Migration Manager for Exchange 8.15 - Target Exchange 2010 Environment Preparation (Legacy)

Checking System Requirements

Migration Manager for Exchange uses the following Exchange-specific agents involved in the migration process:

• Public Folder Source Agent
• Public Folder Target Agent
• Mail Target Agent
• Calendar Synchronization Agent
• Free/Busy Synchronization Agent
• Transmission Agent
• Migration Agent for Exchange

Agents work on agent host servers.

Agent host can be:

1. An Exchange server itself, which is the default configuration. After you enumerate an Exchange organization all Exchange servers are registered as agent hosts for themselves.
2. Another Exchange server from the same Exchange organization.
3. A stand-alone server. It can be located in another forest or workgroup.

For detailed information about system requirements for agent hosts, see the Exchange Migration Agents section of the System Requirements and Access Rights.

Target Exchange 2010 Organization Considerations

• The mailbox database containing the administrator mailbox (the System Mailbox used by default or custom administrator mailbox) should be mounted for each target Exchange 2010 server involved in the migration.
• The Migration Manager for Exchange console shows only those servers from target Exchange 2010 organization that host the Mailbox role. This is required because only servers with actual data are considered for migration.
• Public folder stores are no longer mandatory for Exchange 2010 organizations.
• Some restrictions may apply in Exchange 2003 organization to Exchange 2010 organization migration scenario. For information, see Exchange 2003 to Exchange 2010 Migration Restrictions.
• To migrate Recoverable Items subfolders the In-Place Hold and Litigation Hold features should be disabled on the target during the migration. Refer to User Guide for instructions on how to prepare your environment and enable this feature.

Setting Up Accounts and Required Permissions

This section describes requirements for accounts working with the target Exchange servers. Migration Manager for Exchange allows you to use different administrative accounts for different purposes. Exchange data is migrated by Migration Manager for Exchange agents, which use the following accounts:

• Target Active Directory Synchronization Account
  This account is used by the Directory Synchronization Agent (DSA) to access the target Active Directory domain
  This account is used by:
  1. The Directory Synchronization Agent (DSA) to access the target Active Directory domain
  2. The Mail Source Agent (MSA) to perform mailbox switch

  For more details, see Setting Up the Target Active Directory Synchronization Account.
  

• Target Exchange Account
  This account is used by Migration Manager for Exchange agents installed on agent host to access the target Exchange server.
  For more details, see Setting Up the Target Exchange Account.
• Target Active Directory Account
  This account is used by Migration Manager for Exchange agents to access the target domain.
  For more details, see Setting Up the Target Active Directory Account.
• Target Agent Host Account
  This account is used to install and run the Migration Manager for Exchange agents on agent host and to access the license server.
  For more details, see Setting Up Target Agent Host Account.

Setting Up the Target Active Directory Synchronization Account

This section describes how to set the required permissions for the Target Active Directory Synchronization Account. This account is used by:

• The Directory Synchronization Agent (DSA) to access the target Active Directory domain
• The Mail Source Agent (MSA) to perform mailbox switch

The required privilege level for the Target Active Directory Synchronization Account is membership in the Domain Admins group of the target domain.

To grant the necessary permission to the Target Active Directory Synchronization Account, perform the following:

1. On the target domain controller in the Active Directory Users and Computers snap-in, click Users, then in the right pane right-click Domain Admins and click Properties.
2. Go to the Members tab, click Add and select the Target Active Directory Synchronization Account (in our example, QMM_Trg_DSA).
3. Close the dialog boxes by clicking OK.

Setting Up the Target Exchange Account

This section describes how to set the required permissions for the Target Exchange Account used by Migration Manager for Exchange agents. This account is used for the following:

• Working with target Exchange mailboxes and public folders (used by the Mail Target Agent, Public Folder Source Agent, and Public Folder Target Agent)
• Making the newly-created public folders mail-enabled (used by the public folder agents only: Public Folder Source Agent and Public Folder Target Agent)
• Synchronizing Calendar information (used by the Calendar Synchronization Agent)
• Synchronizing free/busy data (optional) (used by the Free/Busy Synchronization Agent)
• Moving mailboxes

The required privileges for the Target Exchange Account are as follows:

• Read access to the target domain.
• Membership in the local Administrators group on all target Exchange servers involved in the migration. If a server is a domain controller, the account should be added to the domain local Administrators group of the domain.
• Full Control permission on the organizational units (OUs) (and their child objects) where the target synchronized objects are located.
• Full Control permission on the Microsoft Exchange System Objects organizational unit in all domains in which target Exchange 2010 servers involved in public folder synchronization reside.
• Full Control permission on target Exchange 2010 organization
• Membership in the Public Folder Management group.
• Permissions to log on to every mailbox involved in the migration.
• Membership in the Recipient Management group.

• Working with target Exchange mailboxes and public folders (used by Migration Agent for Exchange, Public Folder Source Agent, and Public Folder Target Agent)
• Making the newly-created public folders mail-enabled (used by the public folder agents only: Public Folder Source Agent and Public Folder Target Agent)
• Moving mailboxes

Mailbox and Calendar Synchronization

The following permissions are required for target Exchange account used by Migration Agent for Exchange during mailbox or calendar synchronization:

• Read access to the target domain (including all descendant objects)
• Read permission for the Microsoft Exchange container in the Configuration partition of target Active Directory (including all descendant objects)
• The Move Mailboxes management role
• The Mail Recipients management role
• The ApplicationImpersonation management role

Public Folder Synchronization

The following permissions are required for target Exchange account used by PFSA and PFTA during public folder synchronization:

• Membership in the local Administrators group on all target Exchange servers involved in the migration. If a server is a domain controller, the account should be added to the domain local Administrators group of the domain.
• Membership in the Public Folder Management group
• Permissions to process public folders involved in the migration by granting Full Control permission on public folder databases where those public folders reside.

• Permission to log on to public folder administrator mailbox by granting Full Control on it.

To set up the Target Exchange Account, perform the steps described in the related subtopics.