Migration Manager for Exchange 8.15 - Source and Target Exchange 2003 Environment Preparation

Changing the Default Exchange Account

The default Exchange Account (initially displayed on the Connection page of the Exchange server Properties) is set when you add source or target organization to the migration project (see the Registering Source and Target Organizations section of the Migration Manager for Exchange User Guide for details). If necessary, you can change the default Exchange Account by clicking Modify on the General | Connection page in the properties of the corresponding server in the Migration Manager for Exchange Console.

To go on using the default Exchange Account for Exchange migration, grant the permissions required for Exchange migration to this account.

Granting Read Access to the Target Active Directory Domain (Target Exchange Environment Only)

Exchange Account should have Read access to the target Active Directory.

To grant this permission to the Exchange Account, complete the following steps:

1. In the Active Directory Users and Computers snap-in, right-click the domain name, and then click Properties.
2. On the Security tab, click Add and select the Exchange Account.
3. Select the Exchange Account, and then check the Allow box for the Read permission in the Permissions box.
4. Click the Advanced button. In the Advanced Security Settings dialog box, select the account you specified on step 2, and click Edit.
5. In the Permission Entry dialog box, select This object and all child (descendant) objects from the Apply onto drop-down list.
6. Close the dialog boxes by clicking OK.

Granting Membership in Server Local Administrators Group

The Exchange Account used by Migration Manager for Exchange agents should be a member of the local Administrators group on each Exchange server involved in the migration.

To add the Exchange Account to the local Administrators group on each Exchange server involved in the migration, perform the following:

1. Open the Computer Management snap-in (Click Start | Run, enter compmgmt.msc and then click OK).
2. In the left pane click System Tools | Local Users and Groups | Groups.
3. Right-click the Administrators group and click Add to Group.
4. Click Add and select the Exchange Account.
5. Close the dialog boxes by clicking OK.

Granting Full Control on Organizational Unit

To work with the Active Directory objects, the Exchange Account needs the Full Control permission on the organizational units and their child objects that contain the objects to be synchronized. This permission should be set on the domain controller where the objects you need to synchronize are located.

To grant the required permissions to the account, perform the following steps:

1. In the Active Directory Users and Computers snap-in, right-click the OU where the objects are located, and click Properties.
2. On the Security tab, click Add, and select the Exchange Account.

   NOTE: If there is no Security tab, you should select View | Advanced Features in the Active Directory Users and Computers snap-in.

3. Select the account name, and then enable the Allow option for the Full Control permission in the Permissions box.
4. Click the Advanced button. In the Advanced Security Settings dialog box, select the account you specified on step 2, and click Edit.
5. In the Permission Entry dialog box, select This object and all child (descendant) objects from the Apply onto drop-down list.
6. Close the dialog boxes by clicking OK.