Exchange 2003 to Exchange 2010 Intra-Organization migration

Step

Step Title

Details (migration from Exchange 2003)

Step 2

Service pack level and AD version

Use ExPDA (https://www.microsoft.com/downloads/en/details.aspx?FamilyID=88B304E7-9912-4CB0-8EAD-7479DAB1ABF2) to : a- Ensure all Exchange 2003 servers are SP2 b- Ensure all Forest/Domain match Exchange 2010 prerequisites Note : One of the prerequisites is the link state minor changes suppression. The procedure to deactivate it is on Step 8.1

Step 3.1.1

1

Preparing Legacy Exchange Permissions (Exchange 2003 coexistence only)

1.2

Wait AD changes to replicate-track the progress using REPLMON tool

2.1

Run on a DC in schema master domain (forest root domain) Memberships required: Schema Admins group & Enterprise Admins

2.3

Wait AD changes to replicate-track the progress using REPLMON tool

3.1

Run on a DC in schema master domain (forest root domain) Memberships required: Enterprise Admins

3.3

Wait AD changes to replicate-track the progress using REPLMON tool

4.1

Setup /PrepareAllDomains or setup /pad (Enterprise Admins)

Step 3.1.5

5

Repeatable Task:Preparing Domains (If Preparing All Domains not run-See notes)

5.2

Memberships required: If domain created BEFORE prepareAD: Domain Admins If domain created AFTER prepareAD: Domain Admins & Exchange Organization Administrators

5.4

Verify the AD changes

Step 4.1

Configure CAS2010 ExternalURLS

If the Step 4 above - enter the external namespace - has not been done, configure it on this step: •Offline Address Book: Set-OABVirtualDirectory OAB* -ExternalURL https://mail.contoso.com/OAB •Web Services: Set-WebServicesVirtualDirectory EWS* -ExternalURL https://mail.contoso.com/ews/exchange.asmx •ActiveSync: Set-ActiveSyncVirtualDirectory -Identity Microsoft-Server-ActiveSync -ExternalURL https://mail.contoso.com/Microsoft-Server-ActiveSync

Step 7

Configure CAS2010 Array (LB + DNS + PowerShell)

For Outlook clients, you can configure the CAS2010 servers as an RPC Client Access Service array, which is highly recommended even if you have only one CAS2010 you start with : - Create a LB array for CAS2010 (Step-by-step guide / installation template : https://technet.microsoft.com/en-us/library/cc742379(EXCHG.80).aspx) - Create a DNS entry in your INTERNAL DNS that resolves the LB Array name to the Virtual IP Address (VIP) of the CAS LB (e.g. CASArray01.Contoso.ca) - Configure the LB array to load-balance the MAPI RPC ports : TCP 135 and TCP 1024 - 65 535 - Create the CAS Array AD object : New-ClientAccessArray -Name CASArray01.contoso.ca -FQDN CASArray01.contoso.ca -Site "Site1"

Step 8.1

Suppress Link State Updates on Exchange 2003

HKEY_LOCAL_MACHINESystemCurrentControlSetServicesRESvcParameters 1. Right-click Parameters and select New | DWORD value. Name the new DWORD value SuppressStateChanges. 2. Double-click SuppressStateChanges. 3. In the Value data field, enter 1.

Step 10

Environment without Exchange 2007 autodiscover

You will configure EXTERNAL DNS and/or your reverse proxy infrastructure's publishing rules to have the autodiscover.contoso.com namespace point to CAS2010

Step 11.1

Autodiscover setting to use NLB

Set CAS property AutoDiscoverServiceInternalUri to the Load balanced FQDN : Get-ClientAccessServer | Set-ClientAccessServer -AutoDiscoverServiceInternalUri:"https://loadbalancerFQDN/Autodiscover/Autodiscover.xml" Get-AutodiscoverVirtualDirectory | set-AutodiscoverVirtualDirectory -InternalUrl:"https://loadbalancerFQDN/Autodiscover/Autodiscover.xml"

Step 11.3 (Exchange 2003 EAS)

Internet connectivity downtime (for Exchange 2003 EAS clients)

Exchange 2003 mailboxes : EAS client will try to connect through CAS2010 and will receive an error. SOLUTION : enable Integrated Windows Authentication on the Microsoft-Server-ActiveSync vDir on Exchange 2003. > Install https://support.microsoft.com/?kbid=937031 and then use the Exchange System Manager to adjust the authentication settings of the ActiveSync virtual directory. > OR, set the msExchAuthenticationFlags attribute to a value of 6 on the Microsoft-Server-ActiveSync object within the configuration container on each Exchange 2003 mailbox server. An example script is provided at https://technet.microsoft.com/en-us/library/cc785437.aspx. Note: DO NOT use IIS Manager to change the authentication setting on the Microsoft-Server-ActiveSync virtual directory as the DS2MB process within the System Attendant will overwrite the settings that are stored in Active Directory.

Step 11.6 (test)

Test

Test all client scenarios

Step 13

HUB

Install the Hub Transport server role

Step 15

UM Config (Optional)

Configure Unified Messaging This step is optional. It's only necessary if you want to use Unified Messaging in your organization.

Step 17

EDGE (Optional)

Install the Edge Transport server role This step is optional. It's only necessary if you want to use the Edge server role in your organization.

Step 19

Move Mailbox

Move mailboxes from Exchange 2003 to Exchange 2010