Migrating to modern Suspend functionality
Overview
Cayosoft introduced the modern Suspend functionality to merge the Suspend Tool into the Cayosoft Administrator console. The modern Suspend includes new features and quality of life improvements:
The Cayosoft Administrator console features built-in Suspend configurations to keep Suspend-related settings in a single place.
Dedicated Suspend configurations have been introduced.
Suspending AD computers and scheduled Microsoft 365 users suspends have been introduced.
Separate legacy Suspend rules have merged into dedicated configurations for a streamlined setup experience.
Legacy Suspend rules have been marked as Legacy.
This article covers the steps to migrate from the legacy Suspend configuration to the modern Suspend configuration.
Compatibility of legacy and modern Suspend configurations
The modern Suspend configuration is not backward-compatible with the Suspend Tool and the legacy Suspend configurations. Any users scheduled to be suspended or deleted do not appear in the reports of the modern Suspend rules. Cayosoft recommends to cancel any scheduled suspends configured in the legacy Suspend configurations.
IMPORTANT: The Report on Suspended AD Objects and Scheduled Operations rule does not report on legacy Suspend items, neither suspended nor scheduled to be suspended.
Workflow
The migration process is split into the following steps:
Set up modern Suspend configurations.
Set up modern Suspend rules and web actions.
Generate a report on users scheduled to be suspended and\or deleted using the legacy Suspend configuration and cancel the scheduled actions.
Switch to the modern Suspend configurations.
Reschedule the previously canceled Suspends.
Uninstall the Suspend Tool.
Set up modern Suspend configurations
Cayosoft Administrator introduced new Suspend configurations and rules to replace the legacy configurations of the Suspend Tool. The following table covers the relation of legacy settings to modern Suspend configurations. Review the configurations and perform the actions needed to successfully migrate to the modern Suspend.
| Legacy | Modern | Action needed |
|---|---|---|
| AD user Suspend policy | AD user Suspend (default configuration) overview | Set up the Suspend configuration for AD users to match the settings of your legacy Suspend policy. For information about the configuration, refer to the following article: AD user Suspend (default configuration) overview. |
| AD user undo Suspend policy | AD user Undo Suspend (default configuration) Overview | Set up the undo Suspend configuration for AD users to match the settings of your legacy Suspend policy. For information about the configuration, refer to the following article: AD user Undo Suspend (default configuration) Overview. |
| AD group Suspend policy | Set up the Suspend configuration for AD groups to match the settings of your legacy Suspend policy. For information about the configuration, refer to the following article: AD group Suspend (default configuration) Overview. | |
| AD group undo Suspend policy | AD Groups | Undo Suspend rule | Configure the rule to automate the undo Suspend operations in AD groups; for information about the rule, refer to the following article: AD Groups | Undo Suspend rule. |
| Suspend | Office 365 User and Guest |
The Suspend rule has been split into two configurations for Suspend and undo Suspend. For information about the configurations, refer to the following articles: |
|
| Suspend | Skype On-Premises User | The Skype extension has been deprecated. | — |
| — | AD computer Suspend (default configuration) Overview | Set up the Suspend configuration for your AD computers. For information about the configuration, refer to the following article: AD computer Suspend (default configuration) Overview. |
| — | AD user terminate (default configuration) | Set up the configuration for your AD users to automate the user deletion. The configuration replaced the AD Users | Enforce Object Retention rule. information about the configuration, refer to the following article: Modern Suspend Configuration. |
Set up modern Suspend rules and web actions
The following table represents the relation of legacy to modern Suspend rules and web actions in Cayosoft Administrator. Review the rules and web actions in your legacy Suspend environment and migrate to the modern Suspend replacements by creating new rules.
| Legacy | Modern | Action required |
|---|---|---|
|
AD Users | Suspend rule |
The legacy AD user-related rules have been merged into the AD Users | Suspend rule. Depending on your use case, you can create multiple instances of the rule to:
|
| AD Users | Suspend AD LDS account | AD Users | Suspend AD LDS account | No action required. |
| AD Users | Undo Suspend AD LDS account | AD Users | Undo Suspend AD LDS account | No action required. |
| AD Groups | Suspend Empty Groups | AD Groups | Suspend rule | Create and set up a modern rule. |
|
Report on Suspended AD Objects and Scheduled Operations rule |
Create and set up a modern rule for AD objects. Depending on your use case, you can create multiple instances of the rule to:
|
| — | Report on Suspended Microsoft 365 Users and Scheduled Operations rule | Create and set up a modern rule to report on Microsoft 365 users. |
| — | Microsoft 365 User | Suspend rule | Create and set up a modern rule to suspend Microsoft 365 users. |
| Undo Suspend | Office 365 User | Microsoft 365 User | Undo Suspend rule | Create and set up a modern rule to undo suspend Microsoft 365 users. |
| Office 365 Users and Guests Inactive | Suspend Users | Microsoft 365 User | Suspend rule | Create and set up a modern rule. |
| Import Oracle Data | Suspend AD Users | Import Oracle Data | Suspend AD Users | Create and set up a modern rule. |
| Import Oracle Data | Suspend Office 365 Users | Import Oracle Data | Suspend Microsoft 365 Users | Create and set up a modern rule. |
| Import SQL Data | Suspend AD Users | Import SQL Data | Suspend AD Users rule | Create and set up a modern rule. |
| Import SQL Data | Suspend Office 365 Users | Import SQL Data | Suspend Microsoft 365 Users | Create and set up a modern rule. |
| Text file | Suspend AD Users | Text file | Suspend AD Users rule | Create and set up a modern rule. |
| Text file | Suspend Office 365 Users | Text file | Suspend Microsoft 365 Users rule | Create and set up a modern rule. |
| Web actions | ||
| Suspend user web action (Active Directory) | Same web action | Define the modern AD and Microsoft 365 Suspend configurations in the extension settings. |
| Undo Suspend web action (Active Directory users) | Same web action | Define the modern AD and Microsoft 365 undo Suspend configurations in the extension settings. |
| Suspend web action (Active Directory groups) | Same web action | Define the modern AD Suspend configuration in the extension settings. |
| Undo Suspend web action (Active Directory groups) | Same web action | No action required. |
| Suspend user web action (Office 365) | Same web action | Define the modern Microsoft 365 Suspend configurations in the extension settings. |
| Undo Suspend web action (Office 365 users) | Same web action | Define the modern Microsoft 365 undo Suspend configurations in the extension settings. |
| Related deprovisioning rules | ||
|
The rules have been merged into a single rule created and scheduled by default. | |
Cancel scheduled Suspend actions
NOTE: Save the generated reports to reschedule the canceled Suspends using the modern Suspend later.
Before you migrate to the modern Suspend functionality, it is recommended to cancel any Suspend operations scheduled to run using the legacy Suspend functionality; you cannot cancel these operations using the modern Suspend functionality. Refer to the following generic workflow to review and cancel the scheduled suspends and deletions:
-
In the Cayosoft Administrator console, save reports for the following rules to establish the scheduled Suspend actions and deletions:
AD Users | Report on Scheduled Suspend Operations
AD Groups | Report on Scheduled Suspend Operations
In the Cayosoft AdministratorWeb Portal, locate the affected AD objects in relevant web queries.
Select the affected object and click Suspend user or Suspend group.
In the new pop-up, click Cancel scheduled operation.
Repeat the steps for all affected objects.
IMPORTANT: Either disable the scheduled Enforce Object Retention rules or keep the rules to monitor the scheduled deletions.
Switch to modern Suspend configurations
Once you've canceled the scheduled Suspend operations, you can switch to the modern Suspend configuration.
In the Cayosoft Administrator console, navigate to Configuration > Connected system extensions > Active Directory.
In the Cayosoft Suspend default configurations section, located the Use modern Suspend rules and configurations setting and set it to Yes. Click Save changes.
In the default configuration settings, review the names of the default configurations for the AD object Suspend operations. If you've created configurations different from the default ones, select the custom configuration for each scenario by clicking the ... button. Click Save changes to complete the configuration.
Navigate to Configuration > Connected system extensions > Microsoft 365.
In the Cayosoft Suspend default configurations section, review the names of the default configurations for the Microsoft 365 user Suspend operations. If you've created configurations different from the default ones, select the custom configuration for each scenario by clicking the ... button. Click Save changes to complete the configuration.
Reschedule previously canceled Suspends
Reschedule the previously canceled Suspends by following the steps:
Review the reports generated by the Report on Scheduled Suspend Operations rules and identify the objects to be rescheduled for a future Suspend operation.
In the Cayosoft AdministratorWeb Portal, locate the affected AD objects in relevant web queries.
Select the affected object and click Suspend user or Suspend group.
Click Suspend on schedule and select the appropriate date for the suspension. Click Suspend to schedule the Suspend.
Repeat the steps for all affected objects.
Video tutorial
In this video, you will learn what steps should be performed before using the Modern Suspend™ functionality.
Comments
0 comments
Please sign in to leave a comment.