I receive errors while trying to set Exchange impersonation (Step 2) permissions by running cmdlets as per "QMM 8.6 Migrating to Exchange 2010" guide (MigrationManager_8.6_MigratingToExchange2010.pdf).
The documentation has been confirmed to contain typographical errors and a CR has been issued to correct the errors.
The instructions on page 8 of the “QMM 8.6 Migrating to Exchange 2010” guide (MigrationManager_8.6_MigratingToExchange2010.pdf) say:
To give the account (<User>) the right to impersonate all users on all Client Access Servers, run the following in the Exchange Management Shell:
Set-ExchangeServer | where {$_.IsClientAccessServer -eq $TRUE} | ForEach-Object {Add-ADPermission -Identity $_.distinguishedname -User (Get-User -Identity <User> | select-object).identity -extendedRight ms-Exch-EPI-Impersonation}
Whereas the correct cmdlet should be:
Get-ExchangeServer | where { $_.ServerRole -match "ClientAccess" } | ForEach-Object {Add-ADPermission -Identity $_.DistinguishedName -User (Get-User -Identity <User> | Select-Object).identity -extendedRights ms-Exch-EPI-Impersonation}
Note the difference:
Correct: Get-ExchangeServer
Incorrect: Set-ExchangeServer
Additionally, the second set of instructions says:
To give the account (<User>) permission to impersonate all accounts on an all MailboxDatabases, run the following in the Exchange Management Shell:
Set-MailboxDatabase | ForEach-Object {Add-ADPermission -Identity $_.DistinguishedName -User <User> -ExtendedRights ms-Exch-EPI-Impersonate}
And the correct cmdlet should be:
Get-MailboxDatabase | ForEach-Object {Add-ADPermission -Identity $_.DistinguishedName -User <User> -ExtendedRights ms-Exch-EPI-May-Impersonate}
Note the differences:
Correct: Get-MailboxDatabase
Incorrect: Set-MailboxDatabase
Correct: ms-Exch-EPI-May-Impersonate
Incorrect: ms-Exch-EPI-Impersonate
© ALL RIGHTS RESERVED. Feedback Terms of Use Privacy Cookie Preference Center