The account used for connection with target domain controller where objects/containers will be restored needs the following:
- Administrative rights for target Active Directory
- Membership in the Exchange Organization Management group is required to provide for automatic mailbox re-connect for recovered user or group account
The account can be assigned an appropriate role on the Exchange server in target domain by running the following Exchange Management PowerShell cmdlet:
Add-RoleGroupMember “Organization Management” –Member “<user_name>”