Migration run

Migration structure

Configure this run's domain, folder hierarchy, OU locations, group, and membership. The path, distinguished names, and commands update as you type.

Domain

This run uses one domain. Set its identifier, distinguished name, and file server root. A later run can use a different domain.

Folder hierarchy

Add as many folder levels as this run needs. Level 1 is the first folder under the file server root.

  1. 1Level 1
  2. 2Level 2
  3. 3Level 3

Folder path

Built from this run's file server root plus the folder names, in level order.

CONTOSO
\\fs01\deptshares\North\Manchester\Finance

AD Object Locations

Set a destination hierarchy for each object type. The lists are separate, so groups and accounts are not placed under the organisational OU unless you enter those levels yourself.

Organisational OU hierarchy

Parent-to-child levels for the organisational location. Level 1 is the parent. The last named level is the organisational target OU.

  1. 1Level 1
  2. 2Level 2
  3. 3Level 3

Organisational target distinguished name

Bottom-level organisational OU: Team — Payroll. Groups and accounts use their own destination hierarchies.

CONTOSO
OU=Payroll,OU=Finance,OU=Operations,DC=contoso,DC=example

Groups destination hierarchy

Parent-to-child levels for the groups destination. This list is not derived from the organisational hierarchy.

  1. 1Level 1
  2. 2Level 2

Groups destination distinguished name

Built only from the groups destination levels and the domain DN.

CONTOSO
OU=Groups,OU=Operations,DC=contoso,DC=example

Accounts destination hierarchy

Parent-to-child levels for the accounts destination. This list is not derived from the organisational or groups hierarchies.

  1. 1Level 1
  2. 2Level 2
  3. 3Level 3
  4. 4Level 4

Accounts destination distinguished name

Built only from the accounts destination levels and the domain DN.

CONTOSO
OU=Accounts,OU=Payroll,OU=Finance,OU=Operations,DC=contoso,DC=example

Groups

Configure the group created for this run. The command path is the groups destination distinguished name from AD Object Locations.

Groups destination distinguished name

Used as -Path on the New-ADGroup command. Edit the groups destination hierarchy to change it.

CONTOSO
OU=Groups,OU=Operations,DC=contoso,DC=example

Group membership

Choose the group that receives a member, and the account to add. This identity is not taken from the group created in the Groups section.

Command preview

Directory, group, and membership commands for this run. Copy or export them, then review and run them on the appropriate server.

CONTOSO

Create migration directory

\\fs01\deptshares\North\Manchester\Finance

<#
  Demonstration directory command.
  Domain: CONTOSO
  Path: \\fs01\deptshares\North\Manchester\Finance
  Review before execution. This application does not run PowerShell.
#>
New-Item -ItemType Directory -Path '\\fs01\deptshares\North\Manchester\Finance' -Force

CONTOSO

Create group

\\fs01\deptshares\North\Manchester\Finance

<#
  Group command.
  Domain: CONTOSO
  Name: Example Readers
  Path: OU=Groups,OU=Operations,DC=contoso,DC=example
  Review before execution. This application does not run PowerShell.
#>
New-ADGroup -Name "Example Readers" -GroupCategory Security -Path "OU=Groups,OU=Operations,DC=contoso,DC=example" -GroupScope DomainLocal -Description "Demonstration security group for this run."

CONTOSO

Add group member

\\fs01\deptshares\North\Manchester\Finance

<#
  Group membership command.
  Domain: CONTOSO
  Identity: Example Library
  Member: Example Reader
  Review before execution. This application does not run PowerShell.
#>
Add-ADGroupMember -Identity "Example Library" -Members "Example Reader"