Migration Manager for Exchange 8.15 - Source Exchange 2016 Environment Preparation

Granting Write proxyAddresses Permission on Descendant PublicFolder Objects

To grant an account the Write proxyAddresses permission on the Descendant publicFolder objects for the Microsoft Exchange System Objects organizational unit, take the following steps:

1. In the Active Directory Users and Computers snap-in, right-click the Microsoft Exchange System Objects OU and click Properties.
   Note: If there is no Microsoft Exchange System Objects OU, you should select View | Advanced Features in the Active Directory Users and Computers snap-in.
   
2. On the Security tab, click Advanced, then click Add and specify the account. Then click OK.
3. On the Object tab of the Permission Entry dialog box , select Descendant publicFolder objects from the Apply to drop-down list.
4. Then open the Properties tab and select Descendant publicFolder objects again.
5. After that enable the Allow option for the Write proxyAddresses permission in the Permissions box.

6. Close the dialog boxes by clicking OK.

Setting Up the Agent Host Account

This section describes how to set the required permissions for the Agent Host Account used by Migration Manager for Exchange agents. This account is used to install and run Migration Manager for Exchange agents on agent hosts and to access the license server. The required privileges for the Agent Host Account are as follows:

• Membership in the local Administrators group on the license server (unless alternative credentials are used for the license server). If server is located in another trusted forest, the account should have local Administrator permissions on the license server
• Local Administrator permissions on the agent host server.

To set up the Agent Host Account, perform the steps described in the related subtopics.

Changing the Default Source Agent Host Account

The default Source Agent Host Account (initially displayed on the Default Agent Host page of the Exchange server Properties) is set when you add the source organization to migration project (see the Registering Source and Target Organizations section of the Migration Manager for Exchange User Guide for details).

If necessary, you can change the default Source Agent Host Account. For that, go to the Agent Management node in the Migration Manager for Exchange Console, and use properties of the corresponding agent host server.

To go on using the default Source Agent Host Account for Exchange migration, grant the permissions required for Exchange migration to this account (see the next steps).

Granting SCP Create, Read and Write Permissions

Grant the Agent Host Account permissions to Create, Read and Write Service Connection Point (SCP) object located in the CN=Exchange Migration Project,CN=QmmEx,CN=Migration Manager,CN=Quest Software,CN=System,DC=eternity,DC=<...>,DC=<...> container:

1. From the Start menu, select Run. In the Run dialog box, type ADSIEdit.msc. Click OK.

   NOTE: If you have a Windows 2003 domain controller, the ADSIEdit utility, which is part of the Windows 2003 Support Tools, may not be installed. In this case install the Support Tools by running the Support\Tools\Suptools.msi file located on the Windows 2003 CD.

2. In the ADSIEdit snap-in, open the CN=Exchange Migration Project,CN=QmmEx,CN=Migration Manager,CN=Quest Software,CN=System,DC=eternity,DC=<...>,DC=<...> container
3. Right-click the SCP object and click Properties.
4. In the Properties dialog box, click the Security tab.
5. On the Security tab, click Advanced.
6. In the Advanced Security Settings dialog box, click Add.
7. In the Select User, Computer, or Group (or similar) dialog box, select the administrative account and click OK.
8. In the Permission Entry for dialog box, select This object and all descendant (child) objects from the Apply onto drop-down list.
9. Allow Create, Readand Write permissions for the Agent Host Account.
10. Close the dialog boxes by clicking OK.