HOL124: Migrating from Exchange Server 5.5/Windows NT 4 …download.microsoft.com/documents/australia/teched2005/hol/HOL1… · from Windows NT 4.0 and Exchange Server 5.5 to Microsoft

HOL124: Migrating from Exchange Server 5.5/Windows NT 4 Server to Exchange Server 2003/Windows Server 2003--Part 1

Objectives After completing this lab, you will be able to:

Migrate user accounts from a Microsoft® Windows NT® 4.0 domain to Active Directory®.

Configure coexistence between Exchange Server 5.5 and Active Directory in preparation to install an Exchange Server 2003 server into the Exchange Server 5.5 site

Move mailboxes and other services

Because this lab focuses on the concepts taught in the module, it may not comply with Microsoft security recommendations. Note

Scenario

Estimated time to complete this lab: 60 minutes

2 HOL124: Migrating from Exchange Server 5.5/Windows NT 4 Server to Exchange Server 2003/Windows Server 2003--Part 1

Deployment Lab Overview HOL124, HOL125 and HOL126 make up the deployment lab sequence. These three one-hour deployment labs walk you through the process of migrating from Windows NT 4.0 and Exchange Server 5.5 to Microsoft Windows Server™ 2003 and Exchange Server 2003 using the Move Mailbox approach to migration. While this process has been simplified for the lab environment, the steps here are very similar to what is done in a production environment.

Migrate Windows NT 4.0 users from Windows NT 4.0 to Windows Server 2003 using the Active Directory Migration Tool (ADMT)

Verify the Exchange Server 5.5 directory and Active Directory are ready for coexistence

Prepare the Active Directory forest and domain for Exchange Server 2003 Install the Active Directory Connector (ADC) and configuring Connection

Agreements to synchronize the Exchange Server 5.5 directory with Active Directory

Install Exchange Server 2003 Move Mailboxes from the Exchange Server 5.5 server to the Exchange 2003

back-end server Migrate Internet SMTP connectivity from Exchange Server 5.5 to Exchange

Server 2003 Migrate Public Folders from Exchange Server 5.5 to Exchange Server 2003 Retire the last Exchange Server 5.5 server

A process very similar to this is used to migrate to from Exchange Server 5.5 to Exchange 2000. However, Exchange Server 2003 has simplified the process and made it more reliable with the Exchange Server Deployment Tools. These labs use the Exchange Server Deployment Tools to walk through the migration process.

HOL124 Overview In this lab you will migrate user accounts from a Windows NT 4.0 domain to Active Directory and then configure coexistence between Exchange Server 5.5 and Active Directory in preparation to install an Exchange Server 2003 server into the Exchange Server 5.5 site and move mailboxes and other services.

This process above has been streamlined to minimize the time required to perform the lab by pre-configuring and installing software. The steps performed for you have been left in the lab but grayed out. Do not perform these procedures. They are for reference only.

HOL124: Migrating from Exchange Server 5.5/Windows NT 4 Server to Exchange Server 2003/Windows Server 2003--Part 1 3

Completed Exercise Creating a Trust Between a Windows NT Server 4.0 Domain and a Windows Server 2003 Domain

In this exercise, you will start the virtual machines required to create the trust, and then you will create a trust between the Windows NT Server 4.0 domain and the Windows Server 2003 domain. A trust is required to migrate Windows NT 4.0 user accounts to Active Directory by using the Active Directory Migration Tool (ADMT).

Start Microsoft Virtual PC 2004 and start VPCs

1. On the host computer, click Start, point to Programs, and then click Microsoft Virtual PC.

2. Click HOL051-AD01 and then click Start. 3. Click HOL051-NTEX01 and then click Start. 4. Verify that all VPCs start with no error messages. If error messages appear,

consult a lab proctor. 5. To log on to a VPC, press RIGHT-ALT+DELETE.

Create a trust between a Windows NT Server 4.0 domain and Active Directory

1. Log on to NTEX01 as Administrator with a password of MSEvent.123 2. To start User Manager for Domains, click Start, point to Programs, click

Administrative Tools (Common), and then click User Manager for Domains.

3. In the User Manager for Domains window, click Policies, and then click Trust Relationships.

4. In the Trust Relationships dialog box, click Add to add a Trusted Domain.

5. In the Add Trusted Domains box, type NWTRADERS01 6. In the Password box, type MSEvent.123 7. When a dialog box appears warning you that the trust could not be verified,

click OK. 8. In the Trust Relationships dialog box, click Add to add a Trusting

Domain. 9. In the Add Trusting Domain box, type NWTRADERS01 10. In the Initial Password and Confirm Password boxes, type MSEvent.123

and then click OK. 11. Click Close to close the Trust Relationship window. 12. Close User Manager for Domains.


Create a trust between Windows Server 2003 and Active Directory

1. Log on to AD01 as Administrator with a password of MSEvent.123 2. To start Active Directory Domains and Trusts, click Start, point to All

Programs, click Administrative Tools, and then click Active Directory Domains and Trusts.

3. Right-click nwtraders01.msft and then click Properties. 4. On the nwtraders01.msft Properties page, click the Trusts tab, and then

click New Trust. 5. When the New Trust Wizard starts, click Next. 6. In the Trust Name window, type a name of NWTRADERS and then click

Next. 7. In the Direction of Trust window, select Two-way, and then click Next. 8. In the Ongoing Trust Authentication Level window, select Domain-wide

authentication, and then click Next. 9. In the Trust Password window, in the Trust password and Confirm trust

password boxes, type MSEvent.123 and then click Next. 10. In the Trust Selections Complete window, verify that the settings are

correct, and then click Next. 11. In the Trust Creation Complete window, verify that the trust was created

successfully, and then click Next. 12. In the Confirm Outgoing Trust window, select Yes, confirm the outgoing

trust, and then click Next. 13. In the Confirm Incoming Trust window, select Yes, confirm the incoming

trust. 14. In the User name box, type nwtraders\administrator 15. In the Password box, type MSEvent.123 and then click Next. 16. In the Completing the New Trust Wizard window, verify that the trust was

successfully created and confirmed, and then click Finish. 17. Click OK to acknowledge the SID filtering message. 18. On the nwtraders01.msft Properties page, click OK. 19. Close the Active Directory Domains and Trusts windows.

Add NWTRADERS01\Administrator to the Windows NT Server 4.0 Administrators group

1. On NTEX01, on the Administrative Tools (Common) menu, click User Manager for Domains.

2. In the Groups window, double-click Administrators. 3. In the Local Group Properties window, click Add. 4. In the Add Users and Groups window, in the List Names From pull down

menu, select NWTRADERS01. 5. In the Names select box, select Administrator, click Add, and then click

OK. 6. In the Local Group Properties window, click OK, and then close User

Manager for Domains.


Completed Exercise Installing ADMT and Starting Outlook Express

In this exercise, you will install ADMT on virtual machine AD01, and then start Microsoft Outlook® Express. With Outlook Express you will confirm that you can access a user's mailbox on the Microsoft Exchange version 5.5 server as a user in the Windows NT 4.0 server.

Install ADMT

1. Switch to AD01. 2. Click Start, and then click Run. 3. In the Run dialog box, in the Open box, type

c:\win2003\i386\admt\admigration.msi and then click OK. 4. When the Active Directory Migration Tool Setup Wizard starts, click Next. 5. Click I accept the License Agreement, and then click Next. 6. To accept the default installation folder, click Next. 7. To begin the installation, click Next. 8. When Setup is complete, click Finish.

Start Outlook Express

1. Start CLIENT01.

The Client01 VPC is not included with the three one-hour deployment labs because these exercises have been completed. Note

2. Log on to the NWTRADERS domain as User1 with a password of MSEvent.123

3. To start Outlook Express, click Start, point to All Programs, and then click Outlook Express.

4. If prompted to make Outlook Express your default mail client, click No. 5. After Outlook Express starts, confirm that you can view User1’s e-mail.


Exercise 1 Starting Virtual PCs

In this exercise, you will start the Virtual PCs (VPCs) required for this lab.

Start Microsoft Virtual PC 2004 and start VPCs

1. On the host computer, click Start, point to Programs, and then click Microsoft Virtual PC.

2. Click HOL051-AD01 and then click Start. 3. Click HOL051-NTEX01 and then click Start. 4. Verify that all VPCs start with no error messages. If error messages appear,

consult a lab proctor. 5. To log on to a VPC, press RIGHT-ALT+DELETE.

Exercise 1 Migrating User Accounts Using ADMT

In this exercise, you will migrate Windows NT Server 4.0 user accounts from the Windows NT Server 4.0 domain to the Windows Server 2003 domain by using ADMT.

Migrate user accounts by using ADMT

1. Switch to AD01 and log on as nwtraders01\administrator with a password of MSEvent.123

2. Click Start the point to Programs, then point to Administrative Tools and then click Active Directory Migration Tool. ADMT starts.

3. In the Active Directory Migration Tool window, in the left pane, right-click Active Directory Migration Tool, and then click User Account Migration Wizard.

4. When the User Account Migration Wizard appears, click Next. 5. On the Test or Make Changes page, click Migrate now, and then click

Next. 6. On the Domain Selection page, in the Source Domain list, select

nwtraders. 7. In the Target Domain list, select nwtraders01, and then click Next. 8. On the User Selection page, click Add. 9. In the Select Users dialog box, click Advanced. 10. In the Select Users dialog box, click Find Now. 11. In the Search Results box, use the SHIFT key to select all user accounts

that have user names that begin with user (User0 through User50), and then click OK.


12. To close the Select Users dialog box, click OK, and then, on the User

Selection page, click Next. 13. On the Organizational Unit Selection page, click Browse. 14. In the Browse for Container dialog box, under Select a target container,

click Migrated Objects, and then click OK.

The OU Migrated Objects was created for this lab and is not a default container. Note

1. Verify that the Target OU box contains LDAP://nwtraders01.msft/OU=Migrated Objects,DC=nwtraders01, DC=msft and then click Next.

2. On the Password Options page, click Same as user name, and then click Next.

3. Click OK when warned about the minimum password length. 4. On the Account Transition Options page, verify that Enable target

accounts is selected. 5. Select the Migrate user SIDs to target domain check box, and then click

Next. 6. If prompted to enable auditing on the source domain, click Yes. 7. If prompted to enable auditing on the target domain, click Yes. 8. If prompted to create a local group, click Yes. 9. If prompted to add a TcpipClientSupport registry key, click Yes. 10. If prompted to reboot the primary domain controller (PDC) to ensure that

changes take effect, click Yes. 11. After the PDC (NTEX01) restarts, click OK. 12. On the User Account page, type the following and then click Next:

a. In the User name box: Administrator b. In the Password box: MSEvent.123 c. In the Domain box: NWTRADERS

The account credentials that you use here must have administrative rights in the source domain. Important

13. On the User Options page, to accept all default settings, click Next. 14. On the Naming Conflicts page, to accept all default settings, click Next.


15. On the Completing the User Account Migration Wizard page, in the

Task description box, verify that the migration settings are correct, and then click Finish. The Migration Progress dialog box appears, showing the status of the migration operation.

16. When the status is Completed, verify that no errors were encountered during the operation.

Important If errors occur, contact a lab proctor.

17. To close the Migration Progress dialog box and the User Account Migration Wizard, click Close.


Exercise 2 Migrating Exchange Server 5.5 Mailbox ACLs Using ADMT

In this exercise, you will migrate Exchange Server 5.5 mailbox access control lists (ACLs) by using ADMT. This changes the Primary Windows NT account for each selected mailbox to the Active Directory account.

Migrate Exchange Server 5.5 security information by using ADMT

1. In ADMT, in the left pane, right-click Active Directory Migration Tool, and then click Exchange Directory Migration Wizard.

2. When the Exchange Directory Migration Wizard appears, click Next. 3. On the Test or Make Changes page, click Migrate now, and then click

Next. 4. On the Domain Selection page, in the Source Domain list, select

NWTRADERS. 5. In the Target Domain list, select nwtraders01.msft, and then click Next. 6. In the Security Translation Options window, click Add, and then click

Next. 7. In the Exchange Server window, type NTEX01 and then click Next. 8. In the User Account window, in the User Name box, type the following and

then click Next: a. In the User name box: Administrator b. In the Password box: MSEvent.123 c. In the Domain box: NWTRADERS

9. Click Finish to start the migration. The Migration Progress dialog box appears, showing the status of the migration operation.

10. When the status is Completed, verify that no errors were encountered during the operation.

11. To close the Migration Progress dialog box and the User Account Migration Wizard, click Close.

12. Close the Active Directory Migration Tool.

Reset the passwords created during the migration process

1. Open Active Directory Users and Computers, and then expand nwtraders01.msft.

2. Click Migrated Objects. 3. In the right pane, right-click User1, and then click Reset Password… 4. In the New password and Confirm password boxes, type MSEvent.123,

click OK and then click OK. 5. In the right pane, right-click User2, and then click Reset Password…. 6. In the New password and Confirm password boxes, type MSEvent.123,

click OK and then click OK. 7. Close Active Directory Users and Computers.


Exercise 3 Verifying a Successful User Account Migration

In this exercise, you will use ADSI Edit to verify that the security identifier (SID) was copied from the Windows NT account into the sIDHistory attribute of the new Active Directory user. This attribute is used when a migrated Active Directory user accesses a Windows NT Server 4.0 resource, such as an Exchange Server 5.5 mailbox. You will then use Outlook Express to verify that the migrated user can access his or her Exchange Server 5.5 mailbox.

Review changes made to the Exchange Server 5.5 directory

1. Switch to NTEX01 and log on as nwtraders\Administrator with a password of MSEvent.123

2. Click Start, point to Programs, point to Microsoft Exchange, and then click Microsoft Exchange Administrator.

3. After the Exchange Administrator starts, in the left pane, expand Redmond, and then click Recipients.

4. In the right pane, find mailbox User1, and then double-click it to open Properties.

5. Confirm that the Primary Windows NT Account has been changed to NWTRADERS01\User1.

6. Click Cancel to close User1 mailbox properties. 7. Close Microsoft Exchange Administrator.

Access User1 mailbox using the NWTRADERS\User1 and NWTRADERS01\User1 accounts

1. Switch to AD01 2. Click Start, point to Programs and then click Outlook Express.

Note Outlook Express has been configured for nwtraders\user1.

3. In Outlook Express, send test messages to [email protected] and [email protected]. Outlook Express takes a few moments to synchronize with Exchange 5.5 Server before verifying that the message was received.

4. Click the Send/Recv button. 5. Click Tools and then click Accounts 6. On the Mail tab and click Properties 7. Click the Servers tab 8. Under Incoming Mail Server, type a user name of NWTRADERS01\User1

and a password of MSEvent.123, then click OK and then click Close. 9. Click Send/Recv and verify that the NWTRADERS01\User1 account can

access the User1 mailbox on Exchange Server 5.5. 10. Close Outlook Express.


Completed Exercise Configuring Permissions on Exchange Server 5.5

In this exercise, you will grant permissions to the Microsoft Windows Server™ 2003 domain administrator on the Exchange Server 5.5 directory. These permissions are applied on the Organization, Site, and Configuration containers of the Exchange Server 5.5 directory.

Grant permissions to the Windows Server 2003 domain administrator on the Exchange Server 5.5 organization

1. Switch to NTEX01. 2. Click Start, point to Programs, point to Microsoft Exchange, and then

click Microsoft Exchange Administrator. 3. In the left pane of Microsoft Exchange Administrator, click

NWTRADERS, click File, and then click Properties. 4. Click the Permissions tab. 5. Click Add. 6. In the List Names From box, select NWTRADERS01. 7. In the Names box, select Administrator, click Add, and then click OK. 8. In the Roles box, select Permissions Admin. 9. Click OK to close NWTRADERS properties.

Grant permissions to the Windows Server 2003 domain administrator on the Exchange Server 5.5 site

1. In the left pane of Microsoft Exchange Administrator, click REDMOND, click File, and then click Properties.

2. Click the Permissions tab. 3. Click Add. 4. In the List Names From box, select NWTRADERS01. 5. In the Names box, select Administrator, click Add, and then click OK. 6. In the Roles box, select Permissions Admin. 7. Click OK to close REDMOND properties.

Grant permissions to the Windows Server 2003 domain administrator on the Exchange Server 5.5 configuration container

1. In the left pane of Microsoft Exchange Administrator, click Configuration, click File, and then click Properties.

2. Click the Permissions tab. 3. Click Add. 4. In the List Names From box, select NWTRADERS01. 5. In the Names box, select Administrator, click Add, and then click OK. 6. In the Roles box, select Permissions Admin. 7. Click OK to close Configuration properties.


Exercise 4 Planning Coexistence with Exchange 5.5 Using the Exchange Server Deployment Tools

In this exercise, you will use the Exchange Deployment Wizard to prepare the Exchange Server 5.5 directory. You will run the Exchange Deployment Tool on AD01, which will eventually become the first Exchange Server 2003 in the Exchange 5.5 organization. Many of the steps in the Exchange Deployment Tool do not require action; they are for reference only. When using this tool in a production environment, carefully follow each step and confirm that all prerequisites are in place before proceeding to the next step.

Start the Exchange Deployment Tool

1. Switch to AD01 2. Click Start, and then click Run. 3. In the Open box type C:\ex2003\Support\ExDeploy and then click OK. 4. Double-click exdeploy.hta. 5. On the Welcome to Exchange Server Deployment Tools page, review the

information, and then click Deploy the first Exchange 2003 server. 6. Review the options when deploying the first Exchange server. 7. Click Coexistence with Exchange 5.5.

Completed Procedure - Performing Phase 1, Step 2 - Installing IIS

1. On the Exchange Server Deployment Tool page, review Step 1 of Phase 1. 2. Because Internet Information Services (IIS) is not installed by default on

Windows Server 2003, click Start, and then click Control Panel. 3. Click Add or Remove Programs. 4. Click Add/Remove Windows Components. 5. In the Add/Remove Windows Components window, click Application

Server, and then click Details. 6. Select ASP.NET. 7. Select Internet Information Services (IIS), and then click Details. 8. Select NNTP Service. 9. Select SMTP Service. 10. Click OK. 11. Click OK again, and then click Next. 12. If prompted, type the source path: C:\win2003\I386 and then click OK. 13. When the wizard is complete, click Finish. 14. Close Add or Remove Programs.


Perform Phase 1, Step 3 of the Exchange Deployment Tool

1. In Step 3, review the process information. 2. In the Exchange Server 5.5 box, type NTEX01 3. In the Global catalog server box, type AD01 4. In Log file path, type C:\Windows\Temp 5. Click Run DSScopeScan now.

The Windows 2003 support tools must be installed on the server so that DSScopeScan can run the NetDiag support tool. Note


1. In Exchange Deployment Tools, in Phase 1, Step 5 (step 4 is complete), click DCDiag Tool, and review the syntax for DCDiag.

2. Click Back. 3. Open a command prompt, then type dcdiag /s:ad01

/f:c:\windows\temp\dcdiag.log and then press ENTER. 4. Use Windows Explorer to open C:\Windows\Temp. 5. In the C:\windows\temp directory, open the dcdiag.log log file, and then

look for any errors. 6. If any errors are reported, switch to the Exchange Server Deployment Tools

window, and review the possible corrective actions. 7. Close dcdiag.log.


1. In Exchange Deployment Tools, in Phase 1, Step 6, click NetDiag Tool and review the syntax for NetDiag.

2. Click Back. 3. Switch to the command prompt, then type cd \windows\temp and then

press ENTER. 4. Then, at the command prompt, type: netdiag /l and then press ENTER. 5. Close the command prompt. 6. Switch to C:\Windows\Temp, open the netdiag.log log file, and then look

for any errors. 7. If any errors are reported, switch to the Exchange Server Deployment Tools

window, and review the possible corrective actions. 8. Close netdiag.log.


Review the Exchange Deployment Tool log files

1. Switch to C:\Windows\Temp, double-click the ExDeploy.log log file, and then look for any errors.

2. If any errors are reported, switch to the Exchange Server Deployment Tools window, and review the possible corrective actions.

3. Close ExDeploy.log. 4. From C:\Windows\Temp, open the vercheck.log log file, and confirm that

you have the proper software versions installed. 5. Close vercheck.log. 6. Switch to the Exchange Server Deployment Tools, and then click Next.

Configure permissions on the Exchange 5.5 administrator mailbox

1. Switch to NTEX01 and open Microsoft Exchange Administrator. 2. In Microsoft Exchange Administrator, click the Recipients container. 3. Double-click the Administrator mailbox. 4. Click Primary Windows NT Account. 5. Verify that Select an existing Windows NT account is selected, and then

click OK. 6. In the Add User or Group window, in the List Names From box, select

NWTraders01. 7. In the Names box, double-click Administrator, and then click OK. 8. Click OK to close Administrator mailbox properties.

This procedure is necessary since the NWTRADERS administrator account was migrated to NWTRADERS01 in the previous exercises. This account was not migrated because an Administrator account already exists for NWTRADERS01. Because of this, the Administrator mailbox is re-homed with the NWTRADERS01 administrator account.

Note


Completed Exercise Running Exchange Server 2003 ForestPrep for the Active Directory Forest

In this exercise, you will run the Exchange Server 2003 ForestPrep tool to make modifications to the Active Directory forest necessary for Exchange Server 2003.

Perform Phase 2, Step 1 - Running Exchange Server 2003 setup using ForestPrep

1. Switch to the Exchange Server Deployment Tools on AD01. 2. For Step 1, type c:\ex2003\setup\i386\setup.exe for Specify a path to

Exchange Setup. 3. Click Run Forest Prep now. 4. On the Welcome to the Microsoft Exchange Server 2003 Installation

Wizard page, click Next. 5. Click I agree, and then click Next to accept the license agreement. 6. Click Next to accept the pre-populated Product Key. 7. On the Component Selection page, in the Action column, verify that

ForestPrep is selected, and then click Next. 8. Verify that the default Exchange Server Administrator is

NWTRADERS01\Administrator, and then click Next. 9. When Setup is complete, click Finish.


Completed Exercise Running Exchange Server 2003 DomainPrep for the Active Directory Domain

In this exercise, you will run the Exchange Server 2003 DomainPrep tool to make modifications to the Active Directory domain necessary for Exchange Server 2003.

Perform Phase 2, Step 2 - Running Exchange Server 2003 setup using DomainPrep

1. Switch to the Exchange Server Deployment Tools on AD01. 2. For Step 2, type c:\ex2003\setup\i386\setup.exe for Specify a path to

Exchange Setup. 3. Click Run DomainPrep now. 4. On the Welcome to the Microsoft Exchange Server 2003 Installation

Wizard page, click Next. 5. Click I agree, and then click Next to accept the license agreement. 6. Click Next to accept the pre-populated Product Key. 7. On the Component Selection page, in the Action column, verify that

DomainPrep is selected, and then click Next. 8. Click OK to acknowledge that nwtraders01.msft has been identified as an

insecure domain. 9. On the Completing the Microsoft Exchange Server 2003 Installation

Wizard page, click Finish.


Exercise 5 Confirming That Active Directory Is Prepared for Exchange Server 2003 Using OrgPrepCheck

In this exercise, you will run the OrgPrepCheck tool to check Active Directory for the proper schema extensions, domains, security descriptors, and domain controller permissions needed to install Exchange Server 2003.

Perform Phase 2, Step 3 - Validating schema extensions, domains, and security descriptors

1. Switch to the Exchange Server Deployment Tools on AD01. Steps 1 and 2 of the running ForestPrep and DomainPrep have been completed.

2. In Step 3, review the OrgPrepCheck instructions. 3. Verify that the server names are correct, and then click Run

OrgPrepCheck now.

This tool will check every domain controller in the local domain to determine whether the Manage auditing and security logs privilege granted to the Exchange Enterprise Servers group by DomainPrep has replicated to that domain controller. In our scenario, we only have one domain controller, so replication is not an issue

Note

Perform Phase 2, Step 4 - Follow-up on results of OrgPrepCheck

1. On AD01, switch to C:\Windows\Temp. 2. Double-click ExDeploy.log. 3. Scroll to the bottom of the log file, and review any warnings or errors

generated by OrgPrepCheck. 4. Close ExDeploy.log. 5. Switch to C:\Windows\Temp, and double-click ExDeploy-polcheck.log. 6. Review the log file for any warnings or errors, and then close ExDeploy-

polcheck.log.


Completed Exercise Installing the Active Directory Connector

In this exercise, you will prepare for the Active Directory Connector (ADC) setup.

Perform Phase 2, Step 5 – Installing the ADC

1. In the Microsoft Exchange Server Deployment Tools, Phase 2, Step 5, review the Installing ADC instructions.

2. Switch to AD01.

This lab will install the ADC on AD01, not on AD01, where the Exchange Deployment Tool is being run. Note

3. Click Start, and then click Run. 4. In the Run dialog box, in the Open box, type

\\AD01\C$\ex2003\adc\I386\Setup.exe and then click OK. 5. Click Open to run the application. 6. In the Microsoft Active Directory Connector Setup Wizard, click Next. 7. In the End-User License Agreement dialog box, select I accept the terms

of the license agreement, and then click Next. 8. On the Component Selection page, select the Microsoft Active Directory

Connector Service component check box, and then select the Microsoft Active Directory Connector Management components check box.

9. Click Next. 10. To accept the default installation location, click Next. 11. Verify that the Account name is NWTRADERS01\Administrator.

Do not use the administrator account as the ADC service account if the ADC will be in place for any length of time. Note

12. In the Account password box, type MSEvent.123 and then click Next. ADC installs.

Several Active Directory object changes must be made during installation. This may take several minutes. Note

13. After Setup is complete, click Finish.


Exercise 6 Configuring ADC Using ADC Tools

In this exercise, you will configure the ADC Manager to communicate with Active Directory and the Exchange Server 5.5 directory. During this process, you will identify and designate Resource mailboxes in Exchange Server 5.5.

Perform Phase 2, Step 6 - Running ADC Tools

1. On AD01, click Start, point to Programs, point to Administrative Tools, and then click Active Directory Connector.

2. In the left pane, click ADC Tools. 3. In the right pane, in the Tool Settings box, click Set. 4. In the Tools Settings window, type NTEX01 5. Click Browse. move to C:\Windows\Temp, and then click OK. 6. Click OK to close the Tool Settings window. 7. In the Data Collection box, click Run to collect information about your

Exchange 5.5 sites. 8. In the Information box, review the text, and note that the resource

mailboxes are identified in Pass 1 of 4. 9. In the Resource Mailbox Wizard box, click Run. 10. On the Resource Mailbox Wizard Welcome page, click Next. 11. In the Select Primary and Resource Mailboxes window, expand each Active

Directory user account, and then verify that the primary mailbox for each user is bold and then click Next.

12. In the Site Credentials window, click Set Credentials. 13. In the Connect As box, type Nwtraders01\Administrator 14. In the Password box, type MSEvent.123 15. In the Exchange 5.5 server to use box, select Specify a server, and then

click OK. 16. Verify that the Password State is Validated, and then click Next. 17. Review the summary settings, and then click Next. 18. Click Finish.


Manually verify that NTDSNoMatch has been set

1. Switch to NTEX01. 2. In Microsoft Exchange Administrator, click the Recipients container. 3. In the right pane, double-click Resource1. 4. Click the Custom Attributes tab, and then verify that Custom Attribute

10 is set to NTDSNoMatch. 5. Close the Resource1 properties page.

Continue Phase 2, Step 6

1. Switch to AD01. 2. In Active Directory Connection Manager, in the right pane, under Resource

Mailbox Wizard, click Verify. 3. Verify that NTDSNoMatch completed successfully.


Exercise 7 Creating a Connection Agreement

In this exercise, you will use the ADC Connection Agreement Wizard to create a Connection Agreement between Active Directory and Exchange Server 5.5.

Create Connection Agreement

1. In Active Directory Connector Services, in the Connection Agreement Wizard box, click Run.

2. On the Connection Agreement Wizard welcome page, click Next. 3. In the Staging Area window, click Browse. 4. Expand nwtraders01, select Migrated Objects, then click OK and then

click Next. 5. In the Site Connections window, verify that the Connection Agreement is

two-way, and then click Next. 6. In the Site Credentials window, click Set Credentials. 7. In the Connect As field, type nwtraders\ex55svc 8. In the Password field, type MSEvent.123 9. In the Exchange 5.5 server to use box, select Specify a server, and then

click OK. 10. Verify that the Password State is Validated, and then click Next. 11. In the Domain Credentials window, click Set Credentials. 12. In the Connect As field, type nwtraders01\administrator 13. In the Password field, type MSEvent.123 and then click OK. 14. Verify that the Password State is Validated, and then click Next. 15. In the Connection Agreement Selection window, verify that Public Folder

and Recipient connection agreement (Users:) are selected, and then click Next.

16. In the Summary window, verify that your settings are correct, and then click Next.

17. After the Connection Agreement has been created, click Finish.


Exercise 8 Verifying Synchronization

In this exercise, you will verify that the synchronization between Exchange Server 5.5 and Active Directory is working properly.

Use Active Directory Connection Services to verify that the Connection Agreement was created

1. In the Connection Agreement Wizard box, click Verify. 2. In the Information box, verify that no unreplicated objects were found. 3. In the left pane, click Active Directory Connector (AD01). 4. In the right pane, double-click Users:NWtraders01.msft. 5. Review each property tab to verify your settings, and then close the property

page. 6. In the right pane, double-click Public Folders:NWtraders01.msft. 7. Click each Property tab, verify your settings, and then close the property

page.

View synchronized data in Active Directory

1. On AD01, open Active Directory Users and Computers. 2. In the left pane, click Migrated Objects. 3. In the right pane, double-click User1. 4. In User1 properties, click the Address tab, and then confirm that the City

and State attributes have synchronized from the Exchange Server 5.5 directory.

5. In User1 properties, click the Organization tab, and then confirm that the Title and Company attributes have synchronized from the Exchange Server 5.5 directory.

6. In User1 properties, click the Exchange General tab, and then review the Home Server for User1.

7. In User1 properties, click the Member Of tab, and then review the group membership for User1 that synchronized from the Exchange Server 5.5 directory.

8. Close the User1 Properties page.

Verify resource mailbox object synchronization

1. In Active Directory Users and Computers, click View, and then click Advanced Features.

2. In the left pane, expand Migrated Objects, and then click Recipients. 3. Double-click the Resource1 resource mailbox. 4. Click the Security tab, and then review the permissions for User1.


User1 is the primary Microsoft Windows NT® account associated with Resource1. User1 is listed twice because the security identifier (SID) from both Windows NT version 4.0 and Active Directory are granted permissions on this object.

Note

5. Click the Exchange Advanced tab, and then click Mailbox Rights. 6. In the Groups or user names box, click User1. 7. In the Permissions for User1 box, confirm that User1 has Full Mailbox

Access. 8. Repeat the previous steps above for the second User1 and then click Cancel. 9. Close the Resource1 property window.

Verify DL object synchronization

1. In Active Directory Users and Computers, double-click DL1. 2. Click the Members tab, and verify that the distribution list (DL) is

populated with members. 3. Close the DL1 property window.


Exercise 9 Organizing Objects in Active Directory

In this exercise, you will organize the migrated objects in Active Directory.

Organize objects in the NWTraders OU structure

1. In the left pane of Active Directory Users and Computers, click Migrated

Objects. 2. In the right pane, select all User objects (not including the Recipient OU). 3. Click Action, and then click Move. 4. In the Move window, expand Managed Objects, then click Users and then

click OK. 5. In the left pane under Migrated Objects, click Recipients. 6. In the right pane, select all Contacts objects. 7. Click Action, and then click Move. 8. In the Move window, expand Managed Objects, then click Contacts and

then click OK. 9. In the right pane, select all Distribution Groups objects. 10. Click Action, and then click Move. 11. In the Move window, expand Managed Objects, then click Distribution

Groups and then click OK. 12. In the right pane, select all Resources objects. 13. Click Action, and then click Move. 14. In the Move window, expand Managed Objects, then click Resources and

then click OK.


Verify that synchronization works from Exchange Server 5.5 to Active Directory after the objects have been moved

1. Switch to NTEX01. 2. In Microsoft Exchange Administrator, in the Recipients container, double-

click User1. 3. In the Phone field, type 425-555-8989 and then click OK. 4. Switch to AD01. 5. Switch to the Active Directory Connector Services. 6. Click Active Directory Connector (AD01). 7. In the right pane, right-click Users:Nwtraders01.msft, and then click

Replicate Now. 8. Switch to Active Directory Users and Computers. 9. Expand Managed Objects, and then click Users. 10. In the right pane, double-click User1, and under the General tab, verify that

the Telephone phone number was synchronized.

Verify that synchronization works from Active Directory to Exchange Server 5.5 after the objects have been moved

1. In User1 properties, in the Office field, type 4224 and then click OK. 2. On AD01, switch to the Active Directory Connector Services. 3. In the right pane, right-click Users:Nwtraders01.msft, and then click

Replicate Now. 4. Switch to NTEX01. 5. In Microsoft Exchange Administrator, in the Recipients container, double-

click User1. 6. Verify that the Office attribute for User1 is 4224.

Shutdown all VPCs

1. Shutdown all VPCs by clicking Close on the Action menu. If prompted, do not save changes.

Documents

HOL124: Migrating from Exchange Server 5.5/Windows NT 4 …download.microsoft.com/documents/australia/teched2005/hol/HOL1… · from Windows NT 4.0 and Exchange Server 5.5 to Microsoft