Migration Manager for Exchange 8.15 - Target Exchange 2007 Environment Preparation

Changing the Default Source/Target Active Directory Account

Changing Default Active Directory Account

The default Source or Target Active Directory Account (initially displayed on the Associated domain controller page of the Exchange server's properties) is set when you add the source or target organization to the migration project (see the Registering Source and Target Organizations section of the Migration Manager for Exchange User Guide for details).

To change the Source or Target Active Directory Account, click Modify on the General | Associated domain controller page of the corresponding source (target) server properties in the Migration Manager for Exchange Console.

To go on using the default Source (Target) Active Directory Account for Exchange migration, grant the permissions required for Exchange migration to this account (see the next steps).

Granting Read Access to Active Directory Domain

The Target Active Directory Account used by Migration Manager for Exchange agents needs Read access to the target domain to work with servers and target Active Directory.

To grant this permission to the account, complete the following steps:

1. On the target domain controller in the Active Directory Users and Computers snap-in, right-click the domain name, and then click Properties on the shortcut menu.
2. On the Security tab, click Add and select the account to which you wish to assign permissions (in our example, QMM_Trg_AD).

   NOTE: If there is no Security tab, you should select View | Advanced Features in the Active Directory Users and Computers snap-in.

3. Select the account name, and then enable the Allow option for the Read permission in the Permissions box.
4. Click the Advanced button. In the Advanced Security Settings dialog box, select the account you specified on step 2 and click Edit.
5. In the Permission Entry dialog box, select This object and all child (descendant) objects from the Apply onto drop-down list.
6. Close the dialog boxes by clicking OK.

Granting Full Control on Organizational Unit (Target Active Directory Account)

To work with the target Active Directory objects, the Target Active Directory Account needs the Full Control permission on the organizational units and their child objects that contain the objects to be synchronized. This permission should be set on the domain controller where the objects you need to synchronize are located.

To grant the required permissions to the account, perform the following steps:

1. In the Active Directory Users and Computers snap-in, right-click the OU where the objects are located, and click Properties.
2. On the Security tab, click Add, and select the Target Active Directory Account (in our example, QMM_Trg_AD).

   NOTE: If there is no Security tab, you should select View | Advanced Features in the Active Directory Users and Computers snap-in.

3. Select the account name, and then enable the Allow option for the Full Control permission in the Permissions box.
4. Click the Advanced button. In the Advanced Security Settings dialog box, select the account you specified on step 2, and click Edit.
5. In the Permission Entry dialog box, select This object and all child (descendant) objects from the Apply onto drop-down list.
6. Close the dialog boxes by clicking OK.

Granting Read Permission for the Microsoft Exchange Container

In the target Exchange 2007 organization, the Target Active Directory Account requires the Read permission on the Microsoft Exchange container in the target Active Directory.

To grant this permission to the account, complete the following steps:

1. Run the Exchange Management Console.
2. Click the Organization Configuration node. The Exchange Administrators tab will appear on the right pane.
3. Right-click anywhere in the Exchange Administrators tab and select Add Exchange Administrator from the shortcut menu.
4. In the Add Exchange Administrator dialog box click Browse, select the Target Active Directory Account (in our example, QMM_Trg_AD) and click OK.
5. Select the Exchange View-Only Administrator role option and click Add.

   

6. Click Finish to exit the wizard and apply your changes.