I am trying to migrate exchange 2000 to exchange 2007. Basic background is:
Network as I found it:
Mailserver – Windows 2000 DC, GC, Domain Naming FSMO, Exchange 2000
Fileserver – Windows 2000 DC, GC, All Other FSMOs
Otherserver – Windows 2000 DC, GC
+ 2 other Windows 2000 member servers.
Domain is 2000 native.
New server to be put in: Windows 2003 R2 SP2 with Exchange 2007
Original plan was to apply INetOrgPerson Kit, forestprep and domainprep the network, install the 2003 box as a DC and GC (i know its not recommended but i only have 1 2003 license to work with) and Schema master FSMO, join the Exchange 2007 server into the existing Exchange Organisation, move the mailboxes across and the remove exchange 2000 out.
Problem I came across was the existing domain had an underscore in the DNS domain name, and that brought that plan to a complete stop when trying to install Exchange 2007. (I cant rename the domain and take the underscore out as its in native mode).
So I demoted the 2003 box out out the existing domain, and create a new domain to become a Exchange 2007 resource forest. So now I now have Exchange 2007 running on 2003 R2 in its own forest (only 1 server in this forest). I created a two-way trust relationship between the domains and setup each DNS so it can lookup the other.
Now comes to moving the mailboxes. I know you need at least one 2003 GC running SP1 or higher in the existing domain, so I have installed 2003 R2 SP2 onto an old box, joined it to the existing domain and made it a GC (no fsmo roles are on this box).
So, my current setup is:
ForestA: (domainA)
– mailserver, 2000, DC and GC, Domain Naming FSMO, with exchange 2000
– fileserver, 2000, DC and GC, all other FSMOs
– otherserver, 2000 DC (not a GC anymore)
– tempserver, 2003 SP2 DC and GC.
ForestB: (domainB)
– newmail, 2003 SP2, DC, GC, All fsmo roles, Exchange 2007
Trust between domains.
What I am trying to do is move the mailboxes across but keep the users in the old forest. i.e. users still need to logon as they have been to domainA, but point outlook to newmail.domainB.local and use the exchange 2007 server without getting prompted for credentials (i.e. authenticate through the trust relationship). I know this isnt explained very well, but its whats in diagram: http://www.msexchange.org/img/upl/image0041186580151928.jpg
I can run on the exchange 2007 box:
get-mailbox -domaincontroller ‘tempserver.domainA.local’ -credential $s -database ‘mailserver\First Storage Group\Mailbox Store (mailserver)’
and it will give me a list of all the mailboxes on exchange 2000.
Trying to run:
move-mailbox -targetdatabase ‘newmail\Mailbox Storage Group\Primary Mailbox Store’ -identity ‘testuser1’ -sourceforestglobalcatalog ‘tempserver.domainA.local’ -globalcatalog ‘newmail.domainB.local’ -domaincontroller ‘newmail.domainB.local’ -ntaccountou ‘ou=users,dc=domainb,dc=local’ -ignorepolicymatch -sourceforestcredential $s -targetforestcredential $t
It gives me a confirmation prompt and lists Moving mailbox: Test Account 1 (testuser1@domainA.local) to database: newmail\mailbox storage group\primary mailbox store (so it can see the user correctly as it can find the display name for the user)
but then throws an error:
Move-Mailbox : One or more of the following mailbox policy settings failed to v
alidate: Unified Messaging, Messaging Records Management Content, and Exchange
ActiveSync. To remove the policies, specify the -IgnorePolicyMatch parameter. T
he domain controller ‘otherserver.domaina.local’ is running operating system
version 5.0 (2195) Service Pack 4. The minimum version required is 5.2 (3790)
Service Pack 1.
(When trying this last night, it was looking at fileserver.domaina.local.)
My question is: how do I get the mailboxes moved across? I have about 100 users to move and about 7 hours to do it in 🙂
I cant figure out how to get the move-mailbox command to look at the 2003 DC in domainA.