#Create a Migration Policy

A device migration policy allows you to define the mappings, areas, and areas to ignore.

Refer to the following steps to configure a migration policy for device migrations:

1. Click Policies under Settings in the left pane.

2. Click Migration policies to access the Migration policies page.

3. Click the Device tab.

4. Click Create migration policy. The Create migration policy panel appears.

5. Enter a name and an optional description for the policy, and then click Next.

6. By default, the Destination Active Directory agent performs an offline domain join. The device will complete this process upon its next restart. To use an online domain join instead, select the Rejoin online checkbox in the Device rejoin domain section, and complete the following configurations:

   • Destination Active Directory service account – Enter the service account for the destination Active Directory.

   • Password – Enter the password for the service account.

   • Destination domain name – Enter the destination domain name.

   To run a domain rejoin job, refer to Run Migrations.

7. In the Mappings section, select a Security Identifier (SID) mapping to map users/groups from the source domain to the destination. You can click View details to check and update the detailed information for the selected mapping.

   To create a new SID mapping, click the Add () button and complete the following configurations in the Create a Security Identifier (SID) mapping panel:

   1. Mapping name – Enter a name for the mapping.

   2. Description – Enter an optional description.

   3. Security Identifier (SID) mapping – Use any of the following methods to create mappings:

      • Add mappings – Click Add and enter the SIDs for the source and destination user/group.

      • Add from project – Click Add from project to import user/group mappings from an existing Active Directory migration project.

      • Import mappings – Click Import and download the template for mapping examples and configure SID mappings directly in the file; or you can click Export in the Create a Security Identifier (SID) mapping panel to export a mapping file and modify it.

      To delete an added mapping, click the Delete () button.

8. In the Area section, select the device areas for which you want to migrate permissions.

9. In the Areas to ignore section, enter the file path of the files or folders you want to exclude from the migration. All files and folders within the specified path will be ignored.

10. *Note: Currently, the Areas to Ignore feature is used only for file system and Windows profiles.

11. Example:

    • If you enter C:\Example, the entire Example folder will be ignored.

    • If you enter C:\Example.docx, the Example file will be ignored.

12. Once completed, click Save.