Migration Manager for AD console and access to AD (4254652)

It has been observed that the tool is trying to access the AD, in some cases the CN=System OU in AD.

Is this correct behavior? Does the tool need access to AD?

The Migration Manager Console creates a service connection point (SCP) in Active Directory, in the context of the agent host’s domain. Before creating the SCP, the console searches the agent host’s forest for an existing SCP associated with the project. If such an SCP is found in any of the forest’s domains, that SCP will be updated, and a new one will not be created. The path for SCP creation is “CN=<ProjectGuid>,CN=Exchange Migration Project,CN=QmmEx,CN=Migration Manager,CN=Quest Software,CN=System,DC=...”. The SCP contains information about database connection parameters. The “agent host account” is used for creating the SCP.