B. Creating a
MA for the target domain (DOMAIN C in this example)
1. Click
Create under actions to the right
2.
Confirm that ?Active Directory? is selected from the ?Management agent
for:? drop-down list and click Next >

3. Enter
the connection properties for the source AD domain
a.
Enter ?Target Domain? in the Name: field and click Next >
b. Enter
the DNS name for the source AD in the ?Forest name:? field
c.
Enter a username, password, and domain for an account that has at least read
rights to objects that you want to get data from and click Next >

4. On
the Configure Directory Partitions screen, do the following
a.
Check the directory partition shown
b.
Uncheck ?Sign and encrypt LDAP traffic?
?
This requires additional steps not covered in this article.
c.
Click
Containers
i)
Unclick the root container, which will unselect all sub-containers
ii)
Select the container that contains the users you want to sync to the target
domain
?
In the target domain, just create the OUs for now. Users will be
created later.
iii) Click OK
once the container is selected
d.
Confirm that the objects selected match those below

?
The directory partition shown will be based on your environment.
e.
Click
Next >
5. On
the Select Object Types screen, check users and click Next >

6. On
the Select Attributes screen, select the following attributes
?
Additional attributes can be selected if you desire.
|
a.
c |
l.
mail |
|
b.
co |
m. mobile |
|
c.
department |
n.
postalCode |
|
d.
descriptio |
o.
sAMAccountName |
|
e.
displayName |
p. sn
|
|
f.
givenName |
q. st
|
|
g.
homePhone |
r.
streetAddress |
|
h.
info |
s.
telephoneNumber |
|
i.
initials |
t.
title |
|
j. l
|
u.
userAccountControl |