Migration Manager for Exchange 8.15 - Source Exchange 2016 Environment Preparation

Source Exchange 2016 Environment Preparation

Preparation Overview Checking System Requirements Setting Up Accounts and Required Permissions

Setting Up the Source Active Directory Synchronization Account Setting Up the Source Exchange Account

Changing the Default Exchange Account Granting Read Access to Active Directory Domain Granting Read Permission for Microsoft Exchange Container Granting ApplicationImpersonation Management Role Granting Move Mailboxes Management Role Granting Mail Recipients Management Role Granting Membership in Local Administrators Group Granting Mail Enabled Public Folders Management Role Granting Full Control on Mailbox Database Granting Full Control on Public Folder Administrator Mailbox

Setting Up the Source Active Directory Account

Changing the Default Source Active Directory Account Granting Read Access to Active Directory Domain Granting Read Permission for the Microsoft Exchange Container Granting Write proxyAddresses Permission on Descendant PublicFolder Objects

Setting Up the Agent Host Account

Changing the Default Source Agent Host Account Granting SCP Create, Read and Write Permissions Granting db_owner Role on SQL Server

Preparing the Source Exchange Environment for Exchange Migration

Backing Up Exchange Installing the Microsoft Exchange Server MAPI Client and Collaboration Data Objects 1.2.1 Creating Custom Throttling Policies Preparing Agent Host for Public Folder Synchronization Agents Creating Aelita EMW Recycle Bin Public Folder (Optional) Configuring Administrator Mailboxes for Public Folder Synchronization Preparing Public Folder Mailboxes for Public Folder Synchronization Creating Outlook Profiles for Public Folder Synchronization Fine-Tuning Public Folder Synchronization Agents to Use Kerberos Authentication (Optional) Setting Exchange Autodiscover URL (Optional)

Setting Up Connection with the Target Exchange Organization Using SMTP Connectors

Setting up Source Exchange Organization for Internet Mail Flow between Source and Target Exchange Organizations

Creating Send Connector Modifying Default Receive Connector Adding E-mail Domain Used for Redirection to the List of Accepted Domains

Configuring Source DNS Server for Mail Forwarding Testing the SMTP Connectors (Optional)

Setting Up the Source Active Directory Synchronization Account

This section describes how to set the required permissions for the Source Active Directory Synchronization Account. This account is used by the Directory Synchronization Agent (DSA) to access the source Active Directory domain

The required privilege level for the Source Active Directory Synchronization Account is membership in the Domain Admins group of the source domain.

Caution: If for some reason you cannot grant such privileges to the Source Active Directory Synchronization Account, then refer to the System Requirements and Access Rights document for the list of minimal required permissions.

To grant the necessary permission to the Source Active Directory Synchronization Account, perform the following:

On the source domain controller in the Active Directory Users and Computers snap-in, click Users, then in the right pane right-click Domain Admins and click Properties.
Go to the Members tab, click Add and select the Source Active Directory Synchronization Account.
Close the dialog boxes by clicking OK.

Setting Up the Source Exchange Account

This section describes how to set the required permissions for the Source Exchange Account used by Migration Manager for Exchange agents. This account is used for the following:

Working with source Exchange mailboxes and public folders (used by Migration Agent for Exchange, Public Folder Source Agent and Public Folder Target Agent)
Moving mailboxes

Mailbox and Calendar Synchronizations

The following permissions are required for source Exchange account used by Migration Agent for Exchange during mailbox or calendar synchronization:

Read access to the source domain (including all descendant objects)
Read permission for the Microsoft Exchange container in the Configuration partition of source Active Directory (including all descendant objects)
The ApplicationImpersonation management role
The Move Mailboxes management role
The Mail Recipients management role

TIP: The Read permission for the Microsoft Exchange container is required only if you plan to add the source Exchange organization using the Add Source Organization Wizard under this account.

To set up the Source Exchange Account, perform the steps described in the related subtopics.

NOTE: Note that the steps are given only as an example of a possible Source Exchange Account setup.

Public Folder Synchronization

The following permissions are required for source Exchange account used by PFSA and PFTA during public folder synchronization:

Membership in the local Administrators group on all source Exchange servers involved in the migration. If a server is a domain controller, the account should be added to the domain local Administrators group of the domain.
The Mail Enabled Public Folders management role
Permissions to process public folders involved in the migration by granting Full Control permission on mailbox databases where those public folders reside.
Permission to log on to public folder administrator mailbox by granting Full Control on it.

Note: Exchange account used for public folder synchronization must be mailbox-enabled to be able obtaining source public folder hierarchy.

To set up the Source Exchange Account, perform the steps described in the related subtopics.

NOTE: Note that the steps are given only as an example of a possible Source Exchange Account setup.

Changing the Default Exchange Account

Changing Default Exchange Account

The default Exchange Account (initially displayed on the Connection page of the Exchange server Properties) is set when you add the source or target organization to the migration project (see the Registering Source and Target Organizations section of the Migration Manager for Exchange User Guide for details). If necessary, you can change the default Exchange Account by clicking Modify on the General | Connection page in the properties of the corresponding server in the Migration Manager for Exchange Console.

To go on using the default Exchange Account for Exchange migration, grant the permissions required for Exchange migration to this account (see the next steps).

Granting Read Access to Active Directory Domain

To grant this permission to an account, complete the following steps:

In the Active Directory Users and Computers snap-in, right-click the domain name, and then click Properties.
On the Security tab, click Add and select the account.
Select the account, and then check the Allow box for the Read permission in the Permissions box.
Click the Advanced button. In the Advanced Security Settings dialog box, select the account you specified on step 2, and click Edit.
In the Permission Entry dialog box, select This object and all descendant (child) objects from the Apply to drop-down list.
Close the dialog boxes by clicking OK.

请选择您的产品：

为向您提供更好的服务，请填写'Purpose of your Chat'（联系目的）：

针对您的问题建议的解决方案