MigrationManager 86 MigratingToExchange2010
MigrationManager 86 MigratingToExchange2010
MigrationManager 86 MigratingToExchange2010
TRADEMARKS
AccessManager, Active Administrator, ActiveDL, ActiveGroups, ActiveRoles, AKONIX, Benchmark Factory,
Big Brother, BOX & WAVE Design, BridgeAccess, BridgeAutoEscalate, BridgeSearch, BridgeTrak,
ChangeAuditor, ChangeManager, CI Discovery, DataFactory, Defender, Deploy the Whole Desktop, Desktop
Authority, Directory Analyzer, DirectoryExpert, DS Analyzer, DS Expert, Embargo, Enterprise Security
Explorer, Enterprise Security Reporter, File System Auditor, Foglight, GPOAdmin, Help Desk Authority,
InstantAssist , IntelliProfile, InTrust, iToken, J.CLASS and Design, JClass, Jint, JProbe, Kemma Software,
Knowledge Xpert and Design, LiteSpeed, LiveReorg, LogAdmin, MessageStats, Move Mailbox Manager,
MultSess, NBSpool, NetBase, NETPRO, PASSGO, PassGo Technologies (and design), Password Reset
Manager, Patch Authority, PerformaSure, POINT, CLICK, DONE!, PowerGUI, Privilege Authority,
Q.DESIGNER and Design, Quest, Quest Central, Quest Software, Quest Software and Design, Quest
Software logo, ReportAdmin, RestoreAdmin, SCRIPTLOGIC, SCRIPTLOGIC (and Design), Secure Copy,
Security Explorer, Security Lifecycle Map, SelfServiceAdmin, SharePlex, Spotlight, SQL Navigator, SQL
TURBO, SQL TURBO and Design, SQL Watch, SQLAB, STAT, StealthCollect, T.O.A.D, Tag and Follow,
TOAD, TOAD WORLD, vAutomator, vConverter, vEcoShell, VESI, vFoglight, VINTELA, VIZIONCORE,
Vizioncore Automation Suite, Vizioncore vEssentials, vMigrator, vRanger, vSpotlight, vToad, WebDefender,
Webthority, XRT are trademarks and registered trademarks of Quest Software, Inc in the United States of
America and other countries. For a complete list of Quest Software’s trademarks, please see
http://www.quest.com/legal/trademark-information.aspx . Other trademarks and registered trademarks are
property of their respective owners.
Migration Manager
Updated – May 7, 2010
Software version – 8.6
CONTENTS
About This Guide ...................................................................................................... 3
Overview ............................................................................................................................ 3
Conventions ............................................................................................................... 3
Introduction................................................................................................................ 4
Security Configuration.............................................................................................. 5
Access to Exchange 2010 Mailboxes................................................................................ 5
Running Cmdlets to Move Mailboxes................................................................................ 6
Making Public Folders Mail-Enabled ................................................................................. 7
Using the Exchange Processing Wizard ........................................................................... 7
Processing Mailboxes and Public Folders................................................................. 7
Processing Mailbox and Public Folder Contents....................................................... 8
Before You Begin ...................................................................................................... 9
Create Migration Administrator Mailboxes ........................................................................ 9
Install the Microsoft Exchange Server Messaging API .......................................................... 9
Disable RPC Encryption on Exchange Servers .............................................................. 10
Avoid Incompatible Mailboxes ......................................................................................... 10
Migration Steps........................................................................................................ 11
Register Target Exchange 2010 Organization ................................................................ 11
Public Folder and Free/Busy Synchronization ................................................................ 12
Mailbox Migration and Calendar Synchronization........................................................... 12
About Quest Software, Inc. .................................................................................... 13
Contacting Quest Software.............................................................................................. 13
Contacting Quest Support ............................................................................................... 13
Third Party Contributions....................................................................................... 14
Boost 1.0 License Agreement ......................................................................................... 14
Loki 0.1.4 License Agreement ......................................................................................... 14
Loki 0.1.6 License Agreement ......................................................................................... 15
ZLib 1.1.4 License Agreement ........................................................................................ 15
i
Migrating to Exchange 2010
Conventions
In order to help you get the most out of this guide, we have used specific formatting
conventions. These conventions apply to procedures, icons, keystrokes and cross-
references.
ELEMENT CONVENTION
Bolded text Interface elements that appear in Quest products, such as menus and
commands.
Blue text Indicates a cross-reference. When viewed in Adobe® Acrobat®, this format
can be used as a hyperlink.
+ A plus sign between two keystrokes means that you must press them at
the same time.
| A pipe sign between elements means that you must select the elements in
that particular sequence.
3
Migration Manager 8.6
Introduction
This is a companion document for the Migration Manager for Exchange User Guide. It
does not supplant or duplicate the User Guide, but contains information that applies
specifically to projects involving migration to Exchange 2010.
4
Migrating to Exchange 2010
Security Configuration
This section contains information about the rights and permissions necessary to perform
mailbox migration to the target Exchange Server 2010 organization.
First of all, refer to the Quest Migration Manager System Requirements and Access
Rights document to make sure that your environment meets all the requirements to
perform the migration process.
Before you migrate mailboxes to Exchange Server 2010, ensure that the Exchange
account (the account used for Exchange migration) has sufficient privileges to do the
following:
1. In the ADSIEdit snap-in, open the Active Directory configuration partition and
browse to CN=<DatabaseName>,CN=Databases,CN=Exchange
Administrative Group (FYDIBOHF23SPDLT),CN=Administrative
Groups,CN=<ExchangeOrganizationName>,CN=Microsoft
Exchange,CN=Services,CN=Configuration,DC=<...>,DC=<...>
2. Add the Exchange account to the CN=<DatabaseName> object and give it
the Receive as permission.
3. Click Advanced and make sure that the permissions are set to This object
and all child (descendant) objects.
4. In the ADSIEdit snap-in, browse to CN=Databases,CN=Exchange
Administrative Group (FYDIBOHF23SPDLT),CN=Administrative
Groups,CN=<ExchangeOrganizationName>,CN=Microsoft
Exchange,CN=Services,CN=Configuration,DC=<…>,DC=<…>
5. Add the Exchange account to the CN=Databases object and give it the Full
Control permission.
5
Migration Manager 8.6
6. Click Advanced and make sure that the permissions are set to This object
and all child (descendant) objects.
7. Wait 2 hours, or restart the Information Store service twice on every target
Exchange 2010 server that is involved in the migration and hosts the Mailbox
role. The interval between restarts does not matter.
After that, your Exchange account will have access to every Exchange 2010 mailbox in
every mailbox database in your organization.
You can grant the same permissions by running the following cmdlet in Exchange
Management Shell:
In some cases, the inherited Receive as permission may not work. If the
Exchange account is granted the Read and Receive as permissions on the
CN=Databases object and these permissions are set to This object and all child
(descendant) objects, the Exchange account may not have full access to all
mailboxes in the organization. To resolve this problem, you should explicitly set the
“Receive-as” permission in the properties of Mailbox Database.
• New-MoveRequest
• Get-MoveRequest
• Remove-MoveRequest
• Get-MoveRequestStatistics
To assign these permissions, add this account to the Recipient Management role
group in the target Exchange 2010 organization, as follows:
6
Migrating to Exchange 2010
1. Add this account to the Public Folder Management role group in the target
Exchange 2010 organization.
2. Give the account the Full Control permission on the
CN=<ExchangeOrganizationName>,CN=Microsoft
Exchange,CN=Services,CN=Configuration,DC=<...>,DC=<...> container.
Access to The account should be a To assign the roles to the account (<User>),
mailboxes and member of the Domain run the following commands in the Exchange
public folders Admins or Enterprise Management Shell:
Admins group. Add-RoleGroupMember "Organization
Alternatively, if you want to Management" -Member <User>
avoid granting such broad Add-RoleGroupMember "Public Folder
privileges, make the account a Management" -Member <User>
member of the Organization
Management and Public
Folder Management roles.
7
Migration Manager 8.6
Message Full mailbox access rights. Run the following in the Exchange
processing in Management Shell:
other users' Add-MailboxPermission "Mailbox" -
mailboxes User <User> -AccessRights
FullAccess
8
Migrating to Exchange 2010
The Migration Manager console shows only those servers from the target
Exchange 2010 organization that host the Mailbox role.
The Migration Manager agents will access the migrated mailboxes and public folders
through an administrator mailbox that you specify. The System Attendant mailbox,
which Migration Manager uses for migration to Exchange versions up to 2007, was
deprecated in Exchange 2010. This means that you should create the administrator
mailbox manually for every Exchange Server 2010 and specify this mailbox in the
Exchange Server properties in the Migration Manager console.
Synchronization of mailboxes that are hosted on Exchange 2010 servers uses the
specialized Exchange Attendant component of the Migration Manager suite. During
installation of shared components, Exchange Attendant is registered as a service that
starts automatically.
Since the MAPI CDO setup package is not available for distribution, you should
download it from the Microsoft Web site. For the download link, please see Microsoft
Knowledge Base article 171440.
9
Migration Manager 8.6
During the migration, agents that are installed on source Exchange Server 2003 require
connection to Exchange 2010 to perform some operations. Migration Manager agents
create unencrypted connections, so you need to remove the RPC encryption
requirement to log on to the target Exchange Server 2010.
To disable the RPC encryption requirement, use the Exchange Management Shell to
run the following command on all Exchange 2010 servers with mailbox databases and
public folder databases that are associated with mailbox databases as well as on all
Exchange 2010 servers with the Client Access Server (CAS) role installed:
The resulting mailboxes are incompatible with Migration Manager and cannot be used
by during Exchange migration. Instead of relying on Exchange to create mailboxes, you
should delete such automatically created mailboxes and use mailbox creation settings
in your migration project. Mailboxes created by Migration Manager are fully supported.
Previously, the ForbidDelMailbox parameter in the mail transfer agent's INI file was the
only setting responsible for preserving or removing target mailboxes whose
MailboxInfo parameter did not match the same parameter in the source mailbox. The
ForbidDelMailbox parameter is a precaution against the deletion of mailboxes that are
in actual use in the target environment. By default, it is set to 1 so that non-matched
target mailboxes are not deleted.
• 0
Delete the new mailbox, but only if it is empty.
• 1
Let the ForbidDelMailbox parameter define what to do with the new mailbox,
but only if the mailbox is empty. Otherwise, do not delete the mailbox.
The ForbidDelMailbox2010 parameter is not included in the mail transfer agent's INI
file by default, and its value is assumed to be 0.
10
Migrating to Exchange 2010
Migration Steps
Currently, Exchange 2010 is supported only as the migration destination, not the
source.
In this release, the implementation of Exchange Server 2010 support uses the same
product architecture as for migration to previous versions of Exchange Server. The main
difference in migration to an Exchange 2010 organization is support for the database
availability group (DAG) feature implemented in Exchange Server 2010.
A database availability group is the base component of the high availability and site
resilience framework built into Microsoft Exchange Server 2010. A DAG is a group of up
to 16 Mailbox servers that host a set of databases and provide automatic database-level
recovery from failures that affect individual servers or databases.
Migration Manager for Exchange Console and migration agents detect automatically if
there are mailbox databases with copies on other Exchange servers included in a DAG.
Procedures such as job creation, administrator mailbox selection for all types of
synchronization, and copying of mailbox content to the target mailbox database depend
on the Exchange 2010 server (included in DAG) where the mailbox database is
mounted.
This chapter does not present the migration steps in a sequence. Instead, it contains
Exchange 2010-specific additions to the Migration Manager for Exchange User Guide.
If the target Exchange 2010 organization is added to the Migration Manager console,
you can view all database copies for every Exchange Server 2010 in the tree-view
irrespective of whether this server hosts an active or passive copy of the mailbox
database. You can see the status (active or passive) for each copy.
After you register the organization, add migration administrator mailboxes for mailbox,
calendar, public folder and free/busy synchronization. Then set these mailboxes as the
Migration Administrator Mailboxes in the properties of the corresponding Exchange
servers or in the properties of mailbox databases.
11
Migration Manager 8.6
If you create a public folder or free/busy synchronization job, specify the administrator
mailbox for the Exchange Server 2010. As an administrator mailbox you should specify
the mailbox that is hosted on any mailbox database which has a copy on the target
Exchange Server 2010. This mailbox database must be associated with the public
folder database hosted on the target Exchange Server 2010.
During public folder migration, if there are identically named folders in the source and
target Exchange environment, then a pair of folders with the same name will appear in
the target environment. Such folders are not duplicates and should not be deleted. If you
encounter identically named folders after migration, consider merging them.
When you create the mailbox or calendar synchronization job with the target
Exchange 2010 server specified, you can select only mailbox database that has an
active copy on this Exchange 2010 server. The information about active database
copies is stored in the Migration Manager console and updated during every manual
refresh of the Exchange 2010 server. If the collection is created within the Mailbox or
Calendar Synchronization job with certain Mailbox Database, other collections with this
Mailbox Database can be created only within this job even if the active copy of this
database moves to another Exchange server after creation of the first collection.
By default, Mailbox Synchronization agents process mailboxes from the target Mailbox
Database only if the active copy of this database is located on the target Exchange 2010
server. If the active copy of the Mailbox Database is moved to another Exchange 2010
server from the database availability group, agents stop processing mailboxes on the
target server. To disable this default behavior, do either of the following:
• In the Migration Manager console, open the properties of the server, go to the Mail
Target Agent | General node, and enable the Process mailbox databases after
their switchover to another server option.
• Specify the ProcessMailboxDBAfterSwitchover=1 parameter in the Config.ini file
of the corresponding agent.
• After a mailbox move operation or the creation of a new Exchange 2010 mailbox
during the migration process, the mailbox does not immediately become available for
login. The Mail Target Agent will record login errors until the mailbox is ready (this
can take up to 20 minutes). In these situations, login errors can be safely ignored.
• If a mailbox move request completes with an error, delete this request before the
agent creates a new one.
• During mailbox migration, if there are identically named folders in the source
mailbox and target mailbox, then a pair of folders with the same name will appear in
the target mailboxes. Such folders are not duplicates and should not be deleted. If
you encounter identically named folders after migration, consider merging them.
12
Migrating to Exchange 2010
13
Migration Manager 8.6
TinyXml 2.2.1 This product contains portions of the PAWN scripting software (formerly known
as SMALL).
ZLib 1.1.4 Copyright (C) 1995-2005 Jean-loup Gailly and Mark Adler
14
Migrating to Exchange 2010
1. The origin of this software must not be misrepresented; you must not claim that you wrote the
original software. If you use this software in a product, an acknowledgment in the product
documentation would be appreciated but is not required.
2. Altered source versions must be plainly marked as such, and must not be misrepresented as
being the original software.
3. This notice may not be removed or altered from any source distribution.
Jean-loup Gailly [email protected]
Mark Adler [email protected]
15