Failed Exchange 2003 to Office 365 Migration due to Permissions

Have tried a cutover migration twice for 40 users/security groups using the Administrator account/credentials from Exchange 2003 to Office 365.

Both times, it has synced the Administrator account and the security groups and all the other user accounts have failed.

After some research it appears clear that this is a permissions issue.

However, I am not able to follow instructions that I have found for fixing.Mailbox-Rights-3.PNG
LVL 2
MJCSAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

KenCOO/Senior Systems AnalystCommented:
Can you provide any error information? You should be receiving errors associated with your migration endpoint. If you are certain you followed the setup correctly with creating the migration administrator account then please provide some useful error information for the next step in troubleshooting.

Are you following this migration info?

http://technet.microsoft.com/en-us/library/jj874016(v=exchg.150).aspx
0
KenCOO/Senior Systems AnalystCommented:
Sorry, sent the wrong link. With Exchange 2003 you can only perform a staged migration- this is the correct link
http://technet.microsoft.com/en-us/library/jj874018(v=exchg.150).aspx

You should have setup the Microsoft Services Directory Sync Tool. Has that been completed and the Endpoint successfully setup?
0
Vasil Michev (MVP)Commented:
On the screenshot above, you have DENY on full access permissions. Remove that, or use any of the other methods:

Assign an on-premises user account the necessary permissions to access mailboxes in your Exchange organization.   The on-premises user account that you use to connect to your on-premises Exchange organization (also called the migration administrator) must have the necessary permissions to access the on-premises mailboxes that you want to migrate to Exchange Online. This user account is used to create a migration endpoint to your on-premises organization.

The following list shows the administrative privileges required to migrate mailboxes using a cutover migration. There are three possible options.


The migration administrator must be a member of the Domain Admins group in Active Directory in the on-premises organization.

Or


The migration administrator must be assigned the FullAccess permission for each on-premises mailbox.

Or


The migration administrator must be assigned the Receive As permission on the on-premises mailbox database that stores the user mailboxes.

Open in new window


More info here: http://technet.microsoft.com/en-us/library/jj874016(v=exchg.150).aspx
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Ultimate Tool Kit for Technology Solution Provider

Broken down into practical pointers and step-by-step instructions, the IT Service Excellence Tool Kit delivers expert advice for technology solution providers. Get your free copy now.

KenCOO/Senior Systems AnalystCommented:
Vasil- you posted the same link I did in my first post. But he is migrating from Exchange 2003 and you cannot do a cutover migration with Exchange 2003. He has to follow the steps for a staged migration as described in my second post.
0
Vasil Michev (MVP)Commented:
What do you mean he cannot do cutover with E2003? It's supported.
0
KenCOO/Senior Systems AnalystCommented:
Ok, but the second paragraph, second sentence of the link you posted states- "You can only migrate Exchange 2003 and Exchange 2007 mailboxes using a staged migration."

That is also the same thing I learned when I received my Office 365 certification. If you know that it is now supported then I am going to back out of this solution.
0
Vasil Michev (MVP)Commented:
It means that you cannot use staged migration for E2010/E2013 :)
0
KenCOO/Senior Systems AnalystCommented:
Thanks Vasil. I misread and learned something new today.

Hope your suggestion regarding the DENY permissions solves this issue.
0
MJCSAuthor Commented:
I appreciate both of your assistance with this. Vasil was right. Although i used the Administrator account, there was an issue with permissions. I gave domain admin rights to another account and then went through and gave access rights to each mail account.

Note: There was several old accounts that were disabled but that I didn't want to delete at this point. The cutover migration insisted on all users and security groups (at least by default). By not giving mailbox access rights to those users, it just failed to migrate and then continued on to the next.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Exchange

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.