Checking System Requirements
|
|
Caution: Any computer that does not meet the requirements should be upgraded before installing Migration Manager for Exchange components. |
Migration Manager for Exchange uses the following Exchange-specific agents involved in the process of migration from Exchange
- Public Folder Source Agent (PFSA)
- Public Folder Target Agent (PFTA)
- Transmission Agent (NTA)
- Migration Agent for Exchange
Agents work on agent host servers. Agent host is a stand-alone server. It can be located in another forest.
|
|
Note: Agent hosts for mail and public folder synchronization must be different as additional software required for MAgE and for PFSA/PFTA to perform those synchronization types cannot be installed on the same computer. |
For detailed information about system requirements for agent hosts, see the Exchange Migration Agents section of the System Requirements and Access Rights.
Source Exchange
- The Exchange Autodiscover service must be properly configured and run in your Exchange organization. For information on Autodiscover for Exchange, go to https://msdn.microsoft.com/en-us/library/office/jj900169(v=exchg.150).aspx. Note that you may also need to manually configure the Autodiscover URLs for the migration project as described in Setting Exchange Autodiscover URL (Optional)
- SSL certificates enabled on Exchange Client Access Servers of the source organization should be signed by a trusted publisher. If you use self-signed certificates, you need to log on to each agent host under the Agent Host Account and add the certificate from CAS to the Trusted Root Certification Authorities and Trusted Publisher lists.
Setting Up Accounts and Required Permissions
This section describes requirements for accounts working with the source Exchange servers. Migration Manager for Exchange allows you to use different administrative accounts for different purposes. The following accounts are used by Migration Manager:
- Source Active Directory Synchronization Account
This account is used by the Directory Synchronization Agent (DSA) to access the source Active Directory domain
For more details, see Setting Up the Source Active Directory Synchronization Account.
- Source Exchange Account
For configuration details, see Setting Up the Source Exchange Account.
- Source Active Directory Account
For configuration details, see Setting Up the Source Active Directory Account.
- Source Agent Host Account
For configuration details, see Setting Up Source Agent Host Account.
Setting Up the Source Active Directory Synchronization Account
This section describes how to set the required permissions for the Source Active Directory Synchronization Account. This account is used by the Directory Synchronization Agent (DSA) to access the source Active Directory domain
The required privilege level for the Source Active Directory Synchronization Account is membership in the Domain Admins group of the source domain.
|
|
Caution: If for some reason you cannot grant such privileges to the Source Active Directory Synchronization Account, then refer to the System Requirements and Access Rights document for the list of minimal required permissions. |
To grant the necessary permission to the Source Active Directory Synchronization Account, perform the following:
- On the source domain controller in the Active Directory Users and Computers snap-in, click Users, then in the right pane right-click Domain Admins and click Properties.
- Go to the Members tab, click Add and select the Source Active Directory Synchronization Account.
- Close the dialog boxes by clicking OK.
Setting Up the Source Exchange Account
This section describes how to set the required permissions for the Source Exchange Account used by Migration Agent for Exchange. This account is used for the following:
- Work with source Exchange mailboxes and public folders (used by the Migration Agent for Exchange, Public Folder Source Agent, and Public Folder Target Agent)
- Mail-enable the newly-created public folders (used by the public folder agents only: Public Folder Source Agent and Public Folder Target Agent)
- Move mailboxes
The required privileges for the Source Exchange Account are as follows:
- Read access to the source domain
-
Full Control permission on Exchange 2013 mailboxes
- The Mail Enabled Public Folders management role
-
Membership in the local Administrators group on all source Exchange servers involved in the public folder synchronization. If a server is a domain controller, the account should be added to the domain local Administrators group of the domain.
- Membership in the Recipient Management group
- The ApplicationImpersonation management role for migration to Exchange 2013 (or higher) or Office 365
To set up the Source Exchange Account, perform the steps described in the related subtopics.
|
|
Note: Note that the steps are given only as an example of a possible Source Exchange Account setup. |