Skip to content

Commit 07c996c

Browse files
authored
Merge pull request #111986 from v-albemi/how-to-connect-migrate-groups
edit pass: How to connect migrate groups
2 parents 8b46101 + 4a85bcd commit 07c996c

File tree

1 file changed

+15
-13
lines changed

1 file changed

+15
-13
lines changed

articles/active-directory/hybrid/how-to-connect-migrate-groups.md

Lines changed: 15 additions & 13 deletions
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,5 @@
11
---
2-
title: 'Azure AD Connect: Migrate groups from one forest to another | Microsoft Docs'
2+
title: 'Azure AD Connect: Migrate groups from one forest to another'
33
description: This article describes the steps needed to successfully migrate groups from one forest to another for Azure AD Connect.
44
services: active-directory
55
author: billmath
@@ -16,28 +16,30 @@ ms.collection: M365-identity-device-management
1616

1717
# Migrate groups from one forest to another for Azure AD Connect
1818

19-
This article describes the steps needed to successfully migrate groups from one forest to another so that the migrated group objects match to the existing objects in the cloud.
19+
This article describes how to migrate groups from one forest to another so that the migrated group objects match the existing objects in the cloud.
2020

2121
## Prerequisites
2222

23-
- Azure AD Connect version 1.5.18.0 or higher
24-
- Source Anchor attribute is `mS-DS-ConsistencyGuid`
23+
- Azure AD Connect version 1.5.18.0 or later
24+
- Source anchor attribute set to `mS-DS-ConsistencyGuid`
2525

26-
Starting from version 1.5.18.0, Azure AD Connect has started supporting the use of `mS-DS-ConsistencyGuid` for groups. If `mS-DS-ConsistencyGuid` is chosen as the source anchor attribute and the value is populated in AD, Azure AD Connect uses the value of `mS-DS-ConsistencyGuid` as the immutableId. Otherwise, it falls back to using `objectGUID`. However, please note that Azure AD Connect **DOES NOT** write back the value to the `mS-DS-ConsistencyGuid` attribute in AD.
26+
## Migrate groups
2727

28-
During a cross-forest move scenario where a group object is moving from one forest (say F1) to another forest (say F2), we will need to copy over either the `mS-DS-ConsistencyGuid` value (If PRESENT) or `objectGUID` value from the object in forest F1 to the `mS-DS-ConsistencyGuid` attribute of the object in F2.
28+
Starting in version 1.5.18.0, Azure AD Connect supports the use of the `mS-DS-ConsistencyGuid` attribute for groups. If you choose `mS-DS-ConsistencyGuid` as the source anchor attribute and the value is populated in Active Directory, Azure AD Connect uses the value of `mS-DS-ConsistencyGuid` as the `immutableId`. Otherwise, it falls back to using `objectGUID`. But note that Azure AD Connect doesn't write the value back to the `mS-DS-ConsistencyGuid` attribute in Active Directory.
2929

30-
Please use the following scripts as guideline to see how you can migrate a single group from forest F1 to forest F2. Please feel free to use this as a guideline to do the migration for multiple groups.
30+
During a cross-forest move, when a group object is moving from one forest (say F1) to another forest (say F2), you need to copy either the `mS-DS-ConsistencyGuid` value (if it's present) or the `objectGUID` value from the object in forest F1 to the `mS-DS-ConsistencyGuid` attribute of the object in F2.
3131

32-
First, we get the `objectGUID` and `mS-DS-ConsistencyGuid` of group object in forest F1. These attributes are exported to a CSV file.
32+
Use the following scripts as a guide to learn how to migrate a single group from one forest to another. You can also use these scripts as a guide for the migration of multiple groups. The scripts use the forest name F1 for the source forest and F2 for the destination forest.
33+
34+
First, we get the `objectGUID` and `mS-DS-ConsistencyGuid` of the group object in forest F1. These attributes are exported to a CSV file.
3335
```
3436
<#
3537
DESCRIPTION
3638
============
3739
This script will take DN of a group as input.
3840
It then copies the objectGUID and mS-DS-ConsistencyGuid values along with other attributes of the given group to a CSV file.
3941
40-
This CSV file can then be used as input to Export-Group script
42+
This CSV file can then be used as input to the Export-Group script.
4143
#>
4244
Param(
4345
[ValidateNotNullOrEmpty()]
@@ -77,15 +79,15 @@ $results | Export-Csv "$outputCsv" -NoTypeInformation
7779
7880
```
7981

80-
Next, we use the generated output CSV file to stamp the `mS-DS-ConsistencyGuid` attribute on the target object in forest F2.
82+
Next, we use the generated output CSV file to stamp the `mS-DS-ConsistencyGuid` attribute on the target object in forest F2:
8183

8284

8385
```
8486
<#
8587
DESCRIPTION
8688
============
87-
This script will take DN of a group as input and the CSV file that was generated by Import-Group script
88-
It copies either the objectGUID or mS-DS-ConsistencyGuid value from CSV file to the given object.
89+
This script will take DN of a group as input and the CSV file that was generated by the Import-Group script.
90+
It copies either the objectGUID or the mS-DS-ConsistencyGuid value from the CSV file to the given object.
8991
9092
#>
9193
Param(
@@ -119,4 +121,4 @@ Set-ADGroup -Identity $dn -Replace @{'mS-DS-ConsistencyGuid'=$targetGuid} -Error
119121
```
120122

121123
## Next steps
122-
Learn more about [Integrating your on-premises identities with Azure Active Directory](whatis-hybrid-identity.md).
124+
Learn more about [integrating your on-premises identities with Azure Active Directory](whatis-hybrid-identity.md).

0 commit comments

Comments
 (0)