Granting Write proxyAddresses Permission on Descendant PublicFolder Objects
To grant an account the Write proxyAddresses permission on the Descendant publicFolder objects for the Microsoft Exchange System Objects organizational unit, take the following steps:
- In the Active Directory Users and Computers snap-in, right-click the Microsoft Exchange System Objects OU and click Properties.
Note: If there is no Microsoft Exchange System Objects OU, you should select View | Advanced Features in the Active Directory Users and Computers snap-in.
- On the Security tab, click Advanced, then click Add and specify the account. Then click OK.
- On the Object tab of the Permission Entry dialog box , select Descendant publicFolder objects from the Apply to drop-down list.
- Then open the Properties tab and select Descendant publicFolder objects again.
- After that enable the Allow option for the Write proxyAddresses permission in the Permissions box.
-
Close the dialog boxes by clicking OK.
Setting Up the Agent Host Account
This section describes how to set the required permissions for the Agent Host Account used by Migration Manager for Exchange agents. This account is used to install and run Migration Manager for Exchange agents on agent hosts and to access the license server. The required privileges for the Agent Host Account are as follows:
- Membership in the local Administrators group on the license server (unless alternative credentials are used for the license server). If server is located in another trusted forest, the account should have local Administrator permissions on the license server
- Local Administrator permissions on the agent host server.
|
|
NOTE: By default each Exchange server is an agent host for itself. If you use the default agent host then to simplify the account setup process, you can grant these permissions to the Exchange Account and use it instead of the Agent Host Account. |
To set up the Agent Host Account, perform the steps described in the related subtopics.
|
|
nOTE: Note that the steps are given only as an example of a possible Agent Host Account setup. |
Changing the Default Source Agent Host Account
|
|
Caution: This section is relevant to the public folder synchronization only. Source Agent Host Account for mailbox or calendar synchronization is specified during corresponding job configuration. |
The default Source Agent Host Account (initially displayed on the Default Agent Host page of the Exchange server Properties) is set when you add the source organization to migration project (see the Registering Source and Target Organizations section of the Migration Manager for Exchange User Guide for details).
If necessary, you can change the default Source Agent Host Account. For that, go to the Agent Management node in the Migration Manager for Exchange Console, and use properties of the corresponding agent host server.
To go on using the default Source Agent Host Account for Exchange migration, grant the permissions required for Exchange migration to this account (see the next steps).
Granting SCP Create, Read and Write Permissions
Grant the Agent Host Account permissions to Create, Read and Write Service Connection Point (SCP) object located in the CN=Exchange Migration Project,CN=QmmEx,CN=Migration Manager,CN=Quest Software,CN=System,DC=eternity,DC=<...>,DC=<...> container:
- From the Start menu, select Run. In the Run dialog box, type ADSIEdit.msc. Click OK.
|
|
NOTE: If you have a Windows 2003 domain controller, the ADSIEdit utility, which is part of the Windows 2003 Support Tools, may not be installed. In this case install the Support Tools by running the Support\Tools\Suptools.msi file located on the Windows 2003 CD. |
- In the ADSIEdit snap-in, open the CN=Exchange Migration Project,CN=QmmEx,CN=Migration Manager,CN=Quest Software,CN=System,DC=eternity,DC=<...>,DC=<...> container
- Right-click the SCP object and click Properties.
- In the Properties dialog box, click the Security tab.
- On the Security tab, click Advanced.
- In the Advanced Security Settings dialog box, click Add.
- In the Select User, Computer, or Group (or similar) dialog box, select the administrative account and click OK.
- In the Permission Entry for dialog box, select This object and all descendant (child) objects from the Apply onto drop-down list.
- Allow Create, Readand Write permissions for the Agent Host Account.
- Close the dialog boxes by clicking OK.
