Quest On Demand Migration. Administrator Guide

Transcription

1 Quest On Demand Migration Administrator Guide

2 2018 Quest Software Inc. ALL RIGHTS RESERVED. This guide contains proprietary information protected by copyright. The software described in this guide is furnished under a software license or nondisclosure agreement. This software may be used or copied only in accordance with the terms of the applicable agreement. No part of this guide may be reproduced or transmitted in any form or by any means, electronic or mechanical, including photocopying and recording for any purpose other than the purchaser s personal use without the written permission of Quest Software Inc. The information in this document is provided in connection with Quest Software products. No license, express or implied, by estoppel or otherwise, to any intellectual property right is granted by this document or in connection with the sale of Quest Software products. EXCEPT AS SET FORTH IN THE TERMS AND CONDITIONS AS SPECIFIED IN THE LICENSE AGREEMENT FOR THIS PRODUCT, QUEST SOFTWARE ASSUMES NO LIABILITY WHATSOEVER AND DISCLAIMS ANY EXPRESS, IMPLIED OR STATUTORY WARRANTY RELATING TO ITS PRODUCTS INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTY OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, OR NON-INFRINGEMENT. IN NO EVENT SHALL QUEST SOFTWARE BE LIABLE FOR ANY DIRECT, INDIRECT, CONSEQUENTIAL, PUNITIVE, SPECIAL OR INCIDENTAL DAMAGES (INCLUDING, WITHOUT LIMITATION, DAMAGES FOR LOSS OF PROFITS, BUSINESS INTERRUPTION OR LOSS OF INFORMATION) ARISING OUT OF THE USE OR INABILITY TO USE THIS DOCUMENT, EVEN IF QUEST SOFTWARE HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. Quest Software makes no representations or warranties with respect to the accuracy or completeness of the contents of this document and reserves the right to make changes to specifications and product descriptions at any time without notice. Quest Software does not make any commitment to update the information contained in this document. If you have any questions regarding your potential use of this material, contact: Quest Software Inc. Attn: LEGAL Dept 4 Polaris Way Aliso Viejo, CA Refer to our Web site ( for regional and international office information. Patents Quest Software is proud of our advanced technology. Patents and pending patents may apply to this product. For the most current information about applicable patents for this product, please visit our website at Trademarks Quest, the Quest logo, and Join the Innovation are trademarks and registered trademarks of Quest Software Inc. For a complete list of Quest marks, visit All other trademarks and registered trademarks are property of their respective owners. Legend CAUTION: A CAUTION icon indicates potential damage to hardware or loss of data if instructions are not followed. IMPORTANT, NOTE, TIP, MOBILE, or VIDEO: An information icon indicates supporting information. Updated - May 2018

3 Contents About On Demand Migration 5 Before you Start 6 Required Permissions 6 Obtaining Impersonation Role for Mail Migration 7 Signing up for Quest On Demand 7 Organizations and Regions 8 Adding a Tenant 8 Working with On Demand Migration 9 Project Management 10 Project Dashboard 11 Searching 12 Filtering 14 Starting Migration Project 15 Configuring Connections 16 Sharing Availability Information 17 Collecting Account Information 18 Pre-Migration Assessment 19 Account Migration 20 Using Collections 21 Matching Accounts 23 Using the Manual Mapping 23 Clearing the Matches 24 Migrating Accounts 24 Mail Migration 25 Deploying Client Update Agent 26 Migrating Mailboxes 26 Switching Clients 27 Resource Processing 29 Processing Resources 29 Processing SharePoint Online 30 3

4 Processing Resource Roles 30 Processing Application Assignments 30 OneDrive Migration 32 Migrating OneDrive 33 Finalizing the Migration 34 About us 35 Contacting Quest 35 Technical support resources 35 4

5 About On Demand Migration Quest On Demand Migration cloud application lets you perform the following: Analyze the structure of your Microsoft Azure Active Directory and get reports on the problems that might adversely affect the migration. Migrate Azure AD users, groups, and the related information between tenants. Migrate Microsoft Office 365 mailboxes and share free/busy information between tenants. Map the existing accounts in the source and target tenants for further resource processing. Grant migrated accounts access to source tenant s resources and applications. Transfer OneDrive for Business data. Provide robust project management interface and in-depth progress reporting. On Demand Migration is a part of Quest On Demand a single SaaS console for managing your cloud environment in Microsoft Azure. For more information, see Quest On Demand Global Settings documentation. About On Demand Migration 5

6 Before you Start To access your Azure Active Directory or Office 365 tenant via On Demand Migration, use an Administrative account that has the Global Administrator role. TIP: Quest recommends creating a temporary account for On Demand Migration and use it to grant all consents for the project. Once the migration is finished, simply delete this account. If you do not have such account, create it with Microsoft Azure administrative portal. Required Permissions This section lists the minimum user account permissions required to perform specific On Demand Migration tasks: Task Minimal Permissions Details Adding tenant to On Demand Configuring tenant / granting admin consent Discover accounts Statistics on Mailboxes Enable calendar sharing Migrate accounts Migrate mailboxes Migrate OneDrive storages Process Resource Roles Global Administrator Global Administrator Granted Migration - Basic consent Global Administrator Global Administrator Global Administrator Granted Migration - Basic consent Global Administrator Granted Migration - Basic consent Global Administrator (with Office 365 mailbox and Impersonation Role in Exchange Online) Granted Migration - Resource Processing for SharePoint Online consent Global Administrator Granted Migration - Basic consent Global Administrator User Access Administrator role for Refer to Adding a Tenant for details. Refer to Obtaining Impersonation Role for Mail Migration for details. To perform Autodiscover during mail migration an Office 365 mailbox is required. Migration - Resource Processing for SharePoint Online consent must be granted for source and target tenants Before you Start 6

7 Task Minimal Permissions Details "Quest On Demand - Migration - General [Automation]" Process SharePoint Online Process Application Assignments Granted Migration - Resource Processing for SharePoint Online consent Turned on external sharing for SharePoint Online Global Administrator Granted Migration - Basic consent Global Administrator Refer to Adding a Tenant for details. Obtaining Impersonation Role for Mail Migration Mail migration requires Application Impersonation, so that knowledge of the users' credentials is not required. It is automatically configured for tenant administrators, but you should explicitly configure the impersonation for other users. 1. Login to the Office 365 Exchange Admin Portal. 2. Go to permissions, then click + icon under admin roles to add a new role 3. In the Role Group dialog, provide a meaningful name and an optional description for your Role Group. For example, Impersonation for migration. 4. Click + icon under Roles, select ApplicationImpersonation and add it to the role group. 5. Click + icon under Members, select an administrative account that will perform the migration and add it to the role group. 6. Click Save. Signing up for Quest On Demand To get access to On Demand Migration, you need to sign up for the Quest On Demand service. For that, go to Quest On Demand and use one of the following options: Sign up using the existing Quest account. Create a new Quest account and sign up for Quest On Demand. Join an existing On Demand organization. You must accept the Software Transaction Agreement before using this product. For more details, refer to the Signing up for Quest On Demand and Signing up and adding users to your organization sections in On Demand Global Settings User Guide. Before you Start 7

8 Organizations and Regions When you sign up for the On Demand service for the first time, you create an organization and you become the On Demand organization administrator. You can add additional organization administrators. For more information about managing your organization see Organizations and regions section in On Demand Global Settings User Guide. Adding a Tenant To start your migration project, specify source and target tenants. For latest information on adding or removing tenants, please see the Tenant Management section in On Demand Global Settings User Guide. Before you Start 8

9 Working with On Demand Migration Basic migration workflow consists of the following steps: # Step Configure connections Share free/busy information from users calendars Perform pre-migration assessment Organize accounts into collections Match source accounts with the existing target accounts Working with On Demand Migration 9

10 # Step Migrate accounts Migrate mail Grant target users access to source tenant s resources (resource processing) Migrate OneDrive for Business storages Monitor the progress and track issues Project Management The On Demand Migration provides robust project management interface and in-depth progress reporting: For the birds-eye view on your migration project, go to Dashboard. Organize the accounts into collections, that act as projects within project. The collections allow you to structure big environments. Analyze your environment and find out the potential misconfiguration and problems that may adversely affect the migration. View all your accounts and mailboxes, sort, reorder, search, and filter them. Track the project flow in the Tasks list. TIP: Give informative names for the tasks. It will simplify the project management and event filtering in the future. Monitor the migration process, detect, and troubleshoot the issues with the Events list. Task Management From the Tasks list you can control the individual steps of the migration project: Track the task progress and view the results of finished tasks. Refer to the details pane in the bottom of the screen for the detailed information and statistics. Use search or filtering to quickly navigate through the list of tasks. Start, stop, and delete tasks. IMPORTANT: If you edit the task which is currently running, it is automatically restarted. Working with On Demand Migration 10

11 Event Management Events list contains all notifications and alerts related to the environment configuration and migration process. It allows you: View all events related to the migration process. Drill down to the details related to the event. You can quickly navigate to the originating task or affected object. See the details pane in the bottom of the screen. Hide certain alerts from the list by using Acknowledge option. This might be useful if you don t want to be distracted by the accidental warning or expected error. Explore details about selected events. Refer to the details pane in the bottom of the screen for more details and statistics. Export selected events into comma-separated values (CSV) file for analytics or archival purposes. TIP: Use search or filtering to quickly navigate to the points of interest. Project Dashboard All information about the migration project is summarized on the Dashboard. # Control Breadcrumbs Menu Keep track of your location within project and quickly return to the previous steps. Configure, manage, and control every aspect of the migration project. Working with On Demand Migration 11

12 # Control Accounts match and migrate Azure AD accounts, process resources. Mailboxes migrate mail. OneDrive migrate OneDrive for Business storages. Events monitor and troubleshoot the project. Tasks control the flow of the migration. Notification area Action pane Action items, alerts, tips, tricks, and other notifications are displayed in this area. Set up and fine tune the migration with these commands. Collection list View and manage collections. Getting Started widget Accounts widget Mailboxes widget OneDrive widget Tasks widget Errors widget Don t know where to start? Check our Quick Help. See the summary on accounts and quickly navigate to the list of accounts See the summary on mailboxes and quickly navigate to the list of mailboxes See the summary on OneDrive for Business storages and quickly navigate to the list of OneDrive users See the status summary for the current migration flow and quickly navigate to all tasks See the summary on warnings and errors and quickly navigate to all migration events Searching The lists of accounts, mailboxes, task or events might be very long and hard to manage. Use Search box above this list to look for items matching the certain criteria. Working with On Demand Migration 12

13 You can use words, phrases, and special queries in your search. The search is performed across all fields. Press Enter to get the search results. TIP: Add * to the end of the search query to match all items starting with the search term. Otherwise, you will only get the exact matches. For example, john* returns John Doe, Johnson Smith, and john.doe. Search expressions are case-insensitive Advanced Search You can refine your results by using the advanced search operators. Refer to Lucene Tutorial for the full information on search syntax. To search for Operator Example Result Part of a word * *serv* Matches items containing "serv". Exclude specified content Include specified content - -mail* Excludes items that contain the word starting with mail. NOT (casesensitive) NOT mail* + +mail* Matches items containing mail along with the basic search query. Multiple keywords Space mail user OR (casesensitive) mail OR user Matches items that contain either mail or user. This is the default search behavior for phrases. AND (casesensitive) mail AND user Matches items that contain both mail and user. Exact phrase Quotation marks "item hard deleted" Matches items that contain the exact phrase "item hard deleted". Search by Date Range NOTE: Never add spaces between the criteria name and value! For example, timestamp:[ TO *] will work, while timestamp: [ TO *] won t. To search for Exact date and time, for example September 18, 2017 Eastern Time (UTC-5) Operator when:[ t00:00:00-05 TO T00:00:00-05] Working with On Demand Migration 13

14 To search for Operator Everything after June 27 timestamp:[ TO *] Everything up to June 27 9:03:27 timestamp:[* TO T09:03:27] Everything between January 27 and 28 timestamp:[ TO ] Weeks 1 to 3 of 2018 timestamp:[2018-w1 TO 2018-W3] First 50 days of 2018 timestamp:[ TO ] Filtering You can quickly filter out the certain items based on the predefined criteria. The applied filters are shown before the search box. To apply a filter, simply click the desired facet on the left of the list. To clear it, click the close icon in the filter box. The filters may be automatically applied, when you navigate across the interface. For example, navigate from assessment reports, view details on the specific task, or click links in notifications. Working with On Demand Migration 14

15 Starting Migration Project Sign in to Quest On Demand and perform the following steps: Select Migration and click Go. On Migration Projects page, click New Project. In the New Project dialog select the source and the target tenants added to your organization (see Adding a Tenant). Type in your project description and click Save. Each migration project handles a single pair of source and target tenants. New migration project is now created. Click Go to configure the connections. Starting Migration Project 15

16 Configuring Connections Before proceeding with the migration, provide administrative credentials for the source and the target tenants and grant consent for the application. You can do this from the project dashboard. Configuring connections for source and for target tenants 1. Click Configure Connections on the project dashboard. 2. In the Configure Connections dialog select the tenant and click Edit. Provide or change administrator credentials and grant necessary permissions to allow the product to access the tenant. You will be redirected to the Microsoft web site for granting admin consent. Once admin consent is granted, you can proceed. NOTE: Consent status may automatically expire after 90 days. If you are not finished with the migration, grant consent again. 3. When both source and target connections are configured, click Finish. Configuring Connections 16

17 Sharing Availability Information To allow users retrieving each other's calendar free/busy information, create a relationship between the source and the target tenants. It can be easily done from On Demand Migration project management interface: 1. Go to the Dasboard. 2. Click Enable Calendar Sharing and verify source and target domain names. Click Next to proceed. 3. Name the task. Select Start the task automatically when the wizard is finished and click Finish to start the task. You can also clear this option to start this task manually, when necessary. Sharing Availability Information 17

18 Collecting Account Information Before proceeding with the migration, enumerate all accounts and retrieve relevant information from the source tenant. The discovery collects all necessary account data and optional statistics on connected mailboxes for your source tenant to avoid misconfiguration and prevent possible issues. 1. Click Discover Accounts on the project dashboard to create a new discovery task. 2. To enrich the basic account information with details from Microsoft Office 365/Exchange Online, select Include statistics on mailboxes. NOTE: Mailbox statistics discovery might be a lengthy process. 3. Click Next. Provide an informative name for your discovery task and verify selected options. By default, the task will be started automatically when the wizard is finished. You can clear this option and start this task manually, using task widget on project dashboard. TIP: Give informative names for the tasks. It will greatly simplify the project management and event filtering in the future. 4. Click Finish. A new widget appears on the project dashboard to show the task status. 5. Click the task name on the widget to see the details or use Show all link. Once the discovery task is complete, you will see the source domain s accounts summary on the project Dashboard and can perform Pre-Migration Assessment. CAUTION: Don t start the migration before the discovery task is finished. It might result in incorrect processing of migrated objects. Collecting Account Information 18

19 Pre-Migration Assessment On Demand Migration analyzes your domain structure and tracks potential problems, misconfiguration, and risks that might adversely affect the migration. Use Assessment view to see the summary reports on the discovered data. The following reports are available for Accounts : To clean up To adjust Disabled accounts Users with non expiring passwords Duplicate group names Duplicate user names Users without first name Users without last name Account statistics (inventory data) User data Number of users Number of groups External Accounts Tenant members The following reports are available for Mailboxes: Mailbox statistics To clean up To adjust The users not logged on to mailbox for 30 days The users not logged on to mailbox for 90 days The users never logged on to mailbox Disabled users with mailbox Mailboxes with duplicate user name Once you handle the issues, if any, go to Accounts screen. You are ready to start the migration. Pre-Migration Assessment 19

20 Account Migration Basic account migration workflow consists of the following steps: Account Migration 20

21 # Step Create collections to streamline the migration process Match accounts by attribute Import account mapping from file Migrate accounts IMPORTANT: Do not delete matched or migrated accounts from the project. If you need to do this anyway, clear the matching for those accounts. Using Collections The migrated environment may be very big and complex. The accounts might belong to different offices and geographical locations. Some groups of employees, like top management, Finance or Legal divisions should be given special care when migrating. To make large environments more manageable, organize the accounts into collections. To create a collection: 1. Go to the Accounts screen 2. Select accounts you want to combine into the collection. You can use search for filtering out the accounts by certain criteria or simply hand-pick the individual accounts from the list. 3. Click New Collection and enter the informative collection name for these accounts. Click Save to add this collection to the project. All collections are shown in the project Dashboard. Account Migration 21

22 A collection acts like migration project within migration project. It has its own dashboard that shows the collection-specific summary, allows you to see accounts added to it, create tasks for them, and monitor the progress for the selected subset of accounts. To match or migrate accounts within the collection, click Browse Accounts or just open Accounts tab. You will get the list of accounts that belong to the collection. To see the tasks for collection-specific accounts, use the corresponding widget on the collection dashboard or open Tasks tab. To see the events related to the collection, use the corresponding widget on the collection dashboard or open Events tab. To rename or delete the collection, click the corresponding buttons in the toolbar. To return to the project dashboard, click the project name in the navigation bar. Account Migration 22

23 Matching Accounts Your target tenant might already contain accounts created for the source tenant users before the migration. You can map them to the corresponding source accounts, so that no data is lost or duplicated. Create Matching Task: 1. Open Accounts. 2. Select the accounts you want to match and click Match Accounts. TIP: Use search or collections to quickly navigate through the list of accounts. 3. By default, you are matching the accounts using the attribute value. For example, identical display name or address. You can also create more complex matching rules, for example using different attributes on source and target. Click Next. 4. Check the matching rule and name the task. Select Start the task automatically when the wizard is finished and click Finish to start the task. Alternatively, you can save the task and start it manually later just clear the automatic startup option. The matching task is created. You can track its progress in the Tasks, view the summary on the Dashboard or monitor alerts and notifications in the Events. Using the Manual Mapping In some cases, the matching accounts attributes may differ. For example, it might happen when you have created some of the accounts manually as a part of initial migration to the new tenant. To handle such environments, you can provide a file with the custom mapping between source and target accounts. 1. Prepare a comma-separated values (CSV) file with account pairs. The first row contains the names of the source and target attribute used for mapping (might be different.) Subsequent rows list value pairs for those attributes (one pair per row.) For example: userprincipalname,customtargetattribute john.doe@source.domain,jdoe@target.domain jane.roe@source.domain,jane@target.domain NOTES: You can use userprincipalname and objectid source attributes for mapping. File names with non-ascii characters are not supported. 2. Open Accounts and click Map from File. Do not select any accounts from the list you have already specified them in the file created on Step Click Browse to open the mapping file created on Step Browse for file and click Open. Selected file name appears next to the Browse button. 5. Click Next and name the task. Select Start the task automatically when the wizard is finished and click Finish to start the task. Alternatively, you can save the task and start it manually later just clear the automatic startup option. The task is created. You can track the progress in the Tasks list or view the summary on the Dashboard. Account Migration 23

24 NOTE: The account pairs that do not exist in the source and/or target tenants and the source accounts that are not enumerated during the Discovery are ignored without producing an event. If you import the mapping from file, an active collection, selected accounts, search, and filters are ignored. The matching is always performed for all pairs provided in the file. Clearing the Matches In some cases, you might want to remove the mapping for individual accounts. It might happen when fixing the result of erroneous matching or fine-tuning the outcome of a previous task. To clear unwanted matches, create a special matching task. 1. Open Accounts and select the items for which you want to remove the mapping. 2. Click Match Accounts and select Clear existing matches option. Click Next to view task summary. 3. Provide a name for the task. Select Start the task automatically when the wizard is finished and click Finish to start this task manually, when necessary. NOTE: Once the task is complete, the matched accounts will revert to the New status and the matching is cleared for selected pairs. You can see a task status on the Tasks screen. For more information refer to details panel in the bottom of the screen. Migrating Accounts CAUTION: Don t start the migration before the discovery task is finished. When the matching is done, it is time to migrate source accounts that do not have the pairs on the target tenant. Create a new migration task: 1. Open Accounts. 2. Select accounts you want to migrate. TIP: Use search, filtering or collections to quickly navigate through the list of accounts. 3. Click Migrate Accounts and provide vanity domain name instead of default *.onmicrosoft.com. Typically it is a domain name of your organization. IMPORTANT: The custom domain name must be set up on the target tenant. See Quickstart: Add a custom domain name to Azure Active Directory for details. 4. Click Next and name the migration task. Select Start the task automatically when the wizard is finished and click Finish to start the task. Alternatively, you can save the task and start it manually later just clear the automatic startup option. The migration task is created. You can track its progress in the Tasks, view the summary on the Dashboard or monitor alerts and notifications in the Events. Account Migration 24

25 Mail Migration Basic mailbox migration workflow consists of the following steps: # Step Deploying Client Update Agent Migrating Mailboxes Configure mail forwarding from target to source Switch mailboxes Mail Migration 25

26 Deploying Client Update Agent Once the migration is complete, Outlook clients should be redirected to the new Exchange Online. You can control this switch automatically through On Demand Migration console all you have is to deploy a small utiltity called Client Update Agent to the end-user machines. Downloading the Agent Go to the project dashboard and click Download Agent action. Click Download. IMPORTANT: The Client Update Agent package comes with the certificate for securing connections between the agent and On Demand Migration. If you suspect that the certificate might be compromised download the package again, selecting Reissue the certificate option. The previously issued certificate will be immediately revoked. Deploying the Agent The Client Update Agent package comes with the agent s executable that checks the migration status and performs the switching odmclient.exe and the certificate for securing connections between the agent and On Demand Migration certificate.pfx. Now you can automatically distribute then across all clients: 1. Deploy the certificate to all end-user machines with Group Policy. See for details. 2. Create a logon script for client computers. For detailed information on command-line parameters, refer to the document (readme.txt) that comes with the package. Migrating Mailboxes Make sure that all associated accounts are matched or migrated and create the Mail Migration task: 1. Open Mailboxes and select the mailboxes you want to migrate. TIP: Use search, filtering or collections to quickly navigate through the list of mailboxes. 2. Click Migrate Mailboxes. 3. Specify the migration scenario. From Primary Mailbox to Primary mailbox - migrate content of the primary mailbox (default scenario.) From Archive mailbox to Archive mailbox - migrate content of the archive mailbox. From Archive mailbox to Primary mailbox - restore archived content to primary mailbox. From Primary mailbox to Archive mailbox - migrate some of the content of the primary mailbox to archive. Useful with the specific Migration Options selected. Mail Migration 26

27 4. Specify which mailbox items ( , contacts, calendar appointments, recoverable items, tasks, and so on.) you want to transfer to the target. Click Next. CAUTION: Recoverable items are not included by default, thus they are not transferred to the target. If you want to keep this data select Migrate Recoverable Items option. 5. Select the active licensing plan with Exchange Online options that will be used on the target tenant. 6. Specify how the licenses will be assigned to the target users during the mailbox provisioning: Replace all license assignments with the licenses from the selected plan. Retain the existing licenses and assign the selected plan only to unlicensed accounts (default). Add the licenses from the selected plan to all users. All existing licenses are retained. Click Next. 7. Specify which mailbox items should be skipped during mail migration processing. Click Next. 8. Check the summary on migration options and name the task. Select Start the task automatically when the wizard is finished and click Finish to start the task. Alternatively, you can save the task and start it manually later just clear the automatic startup option. The mail migration task is created. You can track its progress in the Tasks, view the summary on the Dashboard or monitor alerts and notifications in the Events. Mailbox Migration Considerations The following types of mailboxes are supported: Regular, Room, Equipment (Resource), Shared. During the mail migration, users might receive to both source and target mailboxes. Apparently the users might want to receive the sent to both mailboxes. To achieve this, we automatically set up mail forwarding from target to source which works until the clients are switched to the target tenant. Switching Clients The mail migration is complete and you have deployed Client Update Agent in your on premises environment. Now it is time to switch the Outlook clients to the target Exchange Online. Create a Mailbox Switch Task: 1. Open Mailboxes. 2. Select the migrated mailboxes. TIP: Use filtering by Completed status to see all migrated mailboxes. 3. Click Switch Mailboxes. 4. Specify mail forwarding direction: From source to target standard switching scenario. The clients are automatically switched to the target tenant and all mail sent to the source addresses is forwarded to the target. From target to source reverse scenario. The users are connected to the source tenant and all sent to the target addresses are forwarded to the source. 5. Provide the custom domain name for forwarding, typically your corporate domain name. Click Next. Mail Migration 27

28 IMPORTANT: The custom domain name must be set up on the target tenant. See Quickstart: Add a custom domain name to Azure Active Directory for details. 6. Verify the switching parameters and name the task. Select Start the task automatically when the wizard is finished and click Finish to start the task. Alternatively, you can save the task and start it manually later just clear the automatic startup option. The task is created. You can track its progress in the Tasks, view the summary on the Dashboard or monitor alerts and notifications in the Events. Mail Migration 28

29 Resource Processing Once the account migration is complete, you might want to grant target accounts access to source tenant s resources and applications. Basic resource processing workflow consists of the following steps: IMPORTANT: Resource processing does not migrate the resources and applications between tenants. It only grants target users the same permissions as their source counterparts. Refer to the Resource Processing for step by step instruction how to configure resource processing. Processing Resources On Demand Migration can process the following resources on the source tenant: Microsoft SharePoint Online Resource roles related to selected accounts Applications assigned to selected accounts. To create a new processing task: Resource Processing 29

30 1. Select accounts for which you want to process the resources on Accounts tab. 2. Click Process Resources 3. Specify the affected resources: a. Process SharePoint Online Provide the root URL of the SharePoint site. Refer to Processing SharePoint Online for details on site configuration and required permissions. b. Process resource roles Refer to the Processing Resource Roles for details. c. Process application assignment 4. Click Next. Refer to the Processing Application Assignments for details. 5. Verify the processing parameters and name the task. Select Start the task automatically when the wizard is finished and click Finish to start the task. Alternatively, you can save the task and start it manually later just clear the automatic startup option. The task is created. You can track its progress in the Tasks, view the summary on the Dashboard or monitor alerts and notifications in the Events. Processing SharePoint Online Processing SharePoint online allows target users access sites, libraries, lists, and other content on the source tenant. In order to process SharePoint Online resources, you must perform the following: 1. Turn on external sharing in SharePoint admin center. For details, see Turn external sharing on or off for SharePoint Online. 2. Grant consent for On Demand Migration to process SharePoint Online resources. Refer to Required Permissions section for the minimal permissions required to perform this task. Processing Resource Roles Resource roles processing provide for target users the same access to the source tenant as their source counterparts. Refer to Required Permissions section for the minimum user account permissions required to perform this task. Processing Application Assignments Application assignments processing ensures that the target users see the same list of cloud applications on as their source counterparts. Refer to Processing Resources for more details. Resource Processing 30

31 NOTE: On Demand Migration assigns applications to the target users, but it s up to each particular application how to check the access level. Some applications may have their own account databases and permission assignments, thus their access rights must be provisioned manually. Refer to Required Permissions section for the minimum user account permissions required to perform this task. Resource Processing 31

32 OneDrive Migration Once the users are matched/migrated, you can transfer the content of their OneDrive for Business storages to the target tenant. Before starting the OneDrive migration, consider the following: Migration may take a considerable amount of time, depending on the volume of data in storages. We only migrate files and folders present at the source OneDrive when the migration is started. Any changes made on the source during and after the migration are ignored. Re-migration overwrites all files in the target OneDrive. If OneDrive for Business sync client is already switched to the target tenant, all files will be re-synced. The existing copies of files stored on the local machines will be moved to the Recycle Bin. Due to the high ongoing costs, it is recommended to re-run the migration only in case of significant changes of the source content. OneDrive Migration 32

33 Only owned files and folders are transferred; shared data is not migrated. You have to restore the sharing manually after the migration is finished. We only migrate the most recent versions of OneDrive files. Version history is not transferred. Custom file properties (metadata) are not transferred to the target. Preferred data location (PDL) information is ignored for Multi-Geo tenant migration. IMPORTANT: SharePoint system account will be set in Modified by information for all migrated content. You should manually restore access permissions to OneDrive storages after the migration is finished. Migrating OneDrive Make sure that all associated accounts are matched or migrated and create the OneDrive Migration Task. 1. Open OneDrive and select accounts for which you want to migrate the storages. 2. Click Migrate OneDrive. 3. Verify the current permissions and adjust them if necessary. Refer to Required Permissions for details. 4. Click Next. Name the task, select Start the task automatically when the wizard is finished and click Finish to start the it. You can also clear this option and click Finish to start this task manually, when necessary. You can track its progress in the Tasks, view the summary on the Dashboard or monitor alerts and notifications in the Events. OneDrive Migration 33

34 Finalizing the Migration Congratulations! The migration is complete. If you have created a temporary account for the migration (as recommended in Before you Start section), it is time to remove it. This account has elevated permissions, so it might pose security risks. Finalizing the Migration 34

35 About us About us We are more than just a name We are on a quest to make your information technology work harder for you. That is why we build communitydriven software solutions that help you spend less time on IT administration and more time on business innovation. We help you modernize your data center, get you to the cloud quicker and provide the expertise, security and accessibility you need to grow your data-driven business. Combined with Quest s invitation to the global community to be a part of its innovation, and our firm commitment to ensuring customer satisfaction, we continue to deliver solutions that have a real impact on our customers today and leave a legacy we are proud of. We are challenging the status quo by transforming into a new software company. And as your partner, we work tirelessly to make sure your information technology is designed for you and by you. This is our mission, and we are in this together. Welcome to a new Quest. You are invited to Join the Innovation. Our brand, our vision. Together. Our logo reflects our story: innovation, community and support. An important part of this story begins with the letter Q. It is a perfect circle, representing our commitment to technological precision and strength. The space in the Q itself symbolizes our need to add the missing piece you to the community, to the new Quest. Contacting Quest For sales or other inquiries, visit Technical support resources Technical support is available to Quest customers with a valid maintenance contract and customers who have trial versions. You can access the Quest Support Portal at The Support Portal provides self-help tools you can use to solve problems quickly and independently, 24 hours a day, 365 days a year. The Support Portal enables you to: Submit and manage a Service Request View Knowledge Base articles Sign up for product notifications Download software and technical documentation View how-to-videos Engage in community discussions Chat with support engineers online View services to assist you with your product About us 35