Migration Manager for Exchange 8.15 - Source Exchange 2007 Environment Preparation

Changing the Default Source/Target Exchange Account

Changing Default Exchange Account

The default Exchange Account (initially displayed on the Connection page of the Exchange server Properties) is set when you add the source or target organization to the migration project (see the Registering Source and Target Organizations section of the Migration Manager for Exchange User Guide for details). If necessary, you can change the default Exchange Account by clicking Modify on the General | Connection page in the properties of the corresponding server in the Migration Manager for Exchange Console.

Mailbox and calendar synchronization

The default Exchange Account for mailbox and calendar synchronization is specified when you create a corresponding synchronization job. To change it, use properties of the corresponding mailbox or calendar synchronization job.

Public folder synchronization

The default Exchange Account for public folder synchronization (initially displayed on the Connection page of the Exchange server Properties) is set when you add the source or target organization to the migration project (see the Registering Source and Target Organizations section of the Migration Manager for Exchange User Guide for details). If necessary, you can change the default Exchange Account for public folder synchronization by clicking Modify on the General | Connection page in the properties of the corresponding server in the Migration Manager for Exchange Console.

To go on using the default Exchange Account for Exchange migration, grant the permissions required for Exchange migration to this account (see the next steps).

Granting Membership in Server Local Administrators Group

The Source Exchange Account used by Migration Manager for Exchange agents should be a member of the local Administrators group on each source Exchange server involved in the migration.

To add the Source Exchange Account to the local Administrators group on each source Exchange server involved in the migration, perform the following:

1. Open the Computer Management snap-in (Click Start | Run, enter compmgmt.msc and then click OK).
2. In the left pane click System Tools | Local Users and Groups | Groups.
3. Right-click the Administrators group and click Add to Group.
4. Click Add and select the Source Exchange Account (in our example, QMM_Src_Ex).

   

5. Close the dialog boxes by clicking OK.

Granting Full Control on Organizational Unit

To work with the source Active Directory objects, the Source Exchange Account needs the Full Control permission on the organizational units and their child objects that contain the objects to be synchronized. This permission should be set on the domain controller where the objects you need to synchronize are located.

To grant the required permissions to the account, perform the following steps:

1. In the Active Directory Users and Computers snap-in, right-click the OU where the objects are located, and click Properties.
2. On the Security tab, click Add, and select the Source Exchange Account (in our example, QMM_Src_Ex).

   NOTE: If there is no Security tab, you should select View | Advanced Features in the Active Directory Users and Computers snap-in.

3. Select the account name, and then enable the Allow option for the Full Control permission in the Permissions box.
4. Click the Advanced button. In the Advanced Security Settings dialog box, select the account you specified on step 2, and click Edit.
5. 5 In the Permission Entry dialog box, select This object and all child (descendant) objects from the Apply onto drop-down list.

6. Close the dialog boxes by clicking OK.

Granting Full Control on Exchange Servers

Granting Full Control on Exchange Servers

The Source Exchange Account should have the Full Control permission on Exchange servers in the source Exchange 2007 organization, including the Send As and Receive As permissions.

To grant the required permissions to the account, do the following:

1. From the Start menu, select Run. In the Run dialog box, type ADSIEdit.msc. Click OK.

   NOTE: If you have a Windows 2003 domain controller, then the ADSIEdit utility, which is part of the Windows 2003 Support Tools, may not be installed. In this case install the Support Tools by running the Support\Tools\Suptools.msi file located on the Windows 2003 CD.

2. In the ADSIEdit snap-in, open the CN=Servers,CN=Exchange Administrative Group (FYDIBOHF23SPDLT),CN=Administrative Groups,CN=<ExchangeOrganizationName>,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=<…>,DC=<…> container.

For each Exchange server in this container that is involved in migration, complete the following steps:

1. Right-click the server object and select Properties.
2. In the Properties dialog box, click the Security tab.
3. On the Security tab, click Advanced.
4. In the Advanced Security Settings dialog box, click Add.
5. In the Select User, Computer, or Group (or similar) dialog box, select the administrative account (in our example, QMM_Scr_Ex) and click OK.
6. In the Permission Entry for dialog box, select This object and all child (descendant) objects from the Apply onto drop-down list.
7. Allow Full Control permission for the administrative account, including the Send As and Receive As permissions.

   

8. Close the dialog boxes by clicking OK.

To make sure the above actions were performed correctly, please view the Manage Full Access and Manage Send As dialogs in Exchange Management console. You should see the Source Exchange Account in both of the dialogs below.