Migration Manager for Exchange 8.15 - Target Exchange 2013 Environment Preparation

Changing Default Exchange Account Granting Read Access to Active Directory Domain Granting Read Permission for Microsoft Exchange Container Granting Full Control on Mailbox Database Granting Membership in Local Administrators Group Granting Move Mailboxes Management Role Granting ApplicationImpersonation Management Role Granting Mail Recipients Management Role Granting Mail Enabled Public Folders Management Role Granting Full Control on Public Folder Administrator Mailbox

Setting Up the Target Active Directory Account

Changing the Default Target Active Directory Account Granting Read Access to Active Directory Domain Granting Write permission on the Microsoft Exchange System Objects Organizational Unit Granting Read Permission for the Microsoft Exchange Container Granting Write proxyAddresses Permission on Descendant PublicFolder Objects

Setting Up Target Agent Host Account

Changing the Default Target Agent Host Account Granting Membership in the Local Administrators Group

Preparing the Target Exchange Environment for Exchange Migration

Backing Up Exchange Creating Aelita EMW Recycle Bin Public Folder (Optional) Installing the Microsoft Exchange Server MAPI Client and Collaboration Data Objects 1.2.1 Configuring Administrator Mailboxes for Public Folder Synchronization Preparing Public Folder Mailboxes for Public Folder Synchronization Creating Custom Throttling Policies

Setting Up Connection with the Source Exchange Organization Using SMTP Connectors

Setting up Target Exchange Organization for Internet Mail Flow between Target and Source Exchange Organizations

Creating Send Connector Modifying Default Receive Connector Adding E-mail Domain Used for Redirection to the List of Accepted Domains

Configuring Target DNS Server for Mail Forwarding Testing the SMTP Connectors (Optional)

Checking System Requirements

Caution: Any computer that does not meet the requirements should be upgraded before installing Migration Manager for Exchange components.

Migration Manager for Exchange uses the following Exchange-specific agents involved in the process of migration to Exchange 20102013 organization:

Transmission Agent (NTA)
Migration Agent for Exchange

Agents work on agent host servers. Agent host is a stand-alone server. It can be located in another forest.

Note: Agent hosts for mail and public folder synchronization must be different as additional software required for MAgE and for PFSA/PFTA to perform those synchronization types cannot be installed on the same computer.

For detailed information about system requirements for agent hosts, see the Exchange Migration Agents section of the System Requirements and Access Rights.

Target Exchange 20102013 Organization Considerations

The Migration Manager for Exchange console shows only those servers from target Exchange 20102013 organization that host the Mailbox role. This is required because only servers with actual data are considered for migration.
The Exchange Autodiscover service must be properly configured and run in your Exchange 20102013 organization. For information on Autodiscover for Exchange 20102013, go to http://msdn.microsoft.com/en-us/library/exchange/jj900169.aspx.
SSL certificates enabled on Exchange 20102013 Servers of the target organization should be signed by a trusted publisher. If you use self-signed certificates, you need to log on to each agent host under the Agent Host Account and add certificate to the Trusted Root Certification Authorities and Trusted Publisher lists.
The Exchange 20102013 Calendar Repair Assistant (CRA) should be disabled during the migration period.
To migrate Recoverable Items subfolders the In-Place Hold and Litigation Hold features should be disabled on the target during the migration. Refer to User Guide for instructions on how to prepare your environment and enable this feature.

Setting Up Accounts and Required Permissions

This section describes requirements for accounts working with the target Exchange servers. Migration Manager for Exchange allows you to use different administrative accounts for different purposes. Exchange data is migrated by Migration Manager for Exchange agents, which use the following accounts:

Target Active Directory Synchronization Account
This account is used by:
1. The Directory Synchronization Agent (DSA) to access the target Active Directory domain
2. The Migration Agent for Exchange (MAgE) to perform mailbox switch

For more details, see Setting Up the Target Active Directory Synchronization Account.

Target Exchange Account
This account is used by Migration Manager for Exchange agents installed on agent host to access the target Exchange server.

For more details, see Setting Up the Target Exchange Account.

Target Active Directory Account
This account is used by Migration Manager for Exchange agents to access the target domain.

For more details, see Setting Up the Target Active Directory Account.

Target Agent Host Account
This account is used to install and run the Migration Manager for Exchange agents on agent host and to access the license server.

For more details, see Setting Up Target Agent Host Account.

Setting Up the Target Active Directory Synchronization Account

This section describes how to set the required permissions for the Target Active Directory Synchronization Account. This account is used by:

The Directory Synchronization Agent (DSA) to access the target Active Directory domain
The Migration Agent for Exchange (MAgE) to perform mailbox switch

The required privilege level for the Target Active Directory Synchronization Account is membership in the Domain Admins group of the target domain.

Caution: If for some reason you cannot grant such privileges to the Target Active Directory Synchronization Account, then refer to the System Requirements and Access Rights document for the list of minimal required permissions.

To grant the necessary permission to the Target Active Directory Synchronization Account, perform the following:

On the target domain controller in the Active Directory Users and Computers snap-in, click Users, then in the right pane right-click Domain Admins and click Properties.
Go to the Members tab, click Add and select the Target Active Directory Synchronization Account (in our example, QMM_Trg_DSA).
Close the dialog boxes by clicking OK.

Setting Up the Target Exchange Account

This section describes how to set the required permissions for the Target Exchange Account used by Migration Manager for Exchange agents. This account is used for the following:

Working with target Exchange mailboxes and public folders (used by Migration Agent for Exchange, Public Folder Source Agent, and Public Folder Target Agent)
Making the newly-created public folders mail-enabled (used by the public folder agents only: Public Folder Source Agent and Public Folder Target Agent)
Moving mailboxes

Mailbox and Calendar Synchronization

The following permissions are required for target Exchange account used by Migration Agent for Exchange during mailbox or calendar synchronization:

Read access to the target domain (including all descendant objects)
Read permission for the Microsoft Exchange container in the Configuration partition of target Active Directory (including all descendant objects)
Permissions to log on to every mailbox involved in the migration by granting Full Control permission on a mailbox database
The Move Mailboxes management role
The Mail Recipients management role
The ApplicationImpersonation management role

TIP: The Read permission for the Microsoft Exchange container is required only if you plan to add the target Exchange organization using the Add Target Organization Wizard under this account.

Public Folder Synchronization

The following permissions are required for target Exchange account used by PFSA and PFTA during public folder synchronization:

Membership in the local Administrators group on all target Exchange servers involved in the migration. If a server is a domain controller, the account should be added to the domain local Administrators group of the domain.
The Mail Enabled Public Folders management role
Permissions to process public folders involved in the migration by granting Full Control permission on mailbox databases where those public folders reside.
Permission to log on to public folder administrator mailbox by granting Full Control on it.

Note: Exchange account used for public folder synchronization must be mailbox-enabled to be able obtaining target public folder hierarchy.

To set up the Target Exchange Account, perform the steps described in the related subtopics.

NOTE: Note that the steps are given only as an example of a possible Target Exchange Account setup.

Please select your product:

To serve you better, please complete the Purpose of your Chat:

Recommended Solutions for Your Problem