Chat now with support
Chat with Support

Migration Manager for Exchange 8.15 - Target Exchange 2007 Environment Preparation

Target Exchange 2007 Environment Preparation
Preparation Overview Checking System Requirements Setting Up Accounts and Required Permissions Preparing the Target Exchange Environment for Exchange Migration Setting Up Connection with the Source Exchange Organization Using SMTP Connectors Appendix A: Exchange 2003 to Exchange 2007 Migration Restrictions

Changing the Default Source/Target Active Directory Account

Changing Default Active Directory Account

Caution: This section is relevant to the public folder synchronization only. Active Directory Account for mailbox or calendar synchronization is specified during corresponding job configuration.

The default Source or Target Active Directory Account (initially displayed on the Associated domain controller page of the Exchange server's properties) is set when you add the source or target organization to the migration project (see the Registering Source and Target Organizations section of the Migration Manager for Exchange User Guide for details).

To change the Source or Target Active Directory Account, click Modify on the General | Associated domain controller page of the corresponding source (target) server properties in the Migration Manager for Exchange Console.

To go on using the default Source (Target) Active Directory Account for Exchange migration, grant the permissions required for Exchange migration to this account (see the next steps).

Granting Read Access to Active Directory Domain

The Target Active Directory Account used by Migration Manager for Exchange agents needs Read access to the target domain to work with servers and target Active Directory.

To grant this permission to the account, complete the following steps:

  1. On the target domain controller in the Active Directory Users and Computers snap-in, right-click the domain name, and then click Properties on the shortcut menu.
  2. On the Security tab, click Add and select the account to which you wish to assign permissions (in our example, QMM_Trg_AD).

    NOTE: If there is no Security tab, you should select View | Advanced Features in the Active Directory Users and Computers snap-in.

  3. Select the account name, and then enable the Allow option for the Read permission in the Permissions box.
  4. Click the Advanced button. In the Advanced Security Settings dialog box, select the account you specified on step 2 and click Edit.
  5. In the Permission Entry dialog box, select This object and all child (descendant) objects from the Apply onto drop-down list.
  6. Close the dialog boxes by clicking OK.

Granting Full Control on Organizational Unit (Target Active Directory Account)

To work with the target Active Directory objects, the Target Active Directory Account needs the Full Control permission on the organizational units and their child objects that contain the objects to be synchronized. This permission should be set on the domain controller where the objects you need to synchronize are located.

To grant the required permissions to the account, perform the following steps:

  1. In the Active Directory Users and Computers snap-in, right-click the OU where the objects are located, and click Properties.
  2. On the Security tab, click Add, and select the Target Active Directory Account (in our example, QMM_Trg_AD).

    NOTE: If there is no Security tab, you should select View | Advanced Features in the Active Directory Users and Computers snap-in.

  3. Select the account name, and then enable the Allow option for the Full Control permission in the Permissions box.
  4. Click the Advanced button. In the Advanced Security Settings dialog box, select the account you specified on step 2, and click Edit.
  5. In the Permission Entry dialog box, select This object and all child (descendant) objects from the Apply onto drop-down list.
  6. Close the dialog boxes by clicking OK.

Granting Read Permission for the Microsoft Exchange Container

In the target Exchange 2007 organization, the Target Active Directory Account requires the Read permission on the Microsoft Exchange container in the target Active Directory.

To grant this permission to the account, complete the following steps:

  1. Run the Exchange Management Console.
  2. Click the Organization Configuration node. The Exchange Administrators tab will appear on the right pane.
  3. Right-click anywhere in the Exchange Administrators tab and select Add Exchange Administrator from the shortcut menu.
  4. In the Add Exchange Administrator dialog box click Browse, select the Target Active Directory Account (in our example, QMM_Trg_AD) and click OK.
  5. Select the Exchange View-Only Administrator role option and click Add.

  6. Click Finish to exit the wizard and apply your changes.

Caution: If the Target Active Directory Account is located in another trusted forest, you cannot assign the Exchange View-Only Administrator role to this account. In this case grant the Read permission for the Microsoft Exchange container and its child objects to the account in the Configuration partition using the ADSIEdit snap-in.

Related Documents