Why install Application Migrator HotFix 72888? (NETIQKB72888)

The NetIQ Application Migrator utility (Application Migrator) is a component of Domain Migration Administrator (DMA) that allows you to translate permissions from a source user or group account to a target user or group account for applications such as Microsoft SQL Server and Microsoft SharePoint Server. This document outlines why you should install this hotfix and identifies files modified by the hotfix.

Application Migrator HotFix 72888

• This hotfix adds support for translation of the following additional SharePoint content:
  • SharePoint personal sites (MySite)
  • Person or Group columns 
  • Workflows and alerts 
    
• With this hotfix, Application Migrator now automatically assigns site collection administrator permissions to the user account that is running the migration. Site collection administrator permissions are required for translating security for each site collection, so Application Migrator now assigns those permissions automatically instead of requiring them to be assigned manually before performing security translation.
  
• With this hotfix, Application Migrator now includes permission translation (add, remove, replace) for SharePoint Server 2010 environments. Application Migrator does not support all features in SharePoint Server 2010 environments that are supported in SharePoint Server 2007 environments, like SharePoint personal sites (MySite), Person or Group columns, and Workflows and alerts.
  
• This hotfix adds support for translation of SharePoint Areas and Sub-Areas permissions in SharePoint Server 2003 environments. The hotfix also resolves a related customer issue where Application Migrator removed source account permissions, but did not add them to target accounts. (ENG305494)
  

Installing This Hotfix

To use the features included in this hotfix, you must install both the NetIQ Application Migrator console hotfix component and the NetIQ SharePoint Communication Service hotfix component. The installation steps are the same whether you have SharePoint 2003 or SharePoint 2007 installed in your environment.

To install this hotfix:

1. Log on to the Application Migrator computer with a user account that has the required permissions. For more information about permission requirements, see the Migrating Application Permissions Technical Reference.
2. Run the AppMigConsole10000_Hotfix72888.exe file in the NetIQ Application Migrator installation kit.
3. Follow the instructions in the wizard until you have finished installing the Application Migrator hotfix component.
4. Log on to the Microsoft SharePoint Server computer with a user account that is a member of the SharePointSecurityGroup group.
5. Run the AppMigSPCommSvc10000_Hotfix72888.exe file in the NetIQ Application Migrator installation kit.
6. Follow the instructions in the wizard until you have finished installing the NetIQ SharePoint Communication Service hotfix component.
   

To verify that this hotfix has been installed:

View the Windows Registry key ProductVersion located in one of the following locations:
32-bit OS: My Computer\HKEY_LOCAL_MACHINE\SOFTWARE\NetIQ\ApplicationMigrator
64-bit OS: My Computer\HKEY_LOCAL_MACHINE\SOFTWARE\ Wow6432Node\NetIQ\ApplicationMigrator
After installing the hotfix, the value of this key is 1.0.1.0.

Migrating SharePoint Content
In order to perform all new content translation functions added in this hotfix, Application Migrator requires a Windows Registry key named EnableContentTranslation. By default, this registry key is not present and Application Migrator translates only MySite assignments. Once you add the registry key, Application Migrator will perform the following additional functions:

1. Translate lists and libraries columns of user and group types, looking for mapped accounts and setting new values
2. Translate workflow data to maintain functionality and task assignments for users of the target domain

To migrate SharePoint content:

1. Once you have installed the hotfix, complete the following steps to add the EnableContentTranslation registry key:
   • Click Start> Run.
   • In the Open field, type regedit , and then click OK.
   • In the left pane, browse to and select HKEY_LOCAL_MACHINE\SOFTWARE\NetIQ\ApplicationMigrator .
   • On the Edit menu, click New> Key.
   • Type EnableContentTranslation and press Enter.
   • Right-click the new registry key and click New> DWORD Value.
   • Type 1 and press Enter.
     
2. Complete the following steps to migrate SharePoint content:
   • Open the Application Migrator console.

   • In the Projects pane, select the appropriate project for which you want to translate content.

   • On the Project menu, select Update SharePoint Content.

Notes:

Be careful when editing your Windows registry. If there is an error in your registry, your computer may become nonfunctional. If an error occurs, you can restore the registry to its state when you last successfully started your computer. For more information, see the Help for the Windows Registry Editor.

In SharePoint Server 2007 environments, if a document in a Document Library is checked out at the time of migration, Application Migrator cannot translate the user and group accounts associated with that document, because the document is protected while it is checked out. You can avoid this issue by requiring users to check documents in prior to migration. If documents are checked out when you run the translation, you can rerun the translation after documents have been checked back in, and Application Migrator will translate the user and group accounts correctly.

Uinstalling This HotFix

Log on to the Microsoft SharePoint Server computer with a user account that is a member of the SharePointSecurityGroup group.
1. Complete the following steps to remove the Application Migrator console hotfix component:
   • Run NetIQApplicationMigrator.exe in the NetIQ Application Migrator installation kit and select the option in the wizard to remove the application.
   • Delete the following Windows Registry key: HKEY_CURRENT_USER\Software\Microsoft\Installer\Products\0E32ED694DE84284A995BFA22D22067E. This registry key is the same on both 32-bit and 64-bit computers. Removing this registry key enables you to reinstall the hotfix at a later time if necessary.
     
2. Complete the following steps to remove the SharePoint Communication Service hotfix component:
   • Run NetIQSharePointCommunicationService.exe in the NetIQ Application Migrator installation kit and select the option in the wizard to remove the application.
   • Delete the following Windows Registry key: HKEY_CURRENT_USER\Software\Microsoft\Installer\Products\7BB7E9A949D85C44E80BAEBD4ABF107E. This registry key is the same on both 32-bit and 64-bit computers. Removing this registry key enables you to reinstall the hotfix at a later time if necessary.

Known Issues
NetIQ Corporation strives to ensure our products provide quality solutions for your enterprise software needs. The following issues are currently being researched. If you need further assistance with any issue, please contact Technical Support.

1. Setting Admin Privileges for SharePoint Web Applications
   • A permissions issue currently exists in SharePoint 2007 environments. The Application Migrator user account is not able to set its Admin privileges automatically for a SharePoint web application created by a different Active Directory account. Without Admin privileges, Application Migrator is unable to translate the Sharepoint permissions in the web application.
     
   • To work around this issue, manually grant dbo (database owner) permissions over the respective web application database in SQL Server to the user account that is used to run the Sharepoint Communication Service. You can either grant Sysadmin permissions over the SQL Server instance, or you can write a script in SQL Server to grant permissions over specific content databases.
     
2. Hotfix Uninstallation and Reinstallation
   • An issue currently exists where uninstalling the NetIQ Application Migrator console and the NetIQ SharePoint Communication Service using only the options in the installer does not completely remove this hotfix. If you uninstall and then try to reinstall this hotfix and Application Migrator displays an error indicating the hotfix is already installed, delete the following Windows Registry keys:
     
     • HKEY_CURRENT_USER\Software\Microsoft\Installer\Products\0E32ED694DE84284A995BFA22D22067E
     • HKEY_CURRENT_USER\Software\Microsoft\Installer\Products\7BB7E9A949D85C44E80BAEBD4ABF107E
       

   • You can then reinstall this hotfix. (ENG306241)

3. Modified Files and Registry Keys

   • This hotfix replaces the following files in the installation folder of the Application Migrator console, by default C:\Program Files\NetIQ\Application Migrator on 32-bit computers or C:\Program Files (x86)\NetIQ\Application Migrator on 64-bit computers:

     • Application Migrator Console

     • NetIq.IqSharePoint.IqSpServiceContract.dll

     • IQSharePointOM.dll

     • IQTS_CommonMapper.dll.manifest

     • IQTS_CommonMapper.dll

     • IQTS_SharePoint.dll

     • IQTS_SharePoint.dll.manifest

     • IQTS.dll

     • IQTS.dll.manifest

     • IQTS_UICommon.dll

     • IQTS_UI.exe

     • IQTS_1_0.mof

     • IQTSConf_1_0.mof

     • IQSharePointOM_1_0.mof

   • This hotfix also modifies the value for the ProductVersion registry key on the Application Migrator console computer. The new value is 1.0.1.0. This registry key is in the following location:

     • HKEY_LOCAL_MACHINE\SOFTWARE\NetIQ\ApplicationMigrator on 32-bit computers
     • HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\NetIQ\ApplicationMigrator on 64-bit computers
       

   • This hotfix also updates the version and copyright information in the Application Migrator console.

4. Share Point Communication Service

• This hotfix replaces the following files in the installation folder of the SharePoint Communication Service, by default C:\Program Files\Common Files\SharePoint Communication Service on 32-bit computers or C:\Program Files (x86)\Common Files\SharePoint Communication Service on 64-bit computers:

  • IqSharePointComunicationService2003.exe for SharePoint Portal Server 2003
  • IqSharePointComunicationService.exe for MOSS 2007
  • NetIq.IqSharePoint.IqSpServiceContract.dll for both SharePoint Portal Server 2003 and MOSS 2007

  This hotfix also updates the version and copyright information in the SharePoint Communication Service executable file

Why Install This Hotfix?
Application Migrator 1.0 allows you to translate permissions from a source user or group account to a target user or group account for applications such as SQL Server and SharePoint Server.

Formerly known as NETIQKB72888

Be careful when editing your Windows registry. If there is an error in your registry, your computer may become nonfunctional. If an error occurs, you can restore the registry to its state when you last successfully started your computer. For more information, see the Help for the Windows Registry Editor.