Migration - Create An Exmerge User

Description

The following article contains step-by-step instructions for creating an Exmerge user. This user is then able to connect to all mailboxes during a migration.

Requirements

  • Exchange 2003/2007/2010

The Process

Exchange 2003

Assign Microsoft Exchange Server permissions at the Administrative Group level:

  • Navigate to Start > Programs > Microsoft Exchange > System Manager.
  • Select Administrative Groups. If Administrative Groups is not visible, right-click the Exchange domain and select Properties. Enable "Display Administrative Groups". You will be asked to restart the Exchange System Manager.
  • Right-click First Administrative Group and select Delegate Control.
  • In the Exchange Administration Delegation Wizard, click Next, and then click Add.
  • Click Browse and then select the ExMerge account, click OK.
  • In the Role drop-down list in the Delegate Control window, select Exchange View Only Administrator.
  • Click OK to add the ExMerge account to the Users and Groups list.
  • Click Next, and then click Finish.

Assign Microsoft Exchange Server permissions at the Microsoft Exchange Server level:

  • Navigate to Start > Programs > Microsoft Exchange > System Manager.
  • Select Administrative Groups > First Administrative Group > Servers.
  • Right-click the Microsoft Exchange Server name and then click Properties.
  • On the Security tab, select the ExMerge account.
  • Select the following permissions from the Permissions list:
  • Administer Information Store
  • Receive As
  • Click the Advanced button.
  • Verify that the Select the Allow inheritable permissions from parent to propagate to this object and all child objects option isselected and click OK.
  • Repeat the preceding steps for each Microsoft Exchange Server that hosts mailboxes within the routing group.

Exchange 2007

Assign Microsoft Exchange Server permissions at the Administrative Group level:

  • To set an Exchange View Only Administrator role, do the following:
  • Navigate to Start > Programs > Microsoft Exchange Server 2007 > Exchange Management Shell.
  • In the command prompt window, type the following and then press Enter
add-exchangeadministrator <ExMerge> -role   ViewOnlyAdmin


where <ExMerge> is the name of the ExMerge account.

  • To check an Exchange View Only Administrator role, do the following:
  • Click Start > Programs > Microsoft Exchange Server 2007 > Exchange Management Shell.
  • In the command prompt window, type the following and then press Enter:
get-exchangeadministrator | Format-List

 

verify that the ExMerge account has the ViewOnlyAdmin role.

Set Receive As and Administer Information Store permissions:

Go to Start > Programs > Microsoft Exchange Server 2007 > Exchange Management Shell.

Type the following line, and then press Enter:

get-mailboxserver <Exchange2007>   | add-adpermission -user <ExMerge> -accessrights GenericRead,   GenericWrite -extendedrights Receive-As, ms-Exch-Store-Admin






Where <Exchange2007> is the name of the Microsoft Exchange 2007 Server and <ExMerge> is the name of the ExMerge account.

  • If inheritance to the individual mail stores is not enabled, to set the Receive As and Administer information store permissions at the store level, complete the following steps from the Microsoft Exchange management shell:
get-mailboxdatabase '<Exchange2007>\First   Storage Group\Mailbox Database' | add-adpermission -user <ExMerge>   -accessrights GenericRead, GenericWrite -extendedrights Receive-As,   ms-Exch-Store-Admin



Note: First Storage Group\Mailbox Database is the default mailbox name within Microsoft Exchange 2007.

  • If inheritance to the individual mail stores is not enabled on a custom mailbox database, to set the Receive As and Administer information store permissions at the store level, complete the following steps from the Microsoft Exchange management shell:
Add-ADPermission –identity "<custom database   name>" –user "<ExMerge>"   -accessrights GenericRead, GenericWrite -extendedrights Receive-As,   ms-Exch-Store-Admin



Verify the Receive As and Administer Information Store permissions:

  • Navigate to Start > Programs > Microsoft Exchange Server 2007 > Exchange Management Shell.
  • In the command prompt window, type the following line and press Enter:
get-mailboxserver <Exchange2007> |   get-ADpermission -user <ExMerge> | Format-List

 

Verify the Receive As and Administer Information Store permissions at the mailbox store level:

  • Navigate to Start > Programs > Microsoft Exchange Server 2007 > Exchange Management Shell.
  • In the command prompt window, type the following and press Enter
get-mailboxdatabase   <Exchange2007>\<dbname> | get-ADpermission -user <ExMerge>   | Format-List



Exchange 2010

Assign Microsoft Exchange Server permissions at the Administrative Group level:

  • Navigate to Start > Programs > Microsoft Exchange Server 2010 > Exchange Management Shell.
  • In the command prompt window, type the following command and then press Enter
Add-RoleGroupMember "View-Only Organization   Management" -Member "ExMerge"



Note: If you create a new mailbox database for Microsoft Exchange, you will need to repeat step 2 for Microsoft Exchange 2010.

Set Receive As and Administer Information Store permissions:

  • Navigate to Start > Programs > Microsoft Exchange Server 2010 > Exchange Management Shell.
  • In the command prompt window, type the following line and then press Enter
Get-MailboxDatabase | Add-ADPermission -User   "ExMerge" -AccessRights ExtendedRight -ExtendedRights Receive-As,   ms-Exch-Store-Admin




Note: If you create a new mailbox database for Microsoft Exchange you will need to repeat this step.

Verify the Receive As and Administer Information Store permissions:

Navigate to Start > Programs > Microsoft Exchange Server 2010 > Exchange Management Shell. I

In the command prompt window, type the following line and press Enter:

get-mailboxserver <Exchange2007> |   get-ADpermission -user <ExMerge> | Format-List



Note: For Microsoft Exchange 5.5 the ExMerge account requires the Service Account Admin permissions on the Site container and Configuration container.

Full access permissions on Exchange 2007 and Exchange 2010/2013/2016

Alternatively, for Exchange 2007 and Exchange 2010/2013/2016 you can use the following instructions to give a user Full Access permissions for all mailboxes:

  • Navigate to Start > Programs > Microsoft Exchange Server > Exchange Management Shell.
  • In the command prompt window, type the following command and then press Enter
get-mailbox -database <databasename> |   add-mailboxpermission -user <exmerge> -accessrights fullaccess   -inheritancetype all



Where <databasename> is the name of mailbox database and <exmerge> is the name of the ExMerge account. 

Note: If you have several mailbox databases for Microsoft Exchange you will need to repeat the command for each database.