HOL124: Migrating from Exchange Server 5.5/Windows NT 4 Server to Exchange Server 2003/Windows Server Part 1

Transcription

1 Estimated time to complete this lab: 60 minutes HOL124: Migrating from Exchange Server 5.5/Windows NT 4 Server to Exchange Server 2003/Windows Server Part 1 Objectives After completing this lab, you will be able to: Migrate user accounts from a Microsoft Windows NT 4.0 domain to Active Directory. Configure coexistence between Exchange Server 5.5 and Active Directory in preparation to install an Exchange Server 2003 server into the Exchange Server 5.5 site Move mailboxes and other services Note Because this lab focuses on the concepts taught in the module, it may not comply with Microsoft security recommendations. Scenario

2 2 HOL124: Migrating from Exchange Server 5.5/Windows NT 4 Server to Exchange Server 2003/Windows Server Part 1 Deployment Lab Overview HOL124 Overview HOL124, HOL125 and HOL126 make up the deployment lab sequence. These three one-hour deployment labs walk you through the process of migrating from Windows NT 4.0 and Exchange Server 5.5 to Microsoft Windows Server 2003 and Exchange Server 2003 using the Move Mailbox approach to migration. While this process has been simplified for the lab environment, the steps here are very similar to what is done in a production environment. Migrate Windows NT 4.0 users from Windows NT 4.0 to Windows Server 2003 using the Active Directory Migration Tool (ADMT) Verify the Exchange Server 5.5 directory and Active Directory are ready for coexistence Prepare the Active Directory forest and domain for Exchange Server 2003 Install the Active Directory Connector (ADC) and configuring Connection Agreements to synchronize the Exchange Server 5.5 directory with Active Directory Install Exchange Server 2003 Move Mailboxes from the Exchange Server 5.5 server to the Exchange 2003 back-end server Migrate Internet SMTP connectivity from Exchange Server 5.5 to Exchange Server 2003 Migrate Public Folders from Exchange Server 5.5 to Exchange Server 2003 Retire the last Exchange Server 5.5 server A process very similar to this is used to migrate to from Exchange Server 5.5 to Exchange However, Exchange Server 2003 has simplified the process and made it more reliable with the Exchange Server Deployment Tools. These labs use the Exchange Server Deployment Tools to walk through the migration process. In this lab you will migrate user accounts from a Windows NT 4.0 domain to Active Directory and then configure coexistence between Exchange Server 5.5 and Active Directory in preparation to install an Exchange Server 2003 server into the Exchange Server 5.5 site and move mailboxes and other services. This process above has been streamlined to minimize the time required to perform the lab by pre-configuring and installing software. The steps performed for you have been left in the lab but grayed out. Do not perform these procedures. They are for reference only.

3 HOL124: Migrating from Exchange Server 5.5/Windows NT 4 Server to Exchange Server 2003/Windows Server Part 1 3 Completed Exercise Creating a Trust Between a Windows NT Server 4.0 Domain and a Windows Server 2003 Domain In this exercise, you will start the virtual machines required to create the trust, and then you will create a trust between the Windows NT Server 4.0 domain and the Windows Server 2003 domain. A trust is required to migrate Windows NT 4.0 user accounts to Active Directory by using the Active Directory Migration Tool (ADMT). Start Microsoft Virtual PC 2004 and start VPCs 1. On the host computer, click Start, point to Programs, and then click Microsoft Virtual PC. 2. Click HOL051-AD01 and then click Start. 3. Click HOL051-NTEX01 and then click Start. 4. Verify that all VPCs start with no error messages. If error messages appear, consult a lab proctor. 5. To log on to a VPC, press RIGHT-ALT+DELETE. Create a trust between a Windows NT Server 4.0 domain and Active Directory 1. Log on to NTEX01 as Administrator with a password of MSEvent To start User Manager for Domains, click Start, point to Programs, click Administrative Tools (Common), and then click User Manager for Domains. 3. In the User Manager for Domains window, click Policies, and then click Trust Relationships. 4. In the Trust Relationships dialog box, click Add to add a Trusted Domain. 5. In the Add Trusted Domains box, type NWTRADERS01 6. In the Password box, type MSEvent When a dialog box appears warning you that the trust could not be verified, click OK. 8. In the Trust Relationships dialog box, click Add to add a Trusting Domain. 9. In the Add Trusting Domain box, type NWTRADERS In the Initial Password and Confirm Password boxes, type MSEvent.123 and then click OK. 11. Click Close to close the Trust Relationship window. 12. Close User Manager for Domains.

4 4 HOL124: Migrating from Exchange Server 5.5/Windows NT 4 Server to Exchange Server 2003/Windows Server Part 1 Create a trust between Windows Server 2003 and Active Directory 1. Log on to AD01 as Administrator with a password of MSEvent To start Active Directory Domains and Trusts, click Start, point to All Programs, click Administrative Tools, and then click Active Directory Domains and Trusts. 3. Right-click nwtraders01.msft and then click Properties. 4. On the nwtraders01.msft Properties page, click the Trusts tab, and then click New Trust. 5. When the New Trust Wizard starts, click Next. 6. In the Trust Name window, type a name of NWTRADERS and then click Next. 7. In the Direction of Trust window, select Two-way, and then click Next. 8. In the Ongoing Trust Authentication Level window, select Domain-wide authentication, and then click Next. 9. In the Trust Password window, in the Trust password and Confirm trust password boxes, type MSEvent.123 and then click Next. 10. In the Trust Selections Complete window, verify that the settings are correct, and then click Next. 11. In the Trust Creation Complete window, verify that the trust was created successfully, and then click Next. 12. In the Confirm Outgoing Trust window, select Yes, confirm the outgoing trust, and then click Next. 13. In the Confirm Incoming Trust window, select Yes, confirm the incoming trust. 14. In the User name box, type nwtraders\administrator 15. In the Password box, type MSEvent.123 and then click Next. 16. In the Completing the New Trust Wizard window, verify that the trust was successfully created and confirmed, and then click Finish. 17. Click OK to acknowledge the SID filtering message. 18. On the nwtraders01.msft Properties page, click OK. 19. Close the Active Directory Domains and Trusts windows. Add NWTRADERS01\Administrator to the Windows NT Server 4.0 Administrators group 1. On NTEX01, on the Administrative Tools (Common) menu, click User Manager for Domains. 2. In the Groups window, double-click Administrators. 3. In the Local Group Properties window, click Add. 4. In the Add Users and Groups window, in the List Names From pull down menu, select NWTRADERS In the Names select box, select Administrator, click Add, and then click OK. 6. In the Local Group Properties window, click OK, and then close User Manager for Domains.

5 HOL124: Migrating from Exchange Server 5.5/Windows NT 4 Server to Exchange Server 2003/Windows Server Part 1 5 Completed Exercise Installing ADMT and Starting Outlook Express In this exercise, you will install ADMT on virtual machine AD01, and then start Microsoft Outlook Express. With Outlook Express you will confirm that you can access a user's mailbox on the Microsoft Exchange version 5.5 server as a user in the Windows NT 4.0 server. Install ADMT 1. Switch to AD Click Start, and then click Run. 3. In the Run dialog box, in the Open box, type c:\win2003\i386\admt\admigration.msi and then click OK. 4. When the Active Directory Migration Tool Setup Wizard starts, click Next. 5. Click I accept the License Agreement, and then click Next. 6. To accept the default installation folder, click Next. 7. To begin the installation, click Next. 8. When Setup is complete, click Finish. Start Outlook Express 1. Start CLIENT01. Note The Client01 VPC is not included with the three one-hour deployment labs because these exercises have been completed. 2. Log on to the NWTRADERS domain as User1 with a password of MSEvent To start Outlook Express, click Start, point to All Programs, and then click Outlook Express. 4. If prompted to make Outlook Express your default mail client, click No. 5. After Outlook Express starts, confirm that you can view User1 s .

6 6 HOL124: Migrating from Exchange Server 5.5/Windows NT 4 Server to Exchange Server 2003/Windows Server Part 1 Exercise 1 Starting Virtual PCs In this exercise, you will start the Virtual PCs (VPCs) required for this lab. Start Microsoft Virtual PC 2004 and start VPCs 1. On the host computer, click Start, point to Programs, and then click Microsoft Virtual PC. 2. Click HOL051-AD01 and then click Start. 3. Click HOL051-NTEX01 and then click Start. 4. Verify that all VPCs start with no error messages. If error messages appear, consult a lab proctor. 5. To log on to a VPC, press RIGHT-ALT+DELETE. Exercise 1 Migrating User Accounts Using ADMT In this exercise, you will migrate Windows NT Server 4.0 user accounts from the Windows NT Server 4.0 domain to the Windows Server 2003 domain by using ADMT. Migrate user accounts by using ADMT 1. Switch to AD01 and log on as nwtraders01\administrator with a password of MSEvent Click Start the point to Programs, then point to Administrative Tools and then click Active Directory Migration Tool. ADMT starts. 3. In the Active Directory Migration Tool window, in the left pane, right-click Active Directory Migration Tool, and then click User Account Migration Wizard. 4. When the User Account Migration Wizard appears, click Next. 5. On the Test or Make Changes page, click Migrate now, and then click Next. 6. On the Domain Selection page, in the Source Domain list, select nwtraders. 7. In the Target Domain list, select nwtraders01, and then click Next. 8. On the User Selection page, click Add. 9. In the Select Users dialog box, click Advanced. 10. In the Select Users dialog box, click Find Now. 11. In the Search Results box, use the SHIFT key to select all user accounts that have user names that begin with user (User0 through User50), and then click OK.

7 HOL124: Migrating from Exchange Server 5.5/Windows NT 4 Server to Exchange Server 2003/Windows Server Part To close the Select Users dialog box, click OK, and then, on the User Selection page, click Next. 13. On the Organizational Unit Selection page, click Browse. 14. In the Browse for Container dialog box, under Select a target container, click Migrated Objects, and then click OK. Note The OU Migrated Objects was created for this lab and is not a default container. 1. Verify that the Target OU box contains LDAP://nwtraders01.msft/OU=Migrated Objects,DC=nwtraders01, DC=msft and then click Next. 2. On the Password Options page, click Same as user name, and then click Next. 3. Click OK when warned about the minimum password length. 4. On the Account Transition Options page, verify that Enable target accounts is selected. 5. Select the Migrate user SIDs to target domain check box, and then click Next. 6. If prompted to enable auditing on the source domain, click Yes. 7. If prompted to enable auditing on the target domain, click Yes. 8. If prompted to create a local group, click Yes. 9. If prompted to add a TcpipClientSupport registry key, click Yes. 10. If prompted to reboot the primary domain controller (PDC) to ensure that changes take effect, click Yes. 11. After the PDC (NTEX01) restarts, click OK. 12. On the User Account page, type the following and then click Next: a. In the User name box: Administrator b. In the Password box: MSEvent.123 c. In the Domain box: NWTRADERS Important The account credentials that you use here must have administrative rights in the source domain. 13. On the User Options page, to accept all default settings, click Next. 14. On the Naming Conflicts page, to accept all default settings, click Next.

8 8 HOL124: Migrating from Exchange Server 5.5/Windows NT 4 Server to Exchange Server 2003/Windows Server Part On the Completing the User Account Migration Wizard page, in the Task description box, verify that the migration settings are correct, and then click Finish. The Migration Progress dialog box appears, showing the status of the migration operation. 16. When the status is Completed, verify that no errors were encountered during the operation. Important If errors occur, contact a lab proctor. 17. To close the Migration Progress dialog box and the User Account Migration Wizard, click Close.

9 HOL124: Migrating from Exchange Server 5.5/Windows NT 4 Server to Exchange Server 2003/Windows Server Part 1 9 Exercise 2 Migrating Exchange Server 5.5 Mailbox ACLs Using ADMT In this exercise, you will migrate Exchange Server 5.5 mailbox access control lists (ACLs) by using ADMT. This changes the Primary Windows NT account for each selected mailbox to the Active Directory account. Migrate Exchange Server 5.5 security information by using ADMT 1. In ADMT, in the left pane, right-click Active Directory Migration Tool, and then click Exchange Directory Migration Wizard. 2. When the Exchange Directory Migration Wizard appears, click Next. 3. On the Test or Make Changes page, click Migrate now, and then click Next. 4. On the Domain Selection page, in the Source Domain list, select NWTRADERS. 5. In the Target Domain list, select nwtraders01.msft, and then click Next. 6. In the Security Translation Options window, click Add, and then click Next. 7. In the Exchange Server window, type NTEX01 and then click Next. 8. In the User Account window, in the User Name box, type the following and then click Next: a. In the User name box: Administrator b. In the Password box: MSEvent.123 c. In the Domain box: NWTRADERS 9. Click Finish to start the migration. The Migration Progress dialog box appears, showing the status of the migration operation. 10. When the status is Completed, verify that no errors were encountered during the operation. 11. To close the Migration Progress dialog box and the User Account Migration Wizard, click Close. 12. Close the Active Directory Migration Tool. Reset the passwords created during the migration process 1. Open Active Directory Users and Computers, and then expand nwtraders01.msft. 2. Click Migrated Objects. 3. In the right pane, right-click User1, and then click Reset Password 4. In the New password and Confirm password boxes, type MSEvent.123, click OK and then click OK. 5. In the right pane, right-click User2, and then click Reset Password. 6. In the New password and Confirm password boxes, type MSEvent.123, click OK and then click OK. 7. Close Active Directory Users and Computers.

10 10 HOL124: Migrating from Exchange Server 5.5/Windows NT 4 Server to Exchange Server 2003/Windows Server Part 1 Exercise 3 Verifying a Successful User Account Migration In this exercise, you will use ADSI Edit to verify that the security identifier (SID) was copied from the Windows NT account into the sidhistory attribute of the new Active Directory user. This attribute is used when a migrated Active Directory user accesses a Windows NT Server 4.0 resource, such as an Exchange Server 5.5 mailbox. You will then use Outlook Express to verify that the migrated user can access his or her Exchange Server 5.5 mailbox. Review changes made to the Exchange Server 5.5 directory 1. Switch to NTEX01 and log on as nwtraders\administrator with a password of MSEvent Click Start, point to Programs, point to Microsoft Exchange, and then click Microsoft Exchange Administrator. 3. After the Exchange Administrator starts, in the left pane, expand Redmond, and then click Recipients. 4. In the right pane, find mailbox User1, and then double-click it to open Properties. 5. Confirm that the Primary Windows NT Account has been changed to NWTRADERS01\User1. 6. Click Cancel to close User1 mailbox properties. 7. Close Microsoft Exchange Administrator. Access User1 mailbox using the NWTRADERS\User1 and NWTRADERS01\User1 accounts 1. Switch to AD01 2. Click Start, point to Programs and then click Outlook Express. Note Outlook Express has been configured for nwtraders\user1. 3. In Outlook Express, send test messages to User2@nwtraders.msft and User1@nwtraders.msft. Outlook Express takes a few moments to synchronize with Exchange 5.5 Server before verifying that the message was received. 4. Click the Send/Recv button. 5. Click Tools and then click Accounts 6. On the Mail tab and click Properties 7. Click the Servers tab 8. Under Incoming Mail Server, type a user name of NWTRADERS01\User1 and a password of MSEvent.123, then click OK and then click Close. 9. Click Send/Recv and verify that the NWTRADERS01\User1 account can access the User1 mailbox on Exchange Server Close Outlook Express.

11 HOL124: Migrating from Exchange Server 5.5/Windows NT 4 Server to Exchange Server 2003/Windows Server Part 1 11 Completed Exercise Configuring Permissions on Exchange Server 5.5 In this exercise, you will grant permissions to the Microsoft Windows Server 2003 domain administrator on the Exchange Server 5.5 directory. These permissions are applied on the Organization, Site, and Configuration containers of the Exchange Server 5.5 directory. Grant permissions to the Windows Server 2003 domain administrator on the Exchange Server 5.5 organization 1. Switch to NTEX Click Start, point to Programs, point to Microsoft Exchange, and then click Microsoft Exchange Administrator. 3. In the left pane of Microsoft Exchange Administrator, click NWTRADERS, click File, and then click Properties. 4. Click the Permissions tab. 5. Click Add. 6. In the List Names From box, select NWTRADERS In the Names box, select Administrator, click Add, and then click OK. 8. In the Roles box, select Permissions Admin. 9. Click OK to close NWTRADERS properties. Grant permissions to the Windows Server 2003 domain administrator on the Exchange Server 5.5 site 1. In the left pane of Microsoft Exchange Administrator, click REDMOND, click File, and then click Properties. 2. Click the Permissions tab. 3. Click Add. 4. In the List Names From box, select NWTRADERS In the Names box, select Administrator, click Add, and then click OK. 6. In the Roles box, select Permissions Admin. 7. Click OK to close REDMOND properties. Grant permissions to the Windows Server 2003 domain administrator on the Exchange Server 5.5 configuration container 1. In the left pane of Microsoft Exchange Administrator, click Configuration, click File, and then click Properties. 2. Click the Permissions tab. 3. Click Add. 4. In the List Names From box, select NWTRADERS In the Names box, select Administrator, click Add, and then click OK. 6. In the Roles box, select Permissions Admin. 7. Click OK to close Configuration properties.

12 12 HOL124: Migrating from Exchange Server 5.5/Windows NT 4 Server to Exchange Server 2003/Windows Server Part 1 Exercise 4 Planning Coexistence with Exchange 5.5 Using the Exchange Server Deployment Tools In this exercise, you will use the Exchange Deployment Wizard to prepare the Exchange Server 5.5 directory. You will run the Exchange Deployment Tool on AD01, which will eventually become the first Exchange Server 2003 in the Exchange 5.5 organization. Many of the steps in the Exchange Deployment Tool do not require action; they are for reference only. When using this tool in a production environment, carefully follow each step and confirm that all prerequisites are in place before proceeding to the next step. Start the Exchange Deployment Tool 1. Switch to AD01 2. Click Start, and then click Run. 3. In the Open box type C:\ex2003\Support\ExDeploy and then click OK. 4. Double-click exdeploy.hta. 5. On the Welcome to Exchange Server Deployment Tools page, review the information, and then click Deploy the first Exchange 2003 server. 6. Review the options when deploying the first Exchange server. 7. Click Coexistence with Exchange 5.5. Completed Procedure - Performing Phase 1, Step 2 - Installing IIS 1. On the Exchange Server Deployment Tool page, review Step 1 of Phase Because Internet Information Services (IIS) is not installed by default on Windows Server 2003, click Start, and then click Control Panel. 3. Click Add or Remove Programs. 4. Click Add/Remove Windows Components. 5. In the Add/Remove Windows Components window, click Application Server, and then click Details. 6. Select ASP.NET. 7. Select Internet Information Services (IIS), and then click Details. 8. Select NNTP Service. 9. Select SMTP Service. 10. Click OK. 11. Click OK again, and then click Next. 12. If prompted, type the source path: C:\win2003\I386 and then click OK. 13. When the wizard is complete, click Finish. 14. Close Add or Remove Programs.

13 HOL124: Migrating from Exchange Server 5.5/Windows NT 4 Server to Exchange Server 2003/Windows Server Part 1 13 Perform Phase 1, Step 3 of the Exchange Deployment Tool 1. In Step 3, review the process information. 2. In the Exchange Server 5.5 box, type NTEX01 3. In the Global catalog server box, type AD01 4. In Log file path, type C:\Windows\Temp 5. Click Run DSScopeScan now. Note The Windows 2003 support tools must be installed on the server so that DSScopeScan can run the NetDiag support tool. Perform Phase 1, Step 5 of the Exchange Deployment Tool 1. In Exchange Deployment Tools, in Phase 1, Step 5 (step 4 is complete), click DCDiag Tool, and review the syntax for DCDiag. 2. Click Back. 3. Open a command prompt, then type dcdiag /s:ad01 /f:c:\windows\temp\dcdiag.log and then press ENTER. 4. Use Windows Explorer to open C:\Windows\Temp. 5. In the C:\windows\temp directory, open the dcdiag.log log file, and then look for any errors. 6. If any errors are reported, switch to the Exchange Server Deployment Tools window, and review the possible corrective actions. 7. Close dcdiag.log. Perform Phase 1, Step 6 of the Exchange Deployment Tool 1. In Exchange Deployment Tools, in Phase 1, Step 6, click NetDiag Tool and review the syntax for NetDiag. 2. Click Back. 3. Switch to the command prompt, then type cd \windows\temp and then press ENTER. 4. Then, at the command prompt, type: netdiag /l and then press ENTER. 5. Close the command prompt. 6. Switch to C:\Windows\Temp, open the netdiag.log log file, and then look for any errors. 7. If any errors are reported, switch to the Exchange Server Deployment Tools window, and review the possible corrective actions. 8. Close netdiag.log.

14 14 HOL124: Migrating from Exchange Server 5.5/Windows NT 4 Server to Exchange Server 2003/Windows Server Part 1 Review the Exchange Deployment Tool log files 1. Switch to C:\Windows\Temp, double-click the ExDeploy.log log file, and then look for any errors. 2. If any errors are reported, switch to the Exchange Server Deployment Tools window, and review the possible corrective actions. 3. Close ExDeploy.log. 4. From C:\Windows\Temp, open the vercheck.log log file, and confirm that you have the proper software versions installed. 5. Close vercheck.log. 6. Switch to the Exchange Server Deployment Tools, and then click Next. Configure permissions on the Exchange 5.5 administrator mailbox 1. Switch to NTEX01 and open Microsoft Exchange Administrator. 2. In Microsoft Exchange Administrator, click the Recipients container. 3. Double-click the Administrator mailbox. 4. Click Primary Windows NT Account. 5. Verify that Select an existing Windows NT account is selected, and then click OK. 6. In the Add User or Group window, in the List Names From box, select NWTraders In the Names box, double-click Administrator, and then click OK. 8. Click OK to close Administrator mailbox properties. Note This procedure is necessary since the NWTRADERS administrator account was migrated to NWTRADERS01 in the previous exercises. This account was not migrated because an Administrator account already exists for NWTRADERS01. Because of this, the Administrator mailbox is re-homed with the NWTRADERS01 administrator account.

15 HOL124: Migrating from Exchange Server 5.5/Windows NT 4 Server to Exchange Server 2003/Windows Server Part 1 15 Completed Exercise Running Exchange Server 2003 ForestPrep for the Active Directory Forest In this exercise, you will run the Exchange Server 2003 ForestPrep tool to make modifications to the Active Directory forest necessary for Exchange Server Perform Phase 2, Step 1 - Running Exchange Server 2003 setup using ForestPrep 1. Switch to the Exchange Server Deployment Tools on AD For Step 1, type c:\ex2003\setup\i386\setup.exe for Specify a path to Exchange Setup. 3. Click Run Forest Prep now. 4. On the Welcome to the Microsoft Exchange Server 2003 Installation Wizard page, click Next. 5. Click I agree, and then click Next to accept the license agreement. 6. Click Next to accept the pre-populated Product Key. 7. On the Component Selection page, in the Action column, verify that ForestPrep is selected, and then click Next. 8. Verify that the default Exchange Server Administrator is NWTRADERS01\Administrator, and then click Next. 9. When Setup is complete, click Finish.

16 16 HOL124: Migrating from Exchange Server 5.5/Windows NT 4 Server to Exchange Server 2003/Windows Server Part 1 Completed Exercise Running Exchange Server 2003 DomainPrep for the Active Directory Domain In this exercise, you will run the Exchange Server 2003 DomainPrep tool to make modifications to the Active Directory domain necessary for Exchange Server Perform Phase 2, Step 2 - Running Exchange Server 2003 setup using DomainPrep 1. Switch to the Exchange Server Deployment Tools on AD For Step 2, type c:\ex2003\setup\i386\setup.exe for Specify a path to Exchange Setup. 3. Click Run DomainPrep now. 4. On the Welcome to the Microsoft Exchange Server 2003 Installation Wizard page, click Next. 5. Click I agree, and then click Next to accept the license agreement. 6. Click Next to accept the pre-populated Product Key. 7. On the Component Selection page, in the Action column, verify that DomainPrep is selected, and then click Next. 8. Click OK to acknowledge that nwtraders01.msft has been identified as an insecure domain. 9. On the Completing the Microsoft Exchange Server 2003 Installation Wizard page, click Finish.

17 HOL124: Migrating from Exchange Server 5.5/Windows NT 4 Server to Exchange Server 2003/Windows Server Part 1 17 Exercise 5 Confirming That Active Directory Is Prepared for Exchange Server 2003 Using OrgPrepCheck In this exercise, you will run the OrgPrepCheck tool to check Active Directory for the proper schema extensions, domains, security descriptors, and domain controller permissions needed to install Exchange Server Perform Phase 2, Step 3 - Validating schema extensions, domains, and security descriptors 1. Switch to the Exchange Server Deployment Tools on AD01. Steps 1 and 2 of the running ForestPrep and DomainPrep have been completed. 2. In Step 3, review the OrgPrepCheck instructions. 3. Verify that the server names are correct, and then click Run OrgPrepCheck now. Note This tool will check every domain controller in the local domain to determine whether the Manage auditing and security logs privilege granted to the Exchange Enterprise Servers group by DomainPrep has replicated to that domain controller. In our scenario, we only have one domain controller, so replication is not an issue Perform Phase 2, Step 4 - Follow-up on results of OrgPrepCheck 1. On AD01, switch to C:\Windows\Temp. 2. Double-click ExDeploy.log. 3. Scroll to the bottom of the log file, and review any warnings or errors generated by OrgPrepCheck. 4. Close ExDeploy.log. 5. Switch to C:\Windows\Temp, and double-click ExDeploy-polcheck.log. 6. Review the log file for any warnings or errors, and then close ExDeploypolcheck.log.

18 18 HOL124: Migrating from Exchange Server 5.5/Windows NT 4 Server to Exchange Server 2003/Windows Server Part 1 Completed Exercise Installing the Active Directory Connector In this exercise, you will prepare for the Active Directory Connector (ADC) setup. Perform Phase 2, Step 5 Installing the ADC 1. In the Microsoft Exchange Server Deployment Tools, Phase 2, Step 5, review the Installing ADC instructions. 2. Switch to AD01. Note This lab will install the ADC on AD01, not on AD01, where the Exchange Deployment Tool is being run. 3. Click Start, and then click Run. 4. In the Run dialog box, in the Open box, type \\AD01\C$\ex2003\adc\I386\Setup.exe and then click OK. 5. Click Open to run the application. 6. In the Microsoft Active Directory Connector Setup Wizard, click Next. 7. In the End-User License Agreement dialog box, select I accept the terms of the license agreement, and then click Next. 8. On the Component Selection page, select the Microsoft Active Directory Connector Service component check box, and then select the Microsoft Active Directory Connector Management components check box. 9. Click Next. 10. To accept the default installation location, click Next. 11. Verify that the Account name is NWTRADERS01\Administrator. Note Do not use the administrator account as the ADC service account if the ADC will be in place for any length of time. 12. In the Account password box, type MSEvent.123 and then click Next. ADC installs. Note Several Active Directory object changes must be made during installation. This may take several minutes. 13. After Setup is complete, click Finish.

19 HOL124: Migrating from Exchange Server 5.5/Windows NT 4 Server to Exchange Server 2003/Windows Server Part 1 19 Exercise 6 Configuring ADC Using ADC Tools In this exercise, you will configure the ADC Manager to communicate with Active Directory and the Exchange Server 5.5 directory. During this process, you will identify and designate Resource mailboxes in Exchange Server 5.5. Perform Phase 2, Step 6 - Running ADC Tools 1. On AD01, click Start, point to Programs, point to Administrative Tools, and then click Active Directory Connector. 2. In the left pane, click ADC Tools. 3. In the right pane, in the Tool Settings box, click Set. 4. In the Tools Settings window, type NTEX01 5. Click Browse. move to C:\Windows\Temp, and then click OK. 6. Click OK to close the Tool Settings window. 7. In the Data Collection box, click Run to collect information about your Exchange 5.5 sites. 8. In the Information box, review the text, and note that the resource mailboxes are identified in Pass 1 of In the Resource Mailbox Wizard box, click Run. 10. On the Resource Mailbox Wizard Welcome page, click Next. 11. In the Select Primary and Resource Mailboxes window, expand each Active Directory user account, and then verify that the primary mailbox for each user is bold and then click Next. 12. In the Site Credentials window, click Set Credentials. 13. In the Connect As box, type Nwtraders01\Administrator 14. In the Password box, type MSEvent In the Exchange 5.5 server to use box, select Specify a server, and then click OK. 16. Verify that the Password State is Validated, and then click Next. 17. Review the summary settings, and then click Next. 18. Click Finish.

20 20 HOL124: Migrating from Exchange Server 5.5/Windows NT 4 Server to Exchange Server 2003/Windows Server Part 1 Manually verify that NTDSNoMatch has been set 1. Switch to NTEX In Microsoft Exchange Administrator, click the Recipients container. 3. In the right pane, double-click Resource1. 4. Click the Custom Attributes tab, and then verify that Custom Attribute 10 is set to NTDSNoMatch. 5. Close the Resource1 properties page. Continue Phase 2, Step 6 1. Switch to AD In Active Directory Connection Manager, in the right pane, under Resource Mailbox Wizard, click Verify. 3. Verify that NTDSNoMatch completed successfully.

21 HOL124: Migrating from Exchange Server 5.5/Windows NT 4 Server to Exchange Server 2003/Windows Server Part 1 21 Exercise 7 Creating a Connection Agreement In this exercise, you will use the ADC Connection Agreement Wizard to create a Connection Agreement between Active Directory and Exchange Server 5.5. Create Connection Agreement 1. In Active Directory Connector Services, in the Connection Agreement Wizard box, click Run. 2. On the Connection Agreement Wizard welcome page, click Next. 3. In the Staging Area window, click Browse. 4. Expand nwtraders01, select Migrated Objects, then click OK and then click Next. 5. In the Site Connections window, verify that the Connection Agreement is two-way, and then click Next. 6. In the Site Credentials window, click Set Credentials. 7. In the Connect As field, type nwtraders\ex55svc 8. In the Password field, type MSEvent In the Exchange 5.5 server to use box, select Specify a server, and then click OK. 10. Verify that the Password State is Validated, and then click Next. 11. In the Domain Credentials window, click Set Credentials. 12. In the Connect As field, type nwtraders01\administrator 13. In the Password field, type MSEvent.123 and then click OK. 14. Verify that the Password State is Validated, and then click Next. 15. In the Connection Agreement Selection window, verify that Public Folder and Recipient connection agreement (Users:) are selected, and then click Next. 16. In the Summary window, verify that your settings are correct, and then click Next. 17. After the Connection Agreement has been created, click Finish.

22 22 HOL124: Migrating from Exchange Server 5.5/Windows NT 4 Server to Exchange Server 2003/Windows Server Part 1 Exercise 8 Verifying Synchronization In this exercise, you will verify that the synchronization between Exchange Server 5.5 and Active Directory is working properly. Use Active Directory Connection Services to verify that the Connection Agreement was created 1. In the Connection Agreement Wizard box, click Verify. 2. In the Information box, verify that no unreplicated objects were found. 3. In the left pane, click Active Directory Connector (AD01). 4. In the right pane, double-click Users:NWtraders01.msft. 5. Review each property tab to verify your settings, and then close the property page. 6. In the right pane, double-click Public Folders:NWtraders01.msft. 7. Click each Property tab, verify your settings, and then close the property page. View synchronized data in Active Directory 1. On AD01, open Active Directory Users and Computers. 2. In the left pane, click Migrated Objects. 3. In the right pane, double-click User1. 4. In User1 properties, click the Address tab, and then confirm that the City and State attributes have synchronized from the Exchange Server 5.5 directory. 5. In User1 properties, click the Organization tab, and then confirm that the Title and Company attributes have synchronized from the Exchange Server 5.5 directory. 6. In User1 properties, click the Exchange General tab, and then review the Home Server for User1. 7. In User1 properties, click the Member Of tab, and then review the group membership for User1 that synchronized from the Exchange Server 5.5 directory. 8. Close the User1 Properties page. Verify resource mailbox object synchronization 1. In Active Directory Users and Computers, click View, and then click Advanced Features. 2. In the left pane, expand Migrated Objects, and then click Recipients. 3. Double-click the Resource1 resource mailbox. 4. Click the Security tab, and then review the permissions for User1.

23 HOL124: Migrating from Exchange Server 5.5/Windows NT 4 Server to Exchange Server 2003/Windows Server Part 1 23 Note User1 is the primary Microsoft Windows NT account associated with Resource1. User1 is listed twice because the security identifier (SID) from both Windows NT version 4.0 and Active Directory are granted permissions on this object. 5. Click the Exchange Advanced tab, and then click Mailbox Rights. 6. In the Groups or user names box, click User1. 7. In the Permissions for User1 box, confirm that User1 has Full Mailbox Access. 8. Repeat the previous steps above for the second User1 and then click Cancel. 9. Close the Resource1 property window. Verify DL object synchronization 1. In Active Directory Users and Computers, double-click DL1. 2. Click the Members tab, and verify that the distribution list (DL) is populated with members. 3. Close the DL1 property window.

24 24 HOL124: Migrating from Exchange Server 5.5/Windows NT 4 Server to Exchange Server 2003/Windows Server Part 1 Exercise 9 Organizing Objects in Active Directory In this exercise, you will organize the migrated objects in Active Directory. Organize objects in the NWTraders OU structure 1. In the left pane of Active Directory Users and Computers, click Migrated Objects. 2. In the right pane, select all User objects (not including the Recipient OU). 3. Click Action, and then click Move. 4. In the Move window, expand Managed Objects, then click Users and then click OK. 5. In the left pane under Migrated Objects, click Recipients. 6. In the right pane, select all Contacts objects. 7. Click Action, and then click Move. 8. In the Move window, expand Managed Objects, then click Contacts and then click OK. 9. In the right pane, select all Distribution Groups objects. 10. Click Action, and then click Move. 11. In the Move window, expand Managed Objects, then click Distribution Groups and then click OK. 12. In the right pane, select all Resources objects. 13. Click Action, and then click Move. 14. In the Move window, expand Managed Objects, then click Resources and then click OK.

25 HOL124: Migrating from Exchange Server 5.5/Windows NT 4 Server to Exchange Server 2003/Windows Server Part 1 25 Verify that synchronization works from Exchange Server 5.5 to Active Directory after the objects have been moved 1. Switch to NTEX In Microsoft Exchange Administrator, in the Recipients container, doubleclick User1. 3. In the Phone field, type and then click OK. 4. Switch to AD Switch to the Active Directory Connector Services. 6. Click Active Directory Connector (AD01). 7. In the right pane, right-click Users:Nwtraders01.msft, and then click Replicate Now. 8. Switch to Active Directory Users and Computers. 9. Expand Managed Objects, and then click Users. 10. In the right pane, double-click User1, and under the General tab, verify that the Telephone phone number was synchronized. Verify that synchronization works from Active Directory to Exchange Server 5.5 after the objects have been moved 1. In User1 properties, in the Office field, type 4224 and then click OK. 2. On AD01, switch to the Active Directory Connector Services. 3. In the right pane, right-click Users:Nwtraders01.msft, and then click Replicate Now. 4. Switch to NTEX In Microsoft Exchange Administrator, in the Recipients container, doubleclick User1. 6. Verify that the Office attribute for User1 is Shutdown all VPCs 1. Shutdown all VPCs by clicking Close on the Action menu. If prompted, do not save changes.

26