Solved

Failed Exchange 2003 to Office 365 Migration due to Permissions

Posted on 2014-09-17
9
354 Views
Last Modified: 2014-09-20
Have tried a cutover migration twice for 40 users/security groups using the Administrator account/credentials from Exchange 2003 to Office 365.

Both times, it has synced the Administrator account and the security groups and all the other user accounts have failed.

After some research it appears clear that this is a permissions issue.

However, I am not able to follow instructions that I have found for fixing.Mailbox-Rights-3.PNG
0
Comment
Question by:MJCS
  • 5
  • 3
9 Comments
 
LVL 3

Expert Comment

by:Ken
Comment Utility
Can you provide any error information? You should be receiving errors associated with your migration endpoint. If you are certain you followed the setup correctly with creating the migration administrator account then please provide some useful error information for the next step in troubleshooting.

Are you following this migration info?

http://technet.microsoft.com/en-us/library/jj874016(v=exchg.150).aspx
0
 
LVL 3

Expert Comment

by:Ken
Comment Utility
Sorry, sent the wrong link. With Exchange 2003 you can only perform a staged migration- this is the correct link
http://technet.microsoft.com/en-us/library/jj874018(v=exchg.150).aspx

You should have setup the Microsoft Services Directory Sync Tool. Has that been completed and the Endpoint successfully setup?
0
 
LVL 38

Accepted Solution

by:
Vasil Michev (MVP) earned 500 total points
Comment Utility
On the screenshot above, you have DENY on full access permissions. Remove that, or use any of the other methods:

Assign an on-premises user account the necessary permissions to access mailboxes in your Exchange organization.   The on-premises user account that you use to connect to your on-premises Exchange organization (also called the migration administrator) must have the necessary permissions to access the on-premises mailboxes that you want to migrate to Exchange Online. This user account is used to create a migration endpoint to your on-premises organization.

The following list shows the administrative privileges required to migrate mailboxes using a cutover migration. There are three possible options.


The migration administrator must be a member of the Domain Admins group in Active Directory in the on-premises organization.

Or


The migration administrator must be assigned the FullAccess permission for each on-premises mailbox.

Or


The migration administrator must be assigned the Receive As permission on the on-premises mailbox database that stores the user mailboxes.

Open in new window


More info here: http://technet.microsoft.com/en-us/library/jj874016(v=exchg.150).aspx
0
 
LVL 3

Expert Comment

by:Ken
Comment Utility
Vasil- you posted the same link I did in my first post. But he is migrating from Exchange 2003 and you cannot do a cutover migration with Exchange 2003. He has to follow the steps for a staged migration as described in my second post.
0
How does your email signature look on mobiles?

Do your employees use mobile devices to reply to emails? With mobile becoming increasingly important to the business world, it is in your best interest to make sure that your email signature looks great across all types of devices.

 
LVL 38

Expert Comment

by:Vasil Michev (MVP)
Comment Utility
What do you mean he cannot do cutover with E2003? It's supported.
0
 
LVL 3

Expert Comment

by:Ken
Comment Utility
Ok, but the second paragraph, second sentence of the link you posted states- "You can only migrate Exchange 2003 and Exchange 2007 mailboxes using a staged migration."

That is also the same thing I learned when I received my Office 365 certification. If you know that it is now supported then I am going to back out of this solution.
0
 
LVL 38

Expert Comment

by:Vasil Michev (MVP)
Comment Utility
It means that you cannot use staged migration for E2010/E2013 :)
0
 
LVL 3

Expert Comment

by:Ken
Comment Utility
Thanks Vasil. I misread and learned something new today.

Hope your suggestion regarding the DENY permissions solves this issue.
0
 
LVL 2

Author Comment

by:MJCS
Comment Utility
I appreciate both of your assistance with this. Vasil was right. Although i used the Administrator account, there was an issue with permissions. I gave domain admin rights to another account and then went through and gave access rights to each mail account.

Note: There was several old accounts that were disabled but that I didn't want to delete at this point. The cutover migration insisted on all users and security groups (at least by default). By not giving mailbox access rights to those users, it just failed to migrate and then continued on to the next.
0

Featured Post

What Is Threat Intelligence?

Threat intelligence is often discussed, but rarely understood. Starting with a precise definition, along with clear business goals, is essential.

Join & Write a Comment

We are happy to announce a brand new addition to our line of acclaimed email signature management products – CodeTwo Email Signatures for Office 365.
Follow this checklist to learn more about the 15 things you should never include in an email signature from personal quotes, animated gifs and out-of-date marketing content.
how to add IIS SMTP to handle application/Scanner relays into office 365.
Access reports are powerful and flexible. Learn how to create a query and then a grouped report using the wizard. Modify the report design after the wizard is done to make it look better. There will be another video to explain how to put the final p…

763 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

11 Experts available now in Live!

Get 1:1 Help Now