Home / Platform Considerations
Microsoft Exchange 2003 – 2007 (MAPI) Considerations
When migrating from legacy versions of Microsoft Exchange (2003 – 2007), Transend will use the Outlook API and usually MAPI to connect to the Exchange Server or read the PST file.
Authentication
The account you use to perform a migration must be an active member of the domain you are converting from or to. This AD account must have, at a minimum, receive-as permissions on the Exchange Information Store or Mailbox Database. Full access permission during the migration is recommended.
Grant Full Access Permissions in Exchange Server 2007 through 2013
In Exchange 2007 through 2013, Receive-As permissions can be set by using the Exchange Management Shell.
Exchange 2010 and 2013
The following command line is the syntax you can use to give a Migration group or user full access to the Mailbox database in Exchange 2010:
Get-Mailbox | Add-MailboxPermission -User <UserorGroupIdentity> -AccessRights Fullaccess -InheritanceType all The < UserorGroupIdentity > is the user or group given permission to access user accounts.
Deny Full Access Permission in Exchange 2010
Get-Mailbox | Remove-MailboxPermission -User <UserorGroupIdentity> -AccessRights Fullaccess -InheritanceType all Exchange 2007
The following command line is the syntax you can use to give a Migration group or user full access to the Mailbox database in Exchange 2007:
Add-ADPermission -Identity "Mailbox Database" -User "Trusted User" -ExtendedRights Receive-As The Mailbox Database is the Exchange Server mailbox database, and the Trusted User is the Active Directory user or Group, which will be given permissions. For more information about giving access to the Mailbox Database please review the Microsoft TechNet Article located at:
http://technet.microsoft.com/en-us/library/aa996343.aspx
Testing Permissions
We recommend that you attempt to access multiple Exchange Accounts using the Outlook email client to ensure the Administrator account has the proper security permissions applied. To perform this test, log into Windows using an AD account who is a member of the Migration group or who has been given the above permissions. Then, go into the control panel, select the Mail icon, and create a new profile for a user other than the current logged on user.
Start Outlook (you might want Outlook to prompt for profiles). Select the test account and verify that you can log into that account directly without being prompted for a password. If you are not prompted for a password then the permissions have been set.
If you are still prompted for a password, then it is possible that you have multiple Windows Servers, who have Active Directory, and you may need to wait at least 20 minutes. Otherwise, verify that your account has the proper permissions, and test again.
Exchange 2000/2003
A good practice is to create an AD Domain group and then add users to that group who will be performing the migration of multiple accounts. Give that group the Receive-As permissions on the Exchange Information Store where the user accounts are located.
- After creating a Migration Group, start the Microsoft Exchange System Manager application
- Locate the Exchange Server and its Information Store
- Right Click on the Information Store and select Properties
- Select the Security tab
- Select the group or account that the Administrator account belongs to. In this example, the Migration group will be given Send-As and Receive-As permissions
- In the Permissions window, scroll down and allow Send-As and Receive-As privileges for your group or specific account
- Apply these changes and exit out of the Exchange Administrator