The Exchange Account should have the Full Control permission on Exchange servers in the Exchange 2003 organization, including the Send As and Receive As permissions.
To grant the required permissions to the account, do one of the following:
NOTE: By default, you are not allowed to modify security on the organization object, and the Security tab is not displayed. Refer to the Enabling the Security Tab section below for instructions on how to enable the Security tab on the organization object. |
|
Caution: The explicit denial of rights to administrators is set on the organization object by denying the Receive As and Send As rights. If the account is an Exchange Administrator or belongs to the Enterprise Admins or Domain Admins groups, it will still not be able to access mailboxes, because the denial to the group will take precedence over the grant of permissions to the individual account. |
Alternatively, if you do not want to enable the Security tab on the organization object, you can grant the account access to every single server by completing the following steps:
After you change permissions, you may need to log off and log on again. You should wait for about 10 minutes for the directory cache to expire. If you have multiple domain controllers in the forest, it may also be necessary to wait for directory replication to complete.
Enabling the Security Tab
To force the display of the Security tab on the organization objects, you must add a registry key, as follows:
This change takes effect immediately; you do not need to restart Exchange System Manager. This change affects only the user currently logged on.
|
Caution: An incorrectly modified registry cannot be undone and may cause serious problems with the operating system. We recommend that only advanced users modify the registry. |
The Exchange Account used by Migration Manager for Exchange agents needs the Full Control permission on the Microsoft Exchange System Objects organizational unit (OU) in all domains in which Exchange 2003 servers involved in public folder synchronization reside.
|
NOTE: If there is no Microsoft Exchange System Objects OU, you should select View | Advanced Features in the Active Directory Users and Computers snap-in. |
The Exchange Account used by Migration Manager for Exchange agents needs the following permissions:
To grant the required permissions to the account, perform the following:
|
NOTE: If you have a Windows 2003 domain controller, the ADSIEdit utility, which is a part of the Windows 2003 Support Tools, may not be installed. In this case install the Support Tools by running the Support\Tools\Suptools.msi file located on the Windows 2003 CD. |
This section describes how to set the required permissions for the Active Directory Account used by Migration Manager for Exchange agents. This account is used for the following:
In the source Exchange 2003 environment
In the target Exchange 2003 environment
The required permissions for the Active Directory Account are as follows:
To set up the Active Directory Account, perform the steps described in the related subtopics.
|
NOTE: Note that these steps are given only as an example of a possible Active Directory Account setup. |
© ALL RIGHTS RESERVED. Terms of Use Privacy Cookie Preference Center