"Mailboxes listed in the following table can't be migrated" error when you perform a staged Exchange migration to migrate on-premises mailboxes to Exchange Online

Applies to: Exchange Online


Consider the following scenario:
  • You want to set up single sign-on (SSO).
  • You have an on-premises Microsoft Exchange Server environment but don't want a full hybrid deployment with Microsoft Exchange Online in Office 365.
  • To implement SSO, you deploy Active Directory Federation Services (AD FS) 2.0 and then use Active Directory synchronization to sync user accounts from your on-premises Active Directory directory service to Microsoft Azure Active Directory (Azure AD).
In this scenario, when you perform a staged Exchange migration to migrate mailboxes from your on-premises environment to Exchange Online, you receive the following error message:
The mailboxes listed in the following table can't be migrated because they contain errors.
Learn more...
Additionally, when you click Learn more, you receive an error message that resembles the following:
Errors: Mailboxes -1

A Windows Live error occurred while provisioning for "joe@exch1.exchcloud.com". An internal error occurred while talking to Windows Live. Additional details: "0x800482101033This action is currently blocked for the API. CH1IDOPRTI03 2011.".


Office 365 can't change attributes of federated users. In this scenario, Office 365 can't change the value of the ForceChangePassword field from True to False in the CSV file that you created for the migration.


To resolve this issue, edit the CSV file to set the ForceChangePassword field to False for federated users. For example, the CSV file will resemble the following:


It's also important to make sure that the user who is accessing the mailboxes that are to be migrated has the necessary permissions. For more information, see the "What do you need to know before you begin?" section of Migrate Mailboxes to Exchange Online with a Staged Migration.

Still need help? Go to Microsoft Community.