Veritas Alta™ Archiving : Cloudlink Administration Guide

To select all of the users and groups in a domain

1. At the bottom of CloudLink's left pane, click Task Manager to display the Welcome to Task Manager Wizard page.
2. Click Start Task Manager Wizard.

   The wizard's Select User(s) or Group(s) step appears.

3. In the Select Domain drop-down list, select the required domain.
4. Select Synchronize all user and group objects with email address without any filters.
5. Click Next to save your choices and move to the Select Action(s) page.

   See Selecting the actions for a task to perform in an Exchange environment.

   Note:

   If a dialog regarding the Allow Remote Account Management option appears, you must choose whether to enable remote account management before you continue.

   See About granting remote account management for CloudLink.

To select entire OUs, or users and groups from within OUs

1. At the bottom of CloudLink's left pane, click Task Manager to display the Welcome to Task Manager Wizard page.
2. Click Start Task Manager Wizard.

   The wizard's Select User(s) or Group(s) step appears.

3. In the Select Domain drop-down list, select the required domain.
4. Select Use a filter below to limit which user(s), group(s) and OU(s) will be synchronized.
5. In the tree of Active Directory objects, click the name of an OU, so that the name becomes highlighted. The User Search pane displays the mail-enabled users and groups for the highlighted OU.
   

   The information bar at the bottom of the User Search pane shows the following, for the currently highlighted OU:

   • How many items are currently selected out of the total.

   • How many items are currently displayed out of the total.

   

   Note:

   By default the User Search pane displays only the first 50 items in the highlighted OU. To display all of the items, select the Show all users check box. Note however that the full list may take some time to appear if the OU has a large number of users and groups.

   
6. Select the required items as follows:

   • To select the entire OU, select the check box for the OU in the tree of Active Directory objects.

   

   • To select mail-enabled users or groups individually from an OU, click the OUs name in the object tree to highlight the name, but do not select the OU's check box. Then in the User Search pane, select the check box for each user or group you want to include.

     To search for the name of a user or group in the highlighted OU, enter a search string in the User Search search box, and click Search.

     

     The User Search pane displays the results of the search, from which you can select any items as required.

   Note:

   Searches are performed on the user name or group name only. The search string must match the user name or group name from the beginning. For example, a search for Dav matches David Smith and Davinia Jones, but not John Davidson. Wildcard search characters are not supported.

7. You can select multiple OUs or items from within multiple OUs. When you have made all your selections, click Next to save the selections and continue to the Select Action(s) wizard page.

   See Selecting the actions for a task to perform in an Exchange environment.

   Note:

   If a dialog regarding the Allow Remote Account Management option appears, you must choose whether to enable remote account management before you continue.

   See About granting remote account management for CloudLink.

To select users with an LDAP query

1. On the Welcome to Task Manager Wizard page, click Start Task Manager Wizard.

   The wizard's Select User(s) or Group(s) step appears.

2. In the Select Domain drop-down list, select the required domain.
3. Select Use a filter below to limit which user(s), group(s) and OU(s) will be synchronized.
4. In the Active Directory Objects area, select the Query AD tab.
5. In the tree of Active Directory objects, click a node in the tree to highlight the starting point for the LDAP query search. The Root of Search box shows the starting point that is selected.
   
6. In the Query String box, enter an LDAP query string.
7. Choose a Query Scope option:

   • Select SubTree search to search within the selected OU and all of its child OUs.

   • Or select One level search to search within the selected level only. For example, if you chose an OU as the root of the search, CloudLink searches that OU only, and not any child OUs.

8. Click Search.
9. From the results that the search returns, select one or more of the users.
10. Click Next to save and continue to the Select Action(s) page.

    See Selecting the actions for a task to perform in an Exchange environment.

    Note:

    If a dialog regarding the Allow Remote Account Management option appears, you must choose whether to enable remote account management before you continue.

    See About granting remote account management for CloudLink.

To select the members of a distribution group using Group-based Sync

1. On the Welcome to Task Manager Wizard page, click Start Task Manager Wizard.

   The wizard's Select User(s) or Group(s) step appears.

2. In the Select Domain drop-down list, select the required domain.
3. Select Use a filter below to limit which user(s), group(s) and OU(s) will be synchronized.
4. In the Active Directory Objects area, select the Query AD tab.
5. In the tree of Active Directory objects, highlight the starting point for the LDAP query search. The Root of Search box shows the starting point that you selected.
   
6. In the Query String box, enter an LDAP query with the following format:

   (&(memberOf:1.2.840.113556.1.4.1941:=group_DN))

   OR (&(objectClass=group)(|(&(groupType:1.2.840.113556.1.4.803:=2147483648)(mail=*))(!(groupType:1.2.840.113556.1.4.803:=2147483648))))

   where group_DN specifies the distinguished name of the distribution group. For example:

   (&(memberOf:1.2.840.113556.1.4.1941:=CN=Users,OU=team,DC=domain,DC=local))

   Note the following about the query syntax:

   • A Group-based Sync query must include the memberOf attribute.

   • The 1.2.840.113556.1.4.1941 matching rule OID causes the query to include the membership that results from group nesting.

7. Choose a Query Scope option:

   • Select SubTree search to search within the selected OU and all of its child OUs.

   • Or select One level search to search within the selected level only. For example, if you chose an OU as the root of the search, CloudLink searches that OU only, and not any child OUs.

8. Click Search to check that the search returns the results that you expect.
9. Click Next to save the query and continue to the Select Action(s) page.

   See Selecting the actions for a task to perform in an Exchange environment.

   Note:

   If a dialog regarding the Allow Remote Account Management option appears, you must choose whether to enable remote account management before you continue.

   See About granting remote account management for CloudLink.

To select the members of a dynamic distribution group using Group-based Sync

1. On the Welcome to Task Manager Wizard page, click Start Task Manager Wizard.

   The wizard's Select User(s) or Group(s) step appears.

2. In the Select Domain drop-down list, select the required domain.
3. Select Use a filter below to limit which user(s), group(s) and OU(s) will be synchronized.
4. In the Active Directory Objects area, select the Query AD tab.
5. In the tree of Active Directory objects, highlight the starting point for the LDAP query search. The Root of Search box shows the starting point that you selected.
6. In the Query String box, enter value of msExchDynamicDLFilter attribute of dynamic distribution group. You can get this value from "Active Directory User and Computer" tool on domain controller. Below are steps to get this value

   See Getting the msExchDynamicDLFilter attribute value of dynamic distribution group.

7. A Query Scope option is not applicable for dynamic distribution list. However, you have to select SubTree search.
8. Click Search to check that the search returns the results that you expect.
9. Click Next to save the query and continue to the Select Action(s) page. See Selecting the actions for a task to perform in an Exchange environment.

   Note:

   CloudLink can provision only those users which are directly a part of the selected dynamic distribution group.

To get the msExchDynamicDLFilter attribute value of dynamic distribution group

1. Log in to a domain controller. From the Start menu, select Server Manager. From the Tools menu of Server Manager, click Active Directory Users and Computers.
2. In the left navigation pane, select Users. A list of dynamic distribution groups appears as shown in the sample image below.
   
3. Double-click on the dynamic distribution group for which you want run sync. The property window appears.
4. From property window, select Attribute Editor tab. Within the attributes list, search for msExchDynamicDLFilter attribute.
   
5. Double click on the msExchDynamicDLFilter attribute to view corresponding attribute value.
   
6. Copy this attribute value and paste in the Query String field in the CloudLink tool.