Exchange Migration: Preparing, Configuration and Post-Migration Steps

Configuring Source Exchange Servers

The migration of Exchange service is performed using the Microsoft Exchange Mailbox Merge program (Exmerge.exe). For additional information about this utility, refer to http://support.microsoft.com/kb/174197 and http://support.microsoft.com/kb/265441.

To configure the source Exchange servers for migration, it is necessary to perform the following steps:

To delegate the Account the Exchange Full Administrator role, do the following:

  1. Open Exchange System Manager (Start -> All Programs -> Microsoft Exchange -> System Manager).
  2. Right-click on the Exchange organization name (the top menu item) and select Delegate control. The Exchange Administration Delegation Wizard opens. Click Next.
  3. On the next screen of the wizard, click Add.
  4. From the Role list, select the Exchange Full Administrator role.
  5. Near the Group or User field, click Browse. On the screen that opens, enter the Account name. Click OK.

    You can also locate the Account in the list of existing users, computers and groups (click Advanced > Account name > OK).

  6. Click OK on the Delegate Control screen.
  7. Back in the Exchange Administration Delegation Wizard, click Next and then click Finish.

To grant the Account full access to the Mailbox Storage, perform these steps:

  1. Open Exchange System Manager and go to Administrative Groups -> First Administrative Group -> Servers -> Source back-end server name -> Source Storage Group.
  2. Right-click on the Mailbox Store belonging to the Group and select Properties.
  3. Go to the Security tab.
  4. From the Group or user names list, select the group the Account belongs to (e.g. Domain Admins, as Account must be a member of this group). In the Permissions for Administrator list in the lower part of the screen, make sure that the Full control permission is allowed (the Allow checkbox is selected, and the Deny checkbox is cleared). Click OK.

    If this permission is denied (the Deny option is selected) do the following:

    1. Click Advanced.
    2. On the Permissions tab, in the Permissions Entries list, find the Deny entry for Full control permission for the Domain Admins group. Click on the Edit button.
    3. Select the Allow checkbox box next to the Full control permission.
    4. Click OK.

    If the required group is not in the list, click Add and enter the group name (or use the Advanced button to locate the group) and then click OK.

  5. Repeat Steps 1-3 for Mailbox Stores belonging to each back-end Exchange server.

To install the Microsoft Exmerge tool on your back-end Exchange servers, perform these steps:

  1. Download the Exmerge archive from http://www.microsoft.com/downloads/details.aspx?displaylang=en&familyid=429163EC-DCDF-47DC-96DA-1C12D67327D5.
  2. Unpack and place the Exmerge.exe file into the <Exchange directory>\bin directory (typically C:\Program Files\Exchsrvr\bin) of each back-end Exchange server.

Configuring POA Hosted Exchange Servers

Make sure that the pem_admin account has Send As and Receive As permissions on target POA Mailbox Stores:

  1. Open Exchange System Manager (Start -> All Programs -> Microsoft Exchange -> System Manager).
  2. Go to Administrative Groups -> First Administrative Group -> Servers -> Back-end server -> Storage Group.
  3. Right-click on the Mailbox Store belonging to the group and select Properties.
  4. Go to the Security tab.
  5. From the Group or user names list, select the pem_admin account.
  6. In the Permissions for Administrator list in the lower part of the screen, make sure that the Send As and Receive As permissions are not denied for this account (the Allow checkbox for these permissions is selected, and the Deny checkbox is cleared). If the permissions are denied (the Deny option is selected), do the following:
    1. Click Advanced.
    2. On the Permissions tab, in the Permissions Entries list, find the Deny entry for Send As permission of the pem_admin account. Click on the Edit button.
    3. Select the Allow checkbox box next to the Send As and Receive As permissions.
    4. Click OK.
  7. Click OK on the Mailbox Store Properties screen.
  8. Repeat Steps 2-7 for each target POA Mailbox Store.

Grant full access to the Public Folder Store for the Domain Admins group:

  1. Open Exchange System Manager (Start -> All Programs -> Microsoft Exchange -> System Manager).
  2. Go to Administrative Groups -> First Administrative Group -> Servers -> Back-end server name -> Storage Group.
  3. Right-click on the Public Folder Store and select Properties.
  4. Go to the Security tab.
  5. From the Group or user names list, select Domain Admins.
  6. Make sure that the Full control option in the Permissions list is selected (the Allow checkbox is selected, and the Deny checkbox is cleared). If not, perform Step 6 of the procedure above.

Repeat Steps 1-6 for each back-end Exchange server.

Post-Migration Steps

After the migration is finished, revoke the Send As and Receive As permissions on target Mailbox Stores from the pem_admin account:

  1. Open Exchange System Manager (Start -> All Programs -> Microsoft Exchange -> System Manager).
  2. Go to Administrative Groups -> First Administrative Group -> Servers -> Back-end server -> Storage Group.
  3. Right-click on the Mailbox Store belonging to the group and select Properties.
  4. Go to the Security tab.
  5. From the Group or user names list, select the pem_admin account.
  6. Click Advanced at the bottom of the screen.
  7. In the Permission entries list, select the Allow operations for Send As and Receive As permissions set for the pem_admin account. Hold the CTRL key to select several operations at once.
  8. Click Remove to revoke the permissions.
  9. Click on OK on the current screen, and then on the next screen.
  10. Repeat Steps 2-8 for each target Mailbox Store.

Revoke full access permission to Public Folder Store from the Domain Admins group on each Exchange back-end server by performing a similar procedure.

Remove the Exmerge.exe file from the <Exchange directory>\bin directories on back-end Exchange hosts.