Skip to content

Commit 6ac3f89

Browse files
committed
Merge branch 'master' of https://github.com/MicrosoftDocs/azure-docs-pr into rolyon-availability-zones-regions-update
2 parents 8e6605a + a47ba20 commit 6ac3f89

File tree

9 files changed

+47
-64
lines changed

9 files changed

+47
-64
lines changed

articles/active-directory/hybrid/how-to-connect-migrate-groups.md

Lines changed: 15 additions & 13 deletions
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,5 @@
11
---
2-
title: 'Azure AD Connect: Migrate groups from one forest to another | Microsoft Docs'
2+
title: 'Azure AD Connect: Migrate groups from one forest to another'
33
description: This article describes the steps needed to successfully migrate groups from one forest to another for Azure AD Connect.
44
services: active-directory
55
author: billmath
@@ -16,28 +16,30 @@ ms.collection: M365-identity-device-management
1616

1717
# Migrate groups from one forest to another for Azure AD Connect
1818

19-
This article describes the steps needed to successfully migrate groups from one forest to another so that the migrated group objects match to the existing objects in the cloud.
19+
This article describes how to migrate groups from one forest to another so that the migrated group objects match the existing objects in the cloud.
2020

2121
## Prerequisites
2222

23-
- Azure AD Connect version 1.5.18.0 or higher
24-
- Source Anchor attribute is `mS-DS-ConsistencyGuid`
23+
- Azure AD Connect version 1.5.18.0 or later
24+
- Source anchor attribute set to `mS-DS-ConsistencyGuid`
2525

26-
Starting from version 1.5.18.0, Azure AD Connect has started supporting the use of `mS-DS-ConsistencyGuid` for groups. If `mS-DS-ConsistencyGuid` is chosen as the source anchor attribute and the value is populated in AD, Azure AD Connect uses the value of `mS-DS-ConsistencyGuid` as the immutableId. Otherwise, it falls back to using `objectGUID`. However, please note that Azure AD Connect **DOES NOT** write back the value to the `mS-DS-ConsistencyGuid` attribute in AD.
26+
## Migrate groups
2727

28-
During a cross-forest move scenario where a group object is moving from one forest (say F1) to another forest (say F2), we will need to copy over either the `mS-DS-ConsistencyGuid` value (If PRESENT) or `objectGUID` value from the object in forest F1 to the `mS-DS-ConsistencyGuid` attribute of the object in F2.
28+
Starting in version 1.5.18.0, Azure AD Connect supports the use of the `mS-DS-ConsistencyGuid` attribute for groups. If you choose `mS-DS-ConsistencyGuid` as the source anchor attribute and the value is populated in Active Directory, Azure AD Connect uses the value of `mS-DS-ConsistencyGuid` as the `immutableId`. Otherwise, it falls back to using `objectGUID`. But note that Azure AD Connect doesn't write the value back to the `mS-DS-ConsistencyGuid` attribute in Active Directory.
2929

30-
Please use the following scripts as guideline to see how you can migrate a single group from forest F1 to forest F2. Please feel free to use this as a guideline to do the migration for multiple groups.
30+
During a cross-forest move, when a group object is moving from one forest (say F1) to another forest (say F2), you need to copy either the `mS-DS-ConsistencyGuid` value (if it's present) or the `objectGUID` value from the object in forest F1 to the `mS-DS-ConsistencyGuid` attribute of the object in F2.
3131

32-
First, we get the `objectGUID` and `mS-DS-ConsistencyGuid` of group object in forest F1. These attributes are exported to a CSV file.
32+
Use the following scripts as a guide to learn how to migrate a single group from one forest to another. You can also use these scripts as a guide for the migration of multiple groups. The scripts use the forest name F1 for the source forest and F2 for the destination forest.
33+
34+
First, we get the `objectGUID` and `mS-DS-ConsistencyGuid` of the group object in forest F1. These attributes are exported to a CSV file.
3335
```
3436
<#
3537
DESCRIPTION
3638
============
3739
This script will take DN of a group as input.
3840
It then copies the objectGUID and mS-DS-ConsistencyGuid values along with other attributes of the given group to a CSV file.
3941
40-
This CSV file can then be used as input to Export-Group script
42+
This CSV file can then be used as input to the Export-Group script.
4143
#>
4244
Param(
4345
[ValidateNotNullOrEmpty()]
@@ -77,15 +79,15 @@ $results | Export-Csv "$outputCsv" -NoTypeInformation
7779
7880
```
7981

80-
Next, we use the generated output CSV file to stamp the `mS-DS-ConsistencyGuid` attribute on the target object in forest F2.
82+
Next, we use the generated output CSV file to stamp the `mS-DS-ConsistencyGuid` attribute on the target object in forest F2:
8183

8284

8385
```
8486
<#
8587
DESCRIPTION
8688
============
87-
This script will take DN of a group as input and the CSV file that was generated by Import-Group script
88-
It copies either the objectGUID or mS-DS-ConsistencyGuid value from CSV file to the given object.
89+
This script will take DN of a group as input and the CSV file that was generated by the Import-Group script.
90+
It copies either the objectGUID or the mS-DS-ConsistencyGuid value from the CSV file to the given object.
8991
9092
#>
9193
Param(
@@ -119,4 +121,4 @@ Set-ADGroup -Identity $dn -Replace @{'mS-DS-ConsistencyGuid'=$targetGuid} -Error
119121
```
120122

121123
## Next steps
122-
Learn more about [Integrating your on-premises identities with Azure Active Directory](whatis-hybrid-identity.md).
124+
Learn more about [integrating your on-premises identities with Azure Active Directory](whatis-hybrid-identity.md).

articles/active-directory/saas-apps/workplacebyfacebook-provisioning-tutorial.md

Lines changed: 5 additions & 14 deletions
Original file line numberDiff line numberDiff line change
@@ -13,7 +13,7 @@ ms.workload: identity
1313
ms.tgt_pltfrm: na
1414
ms.devlang: na
1515
ms.topic: article
16-
ms.date: 12/10/2019
16+
ms.date: 04/28/2020
1717
ms.author: jeedes
1818

1919
ms.collection: M365-identity-device-management
@@ -30,25 +30,16 @@ If you have an existing integration with Workplace by Facebook, please see the b
3030
* Changes on the Azure AD side: The authorization method to provision users in Workplace has historically been a long lived secret token. Soon you will see the authorization method changed to the OAuth authorization grant.
3131
* Changes on the Workplace side: Previously the Azure AD app was a custom integration in Workplace by Facebook. Now you will see Azure AD in the Workplace integrations directory as a third party application.
3232

33-
34-
3533
#### What do I need to do to migrate my existing custom integration to the new application?
36-
If you have an existing Workplace integration with a valid token, **no action is required**. We are automatically migrating customers each week to the new application. This is done completely behind the scenes. If you can't wait and want to move to the new application manually, you can add a new instance of Workplace from the gallery, and configure provisioning again. All new instances of Workplace will automatically be using the new application version.
37-
34+
If you have an existing Workplace integration with a valid token, no action is required. **As of 04/28/2020 we have automatically migrated all applications that are not in quarantine due to invalid credentials.**
3835

39-
If your Workplace integration is in quarantine, you will need to supply a valid token again in order for us to migrate you. The admin credentials section will be greyed out, but you can append the following (**?Microsoft_AAD_IAM_userProvisioningEnableCredentialsOverride=true**) to your URL to save credentials again.
40-
41-
https://portal.azure.com/?Microsoft_AAD_IAM_userProvisioningEnableCredentialsOverride=true
42-
4336
#### How can I tell if my application has been migrated?
44-
When your application is migrated, the banner in the authorization section about upcomming changes will be removed and the secret token field will be replaced with a blue authorize button.
37+
* In the Azure Portal: When your application is migrated, the banner in the authorization section about upcoming changes will be removed and the secret token field will be replaced with a blue authorize button.
38+
* In the Workplace by Facebook portal: Review the Azure AD app to ensure that it is approved.
4539

4640
#### The admin credentials section is greyed out on my application and I can't save. Why?
47-
We have locked down the admin credentials section for existing Workplace customers. When your tenant has been migrated to the new Workplace application you will be able to update the admin credentials section again. If you can't wait, you can use the URL above to edit your application.
41+
We have locked down the admin credentials section for Workplace customers that have not migrated. Please use the following URL if the admin credentials section is greyed out and you need to authorize access again. **?Microsoft_AAD_IAM_userProvisioningEnableCredentialsOverride=true** (https://portal.azure.com/?Microsoft_AAD_IAM_userProvisioningEnableCredentialsOverride=true)
4842

49-
50-
#### When will these changes happen?
51-
All new instances of Workplace will already be using the new integration / authorization method. Existing integrations will be migrated gradually by May. The workplace team has provided an extension on the deadline from Feb-28 to May-1.
5243

5344
## Capabilities supported
5445
> [!div class="checklist"]

articles/batch/batch-apis-tools.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -32,7 +32,7 @@ Your applications and services can issue direct REST API calls or use one or mor
3232
| --- | --- | --- | --- | --- | --- |
3333
| **Batch REST** |[docs.microsoft.com][batch_rest] |N/A |- |- | [Supported Versions](/rest/api/batchservice/batch-service-rest-api-versioning) |
3434
| **Batch .NET** |[docs.microsoft.com][api_net] |[NuGet][api_net_nuget] |[Tutorial](tutorial-parallel-dotnet.md) |[GitHub][api_sample_net] | [Release Notes](https://aka.ms/batch-net-dataplane-changelog) |
35-
| **Batch Python** |[docs.microsoft.com][api_python] |[PyPI][api_python_pypi] |[Tutorial](tutorial-parallel-python.md)|[GitHub][api_sample_python] | [Readme](https://github.com/Azure/azure-sdk-for-python/blob/master/doc/batch.rst) |
35+
| **Batch Python** |[docs.microsoft.com][api_python] |[PyPI][api_python_pypi] |[Tutorial](tutorial-parallel-python.md)|[GitHub][api_sample_python] | [Readme](https://github.com/Azure/azure-sdk-for-python/blob/master/sdk/batch/azure-batch/README.md) |
3636
| **Batch Node.js** |[docs.microsoft.com][api_nodejs] |[npm][api_nodejs_npm] |[Tutorial](batch-nodejs-get-started.md) |- | [Readme](https://github.com/Azure/azure-sdk-for-node/tree/master/lib/services/batch) |
3737
| **Batch Java** |[docs.microsoft.com][api_java] |[Maven][api_java_jar] |- |[Readme][api_sample_java] | [Readme](https://github.com/Azure/azure-batch-sdk-for-java)|
3838

articles/batch/batch-mpi.md

Lines changed: 1 addition & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -176,9 +176,7 @@ The following environment variables are created by the Batch service for use by
176176
For full details on these and the other Batch compute node environment variables, including their contents and visibility, see [Compute node environment variables][msdn_env_var].
177177

178178
> [!TIP]
179-
> The Batch Linux MPI code sample contains an example of how several of these environment variables can be used. The [coordination-cmd][coord_cmd_example] Bash script downloads common application and input files from Azure Storage, enables a Network File System (NFS) share on the master node, and configures the other nodes allocated to the multi-instance task as NFS clients.
180-
>
181-
>
179+
> The Batch Linux MPI code sample contains an example of how several of these environment variables can be used.
182180
183181
## Resource files
184182
There are two sets of resource files to consider for multi-instance tasks: **common resource files** that *all* tasks download (both primary and subtasks), and the **resource files** specified for the multi-instance task itself, which *only the primary* task downloads.

articles/batch/batch-task-output-file-conventions.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -177,7 +177,7 @@ foreach (CloudTask task in myJob.ListTasks())
177177

178178
## View output files in the Azure portal
179179

180-
The Azure portal displays task output files and logs that are persisted to a linked Azure Storage account using the [Batch File Conventions standard](https://github.com/Azure/azure-sdk-for-net/tree/psSdkJson6/src/SDKs/Batch/Support/FileConventions#conventions). You can implement these conventions yourself in the a language of your choice, or you can use the File Conventions library in your .NET applications.
180+
The Azure portal displays task output files and logs that are persisted to a linked Azure Storage account using the [Batch File Conventions standard](https://github.com/Azure/azure-sdk-for-net/tree/master/sdk/batch/Microsoft.Azure.Batch.Conventions.Files). You can implement these conventions yourself in the a language of your choice, or you can use the File Conventions library in your .NET applications.
181181

182182
To enable the display of your output files in the portal, you must satisfy the following requirements:
183183

articles/batch/batch-task-output-files.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -22,7 +22,7 @@ Azure Batch provides more than one way to persist task output. Using the Batch s
2222
- You want to write code to persist task output from within your client application, without modifying the application that your task is running.
2323
- You want to persist output from Batch tasks and job manager tasks in pools created with the virtual machine configuration.
2424
- You want to persist output to an Azure Storage container with an arbitrary name.
25-
- You want to persist output to an Azure Storage container named according to the [Batch File Conventions standard](https://github.com/Azure/azure-sdk-for-net/tree/psSdkJson6/src/SDKs/Batch/Support/FileConventions#conventions).
25+
- You want to persist output to an Azure Storage container named according to the [Batch File Conventions standard](https://github.com/Azure/azure-sdk-for-net/tree/master/sdk/batch/Microsoft.Azure.Batch.Conventions.Files).
2626

2727
If your scenario differs from those listed above, you may need to consider a different approach. For example, the Batch service API does not currently support streaming output to Azure Storage while the task is running. To stream output, consider using the Batch File Conventions library, available for .NET. For other languages, you'll need to implement your own solution. For more information on other options for persisting task output, see [Persist job and task output to Azure Storage](batch-task-output.md).
2828

@@ -152,7 +152,7 @@ there are many contributing factors to upload performance, including the size of
152152

153153
## Use the Batch service API with the Batch File Conventions standard
154154

155-
When you persist task output with the Batch service API, you can name your destination container and blobs however you like. You can also choose to name them according to the [Batch File Conventions standard](https://github.com/Azure/azure-sdk-for-net/tree/psSdkJson6/src/SDKs/Batch/Support/FileConventions#conventions). The File Conventions standard determines the names of the destination container and blob in Azure Storage for a given output file based on the names of the job and task. If you do use the File Conventions standard for naming output files, then your output files are available for viewing in the [Azure portal](https://portal.azure.com).
155+
When you persist task output with the Batch service API, you can name your destination container and blobs however you like. You can also choose to name them according to the [Batch File Conventions standard](https://github.com/Azure/azure-sdk-for-net/tree/master/sdk/batch/Microsoft.Azure.Batch.Conventions.Files). The File Conventions standard determines the names of the destination container and blob in Azure Storage for a given output file based on the names of the job and task. If you do use the File Conventions standard for naming output files, then your output files are available for viewing in the [Azure portal](https://portal.azure.com).
156156
157157
If you are developing in C#, you can use the methods built into the [Batch File Conventions library for .NET](https://www.nuget.org/packages/Microsoft.Azure.Batch.Conventions.Files). This library creates the properly named containers and blob paths for you. For example, you can call the API to get the correct name for the container, based on the job name:
158158

0 commit comments

Comments
 (0)