Resolution
fact
symptom
symptom
Error occurs when attempting to translate security for Exchange mailboxes.
cause
The account, used to logon to the Domain Migration Administrator (DMA) console machine to perform migrations, does not have Exchange Permissions Admin permissions on the Site and Configuration containers of the Microsoft Exchange server listed in the error message.
fix
To resolve this error message, grant the logon account at least Permissions Admin permissions at the Site and Configuration container levels on the Microsoft Exchange 5.5 server identified in the error message.
note
Although this error message is generated, it is possible to successfully update the Exchange permissions using a logon account that does not have Exchange permissions. As long as the Microsoft Exchange 5.5 server specified in the Translate Security for Exchange Mailboxes wizard has LDAP enabled and running on the default port (389), the Exchange permissions will be updated if the account credentials specified in the Translate Security for Exchange Mailboxes wizard have the required Exchange permissions. In this scenario, the error message will continue to be logged and the permissions will be updated; therefore, you may ignore the error.
Domain Migration Administrator 7.2
symptom
Error: 'E21795: DAPIStart: Could not bind to the Microsoft Exchange Directory server <Server_Name>. You do not have the permissions required to complete the operation.'
symptom
Error occurs when attempting to translate security for Exchange mailboxes.
cause
The account, used to logon to the Domain Migration Administrator (DMA) console machine to perform migrations, does not have Exchange Permissions Admin permissions on the Site and Configuration containers of the Microsoft Exchange server listed in the error message.
fix
To resolve this error message, grant the logon account at least Permissions Admin permissions at the Site and Configuration container levels on the Microsoft Exchange 5.5 server identified in the error message.
note
Although this error message is generated, it is possible to successfully update the Exchange permissions using a logon account that does not have Exchange permissions. As long as the Microsoft Exchange 5.5 server specified in the Translate Security for Exchange Mailboxes wizard has LDAP enabled and running on the default port (389), the Exchange permissions will be updated if the account credentials specified in the Translate Security for Exchange Mailboxes wizard have the required Exchange permissions. In this scenario, the error message will continue to be logged and the permissions will be updated; therefore, you may ignore the error.
Additional Information
Formerly known as NETIQKB42450