Microsoft Exchange Server 2003 Deployment Guide- P61 pot

For information about specific Migration Wizard command-line reference, control file parameters, and sample control files, see Batch File and How to Enable Cross-Forest SMTP Authenticati

[Time] Failed to migrate mailbox for Pilar Ackerman

[linefeed]

[Time] Exchange Migration Wizard completed

[linefeed]

Note:

The time-stamp on the log file is the current date/time format, based

on the current local settings of the computer running the Migration

Wizard

Running Exchange Migration Wizard using a Batch (Control) File

Using a control file and a combination of switches, you can configure Migration Wizard (Mailmig.exe), to run as a batch process For

information about specific Migration Wizard command-line reference, control file parameters, and sample control files, see Batch File and

How to Enable Cross-Forest SMTP Authentication

To enable cross-forest SMTP authentication, in each forest you must create connectors that use an authenticated account from the other

forest

Before You Begin

Before you perform the procedures in this topic, read the following

scenario Consider a two-forest environment for A Datum Corporation and Fabrikam, Inc Both of these forests are single domain forests that use the domains of adatum.com and fabrikam.com, respectively To allow cross-forest mail collaboration, all users in the Adatum forest are

represented as contacts in the Fabrikam forest's Active Directory

Likewise, all users in the Fabrikam forest are represented as contacts in the Adatum forest's Active Directory

Procedure

To enable cross-forest SMTP authentication

1 Create an account in the Fabrikam forest that has Send As

permissions For all users in the Adatum forest, a contact also exists in the Fabrikam forest Therefore, this account allows Adatum users to send authenticated e-mail messages Configure these permissions on all Exchange Servers that will accept incoming e-mail messages from Adatum For detailed steps, see How to Create a User Account in

2 On an Exchange Server in the Adatum forest, create a connector that requires authentication by using this account to send outbound e-mail messages For detailed steps, see How to Create a Connector

3 Repeat steps 1 and 2 to set up cross-forest authentication from the Fabrikam forest to the Adatum forest To set up cross-forest

authentication from the Fabrikam forest to the Adatum forest, you must create the account in Adatum, and you must create the connector in Fabrikam

For More Information

For more information, see the following topics:

 "Planning Your Intelligent Message Filter Deployment" in the Microsoft

 "Deployment Scenarios for Internet Connectivity" in the Exchange

How to Create a User Account in Another Forest with Send As

Permissions

This topic explains how to create a user account in another forest with Send As permissions This topic is the first step of a procedure to enable cross-forest authentication

Procedure

To create a user account in another forest with Send As

permissions

1 In the destination forest, which is the forest to which you are

connecting, create a user account in Active Directory Users and

Computers This account must be an active account, but it does not require the following permissions:

 Log on locally

 Log on through terminal server

2 On each Exchange Server that will accept incoming connections from the connecting forest, configure Send As permissions for this account

Note:

Be careful when creating the password policy If you set the

password to expire, ensure that you have a policy in place that

changes the password before its expiration date If the password for this account expires, cross-forest authentication will fail

a Click Start, point to All Programs, point to Microsoft

Exchange, and then click System Manager

b In Exchange System Manager, in the console tree, expand

Servers, right-click an Exchange server that will accept incoming

connections from the connecting forest, and then click Properties

c In Server NameProperties, on the Security tab, click Add

d In Select Users, Computers, or Groups, add the account that you just created, and then click OK

e On the Security tab, under Group or user names, select the

account

f Under Permissions, next to Send As, select the Allowcheck

box

Allowing the Send As permission

For More Information

For more information, see How to Enable Cross-Forest SMTP

How to Create a Connector and Require Authentication for Cross-Forest Authentication

This topic explains how to create a user account in another forest with Send As permissions This topic is the second step of a procedure to enable cross-forest authentication

Before You Begin

Before you perform the procedures in this topic, read the following

scenario Consider a two-forest environment for A Datum Corporation and Fabrikam, Inc Both of these forests are single domain forests using the domains of adatum.com and fabrikam.com, respectively To allow cross-forest mail collaboration, all users in the Adatum forest are

represented as contacts in the Fabrikam forest's Active Directory

Likewise, all users in the Fabrikam forest are represented as contacts in Adatum forest's Active Directory

This procedure describes how to create a connector on an Exchange Server in the Adatum forest

To successfully complete this procedure in this topic, confirm that you have created an account with the proper permissions in the destination forest

Procedure

To create a connector and require authentication for cross-forest authentication

1 Click Start, point to All Programs, point to Microsoft Exchange, and then click System Manager

2 In the console tree, right-click Connectors, point to New, and then click SMTP Connector

3 On the General tab, in the Namebox, type a name for the

connector

4 Click Forward all mail through this connector to the following

smart hosts, and then type the fully qualified domain name or IP

address of the receiving bridgehead server

5 Click Add to select a local bridgehead server and SMTP virtual

server to host the connector

The General tab in an SMTP virtual server's Properties dialog box

6 On the Address Space tab, click Add, select SMTP, and then click

OK

7 In Internet Address Space Properties, type the domain of the forest to which you want to connect, and then click OK In this