Monday, December 30, 2013

Permanent Error During Migration from Exchange 2007 to Exchange 2013

Since our migration schedule is very lax, I am able to record some of the issue I get during our migration process and the fixes for them.

The latest is an error during a user migration from Exchange 2007 to Exchange 2013.  The affected user is added to a batch to migrate but errors out immediately without any items syncing.  The error is as follows:

Migration Error

To paraphrase the image:

MigrationPermanentException:  Active Directory property 'homeMDB' is not writeable on recipient 'path\to\recipient\inAD'.

Great, another bump in my migration path.... right?

Well it turns out that the fix for this particular issue is the exact same as another migration issue I had here.

In short, another AD user object whose security permissions weren't inheriting from it's parent and thus missing the write permission on the homeMDB parameter.

Glad that was an easy fix.  And thanks to MS forums for that fix.

Thursday, December 5, 2013

Activesync Not Working After Exchange 2007 to Exchange 2013 Migration

As I continue my journey into migrating to Exchange 2013, I've come across yet another morsel of knowledge to pass along.

In the process of testing my new Exchange server, I selflessly migrated my account over from Exchange 2007 to test that everything was functional.  Much to my dismay, my iPhone stopped receiving email.

I tried rebuilding the email account on the phone and checked every server setting that I could think of.  Everything was set correctly.... or so I had though.

Turns out that the migration to Exchange 2013 left a single Active Directory option unchecked that prevented certain permissions from propagating.  And surprisingly enough, this phenomenon only affected users with Domain Administrator level security.

So here is how I resolved it:

  1. Pop open your Active Directory Users and Computers console and ensure that you have the Advanced Features option checked.
  2. Turn on Advanced Features
  3. Next, navigate to your affected user and open up Properties, then click the Security tab and select Advanced.
  4. In the Properties of the affected User, under Security, click Advanced
  5. In Advanced Security Settings for the user, under Permissions, check the box that says Include inheritable permissions from this object's parent
Check Include inheritable permission from this object's parent


And that's it.  After that, ActiveSync will kick back on for your Admin user.