Granting Mail Enabled Public Folders Management Role
To grant the Mail Enabled Public Folders management role to the <User> (in our example, LA\JohnSmith), run the following cmdlet in Exchange Management Shell:
New-ManagementRoleAssignment -Role "Mail Enabled Public Folders" -User LA\JohnSmith
Granting Full Control on Public Folder Administrator Mailbox
To grant account the Full Control permission on a public folder administrator mailbox to the <User> (in our example, LA\JohnSmith), run the following cmdlet in Exchange Management Shell:
Add-MailboxPermission -Identity <Public_Folder_Migration_Administrator_Mailboxes> -User LA\JohnSmith -AccessRights FullAccess
Setting Up the Target Active Directory Account
This section describes how to set the required permissions for the Target Active Directory Account used by Migration Manager for Exchange agents. This account is used for the following:
- Working with the target Active Directory
- Switching mailboxes
Mailbox and Calendar Synchronization
The following permissions are required for target Active Directory account used by Migration Agent for Exchange during mailbox or calendar synchronization:
- Read access to the target domain (including all descendant objects)
- Read permission for the Microsoft Exchange container in the Configuration partition of target Active Directory (including all descendant objects)
The following permissions are required for target Active Directory account used by PFSA and PFTA during public folder synchronization:
-
The Write proxyAddresses permission on the Descendant publicFolder objects for the Microsoft Exchange System Objects organizational unit in all domains in which target Exchange servers involved in public folder synchronization reside.
NOTE: Alternatively, you can grant the Write permission on that organizational unit.
To set up the Target Active Directory Account, perform the steps described in the related subtopics.
|
|
NOTE: Note that these steps are given only as an example of a possible Target Active Directory Account setup. |
Changing the Default Target Active Directory Account
Changing Default Active Directory Account
|
|
Caution: This section is relevant to the public folder synchronization only. Active Directory Account for mailbox or calendar synchronization is specified during corresponding job configuration. |
The default Source or Target Active Directory Account (initially displayed on the Associated domain controller page of the Exchange server's properties) is set when you add the source or target organization to the migration project (see the Registering Source and Target Organizations section of the Migration Manager for Exchange User Guide for details).
To change the Source or Target Active Directory Account, click Modify on the General | Associated domain controller page of the corresponding source (target) server properties in the Migration Manager for Exchange Console.
To go on using the default Source (Target) Active Directory Account for Exchange migration, grant the permissions required for Exchange migration to this account (see the next steps).