Well, (knock on wood) I actually had an Exchange swing migration go smoothly. I did have an issue with the following instruction from here:
After the last Exchange 2003 or Exchange 2000 server has been removed from the Exchange 2007 organization, the Write DACL inherit (group) right for the Exchange Servers group should be removed from the root of the domain by running the following command:
Remove-ADPermission "dc=" -user "\Exchange Servers" -AccessRights WriteDACL -InheritedObjectType Group
I got hung up on the domain part, so here is the command in real life, followed by the result in the Exchange Shell. (Domain names have been changed to the ubiquitous contoso.com to protect the innocent. I'll have to rant on the contoso.com thing in a future post.)
Remove-ADPermission "dc=contoso,dc=com" -user "contoso.com\Exchange Servers" -AccessRights WriteDACL -InheritedObjectType Group
Confirm
Are you sure you want to perform this action?
Removing Active Directory permission "contoso.com" for user "contoso.com\Exchange Servers" with access rights "'WriteDacl'".
[Y] Yes [A] Yes to All [N] No [L] No to All [S] Suspend [?] Help (default is "Y"): y
You're welcome!
AOS
Decommissioning Exchange servers have been known to induce the following side effects: dizziness, nausea, lack of patience, and vertigo. Do not decommission Exchange servers under the influence of alcohol, tobacco, monoamine oxidase inhibitors (MAOIs) or any controlled substances. Consult your primary care physician before embarking in the consulting industry. If you feel the sudden urge to slash your wrists, seek immediate medical attention.