Checking full access permission on mailbox

Question

Hi all, 
 I'm currently doing a migration from Notes to Exchange Online. 
 I did one this morning and all went OK, however trying a migration now for 7 mailboxes and the bit right at the beginning where it says "Checking full access permission on mailbox" has been sitting there for 20 mins now where as it usually takes 2 seconds per mailbox. 
 Checking the Microsoft 365 admin centre Service Health shows an issue: 
 "A very limited number of users may intermittently be unable to access Exchange Online via any connection method" which started on August 26th ! 
 
 Any ideas whats going on? 
 Thanks

Trevor Taegder · Answer

Hello Raj, 
 Thanks for posting to the Migrator for Notes to Exchange (MNE) forum. I understand you are experiencing an issue with your Notes to Office 365 migration where the migration is sitting and checking for "Full Access" rights. MNE does require Full Access rights when migrating to Office 365. At the beginning of the migration process, MNE checks to see if it already has Full Access rights to all target mailboxes. If it does, then it starts the migration typically in less than three minutes. If MNE does not have Full Access rights already, then MNE grants itself Full Access rights, but then must wait for them to take effect, which could be up to 45 minutes. 
 If you are already pre-provisioning the target Office 365 mailboxes outside of MNE, then you can run the MNE "Add-MNEMailboxAdminPermission" PowerShell cmdlet at least 45 minutes prior to starting the migration to ensure that the Full Access permissions already in place. The following section of the MNE Administrator Guide provides additional details about the MNE PowerShell cmdlets: 
 support.quest.com/.../57 
 Of course any Office 365 Service Health related issues can also impact the migration process. For more information on whether or not this specific Office 365 Service Health Advisory is effecting your users, you may want to reach out to Microsoft directly. 
 Please let me know if you have any additional questions or need any additional clarification. 
 Regards, 
 Trevor Taegder Senior Technical Support Engineer Quest | Support

Jeff Shahan · Answer

The issue is authentication and authorization in EXO. Add-MNEMailboxAdminPermission command which is a Quest proprietary command is really just a wrapper for native EXO cmdlets. Think of it as a function in a script. Your error is the key. Error: Error on proxy command 'Get-MailboxPermission -User:'Notes Migrator Admins Role Group' -Identity:'CN=user,OU=domain,OU=Microsoft Exchange Hosted Organizations,DC=NAMPR02A900,DC=PROD,DC=OUTLOOK,DC=COM'' to server SG2PR01MB2870.apcprd01.prod.exchangelabs.com: Server version 15.20.3391.0000, Proxy method PSWS: Request return error with following error message: The remote server returned an error: (401) Unauthorized.. 
 How you executed the connection to EXO is most likely different as we are using Modern Authentication, I suspect you are using basic auth. This why Trevor pointed to this test. " On the two MNE servers that are not working, can you open File Explorer, navigate to %temp% and delete the file called "MNETokenCache.dat", then try running the Add-MNEMailboxAdminPermission again. . This would have removed the cached token and forced it to be recreated. 
 The configuration for the consoles are stored in the SQL DB. So you can't really get ride of those as they are shared between all consoles. I would recommend you reconnect with Quest support using your #4769147. Clearly the token is not getting cached on two of your three servers.

Checking full access permission on mailbox

Top Replies