Migration Manager for Exchange 8.15 - Source Exchange 2013 Environment Preparation

Checking System Requirements

Migration Manager for Exchange uses the following Exchange-specific agents involved in the process of migration from Exchange 2013 organization:

• Public Folder Source Agent (PFSA)
• Public Folder Target Agent (PFTA)
• Transmission Agent (NTA)
• Migration Agent for Exchange

Agents work on agent host servers. Agent host is a stand-alone server. It can be located in another forest.

For detailed information about system requirements for agent hosts, see the Exchange Migration Agents section of the System Requirements and Access Rights.

Source Exchange 2013 Organization Considerations

• The Exchange Autodiscover service must be properly configured and run in your Exchange organization. For information on Autodiscover for Exchange, go to https://msdn.microsoft.com/en-us/library/office/jj900169(v=exchg.150).aspx. Note that you may also need to manually configure the Autodiscover URLs for the migration project as described in Setting Exchange Autodiscover URL (Optional)
• SSL certificates enabled on Exchange Client Access Servers of the source organization should be signed by a trusted publisher. If you use self-signed certificates, you need to log on to each agent host under the Agent Host Account and add the certificate from CAS to the Trusted Root Certification Authorities and Trusted Publisher lists.

Setting Up Accounts and Required Permissions

This section describes requirements for accounts working with the source Exchange servers. Migration Manager for Exchange allows you to use different administrative accounts for different purposes. The following accounts are used by Migration Manager:

• Source Active Directory Synchronization Account
  This account is used by the Directory Synchronization Agent (DSA) to access the source Active Directory domain

For more details, see Setting Up the Source Active Directory Synchronization Account.

• Source Exchange Account
  

For configuration details, see Setting Up the Source Exchange Account.

• Source Active Directory Account
  

For configuration details, see Setting Up the Source Active Directory Account.

• Source Agent Host Account
  

For configuration details, see Setting Up Source Agent Host Account.

Setting Up the Source Active Directory Synchronization Account

This section describes how to set the required permissions for the Source Active Directory Synchronization Account. This account is used by the Directory Synchronization Agent (DSA) to access the source Active Directory domain

The required privilege level for the Source Active Directory Synchronization Account is membership in the Domain Admins group of the source domain.

To grant the necessary permission to the Source Active Directory Synchronization Account, perform the following:

1. On the source domain controller in the Active Directory Users and Computers snap-in, click Users, then in the right pane right-click Domain Admins and click Properties.
2. Go to the Members tab, click Add and select the Source Active Directory Synchronization Account.
3. Close the dialog boxes by clicking OK.

Setting Up the Source Exchange Account

This section describes how to set the required permissions for the Source Exchange Account used by Migration Agent for Exchange. This account is used for the following:

• Work with source Exchange mailboxes and public folders (used by the Migration Agent for Exchange, Public Folder Source Agent, and Public Folder Target Agent)
• Mail-enable the newly-created public folders (used by the public folder agents only: Public Folder Source Agent and Public Folder Target Agent)
• Move mailboxes

The required privileges for the Source Exchange Account are as follows:

• Read access to the source domain

• Full Control permission on Exchange 2013 mailboxes

• The Mail Enabled Public Folders management role

• Membership in the local Administrators group on all source Exchange servers involved in the public folder synchronization. If a server is a domain controller, the account should be added to the domain local Administrators group of the domain.

• Membership in the Recipient Management group
• The ApplicationImpersonation management role for migration to Exchange 2013 (or higher) or Office 365

To set up the Source Exchange Account, perform the steps described in the related subtopics.