+ CategoryInfo : NotSpecified: (:) [New-MoveRequest], RemoteTransientException
+ FullyQualifiedErrorId : [Server=<Server>,RequestId=cefd739e-ee9c-4a6a-8cde-568ecd744b9c,TimeStamp=5/23/2014 11:21:23 PM] [FailureCategory=Cmdlet-RemoteTransientException] 384B348,Microsoft.Exchange.Management.RecipientTasks.NewMoveRequest
+ PSComputerName : <ComputerName>.outlook.com
Result : Failed
Message : The ExchangeRemote endpoint settings could not be determined from the autodiscover response. No MRSProxy was found running at <Server>.
SupportsCutover : False
ErrorDetail : internal error:Microsoft.Exchange.Migration.MigrationRemoteEndpointSettings couldNotBeAutodiscoveredException: TheExchangeRemote endpoint settings could not be determined from the autodiscover response. No MRSProxy was found running at '<Server>'. ---> Microsoft.Exchange.Migration.MigrationServerConnectionFailedException:The connection to the server '<Server>'could not be completed. ---> Microsoft.Exchange.MailboxReplicationService.RemoteTransientException: The call to 'https://<ServerName>/EWS/mrsproxy.svc' failed. Error details: Access is denied.. ---> Microsoft.E xchange.MailboxReplicationService.RemotePermanentException : Access is denied.--- End of inner exception stack trace --- at Microsoft.Exchange.MailboxReplicationService.Mailbox ReplicationServiceFault.<>c__DisplayClass1.<ReconstructAnd Throw>b__0() at Microsoft.Exchange.MailboxReplicationService.Executi onContext.Execute(Action operation) at Microsoft.Exchange.MailboxReplicationService.Mailbox ReplicationServiceFault.ReconstructAndThrow(String serverName, VersionInformation serverVersion) at Microsoft.Exchange.MailboxReplicationService.CommonU tils.CallWCFService[ExceptionT](Action serviceCall, String epAddress, Action`1 faultHandler, VersionInformation serverVersion) at Microsoft.Exchange.MailboxReplicationService.CommonU tils.CallService(Action serviceCall, String epAddress, VersionInformation serverVersion) at Microsoft.Exchange.Migration.MigrationExchangeProxyR pcClient.CanConnectToMrsProxy(Fqdn serverName, Guid mbxGuid, NetworkCredential credentials, LocalizedException& error) --- End of inner exception stack trace --- at Microsoft.Exchange.Migration.DataAccessLayer.Exchang eRemoteMoveEndpoint.VerifyConnectivity() at Microsoft.Exchange.Management.Migration.TestMigrationServerAvailability.InternalProcessEndpoint(BooleanfromAutoDiscover)--- End of inner exception stack trace ---IsValid : TrueIdentity :ObjectState : New
Test-MigrationServerAvailability -ExchangeRemoteMove -Autodiscover -EmailAddress firstname.lastname@example.org -Credentials (Get-Credential)
- Verify that you're experiencing this issue. To do this, determine whether the computer account of the Exchange 2013 hybrid server has its adminCount attribute set to 1.
To find the adminCount attribute, follow these steps:
Locate Active Directory Users and Computers, and then select View > Advanced Features.
Expand the domain for the server that is running Exchange Server, and then expand Computers.
Locate the Exchange 2013 or Exchange 2016 server. Right-click the server, and then select Properties.
Locate the Attribute Editor tab, and then locate the adminCount attribute.
- Account Operators
- Server Operators
- Print Operators
- Backup Operators
- Domain Admins
- Schema Admins
- Enterprise Admins
- Cert Publishers
- Domain Computers
- Exchange Install
- Domain Servers
- Exchange Servers
- Exchange Trusted Subsystem
- Managed Availability Servers
- Set the value of the adminCount attribute on the computer account to 0.
- Restart the server.
Active Directory Domain Services (AD DS) uses a protection mechanism to make sure that access control lists (ACLs) are set correctly for members of sensitive groups. The mechanism runs one time each hour on the primary domain controller (PDC) operations master. The operations master compares the ACL on the user accounts that are members of protected groups against the ACL on the following object:
If the ACLs differ, the ACL on the user object is overwritten to reflect the security settings of the adminSDHolder object (and ACL inheritance is disabled). This process protects these accounts from being modified by unauthorized users if the accounts are moved to a container or an organizational unit where a malicious user has been delegated administrative credentials to modify user accounts. Be aware that when a user is removed from the administrative group, the process is not reversed and must be changed manually.
If you experience issues when you move mailboxes to Exchange Online in Office 365, you can run the Troubleshoot Office 365 Mailbox Migration tool. This diagnostic is an automated troubleshooting tool. If you're experiencing a known issue, you receive a message that states what went wrong. The message includes a link to an article that contains the solution. Currently, the tool is supported only in Internet Explorer.