Supported platforms and system requirements

The tables below show the program's requirements, necessary for its proper operation, and the list of supported platforms.

Software components
The program consists of two main components: CodeTwo Office 365 Migration Administration Panel – used to manage and perform migrations. CodeTwo Office 365 Migration Data Provider service – responsible for accessing source Exchange mailboxes via MAPI. The service is installed only when you configure a MAPI connection in the program. Learn more about the program's components

Software components

The program consists of two main components:

CodeTwo Office 365 Migration Administration Panel – used to manage and perform migrations.
CodeTwo Office 365 Migration Data Provider service – responsible for accessing source Exchange mailboxes via MAPI. The service is installed only when you configure a MAPI connection in the program.

Learn more about the program's components

SOURCE server environment requirements
Where to install	When migrating from Exchange Server, the program can be installed either directly on the server machine or on any workstation in the source server environment. Installing directly on the source Exchange Server machine is recommended, but only under certain conditions (learn more and check exceptions). If you intend to migrate data from Exchange 2010 without SP1, or use the MAPI protocol to connect to your source environment, these additional requirements apply. In the case of migration from Office 365, a hosted Exchange server or an IMAP server, the software can be installed on any machine that can connect to both the source and the target environment.
Supported operating systems	All 32-bit and 64-bit systems starting from Windows 10 / Windows Server 2008 R2 SP1 up to Windows 11 / Windows Server 2022⁽⁾ are supported. ⁽⁾** If you are using Windows Server 2016, make sure your operating system includes the latest updates. Learn more
Hardware	There are no specific hardware requirements for the software to run; however, migration bottlenecks may occur due to old or slow equipment. For the best software performance, we recommend that you use at least a quad-core CPU and 4 GB of RAM. Be aware, aside from that and Internet connection speed, migration may also be affected by the performance of your LAN hardware such as modem, router, switch and Ethernet card. Learn more
Size on disk after installation	Similar to the size of the installation file (see the Download page for details). Installation of additional components (such as .NET) might be required - these components usually require less than 100 MB of available disk space. The program doesn't store the data being migrated at any intermediate location on your local disk.
Migration source	Office 365 plans with Exchange Online (including F1 and Kiosk plans) Exchange Server 2019 Exchange Server 2016 CU2 Exchange Server 2013 CU13 Exchange Server 2010 Windows Small Business Server 2011 hosted Exchange servers (Exchange 2010 and newer), e.g. Intermedia, Rackspace or GoDaddy all other mail servers, e.g. Google Workspace, IBM Notes, Zimbra, Zarafa, Kerio Connect and more (access via IMAP)
Required accounts and permissions	General The software user must be a local administrator.
	Connection to source Exchange via EWS An admin account used to connect to a source server via EWS: must have a valid, working, non-hidden mailbox in the source environment, must have a UPN address configured, must have the following roles assigned: ApplicationImpersonation View-Only Configuration Info If any of these roles are missing, the software will attempt to assign them automatically. Learn more about the management roles To be able to connect to your source server via EWS, make sure that you are running at least Exchange 2010 SP1.
	Connection to source Office 365 (via EWS and Graph API) You need to register CodeTwo Office 365 Migration in your source Microsoft Entra ID (Azure Active Directory) tenant to establish a connection between the program and Office 365. The program needs to be granted the following application permissions in Entra ID: Exchange: full_access_as_app Microsoft Graph: Directory.Read.All MailboxSettings.ReadWrite User.Read.All The registration can be done: automatically by the program – an account with the Global Administrator or Privileged Role Administrator role is required to perform the registration; manually – you will be asked to provide an email address of any user from your Office 365 tenant, together with some of the application registration details from Entra ID. Either way, in both cases the account which credentials you provide in the program needs to be assigned an Office 365 license that includes the Exchange Online plan. Learn more about OAuth 2.0 authentication process
	Connection to source Exchange via MAPI An admin account used to connect to a source server via MAPI: must have a valid, working, non-hidden mailbox in the source environment, must be a member of the Organization Management group. Important Migration of public folders requires full access permissions, see details.
	Connection to source hosted Exchange server via EWS An admin account used to connect to a source hosted Exchange server via EWS: must have a valid, working, non-hidden mailbox in the source environment, must have the ApplicationImpersonation role assigned (only for the mailboxes to be migrated).
	IMAP migration requires users' account credentials. Learn more
Additional components	Depending on the environment, the installation of the components listed below may be required: Microsoft .NET Framework 4.6.1 or higher, required on all systems, Windows PowerShell 3.0, required on all systems, MAPI CDO (Messaging API and Collaboration Data Objects), required for MAPI migrations. Important MAPI CDO is not required if you have a 32-bit version of Outlook 2013 or earlier installed on your machine. If so, the software will display an appropriate message. In addition, CodeTwo Office 365 Migration requires a popular modern web browser, such as: Microsoft Edge, Google Chrome, Mozilla Firefox.

TARGET Office 365 requirements
Target Office 365	Office 365 plans with Exchange Online (including F1 and Kiosk plans) Looking for migration to Exchange Server 2019?
Admin account rights	You need to register CodeTwo Office 365 Migration in your target Microsoft Entra ID (Azure Active Directory) tenant to establish a connection between the program and Office 365 and to perform the migration. The program needs to be granted the following application permissions in Entra ID: Exchange: full_access_as_app Microsoft Graph: Device.ReadWrite.All Directory.Read.All Directory.ReadWrite.All MailboxSettings.ReadWrite User.Read.All User.ReadWrite.All The registration can be done: automatically by the program – an account with the Global Administrator or Privileged Role Administrator role is required to perform the registration; manually – you will be asked to provide an email address of any user from your Office 365 tenant, together with some of the application registration details from Entra ID. Either way, in both cases the account which credentials you provide in the program needs to be assigned an Office 365 license that includes the Exchange Online plan. Learn more about OAuth 2.0 authentication process If you intend to migrate public folders, this account needs to meet some additional requirements. Refer to the Notes and warnings section below to learn more.

TARGET Office 365 requirements

Target Office 365

Office 365 plans with Exchange Online (including F1 and Kiosk plans)

Looking for migration to Exchange Server 2019?

Admin account rights

You need to register CodeTwo Office 365 Migration in your target Microsoft Entra ID (Azure Active Directory) tenant to establish a connection between the program and Office 365 and to perform the migration. The program needs to be granted the following application permissions in Entra ID:

Exchange:

full_access_as_app

Microsoft Graph:

Device.ReadWrite.All
Directory.Read.All
Directory.ReadWrite.All
MailboxSettings.ReadWrite
User.Read.All
User.ReadWrite.All

The registration can be done:

automatically by the program – an account with the Global Administrator or Privileged Role Administrator role is required to perform the registration;
manually – you will be asked to provide an email address of any user from your Office 365 tenant, together with some of the application registration details from Entra ID.

Either way, in both cases the account which credentials you provide in the program needs to be assigned an Office 365 license that includes the Exchange Online plan.

Learn more about OAuth 2.0 authentication process

If you intend to migrate public folders, this account needs to meet some additional requirements. Refer to the Notes and warnings section below to learn more.

Other
Items supported for migration	The program supports migration of all standard Exchange Server/Office 365 mailbox items and Exchange public folder items via MAPI and EWS; only mailboxes can be migrated from hosted Exchange servers (EWS connection); only emails can be migrated from other servers (accessed via IMAP).
	The program also migrates emails encrypted using Office 365 Message Encryption (OME) and emails with sensitivity labels. Such emails remain encrypted and retain their properties after the migration. In cross-tenant migration scenarios, users from the target Office 365 tenant will not have sufficient permissions to open emails encrypted by OME or, for example, emails marked as Confidential \ All Employees. This is the expected behavior – for security reasons, encrypted emails can only be read by intended recipients (original recipients). CodeTwo Office 365 Migration does not decrypt such emails during the migration.
	Multi-factor authentication (MFA) is fully supported for Office 365 connections.
Notes and warnings	If you plan to access the source mailboxes via MAPI, you first need to uninstall Outlook 2019 and 2016 or 64-bit versions of Outlook 2013 and 2010 from your machine.
	The program may not work properly if installed alongside other applications that use MAPI libraries. Install CodeTwo software on another machine, do not share service account with any other MAPI-using programs while migration is in progress, to avoid conflicts. Disabling such programs is recommended.
	If you're using both local and network-wide security systems like firewalls, proxies or other protection software, make sure to unlock access to the CodeTwo licensing service at the following URL: https://licensing2.codetwo.com/public Additionally, to be able to receive the CodeTwo SSL certificate, you also need to unlock access to the following GoDaddy endpoints: ocsp.godaddy.com crl.godaddy.com over ports 80 (HTTP) and 443 (HTTPS).
	The program migrates mailboxes' and public folders' contents only. The properties, permissions, AD accounts, AD groups membership, GAL, etc. of mailboxes or public folders are NOT migrated; however, you can set the program to create mailboxes automatically and migrate desired AD properties. Be advised, some of the mentioned properties are recreated automatically by target server upon successful migration e.g. free/busy statuses. If you need more information on how to retain permissions to public folders after the migration, check out this article.
	Migration of public folders is possible only if target public folders were already created (see how to do this). In addition, the admin account used to establish a connection with the target Office 365 tenant needs to be assigned the Owner permission level to the root public folder on that tenant and to all subfolders to which the data will be migrated. Migration of public folders from hosted Exchange servers or by using a CSV file is not supported.
	If you are working with AD synchronization tools e.g. Microsoft Entra Connect (Azure Active Directory Connect), Azure Active Directory Synchronization Services (AAD Sync), Azure Active Directory Synchronization Tool (DirSync), Forefront Identity Manager 2010 R2 (FIM) please refer to this Knowledge Base article prior to migration.
	Migration of linked mailboxes and resource mailboxes (such as conference rooms) is currently not supported. However, there is a workaround that allows you to migrate resource mailboxes as regular mailboxes and then convert them back to a room or equipment mailbox. Learn more in our Knowledge Base article
	Migration of shared mailboxes is possible. However, be aware that the All Active Directory users filter does not list disabled users from the source server to which shared mailboxes are assigned. You need to either pick them manually using the Active Directory users filter or enable those users' accounts in AD. Migration to shared mailboxes is supported.
	Migration of archive mailboxes (or In-Place Archives) is supported, but you need to enable them manually on your target server before the migration (see how to do this). To migrate archive mailboxes larger than 100 GB, you also need to enable auto-expanding archiving to increase the storage limit of your target archive mailboxes. Learn more Important: According to Microsoft's documentation, it can take up to 30 days until additional storage space (another 100 GB) is provisioned for archive mailboxes in Exchange Online. This means that the migration of archive mailboxes larger than 100 GB can take 30 days or more, depending on the size of your source archive mailboxes.
	Recurring appointments and recurring tasks are migrated as series (not as single occurrences).
	Migration of Microsoft 365 group mailboxes is currently not supported.
	Migration of IMAP flags is currently not supported.
	Hidden system folders in Exchange mailboxes such as Recoverable Items or Sync Issues are not supported.
	Microsoft 365 from GoDaddy (Office 365 from GoDaddy) is supported, both as a source and target of your migration. You need to have global admin rights to your Microsoft 365 tenant at GoDaddy. To learn how to migrate mailboxes from GoDaddy to Microsoft 365, see this article.
Hybrid setup support	Hybrid as a source: Migrating from a hybrid environment is possible. To migrate your on-premises mailboxes, you need to create a connection to on-premises Exchange Server. To migrate your Office 365 mailboxes, you need to create a connection to Office 365. To migrate a hybrid environment you can, for example, create two migration jobs: one connecting to source on-premises mailboxes, and another connecting to source Office 365 mailboxes.
	Hybrid as a target: Migrating to a hybrid environment is supported if you use CodeTwo Exchange Migration to migrate to mailboxes located in on-premises Exchange (target server connection must use on-premises admin account that has adequate roles assigned) and CodeTwo Office 365 Migration to migrate to mailboxes located in Exchange Online (target server connection must use Office 365 admin account, also with appropriate roles assigned, as specified above).
	Since public folders cannot reside in both Exchange on-premises and Office 365 at the same time, migrating them within a hybrid environment requires special preparations, as described in this article. You will also not be able to migrate public folders with the HoldForMigration parameter set. The Hold for migration switch blocks any client or user from accessing a public folder mailbox.
	ADFS is not yet supported. Single Sign-On (SSO)-enabled accounts may be used for target server connection configuration but only when a UPN in a non-federated target domain address is used (e.g. *.onmicrosoft.com).

Supported platforms and system requirements

See also