Email Migration

Fix Access Denied Errors During Exchange Hybrid Mailbox Migration

John WilsonJohn Wilson Nov 3, 2026 869 views

Question details

Users encounter Access Denied errors and transient exceptions when migrating mailboxes from on-premises Exchange to Exchange Online.

How to Fix Access Denied During Exchange Hybrid Mailbox Migration
Product
Microsoft Exchange
Device & OS
not provided
Scenario
Migrating mailboxes from on-premises Exchange servers to Microsoft 365 Exchange Online.
Observed behavior
Most mailboxes fail to migrate, returning 'MigrationTransientException' or 'TooManyTransientFailureRetriesPermanentException' because the EWS MRSProxy endpoint returns Access Denied.
Before you start

Ensure you have Microsoft 365 global administrator privileges before attempting to open a support ticket or manage hybrid server settings.

Solution 1Recommended

Open a Microsoft 365 Support Request

Since the issue is often caused by backend resource limitations on the hybrid server, contacting Microsoft Support is the most reliable way to resolve MRSProxy failures.

Backend resource throttling can cause the Mailbox Replication Service (MRS) Proxy endpoint to deny access during large or resource-intensive migrations. Microsoft support can investigate and potentially adjust throttling policies on the backend.

1
Log in to the Admin Center

Navigate to the Microsoft 365 admin center using your global administrator credentials.

2
Navigate to Support

On the left-hand navigation menu, locate and click on 'Support'.

3
Create a New Request

Select 'New service request' and provide the details of your MigrationTransientException and MRSProxy Access Denied errors for the backend team to investigate.

Open a Microsoft 365 Support Request
Required Information: Be prepared to provide the exact error messages, the number of affected mailboxes, and the time the migration batch failed.
Free Microsoft Office alternative

Looking for a Lightweight Office Solution After Migration?

While managing complex Exchange migrations and IT infrastructure, you need an office suite that won't slow you down. WPS Office provides a free, lightweight, and highly compatible alternative to Microsoft Office, ensuring seamless productivity without a heavy resource footprint.

  1. 1. Download the Installer: Visit the official WPS Office website and click the free download button for your operating system.
  2. 2. Install WPS Office: Run the downloaded installer file and follow the simple on-screen instructions to complete the setup.
  3. 3. Open Your Documents: Launch WPS Office and instantly open your existing Microsoft Office files with perfect formatting compatibility.
Fully compatible with Microsoft Word, Excel, and PowerPoint formatsLightweight application that runs smoothly on any system with minimal resourcesFamiliar user interface for immediate productivity without a learning curveFree to use for your essential document, spreadsheet, and presentation needs
microsoft office alternative - wps office

Frequently Asked Questions

What does MigrationTransientException mean during Exchange migration?

This exception indicates a temporary issue, often related to server resource limitations, network timeouts, or throttling on the Microsoft 365 backend. In many cases, retrying the migration later will resolve it.

Why is the EWS MRSProxy endpoint returning Access Denied?

An Access Denied error from the Mailbox Replication Service (MRS) Proxy usually happens when the backend server is overloaded, connection limits are reached, or there is an authentication misconfiguration on the hybrid server.

How can I check if MRSProxy is enabled on my Exchange server?

You can verify the MRSProxy status by opening the Exchange Management Shell and running the 'Get-WebServicesVirtualDirectory' cmdlet. Ensure that the 'MRSProxyEnabled' parameter is set to true for your environment.