When using Migration Configuration Analyzer it reports many issues, however permissions have been verified and are set correctly.
Errors are reported on following permissions:
Send As permission
Receive As permission
Full Control permission
Read access to the Microsoft Exchange container in Active Directory
Full Control permission to the Microsoft Exchange System Objects
Modify public folder replica list permission
Modify public folder quotas permission
Modify public folder deleted item retention
Permissions to Active Directory objects were granted to an account via membership in a Domain Local group, eg. Administrators
If the account being used is a member of local (built in) Administrators group then such errors are expected and can be safely ignored. The wizard doesnt have the ability to verify the permissions when such an account is being used. For more information please see Migration Manager Exchange ResKit Release Notes. Below is an excerpt:
If permissions to Active Directory objects were granted to an account via membership in a Domain Local group, then the following checks may return Failed status:
Send As permission
Receive As permission
Full Control permission
Read access to the Microsoft Exchange container in Active Directory
Full Control permission to the Microsoft Exchange System Objects
Modify public folder replica list permission
Modify public folder quotas permission
Modify public folder deleted item retention
Consider that Domain Local groups should not be used to assign permissions on Active Directory objects, because Domain Local groups cannot be evaluated in other domains, and parts of most Active Directory objects get replicated to other domains in the form of the GC. Refer to Group Type and Scope Usage in Windows Microsoft KB article.
While itisconsidered a Microsoft limitation,such errors do not reflect the correct level of permissions and an official Change Request ST#61194 has been created. The issue should be resolved in thefuture product releases.
© 2025 Quest Software Inc. ALL RIGHTS RESERVED. Terms of Use Privacy Cookie Preference Center