1. Skipping
NtSecurityDescriptor attribute would skip permissions under objectsSecurity TAB in
AD, for example such as
Send As/Receive As.
2. Skipping
msExchMailboxSecurityDescriptor attribute would skip mailbox permissions under
ADUC - Exchange Advanced | Mailbox Rights, for example such as Full Mailbox access
3
. Setting
Security Descriptor migration rule to Skip would be similar to skipping
NtSecurityDescriptor attribute. Unless
Security Descriptor migration rule option in either the Active Directory
Migration or
Synchronization job properties is set to something other than
Skip (Default option), objects
AD permissions will not be migrated. If the
Security Descriptor migration rule is set after the initial sync, then a
Full Resync is needed. Please select
Start and Re-Sync (Pop up message will state to only do a start. This is incorrect).
NOTE: Sometimes
Send As/Receive As permissions are mistakenly believed to be part of
msExchMailboxSecurityDescriptor attribute. They are however contained in
NtSecurityDescriptor attribute. It is important to understand, that in the default
QMM configuration where
Security Descriptor migration rule is set to Skip,
Send As/Receive As permissions will not be migrated.
