FirstClass Migrator needs to access the Microsoft Exchange Server using MAPI, access the LDAP service, and access the FirstClass server.
Accessing Microsoft Exchange using MAPI
FirstClass Migrator uses MAPI as the main programming interface to access most Microsoft Exchange information.
FirstClass Migrator saves the Microsoft Exchange directory objects' Migration Status Log within the objects themselves, so you need to log into the Microsoft Exchange Server as a user with privileged access on all three Microsoft Exchange permission levels (organization level, server level, and site level). For more information about privileged access to Microsoft Exchange, see the related Microsoft Exchange Server documentation.
During startup, FirstClass Migrator initiates the MAPI login process first, which prompts the user to select a MAPI profile to log into. MAPI uses the default credentials (with which you start FirstClass Migrator) to log into the specified Microsoft Exchange Server. If you prefer to log in with credentials other than default, do the following:
1 Edit the MAPI profile you created.
2 Edit the "Microsoft Exchange Server" properties.
3 Select the Advanced tab.
4 Set "Logon network security" to "None".
 NoteThe above procedure may vary depending on your Windows version. See the related OS documentation for more information.
LDAP access
In addition to MAPI, FirstClass Migrator also needs to access the LDAP service exposed by the Microsoft Exchange Server, in order to cooperate seamlessly with the FirstClass Exchange Connector to implement features such as:
� automatically forwarding messages sent to migrated Microsoft Exchange users to their corresponding FirstClass accounts
� avoiding duplicate user entries within both the Microsoft Exchange Global Address List and the FirstClass Directory, by hiding the migrated Microsoft Exchange users from the Microsoft Exchange Global Address List upon migration.
Since the implementation involves modifications to some LDAP properties, you must log into the LDAP service as a privileged user. For more information about privileged access to Microsoft Exchange LDAP service, see the related Microsoft Exchange Server documentation.
FirstClass Migrator accesses the Microsoft Exchange LDAP service using Active Directory Service Interface (ADSI). You can log into the Active Directory Service in one of two ways:
� with default credentials
This is the simplest method but is not as powerful. You must ensure the default credentials have at least the "Permission Admin Role" privilege for directory objects under the desired Microsoft Exchange site.
Note
In Microsoft Exchange 5.5, you cannot access the hidden accounts when logged into ADSI with default credentials.
� with alternate credentials.
The following information is required:
� user name of a valid Windows NT account
This account must have the "Permission Admin Role" privilege for directory objects on the Microsoft Exchange site.
� name of the Windows NT domain to which the Microsoft Exchange Server belongs.
� password of the above account.
FirstClass Migrator uses this information to make up the required credentials. It follows this syntax:
� (for Microsoft Exchange 5.5)
"cn=username,dc=domain,cn=admin" and password
� (for Microsoft Exchange 2000)
"cn=username,dc=domain" and password
Note
If the ADSI login fails, verify your credentials manually against the above syntax. For more information, see the related Microsoft documentation.
Accessing FirstClass
FirstClass Migrator performs various server-side migration tasks using FirstClass scripting.
FirstClass Migrator initiates the FirstClass login process each time you start to migrate selected objects or synchronize the Migration Status Log. To simplify this, you need to:
� configure FirstClass Migrator to log into the destination FirstClass server as administrator
� share the FirstClass network store, making it writable from the FirstClass Migrator machine.
FirstClass Migrator needs direct access to the FirstClass network store during message migration.
| 
