Example: Migrating User Accounts to a new Organizational Unit

This tutorial explains how you can use a scope action to migrate a set of user accounts to a new Organizational Unit.

Goal

All user accounts have been originally created in the default Active Directory Users container. However, this container now holds too many objects and new OUs are created for each department of the company. We need to create a scope action which migrates all Legal Department users from the corp.pjtec.com/Users container to the newly created corp.pjtec.com/North America/Legal Department OU.

In addition, the migration of the user account must be re-configured to have their roaming profile path point to the new profile location: \\SRV-LEGAL-01\Profiles$.

Solution

The corp.pjtec.com/Users container has all user accounts. We will differentiate the legal users from the others by using the Department Active Directory attribute of a user account.

• Create a new scope action, define its name and click on Next.

• Under Scope, select the Users object type. Double click on Add New,

• Click on Add a Container or Domain and select the Users container from the domain. Click on OK, and OK again. Click on Next.

• Under Actions, double click on Add New to start the Action Module property window.

• Under Execute the following Action(s), click on Add/Remove > Execute User Action > Move Object. This opens the argument selection window.
  
  > Click on the browse button of the Move to Container parameter and select the corp.pjtec.com/North America/Legal Department container.
  > Click on OK.

• Under Execute the following Action(s), click on Add/Remove > Set User Property > User Account Information > Profile Path. This opens the argument selection window.
  > Set the Profile Path argument to:  \\SRV-LEGAL-01\Profiles$\%USERNAME%

• UnderOnly if the following is true, configure the following condition:
  Add/Remove >  Set User Condition > User Account Information > Department :: = ::Legal (Note: Text comparisons are case-insensitive).
  
  Your Action Module should look like this:
  
  

• Complete your scope action and run it.

Viewing Execution Results

Once the scope action has been executed, you first check which users were processed successfully and which users failed.

• Right-click on the scope action object and select View Last Run's Failed Nodes.

• Review the Scope Action Log for failed users and the reason why they couldn't be processed.