What permissions are needed to migrate Public Folders successfully and how do I set them up? (NETIQKB1292)

fact
Exchange Migrator 1.x

fact
Exchange Migrator 2.x

fix

In order to migrate public folders successfully, the account logged on to or the alternate credentials that you specify on the Exchange Migrator console must have a MAPI profile to a mailbox on both source and target MS Exchange Servers. These mailboxes must have the following permissions in place:

• Prior to Exchange Migrator Service Pack 1 (EM SP1), the source mailbox required the Owner role on each source public folder that you attempted to migrate.  If you have installed EM SP1, this is no longer a requirement. If you have not, either install EM SP1 on your current EM 2.2 installation or follow the steps below to add Owner permissions to the source public folders.
• The target mailbox requires the top-level folder create extended exchange-specific permission on the target Exchange 2000 environment.

The "Owner on source Public Folder" instruction set below verifies that the mailbox the source MAPI profile points to is given the correct permissions to all of the public folders you are migrating. The "Top-Level Folder Creation..." instruction sets (seen below) verify that the mailbox that the target MAPI profile points to is given the top-level folder creation permission.

Owner on source Public Folder:

If you want to migrate Public Folder "X", then do the following:

1. Open Exchange Administrator.
2. Highlight the X Public Folder under Folders\Public Folders.
3. Click on File.
4. Click on Properties.
5. Click on the "Client Permissions..." button.
6. Ensure the source mailbox that the MAPI profile is pointing to is listed with the Owner role.

Top-Level Folder Creation on MS Exchange 2000 :

1. Open Exchange System Manager.
2. Expand the "Folders" container.
3. Highlight the Public Folder Object you want to migrate to.
4. Right Click.
5. Click Properties.
6. Click on the Security tab.
7. Check to see if the account that is logged on to Exchange Migrator console machine is listed here.
8. If not, then add the account or group to the list with Add button.
9. Click the Advanced button below.
10. Check to see if the account or group is listed here.
11. If yes, then highlight the account or group and click the View/Edit button.
12. Be sure the "Create top level folder" extended permission is checked.

Top-Level Folder Creation on MS Exchange 5.5 :

You must have the top-level folder Create permission on the target Exchange 5.5 environment.

1. Open Exchange Administrator.
2. Highlight the Configuration container under the Site that you want to specify top level permissions for.
3. In the details pane on the right, highlight the "Information Store Site Configuration".
4. Click on File in the menu bar.
5. Click on Properties.
6. Click on the Top-Level Folder Creation tab.
7. Ensure that the account that you are logged into the Exchange Migrator console machine with is in the "Allowed to create Top-Level Folders" list. **NOTE** If the All radio button is selected, this is OK.

Formerly known as NETIQKB1292