[NNatic]

I am planning to do a migration from Exchange 2003 to 2010 next weekend and am trying to get my stuff together to make sure I am aware of what I am getting into. I am running BES Express 5.02 ( i know 03 is out now too )

With that said, I plan to put the CAS server in production next weekend. This process will not affect the BES until I move mailboxes correct? Specifically the BESAdmin mailbox and the users that are on the BES.

My main question is that currently the bes account is a domain administrator which i saw in some docs was a no no for exchange 2010. It is currently fully functional in our 2003 environment.

Below is the command that they say to run. Will this be okay even though the BES account is a domain admin? What do I need to do to make sure that this stays functional during this transition?

Configure Microsoft Exchange 2010 permissions for the Windows account
1. On a computer that hosts the Microsoft® Exchange Management Shell, open the Microsoft Exchange Management Shell.
2. Type Get-MailboxDatabase | Add-ADPermission -User "BESAdmin" -AccessRights ExtendedRight -ExtendedRights
Receive-As, ms-Exch-Store-Admin.
3. Type Add-RoleGroupMember "View-Only Organization Management" -Member "BESAdmin".
Upgrade Guide Preupgrade tasks
19
4. Type Add-ADPermission -InheritedObjectType User -InheritanceType Descendents -ExtendedRights Send-As -
User "BESAdmin" -Identity "CN=Users,DC=<domain_1>,DC=<domain_2>,DC=<domain_3 >" where <domain_1>,
<domain_2>, and <domain_3> form the name of the domain.
For example, if the domain name is IANA &mdash; Example domains, type www for <domain_1>, example for <domain_2>, and com for
<domain_3>.

Thanks for any help you can lend.

[knottyrope]

I would bite the bullet and make a new service account.

Article ID: KB04293
KB04293-How to switch BlackBerry Enterprise Server service accounts

[NNatic]

Originally Posted by knottyrope

I would bite the bullet and make a new service account.

Article ID: KB04293
KB04293-How to switch BlackBerry Enterprise Server service accounts

I was hoping you wouldnt say that I had thought about whether that was the best bet but wasnt sure. Damn.

So now to go over how to go about doing this. Two questions

A. When does this become an issue?

when i put the CAS server in place

when i would have moved the besadmin account to the exchange 2010 mailbox server

B. What should my detailed sequence be then?

1. Create the account
2. Set permissions in exchange 2010 per the document
3. Set this new account to the throttling policy which i created for besadmin
4. Put the 2010 Cas server in production
5. Change the mapi profile on BESX to point to the new service account

Is that correct? Anything that should be in a different order?