Move Exchange Server public folders for Windows SBS 2008 migration Problem

Following the MS instructions for migration from an SBS 2003 to SBS 2008 server:

The Public Folder Instances node on the 2003 server has not emptied after 2 days. It does not appear to be replicating and there are no items visible on the 2007 server Public Folders. Combined Public folder size is minimal < 10MB
Found the following application event logs on the 2003 server:
Event Type:      Error
Event Source:      MSExchangeIS Public Store
Event Category:      Replication Errors
Event ID:      3093
Date:            19/09/2010
Time:            11:28:21 AM
User:            N/A
Computer:      SERVER
Error -2147221233 reading property 0x67480014 on object type tbtOwningFolders from database "First Storage Group\Public Folder Store (SERVER)".
Event Type:      Warning
Event Source:      MSExchangeIS Public Store
Event Category:      Access Control
Event ID:      1030
Date:            19/09/2010
Time:            11:36:37 AM
User:            N/A
Computer:      SERVER
 failed an operation on folder /O=%domain%/OU=FIRST ADMINISTRATIVE GROUP/CN=RECIPIENTS/CN=SYSTEM CONFIGURATION00ECAA8849263BBF84F9FB92F84E278EFF0000 on database "First Storage Group\Public Folder Store (SERVER)" because the user did not have the following access rights:

'Delete' 'Read Property' 'Write Property' 'Create Message' 'View Item' 'Create Subfolder' 'Write Security Descriptor' 'Write Owner' 'Read Security Descriptor' 'Contact'

The entry ID of the folder is in the data section of this event.
Event Type:      Warning
Event Source:      MSExchangeIS
Event Category:      General
Event ID:      9624
Date:            19/09/2010
Time:            11:36:36 AM
User:            N/A
Computer:      SERVER
The legacyDN /o=%domain%/ou=first administrative group/cn=Recipients/cn=%username% will not be returned because the object is a disabled user and the entry in the ACL is not for the master account sid.  Permissions for this user may be displayed as NTUSER:DOMAIN\USER.
Exchange Best Practices Analyzer found the following problem
Missing FQDN in service principal name
The computer account for Exchange server server.%domain%.local does not appear to contain the fully-qualified domain name of Exchange SMTP virtual server 'Default SMTP Virtual Server'. This may cause Kerberos authentication to fail when sending messages between servers. The tool expected to find 'SMTPSVC/' in the 'servicePrincipalName'.
Tried following the instructions and this was the command output on the 2003 server:
C:\Program Files\Support Tools>setspn.exe -a SMTPSVC/server.%domain%.local
Registering ServicePrincipalNames for CN=SERVER,OU=Domain Controllers,DC=ALICE
Updated object

C:\Program Files\Support Tools>setspn -L server
Registered ServicePrincipalNames for CN=SERVER,OU=Domain Controllers,DC=%domain%,DC=local:
Re-running the Exchange Analyzer re-identifies the same issue again so i may need to do something different with the setspn command
NOT: For privacy reasons i've replaced the actual domain name with %domain% and the actual username with %username%
Any help on this would be greatly appreciated as my weekend has just disappeared into bytes.
Who is Participating?
sosinc3Connect With a Mentor Commented:
The article leaves out that you have to have proper permissions for the account you are doing the migration with and the system account on both mail stores for this to work. However if the folders are less than 10 MB like you stated, it would be easier to just login to the old server with an Outlook client, export the public folders to a PST file, then open that PST file on a machine that has access to the 2008 mail store and import the folders/data. Downside to this is that permissions will not come across. Also, I do this almost every weekend and almost always the culprit is is one of the two problems listed in this article which is either the anonymous login is disabled on the old virtual server or that smart host forwarding is used.
I did the same migration a while ago, the public folders had issues,   My result was just to delete the public folder store on the 2007 box and recreate a new one.  Exchange doesn't like doing this, so I had to do it in ADSI edit in the end.  

Is it possible just to export the public folders and reimport them on the 2007 box, or some similar work around?  I wouldn't worry too much about all the errors on the 2003 box, unless you're planning on keeping it.  If the new environment is working well then Id just look for the quickest way to get the PF's across and remove the old 2003.  A backup / restore via tape should work as well.
I forgot to mention in my last post that if you change either or both of the things stated, you will then need to wait at least a day or two for the replication to finish again. Replication is really slow.
Making Bulk Changes to Active Directory

Watch this video to see how easy it is to make mass changes to Active Directory from an external text file without using complicated scripts.

techsoltsgAuthor Commented:
I've tried both the Standard domain administrator account and a copied domain administrator account to move the folders.
I pushed ahead and moved the mail databases to the new server but the following issues have arisen so I don't think i can just push ahead and get rid of the old server yet:
* Outlook 2003 clients working ok but get 0x8004010F errors when manually sending/receiving - which appears to be a problem with the offline address book.
* Exchange Clients using Outlook web access such as MS Entourage and Iphone can no longer communicate with server.
Did you check the settings I sent you last? Your new issues really are not part of this conversation and you should open up a new ticket for those. It is not fair to ask one question and then morph that in to something else. I hope you understand. Just as a note, domain admin account usually does not have the right for migration. You need to create a user specifically for migration with the rights that microsoft states in the SBS2003 to SBS2008 migration document.
techsoltsgAuthor Commented:
Public Folders moved across finally. Tried a number of things so not really sure which one worked.
I think it was either a whole lot of accounts were disabled on the old server so re-enabled them or correction of FQDM on delivery tab. Giving this one to sosinc3.
thank you
techsoltsgAuthor Commented:
The correction o the FQDM is what did it for you. Disabled user accounts don't affect public folders.
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.