The fllwing restried chars will be replaced with underscre s: ( ) @ [ ] " space : \ > ; < mailnickname ShrtName ShrtName resurce user The fllwing restried chars will be replaced with underscre s: ( ) @ [ ] " space : \ > ; < prxyaddresses FullName FullName resurce user samaccuntname SAMAccuntName FullName resurce user The fllwing restried chars will be replaced with underscre s: + @ [ ] " / : 77

Surce Field Internal Field Target Field Surce Type Targe t Type 1 Targe t Type 2 Cmment s? \ > ; = * <, cn CmmnName FullName rm user displayname DisplayName FullName rm user name LastName LastName rm user mailnickname PrimaryAlias FullName rm user The fllwing restried chars will be replaced with underscre s: ( ) @ [ ] " space : \ > ; < mailnickname ShrtName ShrtName rm user The fllwing restried chars will be replaced with underscre s: ( ) @ [ ] " space : \ > ; < prxyaddresses FullName FullName rm user samaccuntname SAMAccuntName FullName rm user The fllwing restried 78

Surce Field Internal Field Target Field Surce Type Targe t Type 1 Targe t Type 2 Cmment s chars will be replaced with underscre s: + @ [ ] " / :? \ > ; = * <, cn CmmnName FullName sharedma il user displayname DisplayName FullName sharedma il user mailnickname PrimaryAlias FullName sharedma il user The fllwing restried chars will be replaced with underscre s: ( ) @ [ ] " space : \ > ; < mailnickname ShrtName ShrtName sharedma il user prxyaddresses FullName FullName sharedma il user samaccuntname SAMAccuntName FullName sharedma il user The fllwing restried chars will be replaced with 79

Surce Field Internal Field Target Field Surce Type Targe t Type 1 Targe t Type 2 Cmment s underscre s: + @ [ ] " / :? \ > ; = * <, c OfficeCuntry OfficeCuntry user user The fllwing restried chars will be replaced with underscre s: ( ) @ [ ] " space : \ > ; < cn CmmnName FullName user user department Department Department user user displayname DisplayName FullName user user emplyeeid EmplyeeID EmplyeeID user user facsimiletelephnenumb er OfficeFAXNumber OfficeFAXPhneNumb er user user givenname FirstName FirstName user user initials Initials MiddleInitial user user l OfficeCity OfficeCity user user 80

Surce Field Internal Field Target Field Surce Type Targe t Type 1 Targe t Type 2 Cmment s mailnickname PrimaryAlias ShrtName user user The fllwing restried chars will be replaced with underscre s: ( ) @ [ ] " space : \ > ; < mbile CellPhneNumber CellPhneNumber user user physicaldeliveryofficena me Lcatin Lcatin user user Imprtant, particularly fr printers. pstalcde OfficeZip OfficeZip user user prxyaddresses FullName FullName user user samaccuntname SAMAccuntName ShrtName user user The fllwing restried chars will be replaced with underscre s: + @ [ ] " / :? \ > ; = * <, sn LastName LastName user user Smetimes used as surname. 81

Surce Field Internal Field Target Field Surce Type Targe t Type 1 Targe t Type 2 Cmment s st OfficeState OfficeState user user streetaddress OfficeStreetAddres s OfficeStreetAddress user user telephnenumber OfficePhneNumb er OfficePhneNumber user user title JbTitle JbTitle user user BTCustm001 FullName user user 82

Appendix D: Custmizing Overrides In SMART Direry Sync, an verride is used t transfrm values in the target direry based upn a frmula. The frmula language used is T-SQL, used in Micrsft s SQL Server prdu line. A valid sele statement in T-SQL wuld be Sele (FirstName + LastName) frm BT_Persn. When adding an verride yu d nt need t include a full SQL sele statement as prtins f the SQL statement are generated fr yu. Specifically, yu are nt required t use the sele r frm cmmands in the verride. It is nly required t enter the clumns that shuld be seleed. T cntinue the example abve, a valid verride wuld nly need t cntain the value f FirstName + LastName. T add a View Override: 1. Frm the Mapping tab, click Overrides. The View Overrides windw appears. 2. Click Add. The Override dialg appears. 3. Sele a Persn r Grups frm the View drp-dwn list. 4. Enter a Field Name fr the new verride. This must be a valid internal field name in SQL. 5. Enter a Field Value fr the new verride. This must be a crrely frmatted SQL statement. 6. Enter Cmments fr the new verride. 7. Click Save. 8. Click Yes fr the cnfirmatin message. 83

When yu save an verride, SMART Direry Sync re-generates the Persn r Grups view. It des this by dynamically generating a single SQL statement using the snippet f SQL cde that is part f all verrides. The max size fr this SQL statement is 8000 ttal charaers. If many new verrides are added, this limit culd be exceeded and an errr when adding the verrides will ccur. In additin t the default verrides, apprximately 15-20 mre Persn and 20-25 Grup verrides can be added befre hitting the size limit. T edit a mapping verride: 1. Frm the Mapping tab, click Overrides. The View Overrides windw appears. 2. Sele an Override and click Edit. The Override dialg appears. 3. Edit the Field Value fr the verride. The View and Field Name cannt be edited. 4. Edit Cmments fr the verride. 5. Click Save. 6. Click Yes fr the cnfirmatin message. T delete a mapping verride: 1. Frm the Mapping tab, click Overrides. The View Overrides windw appears. 84

2. Sele an Override and click Delete. 3. Click Yes fr the cnfirmatin message. T exprt all mapping verrides: 1. Frm the Mapping tab, click Overrides. The View Overrides windw appears. 2. Click Exprt All. 3. Sele a lcatin, enter a file name, and click Save. 85

Cntrlling ains with Overrides SMART Direry Sync uses the TypeOfTransain clumn frm the BT_Persn table, r the Operatin clumn frm the BT_Grups table t determine what ain t perfrm n the target bje. These may have verrides applied t them, t cntrl what ains Direry Sync will take fr an bje. The belw image shws an example f this kind f verride. Matching user accunts with Overrides The values used fr matching can have verrides applied t them. This is accmplished by setting up a new verride using the field names MatchValue1, MatchValue2, MatchValue3 and MatchValue4. Each MatchValue1-4 crrespnds the respeive Surce and Target pair n the matching tab. These values are used fr matching nly. Values that get written t the target are based n the mappings, nt the matching. 86

Example Overrides Field Name Field Value Descriptin TargetAddres s TargetAddres s TargetAddres s TargetAddres s CASE EntryType WHEN 'user' THEN 'SMTP:' + P.Custm20 + '@dmin.cnts.cm' ELSE 'SMTP:' + db.replacedmain(internetaddress,'dmin.cnts.cm') END 'SMTP:' + db.updateinternetaddress(internetaddress,'dmin.') ' 'SMTP:' + db.replacedmain(internetaddress,'dmin.cnts.cm') CASE WHEN InternetAddress LIKE '%@kdak.cm' THEN 'smtp:' + db.updateinternetaddress(p.internetaddress, 'dmin.') WHEN InternetAddress LIKE '%@kntes.cnts.cm' THEN 'smtp:' + db.replacedmain(p.internetaddress, 'dmin.cnts.cm') ELSE P.InternetAddress END This frmula will dynamically set the targetaddress value based n the EntryType. This frmula will set the TargetAddress value based n the InternetAddress and prefix the dmain with the value specified, in this case "dmin.". This frmula will set the TargetAddress value based n the InternetAddress and replace the dmain with the value specified, in this case "dmin.cnts.c m". This frmula will dynamically set the targetaddress value based n the existing InternetAddress dmain name value. If the first dmain is fund then the TargetAddress will be set t ne value, if the secnd dmain is fund anther value will be used and if neither 87

Field Name Field Value Descriptin dmain is fund then the TargetAddress will be set the same as the current InternetAddress value. CmmnNa me CmmnNa me PrxyAddress es CASE EntryType WHEN 'user' THEN 'd$$' + SurceDireryID WHEN 'sharedmail' THEN 'd$$' + SurceDireryID ELSE CmmnName END CASE WHEN LEN(CmmnName) > 64 THEN LTRIM(RTRIM(LEFT(CmmnName,64))) ELSE CmmnName END CASE PrxyAddresses WHEN '' THEN 'smtp:' + db.replacedmain(internetaddress,'@cnts.mail.nmicrsft.c m;smtp:') + db.updateinternetaddress(internetaddress,'dmin.') ELSE PrxyAddresses + ';smtp:' + db.replacedmain(internetaddress,'@cnts.mail.nmicrsft.c m;smtp:') + db.updateinternetaddress(internetaddress,'dmin.') END This frmula will dynamically set the CmmnName value based n the EntryType. This frmula will limit the CmmnName value t 64 charaers if it exceeds that limit. This frmula will set r append t the list f PrxyAddresses values the cexistence ruting addresses. This example specifically is designed fr Office 365. Cmpany LTRIM(RTRIM(LEFT(cmpany, 50))) This frmula will Trim, then limit the string value by 50 charaers. Custm001 'this is a string' This frmula will set any string value t the any SQL field. Custm001 REPLACE(InternetAddress,'@','.') This frmula will replace the '@' symbl with a perid '.' t create a string 88

Field Name Field Value Descriptin like s. (i.e. first.last.cnts.c m) Custm001 LEFT(InternetAddress,CHARINDEX('@',InternetAddress)-1) This frmula will extra the lcalpart f InternetAddress. 89

Appendix E: Direry Sync Fields with Special Prcessing AD Direry Sync Fields with Special Prcessing The belw tables include fields with sme kind f special prcessing in Direry Sync. Fields can be have the fllwing charaeristics: Cannt be mapped Can be mapped and have an verride May be explicitly ignred r changed by Direry Sync if bje meets certain cnditins, even if mapping and verride exists Aual attribute may be set via cnfig file Additinal ntes are available belw fr field marked with a *. Writing Users t AD Attributes that may be set by SMART Direry Sync regardless f mapping: Field Cannt be mapped Can be mapped / have verride May be explicitly ignred May be set with cnfig file distinguishedname bjeclass userpasswrd unicdepwd useraccuntcntrl msexchrecipientdisplaytype msexchrecipienttypedetails msexchresurcedisplay msexchresurcesearchprperties msexchresurcemetadata prxyaddresses* shwinaddressbk* 90

Field Cannt be mapped Can be mapped / have verride May be explicitly ignred May be set with cnfig file targetaddress* msexchmasteraccuntsid msexchpliciesexcluded msexchpliciesincluded useraccuntcntrl pwdlastset admindescriptin Special prcessing if mapped: Field Cannt be mapped Can be mapped / have verride May be explicitly ignred May be set with cnfig file mail assistant* manager* managedby* altrecipient* authring unauthorig dlmemsubmitperms dlmemrejeperms samaccuntname legacyexchangedn* mailnickname 91

Never set: Field Cannt be mapped Can be mapped / have verride May be explicitly ignred May be set with cnfig file bjeguid bjesid whencreated whenchanged usnchanged name cn Writing Grups t AD Attributes that may be set by SMART Direry Sync regardless f mapping: Field Cannt be mapped Can be mapped / have verride May be explicitly ignred May be set with cnfig file bjeclass msexchrecipientdisplaytype msexchversin prxyaddresses* shwinaddressbk* targetaddress* msexchpliciesexcluded msexchpliciesincluded admindescriptin 92

Special prcessing if mapped: Field Cannt be mapped Can be mapped / have verride May be explicitly ignred May be set with cnfig file mail assistant* manager* managedby* altrecipient* authoring unauthorig dlmemsubmitperms dlmemrejeperms samaccuntname legacyexchangedn* gruptype mailnickname Never set: Field Cannt be mapped Can be mapped / have verride May be explicitly ignred May be set with cnfig file bjeguid bjesid whencreated whenchanged usnchanged name cn 93

Special prcessing by Internal Field Name: Field Cannt be mapped Can be mapped / have verride May be explicitly ignred May be set with cnfig file If this internal field name is mapped and value is empty, aual value cmes frm different internal field DisplayName PrimaryAlias SAMAccuntName InternetAddress Name CmmnName Additinal Ntes 1. TargetDN this clumn cntains the distinguishedname f the target bje t be created r the existing distinguishedname f a matched target bje. If the bje is created, the fllwing values are used: a. Nn-grup bjes frm Dmin surces use the fllwing clumns (r verride values if specified) in rder until a nn-null value is fund: i. CmmnName ii. iii. iv. DisplayName PrimaryAlias FullName v. PrimaryFullName b. Grups frm Dmin surces use the fllwing clumns (r verride values if specified) in rder until a nn-null value is fund: i. DisplayName ii. iii. iv. Name CmmnName PrimaryAlias c. Nn-grup bjes frm AD surces use the DN clumn (r verride value if specified) t cmpute a target bje DN. This preserves the sub-ou hierarchy the bje may be in frm the surce. d. Grups frm AD surces, use the OU clumn (r verride value if specified) t cmpute a target bje DN. This preserves the sub-ou hierarchy the bje may be in frm the surce. 2. LegacyExchangeDN the legacyexchangedn f the target bje is cmputed by cnstruing a value relative t the target Exchange rganizatin. 3. TargetAddress a. Uses verride value frm the TargetAddress clumn if ne is specified. 94

b. Otherwise uses the primary SMTP frm the list f surce prxy addresses. c. Or the InternetAddress frm the surce bje. d. Or the UserPrincipalName frm the surce bje. 4. PrxyAddresses a. Includes all values frm the PrxyAddress clumn (r verride value if specified) fr the surce bje. b. Adds the InternetAddress frm the surce. Makes it the primary SMTP address. Makes all thers secndary SMTP addresses. c. Add an X500 address pinting t the legacyexchangedn f the surce bje. d. Add an X500 address pinting t the legacyexchangedn f the target bje. e. Applies any Exchange email address plicies frm the target Exchange rganizatin, if the Apply email plicies ptin is enabled. All new addresses are added as secndary SMTP addresses regardless f the plicy rules. 5. ShwInAddressBk unless hiding frm GAL is enabled. N verride clumn is available fr this field. a. Rms are added t the All Rms address bk, except fr Exchange 2003 which desn't have rms r the All Rms address bk. b. Users are added t the All Users address bk. c. Grups are added t the All Grups address bk. d. All bjes are added t the All Glbal Address Lists (GAL) address bk. 6. Manager all bjes except Grups a. Uses the Manager clumn (r verride value if specified) fr the surce bje. b. Lcates the referenced Manager in the target. c. If nt fund and a pending sync is available fr the Manager, DirSync will immediately sync it t the target. d. If the referenced Manager is a reference t itself, the Manager n the target bje will be set n the next sync. 7. ManagedBy grup bjes nly a. Uses the ManagedBy clumn (r verride value if specified) fr the surce bje. b. Fllws the same prcess as Manager abve. 8. Assistant all bjes a. Uses the Assistant clumn (r verride value if specified) fr the surce bje. b. Fllws the same prcess as Manager abve. 9. AltRecipient This is nt autmatically recnciled by Direry Sync. Dmin Direry Sync Fields with Special Prcessing The belw tables include Dmin fields with sme kind f special prcessing in Direry Sync. Fields can be have the fllwing charaeristic: On the reserved list, meaning any mappings fr them will be ignred and verrides cannt be used. 95

Explicitly set, even withut mapping: Field On the Reserved List $BTAin $BTSurceDireryID Frm - when DirSync created Type - when DirSync created AvailableFrDirSync - explicitly set t 0, when DirSync created MailSystem - explicitly set t 3 MailDmain - set t Freign Dmain given in prfile, when DirSync created CalendarDmain - grups nly, set t Freign Dmain given in prfile, when DirSync created GrupType - grups nly, explicitly set t 1, set fr DirSync created $Gruptype_Help - grups nly, explicitly set t 1, set fr DirSync created GrupTitle - grups nly, explicitly set t 1, set fr DirSync created Never set: Field On the Reserved List ResurceType Can be mapped, but will use the given values if they exist (and ignres verrides in that case): Field On the Reserved List DisplayName grups nly, set t TargetDisplayName if it has a value PrimaryAlias grups nly, set t TargetPrimaryAlias if it has a value SAMAccuntName grups nly, set t TargetSAMAccuntName if it has a value InternetAddress grups nly, set t TargetInternetAddress if it has a value Name grups nly, set t TargetName if it has a value CmmnName grups nly, set t TargetCmmnName if it has a value 96

Abut Binary Tree Binary Tree prvides rganizatins with the mst dire and prediable path t a successful technlgy transfrmatin. We ffer sftware and services t integrate and migrate crprate email, direry and server envirnments. Our technlgy, methdlgy and expertise is uniquely suited t prvide fast and manageable migratins, with lw risk, little t n user dwntime, and adapted t each custmer s envirnment and requirements. Since 1993, Binary Tree has enabled thusands f enterprise custmers t migrate mre than 35 millin email users and facilitated sme f the mst cmplex technlgy transfrmatins n the planet. Binary Tree is a Micrsft Gld Partner and a glbally preferred vendr fr Micrsft Office 365 migratins and slutins. The Cmpany is headquartered utside f New Yrk City with ffices in Hng Kng, Lndn, Paris, Stckhlm and Sydney. Fr mre infrmatin, visit us at www.binarytree.cm. Binary Tree Scial Media Resurces Cpyright 2016, Binary Tree, Inc. All rights reserved. Binary Tree, the Binary Tree lg, the SMART Migratin graphics, and any references t SMART Migratin and Binary Tree s sftware prdus, are trademarks f Binary Tree, Inc. All ther trademarks are the trademarks r registered trademarks f their respeive rights hlders. 97