5.7 Migrating Policies

Before migrating Windows Group policy, ensure that the folder specified in the Network location of existing/new Group Policies does not contain any file other than the group policy files.

To migrate policies from eDirectory to Configuration Management:

  1. Click Delete Selected Object icon (the Migration Tool Settings icon), then do the following:

    1. To overwrite existing Policy objects in the ZENworks database, select the General option, then select the Overwrite objects that already exists option.

      WARNING:This overwrites any existing Policy objects in the database, including those that were previously migrated.

      The Skip saving/loading history option allows you to dramatically improve performance on large migrations by not storing the local history.

      The Migrate applications or policies as sandbox option enables you to migrate objects (applications or policies) as Sandbox. This option is selected by default.

    2. To skip assignment creation for the Launcher Configuration policy, select the Policies option, then select the check box to enable the option.

      When you migrate Launcher Configuration settings from eDirectory, these settings are converted into a Launcher Configuration policy in Configuration Management. During migration, an assignment from the identity object to the new Launcher Configuration policy is automatically created unless you turn off this function in the Options dialog box by selecting to skip the assignment.

    3. Click Save Settings to exit the dialog box.

  2. Click Step 3: Policies in the Migration Tasks field.

  3. To model the migration, do the following:

    1. In the Source eDir Tree panel, navigate the eDirectory contexts to locate the Policy objects to be migrated. To stop listing of the objects in the Source eDir Tree, click stop listing the objects in the source zone icon.

      The eDirectory information that is displayed is filtered according to the type of information that you are migrating. Therefore, you only need to browse through the contexts and objects that can be migrated for the selected type.

    2. If necessary, right-click anywhere in the Destination Zone panel to create a folder for the objects to be queued for migration, then select New folder.

      You can create as many folders as needed, including nesting them. This structure is created in the ZENworks database and is viewable as folders in ZENworks Control Center; however, the folders are not created until you click the Migrate Now button.

      You might want to determine the folder structure for your Policy objects, and create and migrate those folders before queueing Policy objects to them.

      You can also migrate existing eDirectory containers and all of their Policy objects (including subcontainers). The containers are converted into folders containing all of the Policy objects that exist in eDirectory under those contexts. If you select a container in the Source eDir Tree panel and drag it to the Destination Zone panel, all subcontainers and their Policy objects are also placed in the Destination Zone panel in their respective folders.

      After queueing a container in the Destination Zone panel, you can individually delete queued items that you don’t want to migrate by selecting the items, right-clicking them, then selecting Delete selected items. You are asked to confirm the deletion.

    3. In the Source eDir Tree panel, select the Policy objects, packages, or containers to be migrated and drag them into the Destination Zone panel.

      This queues the items for migration.

      You can use the Ctrl and the arrow keys or Shift and the arrow keys to select multiple items.

      As you drag items from one panel to the other, the items listed in the Destination Zone panel are automatically sorted.

      If you drag an item multiple times, it is only queued once.

      If you migrate incrementally, you should queue only the objects that you want to migrate at this time because all items that are queued in the Destination Zone panel are migrated when you click the Migrate Now button.

      On the Items to Migrate tab, the number of items you are migrating (copied to the Destination Zone panel) is represented in parentheses on the tab’s label.

      The Migration Status field on the Items to Migrate tab displays information related to the items selected for migration. For example, the ZENworks Migration Utility might adjust the object name in Configuration Management because of characters in the eDirectory name that cannot be used in Configuration Management, such as a colon (:), which is replaced with an underscore (_) character.

      When you drag a policy package into the queue, only its policies are queued in the Destination Zone panel. Policy packages are not used in Configuration Management. Instead, policies are grouped by type.

      When migrating Launcher Configuration settings from eDirectory, these settings are converted into a Launcher Configuration policy in Configuration Management. During migration, an assignment from the identity object to the new Launcher Configuration policy is automatically created unless you turn off this function in the Options dialog box by selecting to skip the assignment (see Step 1.b).

  4. Repeat Step 3 as necessary to locate and queue all of the Policy objects that you want to migrate at this time.

    IMPORTANT:Every Policy object that you queue in the Destination Zone panel is migrated when you click the Migrate Now button.

  5. Review your selections in the Destination Zone panel.

    You can navigate the folders to view the Policy objects that are queued for migration.

  6. To delete items from the migration queue, select the items and click the stop listing the objects in the source zone icon icon.

    You can use the Ctrl and the arrow keys or Shift and the arrow keys to select multiple items for deletion. This includes folders and their contents.

    Items queued for migration have their icons and texts dimmed. If you select dimmed items for deletion, they are only deleted from the queue.

    WARNING:If you select colored items (with teal or black text), they are deleted from the ZENworks database and are no longer available in ZENworks Control Center.

  7. To migrate all of the dimmed items displayed in the Destination Zone panel, including all dimmed items contained in subfolders, click the Migrate Now button.

    The following information applies to the Migration Utility during or after the migration process:

    • Focus is immediately moved to the Items to Migrate tab, where you can view the sequential progress of the migration.

    • Policies that were part of a policy package in eDirectory are queued and migrated separately into their respective Configuration Management types.

    • The Step column displays a progress bar for each item being migrated. The overall progress bar is at the bottom of the screen.

    • The Migration History tab displays all of the items that were migrated. This list is updated dynamically as the items are migrated. You can click back and forth between the Items to Migrate and Migration History tabs during the migration process. You can also right-click anywhere in the tab’s panel and select Refresh to refresh the view with items that might not yet be displayed, but are migrated.

    • The Select tab displays all of the migrated objects, with their texts in teal color after being migrated, in both the Source eDir Tree and Destination Zone panels.

      The teal color persists, so the next time you open the Migration Utility and navigate the Source eDir Tree contexts and Destination Zone folders, you can see what you have previously migrated.

    • Objects that failed migration continue to be displayed with their icons dimmed.

      Instructions for handling failed migration items are covered in Step 8.

    • During migration, a temporary working folder is created on the workstation for each policy being migrated. These folders are deleted as each policy is successfully migrated.

  8. After the migration has completed, do the following as needed:

    1. Review the teal-colored items in both of the Select panels to determine whether you need to queue any other items for migration or delete any previously migrated items from the Destination Zone panel.

      You can also use the Migration History tab to discover this information.

      • If you discover other items to migrate, repeat Step 3 through Step 7.

      • To delete any items listed in the Destination Zone panel, select them and click stop listing the objects in the source zone icon.

        WARNING:The Destination Zone panel displays both previously migrated data with teal-colored text and items with black-colored text that were either created in ZENworks Control Center or migrated from a different workstation. The delete option (stop listing the objects in the source zone icon) can be used on both. Therefore, it is possible to delete previously existing items from Configuration Management that were never migrated. This includes folders in ZENworks Control Center and all data contained under them.

    2. On the Items to Migrate tab, click the Failed - View Log button for each item that failed to migrate, and determine the best course of action. You can either fix the problem and migrate the item, or you can delete it from the Items to Migrate tab, which also deletes it from the queue in the Destination Zone panel.

      To view only those items that failed, right-click anywhere in the panel and select Delete successful to filter the listed items. This listing is maintained only for the current task.

    3. If you have failed items that you do not want to migrate, you can delete only those that are queued (still dimmed) from the queue in the Destination Zone panel. Right-click anywhere on the Items to Migrate tab and select Delete all items.

      This empties the Items to Migrate tab listing. It also deletes only the queued items not yet migrated from the Destination Zone panel listing.

      WARNING:If you select Delete all items in the Destination Zone panel instead, this deletes all listed items from both the Destination Zone panel and the Migration History tab, as well as from the ZENworks database, effectively removing them from ZENworks Control Center. To delete only the queued (not yet migrated) items by using Delete all items, it is safest to do so from the Items to Migrate tab.

  9. When you are satisfied with the migration results, continue with one of the following: