Wednesday, July 6, 2011

User Account Migration and Merging – Part II (Quest Migration Manager)

Wednesday, July 6, 2011 7:17 AM  Unknown  75 comments

Part I - User Account Migration and Merging Using ADMT
Part II - User Account Migration and Merging Using QMM
Pre-creating user account in the target domain is a common scenario these days due to single-sign-on solution, HR management procedure etc. This will make the user migrate procedure more challenging. During the migration you need to make sure these accounts are properly “merged” with correct SID information.
In this example, I will explain a procedure to migrate and merge user accounts using Quest Migration Manager (QMM). You can read the  Part I (User Account Migration and Merging – Part I (ADMT)) of this document in the following link:
http://portal.sivarajan.com/2011/05/user-account-migration-and-merging-part.html
Scenario:
I have pre-created user accounts in the target domain. Their logon name (samAccoutnName) is different in the target domain. My goal to migrate an account from the source domain, merge it with the corresponding account in the target domain and maintain the source SID in the migrated object.
Migration Plan:
My plan is to use an input file which contains a mapping between source and target user accounts.  The file encoding type must be ANSI.  You can read about this requirement in my following blog:
http://portal.sivarajan.com/2010/12/user-migration-and-input-file-format.html
Here is an example of this input file:
image
In the above example, my plan is to migrate User1 and merge it with a pre-created user account (12345) in the target domain.  The column headers are Source sAMAccountName, Target sAMAccountName  and Target Name. 
Migration Procedure:
1. Open Quest Migration Manager console.  Right click on the Migration node and select New Session option. 


87236 dfasdf jlasdfj lasdjf lasdjflasjdflajsd fljasdlkfjasldkfj laskdjflksadjflkasdj flksdj flksdjf lksadjf lkasjdflkajsdflkjsadlkfjsadlf jsadlkf Sa dfasdf jlasdfj lasdjf lasdjflasjdflajsd fljasdlkfjasldkfj laskdjflksadjflkasdj flksdj flksdjf lksadjf lkasjdflkajsdflkjsadlkfjsadlf jsadlkf Sa dfasdf jlasdfj lasdjf lasdjflasjdflajsd fljasdlkfjasldkfj laskdjflksadjflkasdj flksdj flksdjf lksadjf lkasjdflkajsdflkjsadlkfjsadlf jsadlkf Sa dfasdf jlasdfj lasdjf lasdjflasjdflajsd fljasdlkfjasldkfj laskdjflksadjflkasdj flksdj flksdjf lksadjf lkasjdflkajsdflkjsadlkfjsadlf jsadlkf Sa dfasdf jlasdfj lasdjf lasdjflasjdflajsd fljasdlkfjasldkfj laskdjflksadjflkasdj flksdj flksdjf lksadjf lkasjdflkajsdflkjsadlkfjsadlf jsadlkf
dfasdf jlasdfj lasdjf lasdjflasjdflajsd fljasdlkfjasldkfj laskdjflksadjflkasdj flksdj flksdjf lksadjf lkasjdflkajsdflkjsadlkfjsadlf jsadlkf Sa dfasdf jlasdfj lasdjf lasdjflasjdflajsd fljasdlkfjasldkfj laskdjflksadjflkasdj flksdj flksdjf lksadjf lkasjdflkajsdflkjsadlkfjsadlf jsadlkf Sa dfasdf jlasdfj lasdjf lasdjflasjdflajsd fljasdlkfjasldkfj laskdjflksadjflkasdj flksdj flksdjf lksadjf lkasjdflkajsdflkjsadlkfjsadlf jsadlkf Sa dfasdf jlasdfj lasdjf lasdjflasjdflajsd fljasdlkfjasldkfj laskdjflksadjflkasdj flksdj flksdjf lksadjf lkasjdflkajsdflkjsadlkfjsadlf jsadlkf Sa dfasdf jlasdfj lasdjf lasdjflasjdflajsd fljasdlkfjasldkfj laskdjflksadjflkasdj flksdj flksdjf lksadjf lkasjdflkajsdflkjsadlkfjsadlf jsadlkf

image_thumb29
Verify sIDHistory and Identify the Source User Account - http://portal.sivarajan.com/2011/03/verify-sidhistory-and-identify-source.html
siDHistory Report - with Multi Value Support - http://portal.sivarajan.com/2011/04/sidhistory-report-with-multi-value.html
Generate sidHistory Report using DSQUERY command - http://portal.sivarajan.com/2011/01/generate-sidhistory-report-using.html
[image7.png]
QMM Directory Synchronization
 
87236 dfasdf jlasdfj lasdjf lasdjflasjdflajsd fljasdlkfjasldkfj laskdjflksadjflkasdj flksdj flksdjf lksadjf lkasjdflkajsdflkjsadlkfjsadlf jsadlkf Sa dfasdf jlasdfj lasdjf lasdjflasjdflajsd fljasdlkfjasldkfj laskdjflksadjflkasdj flksdj flksdjf lksadjf lkasjdflkajsdflkjsadlkfjsadlf jsadlkf Sa dfasdf jlasdfj lasdjf lasdjflasjdflajsd fljasdlkfjasldkfj laskdjflksadjflkasdj flksdj flksdjf lksadjf lkasjdflkajsdflkjsadlkfjsadlf jsadlkf Sa dfasdf jlasdfj lasdjf lasdjflasjdflajsd fljasdlkfjasldkfj laskdjflksadjflkasdj flksdj flksdjf lksadjf lkasjdflkajsdflkjsadlkfjsadlf jsadlkf Sa dfasdf jlasdfj lasdjf lasdjflasjdflajsd fljasdlkfjasldkfj laskdjflksadjflkasdj flksdj flksdjf lksadjf lkasjdflkajsdflkjsadlkfjsadlf jsadlkf
dfasdf jlasdfj lasdjf lasdjflasjdflajsd fljasdlkfjasldkfj laskdjflksadjflkasdj flksdj flksdjf lksadjf lkasjdflkajsdflkjsadlkfjsadlf jsadlkf Sa dfasdf jlasdfj lasdjf lasdjflasjdflajsd fljasdlkfjasldkfj laskdjflksadjflkasdj flksdj flksdjf lksadjf lkasjdflkajsdflkjsadlkfjsadlf jsadlkf Sa dfasdf jlasdfj lasdjf lasdjflasjdflajsd fljasdlkfjasldkfj laskdjflksadjflkasdj flksdj flksdjf lksadjf lkasjdflkajsdflkjsadlkfjsadlf jsadlkf Sa dfasdf jlasdfj lasdjf lasdjflasjdflajsd fljasdlkfjasldkfj laskdjflksadjflkasdj flksdj flksdjf lksadjf lkasjdflkajsdflkjsadlkfjsadlf jsadlkf Sa dfasdf jlasdfj lasdjf lasdjflasjdflajsd fljasdlkfjasldkfj laskdjflksadjflkasdj flksdj flksdjf lksadjf lkasjdflkajsdflkjsadlkfjsadlf jsadlkf
image
87236 dfasdf jlasdfj lasdjf lasdjflasjdflajsd fljasdlkfjasldkfj laskdjflksadjflkasdj flksdj flksdjf lksadjf lkasjdflkajsdflkjsadlkfjsadlf jsadlkf Sa dfasdf jlasdfj lasdjf lasdjflasjdflajsd fljasdlkfjasldkfj laskdjflksadjflkasdj flksdj flksdjf lksadjf lkasjdflkajsdflkjsadlkfjsadlf jsadlkf Sa dfasdf jlasdfj lasdjf lasdjflasjdflajsd fljasdlkfjasldkfj laskdjflksadjflkasdj flksdj flksdjf lksadjf lkasjdflkajsdflkjsadlkfjsadlf jsadlkf Sa dfasdf jlasdfj lasdjf lasdjflasjdflajsd fljasdlkfjasldkfj laskdjflksadjflkasdj flksdj flksdjf lksadjf lkasjdflkajsdflkjsadlkfjsadlf jsadlkf Sa dfasdf jlasdfj lasdjf lasdjflasjdflajsd fljasdlkfjasldkfj laskdjflksadjflkasdj flksdj flksdjf lksadjf lkasjdflkajsdflkjsadlkfjsadlf jsadlkf
dfasdf jlasdfj lasdjf lasdjflasjdflajsd fljasdlkfjasldkfj laskdjflksadjflkasdj flksdj flksdjf lksadjf lkasjdflkajsdflkjsadlkfjsadlf jsadlkf Sa dfasdf jlasdfj lasdjf lasdjflasjdflajsd fljasdlkfjasldkfj laskdjflksadjflkasdj flksdj flksdjf lksadjf lkasjdflkajsdflkjsadlkfjsadlf jsadlkf Sa dfasdf jlasdfj lasdjf lasdjflasjdflajsd fljasdlkfjasldkfj laskdjflksadjflkasdj flksdj flksdjf lksadjf lkasjdflkajsdflkjsadlkfjsadlf jsadlkf Sa dfasdf jlasdfj lasdjf lasdjflasjdflajsd fljasdlkfjasldkfj laskdjflksadjflkasdj flksdj flksdjf lksadjf lkasjdflkajsdflkjsadlkfjsadlf jsadlkf Sa dfasdf jlasdfj lasdjf lasdjflasjdflajsd fljasdlkfjasldkfj laskdjflksadjflkasdj flksdj flksdjf lksadjf lkasjdflkajsdflkjsadlkfjsadlf jsadlkf
Other Related Blogs & Articles:
Active Directory Migration Using ADMT - http://www.sivarajan.com/admt.html
Computer Migration - Things to Consider - http://www.sivarajan.com/cm.html
User Account Migration and Merging Using ADMT - http://www.sivarajan.com/
ADMT Include File - http://portal.sivarajan.com/2011/06/admt-include-file.html
User Migration and Input File Format - http://portal.sivarajan.com/2010/12/user-migration-and-input-file-format.html

Posted in: ,,,,,
Reactions: 

75 comments:

Hi Santhosh,

could you please clarify two things regarding this Merge Document for QMM.

1.Manually Re created users in target are having same sam account name of source, still can i use these similar steps ?

2 On selecte target container page of this doc, you have mentioned as below to select but in screenshot the option is different, please clarify , which is correct ??

c. Select Merge and leave the account where it was before the migration option.

>>>1.Manually Re created users in target are having same sam account name of source, still can i use these similar steps ?

What do you mean by “re-created”? re-created after the QMM process? Anyway, you can use the same procedure for manually created users. Make sure there is no QMM attributes are populated (by default, adminDispaly, adminDescription & EA13 and EA14)

>>> 2 On selecte target container page of this doc, you have mentioned as below to select but in screenshot the option is different, please clarify , which is correct ??

I have updated the sentence in the blog. Technically, these options are not going make any difference in the migration process. This is your destination location.

Merge and leave the account where it was before the migration option -> option will NOT move the migrated/merged object to a new OU.

Merge and move the object to the new OU -> This option will MOVE the object to the selected OU.

Hi Santhosh,

Group migration is the same procedure? I must migrate first users or groups?

Regards

Yes. You can use the same procedure for Group migration also.

Technically, it doesn’t matter. However, I always recommend to migrate groups first.

Are you using Quest and Directory Sync? Keep in mind that Quest Dirsync will only synchronize based on Quest matching attribute. You can’t do Many -> One group membership sync.

Yes I use Directory Synchronisation. Need a Quest licence for a group migration?
Sorry, I dont understand your last sentence.

User, group, computer migration and synchronization are part of AD migration license suite. If you have AD migration license, you don’t need separate license for Group migration piece.

HI I have a query, is it possible to create a report that shows you which accounts, are currently being synchronised by Quest?

You have a few options. If you have Quest Statistic Portal configured you can get the details from there. Or you can query Active Directory using your Quest matching attribute. Synchronized objects will have a matching attribute populate with a value. Just perform an LDAP query.

"report that shows you which accounts are currently being synchronised by Quest?"

It sounds like you want to know which accounts are in the scope of directory synchronization component? There is no out of the box report to tell you this. If you go into the properties of the Synchronization node and select "source scope" you will see a Set Filter button. Next to this there is an LDAP filter string - if you copy out this filter string into or ADUC or LDP, this will show you which accounts are actually in scope for direcotry sync.

Hi Santhosh,

I am trying to configure QMM the scenario as follows

Intraforest
Migrate the 2 child domains to the root domain

Interforest
Migrate domain from a different forest

1) When I am trying to merge an account from different forest, it is throwing error? Is there any prerequisite I need to take. Do I need to configure any QMM attributes to make this work.

2) For approximately 3000 Users/800 servers environmet How many QMM servers recommended / in this case, do I need to use the same ADAM database even if I install the

console on a different system using open project.

Thanks in advance.

What is the error message?

>>> For approximately 3000 Users/800 servers environmet How many QMM servers recommended

It has nothing to do with no. of users or servers. You can do all migration using a single server. However it is a best practice to have different/dedicated DSAs. Are you migrating any mailboxes?

You need only one ADAM. How many projects are you planning to create and why?

Santhosh
Windows 2012 Migration - http://www.amazon.com/dp/1849687447/?tag=packtpubli-20

>>>> "report that shows you which accounts are
currently being synchronised by Quest?"

What are you talking about here? May be I am missing something. Please provide more information.

Thanks Santhosh for the response.
Below is the message. I found a quest article relates to this and its talks about the attributes. Do I really need to set the attributes for ech domain pairs?

Error 0xe3000005. Target object matched by the following high-priority matching rule: adminDisplayName=4C3D556E839AB74BBCC993742FC61966 has already been matched with another source object by the following low-priority matching rule: objectClass=top#person#organizationalPerson#user

Sorry I missed other questions.
How many projects are you planning to create and why?
I thought of creating 1 project for all there and domain pairs and faciltate the migration for multiple people install console on other systems use open project option and connect to the same ADAM. (Is it the recommened option?)

Are you migrating any mailboxes?
Not now , It is LN environment and it will be handled as next phase.

Jiji Philip,
“adminDisplayName=4C3D556E839AB74BBCC993742FC61966 has already been matched with another source”
It is basically saying you already have a migrated object in target. You are using adminDisplayName as QMM service attribute.

You need select Service attribute for each domain pair. By default, if you don’t have Ex schema, it will be adminDisplayName and adminDescription. If you have EX schema, it will be EA14 and EA15.

One project should be enough

Thanks Santhosh for the response.


I have 3 Domains in scope for Migration, so 3 Domain pairs

If I am not setting up the service attributes for the domain pairs, it will take the Default values and it may be conflict with other entries

In this case can I set below attributes for each domain pair repecctively?

Source1 --> Destination

Source & Target service Attributes

Object Class Attributes

Auxilary: AdminDescription
Matching: AdminDisplayName


Source2 --> Destination

Source & Target service Attributes

Object Class Attributes
Auxilary: allowedAttributes

Matching: displayNamePrintable



Source3 --> Destination

Source & Target service Attributes
Object Class Attributes

Auxilary: distinguishedName

Matching: displayName
Please confirm..

>>>>If I am not setting up the service attributes for the domain pairs, it will take the Default values and it may be conflict with other entries

This is NOT 100% true. I always recommend selecting your Auxiliary and Matching attribute.

Look at you 3rd domain pair. It has displayName as matching attribute. What will happen if you have a conflict with Display Name and that object was migrated/synchronized using Domain Pair 1? You will get the error you mentioned in the initial question

“Error 0xe3000005. Target object matched by the following high-priority matching rule: adminDisplayName=4C3D556E839AB74BBCC993742FC61966 has already been matched with another source”

Pardon my ignorance about this, still I am bit confused about the service attribute usage and functionality. Based on your comment I beleive that displayname is not a good matching attribute,so can you suggest any other attribute that I can use.Thanks in advance

Hi Santosh, I have similar issue in my environment can help on this

I have some requirement to migrate from A domain to B domain domain under root domain in single forest then collapse the A domain. here is my requirement

using Quest Migration Manager

1. User & security groups migration to B domain from A domain
2. Exchange servers and Mailboxes are in B domain
3. Lync configurations also in B domain.
4. A domain has many nested groups and procedure to migrate the nested groups migration

Can you please provide your guidance and steps to start..

Thanks in advance
Mastan

Please provide more information about your requirement and environment.

So all resources are going to a single domain? If so, that is a straight forward migration.

Thanks for your reply. May I know the steps to start the process and any link to setup Lync object migration.
Currently I am using Quest 8.9 Version,
in current setup like , merging the sid history to target domain.

1. Is it possible to Nested Group Migration in QMM 8.9 ? If yes ,May I know the steps or any weblink?
2. Lync object setup and migration steps in QMM8.9?
3. Any prerequisites to be follow?

Thanks
Mastan.S

Thanks for your details and explanations..I want more information from your side..please include some valuable ideas..I Am working in Cloud Erp Software Company In Indiashould you need for any other clarification please call in this number.044-6565 6523.

nice post.I am impressed by the quality of information on this website.Thanks for sharing this post
Construction Services

Amazing Article ! I have bookmarked this article page as i received good information from this. All the best for the upcoming articles. I will be waiting for your new articles. Thank You ! Kindly Visit Us @ Coimbatore Travels | Ooty Travels | Coimbatore Airport Taxi | Coimbatore taxi | Coimbatore Taxi

thanks for your extrodinary services , go ahead
Scaffolding dealers in chennai

I must say, the presentation of information on this article is amazing.
Guys, Check this place out, one of the best view spot.

virtual office Manila

virtual office Makati

commercial space for rent in Makati

commercial space for rent in Manila


تنظيف بيارات بالرياض تنظيف بيارات بالرياض

كشف تسربات المياه بالاحساء كشف تسربات المياه بالاحساء
كشف تسربات المياه بالدمام كشف تسربات المياه بالدمام
كشف تسربات المياه بالرياض كشف تسربات المياه بالرياض

كشف تسربات المياه بالرياض كشف تسربات بالرياض

No one can deny the fact that search engine optimization drives visitors for your website. You will be deeply surprised on the results of SEO. For this reason, our SEO Company in chennai can provide you with all the needed skills to boost your website visibility in the top of search engine results. Therefore, if you are looking for a Best SEO Company in Chennai we are there to help you.

This comment has been removed by the author.

Hi, it’s such a joy reading your articles or posts. I am Working in a mobile app development company in riyadh

Online health & safety essay writing services are very difficult to complete and many students are always searching for Health & Safety Writing Services to help them complete their health & safety research paper writing services and health & safety coursework writing services.

IEEE Final Year projects Project Centers in India are consistently sought after. Final Year Students Projects take a shot at them to improve their aptitudes, while specialists like the enjoyment in interfering with innovation. For experts, it's an alternate ball game through and through. Smaller than expected IEEE Final Year project centers ground for all fragments of CSE & IT engineers hoping to assemble. IEEE Project Domains It gives you tips and rules that is progressively critical to consider while choosing any final year project point.

JavaScript Online Training in India

JavaScript Training in India

The Angular Training covers a wide range of topics including Components, Angular Directives, Angular Services, Pipes, security fundamentals, Routing, and Angular programmability. The new Angular TRaining will lay the foundation you need to specialise in Single Page Application developer. Angular Training

This is pretty informative. You can also check this messaging app mod that I found :

https://flosshype.com/fmwhatsapp/

Thanks for sharing it is important for me. I also searched for that from here. Visit our site Lexmark Printer helpdesk bellen

Download lucky patcher apk free download no root – latest version – Mod for Android to remove ads, make in-app purchases for free, and rewrite many apps to do what you want them to.

It's no wonder that in recent whatsapp plus became a huge part of our lives. It's conveyears nient quick and easy to use.

Hi your post is really appreciatable.I really thankful for this post. Here i would llike to share some information about facebook. As we know that facebook is a social trap where we connect with people in all over world. So if you are using facebook and face any technical issue that time so just visit our website. We can resolve the smallest problem on same time. For further information please visit on our website- facebook bellen belgie

Hi thankyou for this great helpful information.this information is really useful at today's time.you had easily explained whole information in a short note. Now i would like to share some information about PayPal.So If you are a Paypal user and you are facing any problem regarding to PayPal. No need to worry just simply visit on our site- paypal email belgie

Hi your post is very nice and i am greatful to you for sharing this post with us.here i want to share some information about Norton Antivirus.As we all know how much Norton Antivirus is usefull for our laptops and mobiles.so whenever you have any query regarding Norton or need any assistance how to run or any information that time please visit over this site-Bellen norton Ondersteuning

Hi.. I read your blog which is really great and Thanks for sharing. Keep posting. Must visit on facebook bellen

hi, your post is very helpful for me. Finally, I found exactly what i want. If need information regarding antivirus then you can visit our site Avast ondersteuning belgie

This comment has been removed by the author.

Your blog is very informative, finally, I found exactly what I want. Paypal is an excellent service for online payments but lots of its users confront issues while they access Paypal. If you want to resolve your problems then must visit Paypal klantendienst.

Your blog is very informative and interesting to read, finally, I found exactly what I searching for. There are lots of users of Macfee antivirus in the world because of its features and easy interface. If you want to explore more interesting facts about Mcafee antivirus or want to resolve your technical issues then must visit Mcafee ondersteuning Nederland.

Hi, Thank you for sharing such a good and valuable information,It is very important for me. Gmail is the worldwide used email service but sometimes user faces some problems in it. If you want to get some information about the Gmail then you can visit Gmail-tili.

Unbelievable blog! This blog provides a brief introduction which is very helpful for me. Instagram is the most usable platform in the world because of its latest features but the user some time confronts some issues on Instagram. For more information, you can visit Instagram yhteystiedot.

I have read some good stuff here. Certainly price bookmarking for revisiting. I surprise how so much effort you put to create this sort of fantastic informative web site.Express Invoice Crack

This is very useful news for those users who want to migrate their accounts from one bank to another bank which branch is near to their homes and cities. Assignment writing service

Thanks for sharing it is important for me. I also searched for that from here. Visit our site Lenovo ondersteuning

Thanks for sharing such an Amazing information, I Couldn't leave without reading your blog. I have read another good blog, I think you have read it too. click here yahoo mail bellen

hi, your post is very helpful for me. Finally, I found exactly what i want. If you need information regarding antivitrus then you can visit our site Soporte Bullguard Espana

that’s a nice article, thank you for a great article. It helped me a lot. Keep it up Must Visit: yahoo mail helpdesk

Thanks for sharing it is important for me. I also searched for that from here. Visit our site contact Lenovo belgie

This is very good post I have read and I must appreciate you to have written this for us.Its really informative.
Best Digital Marketing Agency in Chennai
website design in chennai

Post a Comment

Popular Posts

Share

Twitter Delicious Facebook Digg Stumbleupon Favorites More