Migration Manager for Exchange 8.15 - Source and Target Exchange 2003 Environment Preparation

Changing the Default Active Directory Account

The default Active Directory Account (initially displayed on the Associated domain controller page of the Exchange server's properties) is set when you add source or target organization to the migration project (see the Registering Source and Target Organizations section of the Migration Manager for Exchange User Guide for details).

To change the Active Directory Account, click Modify on the General | Associated domain controller page of the corresponding server properties in the Migration Manager for Exchange Console.

To go on using the default Active Directory Account for Exchange migration, grant the permissions required for Exchange migration to this account.

Granting Read Access to Active Directory Domain

The Active Directory Account used by Migration Manager for Exchange agents needs Read access to the corresponding domain to work with servers and Active Directory.

To grant this permission to the account, complete the following steps:

1. On the corresponding domain controller in the Active Directory Users and Computers snap-in, right-click the domain name, and then click Properties on the shortcut menu.
2. On the Security tab, click Add and select the account to which you wish to assign permissions.

   NOTE: If there is no Security tab, you should select View | Advanced Features in the Active Directory Users and Computers snap-in.

3. Select the account name, and then enable the Allow option for the Read permission in the Permissions box.
4. Click the Advanced button. In the Advanced Security Settings dialog box, select the account you specified on step 2 and click Edit.
5. In the Permission Entry dialog box, select This object and all child (descendant) objects from the Apply onto drop-down list. Close the dialog boxes by clicking OK.

Granting Full Control on Organizational Unit (For Target Exchange Environment Only)

To work with the target Active Directory objects, the Active Directory Account needs the Full Control permission on the organizational units and their child objects that contain the objects to be synchronized. This permission should be set on the domain controller where the objects you need to synchronize are located.

To grant the required permissions to the account, perform the following steps:

1. In the Active Directory Users and Computers snap-in, right-click the OU where the objects are located, and click Properties.
2. On the Security tab, click Add, and select the Active Directory Account.

   NOTE: If there is no Security tab, you should select View | Advanced Features in the Active Directory Users and Computers snap-in.

3. Select the account name, and then enable the Allow option for the Full Control permission in the Permissions box.
4. Click the Advanced button. In the Advanced Security Settings dialog box, select the account you specified on step 2, and click Edit.
5. In the Permission Entry dialog box, select This object and all child (descendant) objects from the Apply onto drop-down list.
6. Close the dialog boxes by clicking OK.

Setting Up Agent Host Account

This section describes how to set the required permissions for the Agent Host Account used by Migration Manager for Exchange agents. This account is used to install and run Migration Manager for Exchange agents on the agent host and to access the license server. The required privileges for the Agent Host Account are as follows:

• Membership in the local Administrators group on the license server (unless alternative credentials are used for the license server). If server is located in another trusted forest, the account should have local Administrator permissions on the license server
• Local Administrator permissions on the agent host server.

To set up the Agent Host Account, perform the steps described in the related subtopics.