Migration Manager for Exchange 8.15 - Source Exchange 2010 Environment Preparation

Setting Up the Source Active Directory Account

This section describes how to set the required permissions for the Source Active Directory Account used by Migration Manager for Exchange agents. This account is used for the following:

• Working with the source Active Directory

The required permissions for the Source Active Directory Account are as follows:

• Read access to the source domain
• Read permission for the Microsoft Exchange container in the source Active Directory

To set up the Source Active Directory Account, perform the steps described in the related subtopics.

Changing the Default Source/Target Active Directory Account

Changing Default Active Directory Account

The default Source or Target Active Directory Account (initially displayed on the Associated domain controller page of the Exchange server's properties) is set when you add the source or target organization to the migration project (see the Registering Source and Target Organizations section of the Migration Manager for Exchange User Guide for details).

To change the Source or Target Active Directory Account, click Modify on the General | Associated domain controller page of the corresponding source (target) server properties in the Migration Manager for Exchange Console.

To go on using the default Source (Target) Active Directory Account for Exchange migration, grant the permissions required for Exchange migration to this account (see the next steps).

Granting Read Access to Active Directory Domain

The Source Active Directory Account used by Migration Manager for Exchange agents needs Read access to the source domain to work with servers and source Active Directory.

To grant this permission to the account, complete the following steps:

1. On the source domain controller in the Active Directory Users and Computers snap-in, right-click the domain name, and then click Properties on the shortcut menu.
2. On the Security tab, click Add and select the account to which you wish to assign permissions (in our example, QMM_Src_AD).

   NOTE: If there is no Security tab, you should select View | Advanced Features in the Active Directory Users and Computers snap-in.

3. Select the account name, and then enable the Allow option for the Read permission in the Permissions box.
4. Click the Advanced button. In the Advanced Security Settings dialog box, select the account you specified on step 2 and click Edit.
5. In the Permission Entry dialog box, select This object and all child (descendant) objects from the Apply onto drop-down list.

6. Close the dialog boxes by clicking OK.

Granting Read Permission for the Microsoft Exchange Container

In the source Exchange 2010 organization, the Source Active Directory Account requires the Read permission on the Microsoft Exchange container in the source Active Directory.

To grant this permission, take the following steps:

1. From the Start menu, select Run. In the Run dialog box, type ADSIEdit.msc. Click OK.

   NOTE: If you have a Windows 2003 domain controller, the ADSIEdit utility, which is part of the Windows 2003 Support Tools, may not be installed. In this case install the Support Tools by running the Support\Tools\Suptools.msi file located on the Windows 2003 CD.

2. In the ADSIEdit snap-in, open the CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=<…>,DC=<…> container.

3. Right-click the Microsoft Exchange container and select Properties.
4. In the Properties dialog box, click the Security tab.
5. On the Security tab, click Add and select the account to which you wish to assign permissions.
6. Select the account name, and then enable the Allow option for the Read permission in the Permissions box.
7. Click the Advanced button. In the Advanced Security Settings dialog box, select the account you specified on step 5 and click Edit.
8. In the Permission Entry dialog box, select This object and all child (descendant) objects from the Apply onto drop-down list.

9. Close the dialog boxes by clicking OK.