Target Exchange 2010 Environment Preparation
Follow the steps that are described in the Preparation Checklist topic to prepare your Exchange 2010 organization and its environment for being the target organization in the Exchange migration process conducted by Migration Manager for Exchange.
|
|
|
|
|
|
On some of steps you may need to coordinate the setup process with the administrator of the source Exchange organization.
Preparation Overview
This section provides a short overview of the main steps that should be performed to set up your target Exchange 2010 organization and its environment for migration using Migration Manager for Exchange. These steps are described in detail in the related subtopics.
Setting up the target Exchange 2010 organization consists of four main steps:
Checking the System Requirements
On this step make sure that your environment meets the minimal system requirements for Migration Manager for Exchange agents. For more details, see Checking System Requirements.
Setting Up Accounts and Required Permissions
On this step you should set up the accounts and required permissions for Exchange migration. There are four main types of accounts used by Migration Manager for Exchange agents:
- Target Active Directory Synchronization Account
This account is used by the Directory Synchronization Agent (DSA) to access the target Active Directory domain - Target Exchange Account
This account is used by Migration Manager for Exchange agents installed on agent host to access the target Exchange server. - Target Active Directory Account
This account is used by Migration Manager for Exchange agents to access the target domain. - Target Agent Host Account
This account is used to install and run the Migration Manager for Exchange agents on agent host and to access the license server.
You can simplify the setup by using a single account for all Migration Manager for Exchange processes. This account should have the permissions that are required for Migration Manager for Exchange console and all agents on every server that is involved in the migration.
For more details, see Setting Up Accounts and Required Permissions.
Preparing the Target Exchange Environment for Exchange Migration
On this step you should perform common environment preparations:
- Back up Exchange.
- Create the Aelita EMW Recycle Bin public folder (optional)
- Create administrator mailboxes for public folder and free/busy synchronization
- Create administrator mailboxes for mailbox and calendar synchronization (optional)
- Create custom throttling policies
- Install Microsoft Exchange Server MAPI Client and Collaboration Data Objects 1.2.1 version 6.5.8353.0 or later.
- Disable RPC Encryption on target Exchange 2010 servers (optional)
- Back up Exchange
- Create the Aelita EMW Recycle Bin public folder (optional)
- Install Microsoft Exchange Server MAPI Client and Collaboration Data Objects 1.2.1 version 6.5.8353.0 or later on agent hosts (optional)
-
Create administrator mailboxes for public folder synchronization
- Create custom throttling policies
For more details, see Preparing the Target Exchange Environment for Exchange Migration.
Setting Up Connection with the Source Exchange Organization Using SMTP Connectors
On this fourth step you should set up the connection with the source Exchange organization using SMTP connectors. This task consists of three subtasks given below:
- Setting up the target Exchange 2010 organization for Internet mail flow between target and source Exchange organizations
- Configuring target DNS server for mail forwarding
- Testing the SMTP connectors (optional)
For more details, see Setting Up Connection with the Source Exchange Organization Using SMTP Connectors.
Preparation Checklist
This checklist will help you set up your target Exchange 2010 organization and its environment properly. Make sure you have done all the steps below before completing the preparation.
| Check | Step |
|---|---|
| □ | Check the system requirements |
| □ | Set up the Target Active Directory Synchronization Account |
| □ | Set up the Target Exchange Account |
| □ | Set up the Target Active Directory Account |
| □ | Set up the Target Agent Host Account |
| □ | Back up Exchange |
| □ | Create the Aelita EMW Recycle Bin public folder (optional) |
| □ | Create administrator mailboxes for public folder and free/busy synchronization |
| □ | Create administrator mailboxes for mailbox and calendar synchronization (optional) |
| □ | Create custom throttling policies |
| □ | Install Microsoft Exchange Server MAPI Client and Collaboration Data Objects 1.2.1 version 6.5.8353.0 or later |
| □ |
Configure the NSPI connection limit |
| □ | Disable RPC Encryption on target Exchange 2010 servers (optional) |
| □ | Set up the target Exchange organization for Internet mail flow between source and target Exchange organizations |
| □ | Configure the target DNS server for mail forwarding |
| □ | Test the SMTP connectors (optional) |
Prerequisites
Before starting the preparation of the target Exchange 2010 organization and its environment, make sure that you have the privileges to grant all of the following permissions to accounts.
|
|
NOTE: The list of permissions given below contains all required permissions for the accounts. However some of the permissions can be replaced with their equivalents. For more information, see the corresponding steps for each account. |
Target Active Directory Synchronization Account
- Membership in the Administrators or Domain Admins group of the target domain.
Target Exchange Account
- Read access to the target domain.
- Membership in the local Administrators group on all target Exchange servers involved in the migration. If a server is a domain controller, the account should be added to the domain local Administrators group of the domain.
- Full Control permission on the organizational units (OUs) (and their child objects) where the target synchronized objects are located.
- Full Control permission on the Microsoft Exchange System Objects organizational unit in all domains in which target Exchange 2010 servers involved in public folder synchronization reside.
- Full Control permission on target Exchange 2010 organization
- Membership in the Public Folder Management group.
- Permissions to log on to every mailbox involved in the migration.
- Membership in the Recipient Management group.
Mailbox and Calendar Synchronization
- Read access to the target domain (including all descendant objects)
- Read permission for the Microsoft Exchange container in the Configuration partition of target Active Directory (including all descendant objects)
- The Move Mailboxes management role
- The Mail Recipients management role
- The ApplicationImpersonation management role
|
|
TIP: The Read permission for the Microsoft Exchange container is required only if you plan to add the target Exchange organization using the Add Target Organization Wizard under this account. |
Public Folder Synchronization
- Membership in the local Administrators group on all target Exchange servers involved in the migration. If a server is a domain controller, the account should be added to the domain local Administrators group of the domain.
- Membership in the Public Folder Management group
- Permissions to process public folders involved in the migration by granting Full Control permission on public folder databases where those public folders reside.
-
Permission to log on to public folder administrator mailbox by granting Full Control on it.
Target Active Directory Account
- Read access to the target domain.
- Full Control permission on the organizational units (OUs) (and their child objects) where the target synchronized objects are located.
- Read permission for the Microsoft Exchange container in the target Active Directory.
Mailbox and Calendar Synchronization
- Read access to the target domain (including all descendant objects)
- Read permission for the Microsoft Exchange container in the Configuration partition of target Active Directory (including all descendant objects)
Public Folder Synchronization
- The Write proxyAddresses permission on the Descendant publicFolder objects for the Microsoft Exchange System Objects organizational unit in all domains in which target Exchange servers involved in public folder synchronization reside.
NOTE: Alternatively, you can grant the Write permission on that organizational unit.
Target Agent Host Account
- Membership in the local Administrators group on the license server (unless alternative credentials are used for the license server). If server is located in another trusted forest, the account should have local Administrator permissions on the license server.
- Local Administrator permissions on the agent host server.
-
The db_owner role on the SQL server where the database resides. Note that this permission is required if you use Windows authentication option for connecting to SQL Server.
-
Permission to create, read and write SCP in domain where agent host resides. The SCP object is located in the CN=Exchange Migration Project,CN=QmmEx,CN=Migration Manager,CN=Quest Software,CN=System,DC=eternity,DC=<...> ,DC=<...> Active Directory container.