Steps to Migrate Objects from AD to Entra
Follow step by step guide to Transfer Objects from AD to Entra ID using SysTools Migrator for AD.
Pre-Requisites
- Microsoft .net framework v4.8 should be installed.
- DNS setting should be there on all DC’s(Source and destination).
- Trust Relationships should be created.
- DNS suffix Search List should be configured.
- Admin Account should be added to administrators group.
- AD server needs to be in same network.
- Destination AD should have schema same as source domain [Schema Classes / Custom / Standard / In Built]
- The provided User should have Active Directory access.
- Active Directory server should be in the same network.
- Destination active directory machine should have same Active Directory Schema Classes + Attributes (Custom+ Standard+ in Built) as per source.
- Antivirus should not be blocked the application.
- Firewall should be disabled in Source and destination machines.
- Component Installation Guide:-
- SysTools AD Migrator
- Should be Installed on the Migration Server
- Role: Handles the migration of Active Directory Objects.
- SysTools AD Watcher
- Should be Installed on the Source Domain Controller
- Role: Performs Password Sync
- SysTools Message Exchange
- Should be Installed on the Migration Server [ Server only]
- Should be Installed on End machines [Server + Component]
- Role: Communicates between the Migration Server and End machine to perform the profile migration
- MQTT Server
- Should be Installed on Intranet Server
- Role: Acts as Central hub for network communication.
- DS Internal [Additional Powershell module]
- SysTools AD Migrator
- Communication Port-Related Information
-
- Ports 8080 : Required Access to communicate with SysTools AD Watcher [installed on Source Domain Controller] [You can use your own port.]
-
Upon launching, you are greeted with a checklist within the SysTools Migrator for Active Directory tool. It lists components that need to be installed and verified for a successful AD migration.
Mark the box next to components to confirm their installation status. Here is a list of checks you need to make:
- AD Migrator Sync: Syncs attributes; install on source, target, or both AD domains.
- Message Exchange: Facilitates source-target communication; install on both.
- MQTT Server: Manages Message Exchange communication; install on the migration machine.
Port Access:
- 1883: For Message Exchange.
- 16011: For AD Migrator Sync.
- 16005: For Message Exchange service.
After login, the tool displays a pop-up message: "No Domains are Configured!!!" This indicates that the user has not yet defined the source and destination Active Directory domains for the migration process. To proceed, click anywhere outside of the pop-up window.
Click the Activate button with yellow exclamation mark icon in the bottom left corner of the black tab.
On the Product Activation screen within the SysTools Migrator for Active Directory, choose "Online" or "Offline" mode based on your installation criteria.
Paste the activation code in the provided field. Click the Apply button to proceed with the activation process.
Tool is now Activated for use. Click OK to close the Activation Window and continue with AD Migration.
You can see that now the Activate Button has a Green Indicator on it. Click on Add Domain
This opens the "Add Domain" dialog box.
2. Enter Domain Information:
- Domain Friendly Name: Provide a descriptive name for the domain (e.g., "Source Domain," "Target Domain").
- AD Type: Select the type of Active Directory.
Select AD Type: Choose the type of Active Directory from the dropdown menu:
- On-Premise: For on-premises Active Directory servers.
- Entra ID: For Cloud Based Active Directory.
Enter the IP address of the domain controller.
Click on Save and Continue.
Provide the username and password of an administrator account for the specified Active Directory domain.
Hit Save and Continue.
You can see that the credentials are Validated.
Optional: Users can toggle Diffrent DNS Server option if they require.
Switch to View Tab. Then, click on FETCH ACTIVE DIRECTORY OBJECTS to proceed with the activation process.
Inside the pop-up window, mark the box next to all the workloads you want to include in this migration. Then, press continue
Source Objects being Fetched.
Object Fetch Complete
View Source Object List.
Close Source Object List.
Select AD Type as Entra ID.
Type your Destination Domain Name.
Select Entra ID (It has a Cloud symbol).
View the Entra Domain Details Page.
Type in the Admin User and Client ID, then press Save and Continue.
Once the Credentials Get Validated, switch to View tab.
Click on Fetch Active Directory Objects button.
Mark the objects (Computer, User, Group) inside the pop-up box. Then press Continue.
Objects being Fetched.
Object Fetching Complete.
View Fetched Objects, then switch to Migration screen.
On the Migration tab, click on ADD SCENARIO button at the top right corner. This opens a new Migration Scenario details box.
Fill in the Name and select On-premise AD as the Source.
Likewise, use the dropdown to select Destination Entra ID. Press Save and Continue.
This expands the Add Task option. You need to make separate tasks for each object. Start by selecting User Workload.
In the User Workload administrators have the option to set a default password. Click on Save and Continue.
This will close the Add task box. Now select any user from the list.
Use the Migration option box to determine if the user needs to be merged, or created in the Target Entra ID. Click on Select to confirm.
Repeat for all other users you want to move.
All added Users will display a Not Validated status.
Switch to Grid View.
Expand the Validate option.
Click on Setup Validation.
Then expand the Validation option again and this time select Resource validation.
Validation Complete alert will appear.
Click on Start Task.
View the details and Press Start.
View User Migration Status.
User Migration Complete.
View User Migration Info Tab.
Post Migration action options include Retry Failed, Run Delta and Download Report. Close the Task and go back to the task construction page.
Click on Add Task.
Fill in the Details and select Computer. You will See two Restart options: Scheduled and Forced, Choose the One that Works for you and Launch the provisioning package option.
To make your own file visit the provisioning package creation guide
Browse your window and Select the Project file.
Press Save and Continue.
View the object list.
Use the search bar to highlight the relevant object and select it.
Choose a suitable destination from the Migration options box.
If you choose a container tool will Create. If you select another object of the same type, in this case its computer, then the tool will merge. Here we continue with the Create option. Press Select.
The object shows a Not Validated status.
Change to Grid view.
Expand the Validation option and select Setup Validation.
In the Validate Components box expand Computer Policy tab.
Mark the Box next to Login Audit source and Login Audit Destination.
Press Continue.
Expand the Validate tab and select Resource Validation.
Ongoing Validation indication box.
Validation Successful.
Incase you see invalid status for some objects expand the Validate option then select Remove Invalidated this triggers a new window to open up. Tool will diagnose and detect invalid items automatically. Press Yes to remove those items.
You can get a CSV report of the invalid items. To get that report press Download.
View the CSV in any spreadsheet analysis tool.
Press Start Task.
View the details and Press Start.
View Computer Migration Status.
Computer Migration Complete.
Post Migration action options include Retry Failed, Run Delta and Download Report.
Check the Info icon to see Connect Agent data.
Click on the Info icon to view Profile Migration Summary Report.
Go back to the Migration Scenario Page and Click on Add Task. Fill in the Details.
Once the Add Task window expands select Group object.
Scroll Down and press the Save and Continue button.
View the List of objects.
Search and Select the particular Group object.
Choose a suitable destination from the Migration options box. If you choose a container tool will Create if you select another object of the same type in this case its computer then the tool will merge. Here we continue with the Create option. Press Select.
The object shows a Non Required status.
Click on Start Task. View the details and Press Start.
View realtime status of Group Migration Status.
Group Migration Complete.
Group Migration Info Tab.
