Migration Manager for Exchange 8.15 - Source Exchange 2013 Environment Preparation

Granting Membership in Server Local Administrators Group

The Source Exchange Account used by Migration Manager for Exchange agents should be a member of the local Administrators group on each source Exchange server involved in the migration.

To add the Source Exchange Account to the local Administrators group on each source Exchange server involved in the migration, perform the following:

1. Open the Computer Management snap-in (Click Start | Run, enter compmgmt.msc and then click OK).
2. In the left pane click System Tools | Local Users and Groups | Groups.
3. Right-click the Administrators group and click Add to Group.
4. Click Add and select the Source Exchange Account (in our example, QMM_Src_Ex).

5. Close the dialog boxes by clicking OK.

Granting Membership in Recipient Management Group

To perform Move mailbox operations, the Source Exchange Account needs to be assigned permissions to run the following cmdlets:

• New-MoveRequest
• Get-MoveRequest

• Resume-MoveRequest

• Remove-MoveRequest
• Get-MoveRequestStatistics

To grant these permissions, add the account to the Recipient Management group in the source Exchange 2013 organization, as follows:

1. In the Active Directory Users and Computers snap-in select the Microsoft Exchange Security Groups node.
2. In the right pane, right-click Recipient Management group and select Properties from the shortcut menu.
3. On the Members tab click Add and select the Source Exchange Account.
4. Close the dialog boxes by clicking OK.

Granting Application Impersonation Role

Granting ApplicationImpersonation Management Role

To grant the ApplicationImpersonation management role to the <User> (in our example, LA\JohnSmith), run the following cmdlet in Exchange Management Shell:

New-ManagementRoleAssignment -Role ApplicationImpersonation -User LA\JohnSmith

Setting Up the Source Active Directory Account

This section describes how to set the required permissions for the Source Active Directory Account used by Migration Agent for Exchange. This account is used for the following:

• Working with the source Active Directory

The required permissions for the Source Active Directory Account are as follows:

• Read access to the source domain
• Read permission for the Microsoft Exchange container in the source Active Directory

• Write permission on the Microsoft Exchange System Objects organizational unit in all domains in which source Exchange 2013 servers involved in public folder synchronization reside