DeploymentPro AMA Discussion

Comments

42 comments

  • Avatar
    Team Nero Blanco

    Hi, silly question, but is "PT", Pacific Time?

    0
    Comment actions Permalink
  • Avatar
    Nicholas Humaciu

    Hello Nero,

    Yes, PT would be Pacific time. Hope to see you then! Take care.

    Regards,

    Nicholas

    0
    Comment actions Permalink
  • Avatar
    Kevin Kavanagh

    How do you register for this?

    0
    Comment actions Permalink
  • Avatar
    Nicholas Humaciu

    Hello Kevin,

    You do not have to register for the AMA. You can simply post your questions here, and Tim will answer them starting at 1PM when the event opens up! Hope this helps.

    Regards,

    Nicholas

    0
    Comment actions Permalink
  • Avatar
    Kevin Blumenfeld

    I am about to begin migrating about 1000 mailboxes (365 to 365) using MigrationWiz and *DeploymentPro*.  The target tenant already has thousands of production users religiously using MFA which requires EXO Modern Authentication. I was told by support that *DeploymentPro* does not support Modern Authentication. 

    *Question*: Are there any supported and reliable workarounds for this? 

    Note: Disabling Modern Authentication at the target tenant is not an option.

    EDIT: I have colleagues who say they have rolled out DP without issue when Modern Authentication IS enabled.  However, ofcourse, MFA or any conditional access policies are disabled.
    Thank you,

    Kevin

    0
    Comment actions Permalink
  • Avatar
    Kevin H

    In the 'How do I test mailbox access?', I am able to access mailboxes with MigrationWiz admin account via the 'To test mailbox access on Exchange Server 2010' instructions but not able to get the 'Microsoft Remote Connectivity Tool.' to pass.  Is this a concern that needs to be addressed?

    0
    Comment actions Permalink
  • Avatar
    Kevin H

    I am unfamiliar with Public Folder purpose in Exchange 2010 but have been informed that it may need to be migrated when the e-mails move to O365.  Can some background information be provided about it and what scenarios would require a 'public folder license' vs 'user migration bundle' ?

    0
    Comment actions Permalink
  • Avatar
    Kevin H

    For Deployment Pro Module Configuration, if going from an on-premesis Exchange Server to O365, what Destination Domain name should be used - the alias @companyname.onmicrosoft.com or primary @companyname.com which also matches the current on-premesis domain name?

    0
    Comment actions Permalink
  • Avatar
    Kevin H

    If running a full Proof of Concept on a few mailboxes, the '​​How do I test DeploymentPro with a couple of users, for a Proof of Concept?' document references an invalid link to reset the accounts back before performing the full migration.  'Delete all items in the Destination mailbox. KB004883 provides more information on the available options.' -

    What procedure should be used? 

    Do these test users require an additional User Bulk License when the real migration occurs?

    For the full migration - does Deployment Pro reconfigure all of the workstations they use and have DMA installed or just the 1st one that they log into?

     

    0
    Comment actions Permalink
  • Avatar
    Nicholas Humaciu

    Hello Everyone,

    We are about 10 minutes out from our first 'Ask Me Anything' event! When 1PM rolls around, I will have Tim give a brief introduction of himself and then we will begin answering your questions. 

    As a note: I do see that there are some questions here that do not directly relate to DeploymentPro. For those questions, I will follow up with the users once the AMA completes so they can have some answers to their other questions. 

    Please feel free to post your DeploymentPro related questions here and we will get some guidance sent your way! See everyone soon!

    0
    Comment actions Permalink
  • Avatar
    Nicholas Humaciu

    Hello Everyone,

    Welcome to our first 'Ask Me Anything' event! Before we start I wanted to allow Tim to give you a brief introduction to himself and what he does here. Once we have that introduction out of the way, we will begin with your questions. So Tim take it away!

    0
    Comment actions Permalink
  • Avatar
    Tim Huff

    Hi this is Tim, I've been with BitTitan a little over 5 years. I worked on UserActivation prior to the current product DeploymentPro. Previously I was a Vendor at MS working on the Exchange team for BPOS.

    0
    Comment actions Permalink
  • Avatar
    Nicholas Humaciu

    Great thanks Tim! So let's get right into it. Our first question comes from Kevin Blumenfield and he asks "I was told by support that *DeploymentPro* does not support Modern Authentication. Are there any supported and reliable workarounds for this?"

    0
    Comment actions Permalink
  • Avatar
    Tim Huff

    At the moment we do not support Modern Authentication nor Multi-Factor Authentication. It is on the road map and they are currently working on this.The Microsoft Platform is constantly improving the product and security so we are responding to those changes. 

    0
    Comment actions Permalink
  • Avatar
    Nicholas Humaciu

    Thanks for that insight Tim. I know MFA support for DeploymentPro is something that is asked about often, so it is nice to hear it is on the road map for the product.

    Our next question comes from another Kevin, Kevin H and he has two questions. First "what Destination Domain name should be used - the alias @companyname.onmicrosoft.com or primary @companyname.com which also matches the current on-premesis domain name?"

    The second question "For the full migration - does Deployment Pro reconfigure all of the workstations they use and have DMA installed or just the 1st one that they log into?"

    0
    Comment actions Permalink
  • Avatar
    Tim Huff

    Thanks for the question Kevin, DeploymentPro will only want the User Principal Name that will ultimately be used for that Mailbox. Outlook can only log into the mailbox with the UPN. The SMTP address can be different but is usually the same as the UPN.

    A user can have as many workstations or logins as they like and be covered by a single license. E.G. you have your work laptop and a home machine, install DMA on them and they will check in under one user but show two devices. When you schedule DeploymentPro it will pop up on both devices. You would need to log into every device.

    0
    Comment actions Permalink
  • Avatar
    Tim Huff

    In the case were you have a Tenant to Tenant migration while using the same domain name, there is no way to test it with the ultimate UPN. However, you can specify the .onmicrosoft.com address as the UPN and DeploymentPro will flip the profile. Once you have tested you can Revert the profile creation using our KB and re-run it when the Domain has been moved to the Destination.

    0
    Comment actions Permalink
  • Avatar
    Nicholas Humaciu

    Awesome, I'm sure Kevin will appreciate that insight. 

    Our next question comes from one of our customers via support. Their question is "If my GPO deployment does not install the Device Management Agent properly, what should I do?"

    0
    Comment actions Permalink
  • Avatar
    Tim Huff

    GPO is a tricky business but our instructions work for about 85% of our customers. MS pushes their customers toward SCCM or third party products like Kaseya, BigFix, and others to deploy packages. The biggest issue with GPO is we are asking you to run a Scheduled Task and scheduled tasks are pretty finicky. There are some environments that just won't work but we don't have a way to identify them. We will give a best effort to help you with GPO but ultimately it's your AD and we expect you to manage it accordingly.

    0
    Comment actions Permalink
  • Avatar
    Nicholas Humaciu

    GPO can certainly be a pain point. So it's nice to know that there is a solution, but it may not work for everyone. Support can potentially provide some guidance with the GPO install, but because it is so environment dependent, they would not have a lot of recourse to troubleshoot installation issues. Excellent!

    Our next question comes from Twitter, I am sorry I didn't get the name. This person asks "What are some best practices when setting up my users prior to running their profile cutover?"

    0
    Comment actions Permalink
  • Avatar
    Tim Huff

    Great question. Schedule the cut over the minute you know that future date and time. The Agent checks in about every 60 minutes. If you Schedule it for Now it could take up to 90 minutes to pop up the User Interface. That is frustrating if your expecting it to be immediate. So, by scheduling that date ahead of time, it will pop up at the exact moment you want it to. Once the agent has picked up that future date the heart beat for DeploymentPro will reduce to 15 minutes. What this allows you to do is Re-schedule if you decide to push the date out or move it up. 

    0
    Comment actions Permalink
  • Avatar
    Matthew Prentice

    When a customer has a single domain name, Deployment Pro works great.  When the customer has 15 primary domain names (think hotel chain), you have to reconfigure DP, select the appropriate accounts, and then schedule that group of users, repeat, ....  Is PowerShell the only real way to get DP to handle multiple domains if you are not going to do it manually?  Is there something on the road map for handling multiple domains?

    0
    Comment actions Permalink
  • Avatar
    Nicholas Humaciu

    Thanks for the question Matthew. I believe Tim is just following up on his previous point. We will get your question answered in a few moments.

    0
    Comment actions Permalink
  • Avatar
    Nicholas Humaciu

    Actually, it looks like we have some overlap with a question and Tim's thoughts on it. So the next question is "What should I do if the reported users do not have the proper UPN when reported by the DMA tool?"

    0
    Comment actions Permalink
  • Avatar
    Tim Huff

    Understanding how the Agent reports the User back to MSPC. If your users are in MSPC we try to match them but many times they do not.

    We first look for the value in SMTP:proxyaddresses field in AD and use it whether it matches or not, if this is not present then we look for the Email Address on the General Tab in Active Directory Users and Computers, if that is not present then we default to the UPN they log into their computer with like a .local or .corp. Sometimes this will not match the address in the Users container in your project. It will not hurt anything but it will not match so the license is on the wrong duplicate entry.

     

    A non-domain joined computer will come back as username@COMPUTERNAME.gen, same issue.

     

    You do not need to edit anything in the Users Container in MSPC. When you go to the DeploymentPro page only computers that have DMA running on them will show up. The only address that matters is the Destination UPN they login to their mailbox with. When you Schedule them you can edit the UPN to the correct value.

    0
    Comment actions Permalink
  • Avatar
    Nicholas Humaciu

    Great information. Thank you Tim. Next question comes from Matthew. He asks "When a customer has a single domain name, Deployment Pro works great.  When the customer has 15 primary domain names (think hotel chain), you have to reconfigure DP, select the appropriate accounts, and then schedule that group of users, repeat, ....  Is PowerShell the only real way to get DP to handle multiple domains if you are not going to do it manually?  Is there something on the road map for handling multiple domains?"

    0
    Comment actions Permalink
  • Avatar
    Tim Huff

    I feel your pain Matthew. Every time you schedule a user, it assumes the domain part of the UPN on the Settings page, you have to go there for every "wave" of users you are Scheduling and change it, schedule those Users, change the domain, schedule the next batch, rinse and repeat. We do have a Feature Request to improve this so in the mean time Power Shell to the rescue.

    With Power Shell you have a CSV with only two values. Value 1 = Primary Email Address that is in MSPC, it does not matter if it is right or not, that value is basically the title of that entry on the page. Value 2 is whatever the UPN is for that User. You would not need to go to the Settings page at all. You could have a different CSV for every domain so you can look at them in a glance.

    0
    Comment actions Permalink
  • Avatar
    Nicholas Humaciu

    I appreciate that question Matthew. I personally have spoken with multiple users who found this cumbersome. I am glad Tim could provide you a bit of a workaround for the issue.

    0
    Comment actions Permalink
  • Avatar
    Nicholas Humaciu

    The next question is from a user in support and they ask "What does DeploymentPro look for when trying to cutover the users profile?"

    0
    Comment actions Permalink
  • Avatar
    James Clifford

    Do you any guidance or best practice advice on how long before migration should the D-Pro agent be tested and then deployed to the production environment ahead of a production cut over migration?

    0
    Comment actions Permalink

Post is closed for comments.