All sorted and migrated successfully with the Transporter. We set up a new server with a service account with the appropriate permissions in the resource forest, and Transported users to that one when the mailboxes moved. All very hassle-free.