SBS2011 - Cross domain Migration to Server 2012 R2 w/ Exchange 2013

I am attempting to find the best way to do this, and any input/guidance would be greatly appreciated.
Source Server: SBS 2011 Standard - Internal domain costco.local
Target Server: Server 2012 R2, 2 virtuals, one for the domain controller, one for Exchange 2013 - Internal domain ad.costco.com
I know that in order to establish a trust relation, I must add a secondary domain controller to the SBS2011 domain and transfer FSMO roles. My question is, can I use a trial Server 2008 R2 as an interim DC, create the trust, use ADMT to migrate user
accounts to the new domain and move mailboxes from the SBS server with the trust established on the Server 2008 DC? Or do I have to install an interim exchange server and move the mailboxes and remove the SBS server from the domain?
If that is the case, can I use a 180 Trial of Server 2008 R2 and Exchange 2010 on two separate virtuals on the old domain, move all user accounts and mailboxes to a standard domain temporarily. Then from the standard domain move user accounts and mailboxes
to the Server 2012 R2 DC and Exchange 2013 virtual?
It would be great if I could just establish a trust with with a second DC with SBS and move user accounts and mailboxes to the new internal domain, but I'm not sure if that is possible. Any insight would be greatly appreciated!

SBS can't do trusts but the migration prep tool temporarily allows them I believe. Have a look at this link dealing with migration to 2012 essentials from SBS, it doesn't deal with exchange though:
https://technet.microsoft.com/en-us/library/jj721754.aspx
There is also a recent thread "Migrating from SBS 2011 to Server 2012R2 Standard & Exchange 2013" that may have some info.
-- Al

Similar Messages

Migrate to Windows 2012 R2 and Exchange 2013 SP1 using database portability

Hi, I'm planning to migrate from Exchange 2013 SP1 running on Windows 2012 to Exchange 2013 SP1 on Windows 2012 R2.
Is it possible to use database portability to move the databases from the exchange installation on win 2012 to the new installation on Win 2012 R2? This would save a great deal of time not doing the mailbox moves.
I've searched similar cases but couldn't find any, all speak about disaster recovery and database portability but I've found no articles that uses the migration scenario.
Would it be possible to do and if so, what would the steps be? Do I need to delete the database from the source server, move the database files to the new server and mount them and relocate the mailboxes? Or should I dismount the database on the source server,
move them to the new server and mount them and relocate the mailboxes?
Frank.

Hi,
According to your description, I recommend you consider using DAG to achieve your requirement.
The following steps for your reference:
1.Prepare a new server which installed windows 2012 R2 for Exchange 2013 mailbox server.
2.After you deploy Exchange 2013 Mailbox servers, you can create a DAG, add Mailbox servers to the DAG, and then replicate mailbox databases between the DAG members.
3.After replication, you can mount all the databases on the new server.
Hope this helps!
Thanks.
Niko Cheng
TechNet Community Support
This no way a resolution. This won't work at all as Both OS will be different and you can't form the Cluster.
Please Unmark it!
Cheers,
Gulab Prasad
Technology Consultant
Blog:
http://www.exchangeranger.com    Twitter:
  LinkedIn:
   Check out CodeTwo’s tools for Exchange admins
Note: Posts are provided “AS IS” without warranty of any kind, either expressed or implied, including but not limited to the implied warranties of merchantability and/or fitness for a particular purpose.

Server 2003 SBS (with Exchange 2003) migrate to new machine Server 2012 Standard (with Exchange 2013)

This is what I have:
A very outdated machine running a small domain, SBS 2003 and Exchange - this is the ONLY server currently.
This is what my boss ordered:
A Dell R210 II machine with Server 2012 Standard (and I downloaded the trial for Exchange 2013).
He wants the old server completely replaced and gone - with everything moved over (including Exchange) to the new machine. The main reason for the upgrade is that not all users can access email on their machines (Macs, new versions of Outlook, etc.)
I have set up a new standalone server before but never migrated one - and I've found that going from SBS2003/Exchange2003 to Server2012/Exchange2013 is not simple in the least.
I thought I could just set up the new server as a DC on the domain and have everything replicated to it from the source server. Then I could decommission the old server. I have been told that 1) I can't upgrade Exchange 2003 to 2013 and 2) that I shouldn't
put Exchange on a DC. What do you do if you only have the one server?

Hi,
Just additional. Please also refer to following threads and article, then check if can help you.
Migrate
SBS 2003 to Windows Server 2012 Standard
Migration
SBS 2003 to Windows Server 2012 Standard
Transition
from Small Business Server to Standard Windows Server
Hope this helps.
Best regards,
Justin Gu

Windows Server 2012 R2 with Exchange Server 2013 SP1 Completely fresh install giving errors signing into EAC

Hi,
I am struggling with a completely clean installation of Server 2012 R2 and Exchange 2013 SP1. I followed these steps:
Installed Server OS
Windows Updates
Added Active Directory Role (This is a single standalone server that would have been SBS until it was dropped)
Added DHCP & DNS
Added Certificate Services
Added Windows Server Update Services (WID Database & WSUS Services)
Windows Updates
Added Media Foundation
Added File Server Resource Manager and Work Folders
Added Windows Server Backup
Windows Updates
Checked all running without errors in Server Manager and performed a full bare bones backup.
Ran Setup.exe from Exchange 2013 SP1 disc.
Installed Pre-requisites and then rebooted
Windows Updates
Ran Setup.exe from Exchange 2013 SP1 disc.
Installation completed without errors
Rebooted
Checked all running without errors in Server Manager.
I Launch Exchange Administrative Center and get "problem with website's server certificate error" (normal on machine with self-assigned certificates). Click Continue to Website and get:
Windows Security dialog box:
iexplore - "The server localhost is asking for your username and password. The server reports that it is from Digest"
however no username and password combination will work: have tried [Administrator]; [Domain\Administrator] even created a user to no avail.
I believe the issue is somewhere in the IIS configuration because I also get the same error when trying to log into the server website from either the server or another machine on the network.
I have tried the complete installation three times now: (full disclosure not all of the same features/roles each time). On the first attempt I got this error immediately and on try number 2 was able to get into the EAC and created the mailboxes
but then it started giving the same error. The above steps are try number 3.
Any ideas?
Thanks in advance.
Andy Halford
P.S. A Follow up which might be significant: The Default Web Site is not running and will not start (it was previously running before the Exchange installation) and when I try I get the message that Another Website may be using the same port however none
of the others (Exchange Back End or WSUS Administration) are using ports 80 or 443 and I still get the error when they are both stopped.

Could you post the list of sites:
appcmd list site
The ones listening on port 80:
appcmd list site /bindings:http/*:80:
And on port 443:
appcmd list site /bindings:https/*:443:
Step by Step Screencasts and Video Tutorials

Can't get OWA to work on Essentials 2012 R2 with Exchange 2013 on second server 2012 R2 std.

I have previously with success setup a working solution with server 2012 essentials, and a second server 2012 std. with exchange 2013, I did it following this guide: http://technet.microsoft.com/en-us/library/jj200172.aspx
Unfortunately I lost the server due to a cooling error which led to an un-repairable essentials 2012, since this was a new setup and also a test setup I didn't have any working backup solution setup at the time...tsk.tsk.
Since I had to make a complete do over I chose to try out the new R2 server editions, and set it up following the same guide, when it came to this part:
Download KB2732764 for ARR 2.5, and then install the update on the server that is running Windows Server 2012 Essentials.
Copy the SSL certificate file for Exchange Server to the server that is running Windows Server 2012 Essentials. The certificate file must contain the private key, and it must be in the PFX file format.
Note
If you are using a self-issued certificate, follow the instruction in the Exchange Server article Export an Exchange Certificate to export the certificate.
Open a command window as an administrator, and then open the %ProgramFiles%\Windows Server\Bin directory.
Based on you installation scenario, follow one of these steps to configure ARR:
If you are performing a clean setup, run the following command:
ARRConfig config –cert “path to the certificate file” –hostnames “host names for Exchange Server”
I noticed that the version of "Application request routing" had changed to version 3, so obviously I didn't need to dl the 2.5 update.. When I came to the part where I wa instructed to run arrconfig config etc. I noticed
that the ARRconfig file no longer where placed where the setup guide indicated, I then went ahead and tried som manual configuration regarding certificates and such. In the end I have a working solution where Exchange and OWA is working locally but OWA isn't
working outside my local domain, the link get's placed in the RWA and is indicating the correct link for the exchange server www.remote.clinten.dk I have a certificate which include to separate domain names aforementioned and remote.clinten.dk and
I get no errors indicating certificate errors, when I try to connect to www.remote.clinten.dk/owa from outside I get a 404 error, and when I connect to www.remote.clinten.dk I get the RWA login screen for the essentials RWA. Obviously I need to set up something
in ISS probably in the url rewrite section, but I can't seem to find the right setting.. Can someone help with this?
Btw. I have found the missing arrconfig file in c:\windows\system32\essentials" and tried to run the command as described in the guide "ARRConfig config –cert “path to the certificate file” –hostnames “host
names for Exchange Server”" but it doesn't seem to work, it just prompts with a guide for using the arrconfig command and examples of correct use, I also tried removing the "" from the guide, like this "ARRConfig
config –cert path to the certificate file –hostnames host names for Exchange Server",
when I ran it without the "" It didn't prompt me with anything nor did It indicate any errors, it did not however make my OWA work either..
I am aware that exchange 2013 atm. isn't officially supported on the R2 server, but the exchange works fine inside my domain, and the pop3/smtp also works from outside, since this Is a test environment, using only my own private domain and not a company
domain I figured it would be ok to run the risk.. ;)

Hi
found this on
https://social.technet.microsoft.com/Forums/en-US/1f099068-b3ed-44f3-a8c4-c22d760a8621/arr-broken-or-bad-syntax-exchange-2013-essentials-2012-r2?forum=winserveressentials
"Ok just an update for anyone else how has this issue.
The problem has been solved by Microsoft and I have included their findings below, but basically it comes down to a typo!
I often use notepad to have all the commands I need on hand, and I must have copied the command direct from the TechNet article or other website and customised the required fields. The issue with this is one of the characters did not “convert” - for want
of a better word. I should have retyped the whole command from scratch and it would have been right!
Thanks for everyone’s input and for Microsoft for getting to the bottom of it.
From Microsoft:
We have tested on your environment and here is the investigation result from our senior engineer:
================================================================
Basically the command fails due to invalid parameter, the invalid one is the ‘-‘. I think the one customer used is copied from the online document sample which translate to the unicode is 0x8211 means “en dash”, it
can’t be input by normal keyboard, so I pretty sure it is from web (mostly HTML document).
The one we check (compare) is ‘-‘ which has the code 0x45.
So it always failed to compare the parameter and ARRconfig.exe thought it is invalid parameter.
The solution is quite simple, just using keyboard to retype the command, using normal ‘-‘ and I have tried the password prompt shows
Best Regards,
Johnny Chen
Microsoft Partner Support Community Technical Support Engineer
Microsoft Global Partner Services"

EXMON "exchange server user monitor" for Exchange 2013?

Hello,
it Looks like EXMON is not supported for Exchange 2013. Is this correct or can i use it with Server 2012 R2 and Exchange 2013 (CU6++) ?
Is there any alternative to check high log growth rate to see which user is responsable for this?
Thanks for Feedback.
best,
Martin

Hi Martin,
Yes, ExMon is not supported for exchange 2013.
Except the suggestion above, here is an exclusive application for you reference, it could retrieve statistics for all or selected mailboxes in a specified database and server, it may give you some help:
Exchange Server Mailbox Statistics Tool - v1.6.2
The tool retrieves mailbox statistics which includes Folder Count, Total Items, Associated Items, Deleted Items, Total Items Size, Deleted Items Size, Oldest Item Date, Newest Item Date, Items Age, Mailbox Age and Quota details. It also includes an additional
option named "Archive Statistics Planner" which will let you search mailboxes and provide statistics report with specific dates.
Best regards,
Niko Cheng
TechNet Community Support

Is that possible to do the cross domain migration for AD RMS Services?

Hi guys, recently i am doing a cross domain migration, when i listing out the server, i found the server have AD RMS services which is still active.
but after my migration is complete, it is planned to do the decommission on all the old server
After my checking, i believe the AD RMS have trust establish with a cross site domain already. What i am planning to do is try to do a migration on it.
i have do some research on it an i found "Cross forest Migration of AD RMS document"
what i found in the document, it have mention about
In the event when one cluster running AD RMS is to be discontinued, users may still want to access
previously protected content that was issued a publishing license by that computer. Servers in other clusters can then add the to-be-discontinued server as a trusted publishing domain.
So i was wondering if there is an option for Ad RMS services to select a server or host to discontinued?
The scenario in my head now,
1.Build trust between in my new domain AD RMS with the existing AD RMS. update the certificate between the trusted domain as i mention above with my new domain AD RMS.
but i was wondering if i power down or decommission the server what will happen?
2. the worst case scenario will be decommission the old AD RMS service, and publish the new AD RMS services in new domain, simply build trust with the cross site domain.
any suggestion on this? which case is more workable?
Thanks
Dave

Hi,
I think you may ask in AD RMS forums:
http://social.technet.microsoft.com/Forums/en-US/home?category=rms&filter=alltypes&sort=lastpostdesc
Regards.
Vivian Wang

Applying GPO Packs on Server 2012 R2 with MDT 2013

Hi All,
I'm having a problem applying a GPO Pack to Server 2012 R2 via MDT 2013 LTI offline media.
I'm using a standard server task sequence. I've copied my GPO Pack files (created with local GPO export) to the following directory:
DeploymentShare\Templates\GPOPacks\WS2012R2-MDTGPOPack
GPOPack.wsf has been modified with the following
If(Left(strOpVer,3) = "6.3") and (strProductType <> "1") then
       strOS = "WS12R2"
        ElseIf(Left(strOpVer,3) = "6.3") and (strProductType = "1") then
       strOS = "Win81"
        ElseIf(Left(strOpVer,3) = "6.2") and (strProductType <> "1") then
       strOS = "WS12"
ZTIApplyGPOPack.wsf has been modified with the following:
If (Left(sOSVersion,3) = "6.3") and oEnvironment.Item("IsServerOS") then
                   sOS = "WS2012R2"
                oLogging.CreateEntry "Using Windows Server 2012 R2 GPO Pack", LogTypeInfo
           ElseIf (Left(sOSVersion,3) = "6.3") and Not(oEnvironment.Item("IsServerOS")) then
                   sOS = "Win81"
                   oLogging.CreateEntry "Using Windows 8.1 GPO Pack", LogTypeInfo
           ElseIf (Left(sOSVersion,3) = "6.2") and oEnvironment.Item("IsServerOS") then
               sOS = "WS2012RTM"
After creating new media I've copied my GPO Pack to the media directory:
MDTMedia\Content\Deploy\Templates\GPOPacks\WS2012R2-MDTGPOPack
After I create the ISO and mount in a VM the LTI works fine and I can see in temp\ZTIApplyGPOPack logs that the GPO pack is copied to C:\minint and executed but none of my GP settings are applied.
Any ideas?
Thanks in advance

if you are using offline media (and not over the network deployment) maybe you are having this problem:
http://social.technet.microsoft.com/Forums/en-US/be2c05a0-620c-4b64-a82f-18ccc9f6cec5/apply-gpo-pack-offline-media-does-not-apply?forum=mdt

Migrating Virtual Machine - Error "Failed to Complete planned Virtual Machine at migration destination" - Server 2012 R2

So to get started I'll give a bit of background on the Infrastructure we are currently working with.
We have:
2 x Hyper-V Hosts (Currently 2 for testing migrations, this will increase once we have a working platform)
2 x File Servers acting as storage nodes for VHD Storage
1 x Physical DC
The Hyper-V Hosts both have Server 2012 R2 Datacentre installed, the rest have Server 2012 R2 Standard installed and configured.
We currently have some VM's sitting on one host and I am in the process of simulations to make sure live migration is working between the two HV Hosts (This is a non-clustered setup), Everything is on the domain and i've been using a domain admin account
to administer these servers for these simulations.
We plan on having VHD's stored on FS01 and FS02, basically our primary host is going to have all primary servers on and then those vhd's will be stored on FS01 and then all secondary/redundant servers are going to be on the second host and vhd's stored on
FS02 - Simple enough?
I can perform Data migrations between both FS01 and FS02 using the Hyper-V Management tool on both hosts without any issues. The issue I am currently encountering is when I perform a migration of the "Virtual Machine Only". Now, this simulation
works when the data for the VM is stored on either of the hosts using UNC pathway, no hiccups at all, I receive the below error when ever the data is stored on either FS01 or FS02 using again, UNC pathway (These VM's power on and work perfectly otherwise while
hosted on FS01/02).
Error:
I've researched this quite a lot and have gone through countless solutions other people are having.
http://social.technet.microsoft.com/Forums/windowsserver/en-US/5780d041-4036-404e-9f33-8abe025bfe2b/hyperv-failed-to-create-external-configuration-store-general-access-denied-error-ox80070005?forum=winserverhyperv (Which
took me to the below link)
http://support2.microsoft.com/kb/2249906 (This solution didn't work, in fact i couldn't even get CMD to run the command)
Now, with
THIS SOLUTION that I attempted I worked with adding all the hosts and FS01 (because nothing is on FS02 at the moment) in an attempt to get the VM Migration only working between hosts and still receive the same error.
As a testing option, I Moved the Data for the VM back to one of the hosts using UNC pathway and then performed a live migration to the other host no problems, then performed a data migration back to FS01 and that also worked. I don't particularly want to
do this with production VM's as I have at least 6 x 780GB vhd's that need to be moved and this would move them more than once, obviously not ideal.
If someone is able to help me out, or at least point me in the right direction, that would be awesome!

I did try adding the 'Everyone' permission for the testing of migration to see if it was a permission issue which didn't help at all before I'd posted this article.
This ended up being a Computer Delegation issue, I'd neglected to add the 'cifs' (SMB Protocol) on ALL servers for ALL servers in the cluster, I didn't add that permission in my FS01 or FS02 servers for each other or the hyper-v servers that were in operation.
I've now started our production Hyper-V Servers and they haven't skipped a beat since adding in those delegations correctly to all servers as a "Full mesh" type setup.
Thanks for responding in any case :)
This is the permission I am referring to if anyone else has the issue:
AD>Computers>{Name of Computer}
I also performed an active directory replication forcefully with:
repadmin /replicate <Target> <Source> dc=Domain,dc=local
Run as a powershell command.

Windows 2003 migration to Server 2012 R2

Hi,
We have task to plan Windows 2003 Server migration to Windows Server 2012 R2. Since Server 2003 is running with domain services and file share for users.
We have to use the same hardware for installation with all required roles. Does anyone support if this physical Windows 2003 server can be migrate first on hyperV VM as to host temporary for user access on the other side physical server will be configured
with Windows 2012 server with all required roles and testing.
Mumtaz

Technically, you can often move a physical instance of Windows Server 2003 to a virtual instance. However, it is not the recommended path. If you have to keep it on 2003, it a better solution is to build a new VM running Windows Server 2003 and then
install the application. Performing a Physical to Virtual is not a guarantee that things will run correctly in the VM. The best solution is to get off 2003 ASAP.
Search TechNet for '2003 to 2012 migration'. Microsoft has provided a lot of information on how to migrate.
. : | : . : | : . tim

Migrate FROM Server 2012 R2 Essentials TO Server 2012 R2 Standard

We have a new server with 2012 R2 Essentials. Failed to realize Essentials need for Domain Controller role and Deltek Vision Software running on new server does not run on Domain Controller. We are prepared to upgrade to Server 2012 R2 Standard,
and have read the "Transition.." article in the Tech Net Library, but it does not go into much detail. Need to know what else is involved and does the transition remove the FSMO requirement? Does the transition wipe out all
programs and SQL Server installations? I have found articles on migrating from standard to essentials, but not the other way around.

Hi,
When you talk about the "Transition" means Transition from Windows Server 2012 Essentials to Windows Server 2012 Standard?
http://technet.microsoft.com/en-us/library/jj247582.aspx
If you talk about the migration, i think you could do the migration process.
http://technet.microsoft.com/en-us/library/dn408633.aspx
Regards.
Vivian Wang

Cross Forset Migration from sccm 2012 to sccm 2012RS

Hi all,<o:p></o:p>
We have a plan to migrate
sccm 2012 to sccm 2012 R2 on trusted forest (cross forest migration)<o:p></o:p>
Please share possibility...<o:p></o:p>
Thanks, Mariappan Shanmugavel

Possibility for what?
Migration only works from ConfigMgr 2007 SP2 or from the same version of ConfigMgr 2012 thus will not be able to migrate from 2012 to 2012 R2. You will need to upgrade your 2012 site to 2012 R2 first and then perform the migration. The TechNet docs clearly
show this: http://technet.microsoft.com/en-us/library/gg699364.aspx
ANd, as Torsten pointed out, if you are simply planning on moving the existing site server, that isn't supported and won't work either.
Jason | http://blog.configmgrftw.com | @jasonsandys

Network Location not showing domain name in Server 2012 R2 after demoting 2003 PDC

The single active NIC in my new Server 2012 R2 no longer shows the Network Location of "DOMAIN.LOCAL" like it did before I demoted the only Server 2003 domain controller. The NIC now shows "NETWORK" as the Network Location.
The registry still shows a Profile with the correct PROFILENAME in
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\NetworkList\Profiles
but that name does not show up in the Network List Manager Policies inside Local Security Policy.
The 2012 R2 Srv has all of the FSMO roles, Client PC's can connect to the domain but will not get new map drives from a script, they must be created manually. My Quickbooks Enterprise clients cannot see the QB Server Manager on this server and I think it
is related to this issue because of firewall restrictions.
The Windows Firewall pointed me in this direction because the "Private Networks" is connected to my NIC named "Network" but the Firewall "Domain Networks" is reported as "Not connected."
Any Help is appreciated,
CrazyDog

Hi,
Based on my research,
Network Location Awareness (NLA) service expects to be able to enumerate the
domain’s forest name to choose the right network profile for the connection. The service does this by calling
DsGetDcName on the forest root name and issuing an LDAP query on UDP port 389 to a root Domain Controller.
If something hinders the DNS name resolution or the connection attempt to the DC, NLA is not able to set the appropriate network profile on the connection.
Therefore, I suggest you check the DNS settings on DCs and other domain-joined machines, which should point to the existing DC as preferred DNS server, and secondary DC as alternate DNS server, IP address of demoted DC should be
removed. In addition, please do not use loopback IP address.
Here are some articles below I suggest you refer to:
Network Location Awareness (NLA) and how it relates to Windows Firewall Profiles
http://blogs.technet.com/b/networking/archive/2010/09/08/network-location-awareness-nla-and-how-it-relates-to-windows-firewall-profiles.aspx
Network Location Awareness
http://technet.microsoft.com/en-us/library/cc753545(v=WS.10).aspx
Complete Step by Step to Remove an Orphaned Domain controller
http://msmvps.com/blogs/acefekay/archive/2010/10/05/complete-step-by-step-to-remove-an-orphaned-domain-controller.aspx
Best Regards.
Amy

After Migration to Server 2012 R2 One Zip Archive (7.08 mb) Downloads Empty

I recently migrated from Server 2008 R2 to 2012 R2. I offer a number of web application as zip archives and Dreamweaver Extension installer packages .mxp. I have one zip archive that's empty when downloaded with size 0. Out of all the files served
the issue only exists with this one file. All the other files regardless of .zip or .mxp work correctly. I think it may be a size related issue. The .zip file that is empty is 7.08 mb and the others are much smaller. I've tried deleting the existing file
and uploading a new one with and without a file name change and still get same results. Here's the code.
I'm thinking I may need to allow the larger file download. Does anyone know how to fix this?
Response.Buffer=true
On Error Resume Next
'Create a stream object
Dim mxp_downloadStream
Set mxp_downloadStream = Server.CreateObject("ADODB.Stream")
mxp_downloadStream.Type = 1
mxp_downloadStream.Open
mxp_downloadStream.LoadFromFile Server.Mappath("../downloads/dwmx_extensions/" & (rs_mxp.Fields.Item("MXP_DL_Path").Value) & "")
If Err.number = 0 Then
Response.Clear
Response.ContentType = "application/octet-stream"
Response.AddHeader "Content-Disposition", "attachment; filename=" & (rs_mxp.Fields.Item("MXP_DL_Path").Value) & ""
Response.AddHeader "Content-Transfer-Encoding","binary"
Response.BinaryWrite mxp_downloadStream.Read
mxp_downloadStream.Close
Set mxp_downloadStream = Nothing
Response.End()
End If

YOu are asking a quesiton about ASP on a web server. YOu need to post in the web server forum for this. Thisis not a web scripting forum.
Try here: http://forums.iis.net/
¯\_(ツ)_/¯

Cross Domain Migrations - Able to access own mailbox but no other resource

Hi,
I wondered in anyone could offer any guidance on a problem we are seeing with a
cross forest Exchange 2010 (domain A) to Exchange 2013 (domain b)migration.
Our problem is based around the fact that the users are still logging into 'windows clients' in the source domain (domain A). We have configured mail enabled users in the source to enable auto discover to work correctly and the user can successfully
connect to their own mailbox once it is provisioned in Exchange 2013 (domain B). Our main Outlook client being 2010 SP2.
The user is not prompted to login at this stage, which is preferred.
However the problem is that they cannot connect to any other resource in the Exchange 2013 (domain B) environment. (We have no interest in them accessing resources in the Exchange 2010 environment as this is a major switchover). When attempting to connect
to public folders (2013) they receive only those permissions provided by the 'Default' user permission. When trying to expand a mailbox where full access has been granted they receive the 'Unable to expand. An attempt to logon to Microsoft Exchange
has failed' error.
If we change Outlook to 'Always prompt for logon credentials' and then login with credentials from the target domain (domain B, all resources can be accessed successfully.
As part of our migration we have used ADMT, a two way trust is in place, SID history has been migrated and SID filtering is turned off in both directions. Passwords in both domains are matching by virtue of an Identity management solution. Outlook anywhere
on exchange 2013 is set to negotiate (internal and external) with IIS configured with 'Basic, NTLM and Negotiate' as authentication types.
Whilst the obvious answer is simply to get the users to login to the target domain (domain B), it is unfortunately a requirement that users continue to login to the source domain (domain a) for a while after the Exchange migration has completed.
Would anyone be able to advise if this is just something we have to live with and find a way to force users to login every time they open outlook, or is there perhaps a way to configure this to work so that users are not prompted to login but can access
all their resources.
Many thanks for any assistance or opinions.
Kind Regards,
Mark Needham

Hi Mark,
Please try to clean up the cached credential in your computer. Then fill in with new domain information (domainB\user) when it prompted for credentials next time and check the Remember my credential to save it. About how to remove cached credentials, please
follow these steps:
1. Launch the Credential Manager from Control Panel > All Control Panel Items > Credential Manager.
2. In the Generic Credentials section you’ll see a setting for [MS Outlook] which will include your SSO details. Click the downward-pointing arrow to the right of that value.
3. In the expand details, click Remove from vault. Then Outlook will no longer have a stored copy of your old login information (domainA\user).
If it doesn’t work, please change the windows account with domainB\user information to have a try.
Regards,
Winnie Liang
TechNet Community Support

SBS2011 - Cross domain Migration to Server 2012 R2 w/ Exchange 2013

Similar Messages

Maybe you are looking for