When Quest Notes Migrator for Exchange (NME) is used to migrate to Microsoft Exchange 2007, the person running (NME) and the accounts specified within the 'Exchange Server Configuration' and 'Active Directory Configuration' area of the NME product needs to have specific permissions to complete all of its migration actions. Actions include:
- Creating mail-enabled objects
- Creating mailbox-enabled objects
- Creating Distribution Groups
- Deleting Contacts
- Migrating Mail
Quest Notes Migrator for Exchange manages all of these activities, but uses basic Active Directory, Exchange 2007 and PowerShell commands to perform these actions. Certain environments dictate that certain rights, roles and permissions cannot be granted to one user. For Quest Notes Migrator for Exchange to be able to perform all of these activities successfully, certain Microsoft permissions, rights and roles must be granted to a migration account. This document will use a simple one Domain/Forest, one Exchange Server scenario to describe (and show) how to grant the least amount of Microsoft permissions/rights/roles to enable a non-authoritative (or limited permission) account to perform an Exchange 2007 migration.