Solved

Exchange 5.5 Problems!!

Posted on 2002-07-15
4
1,912 Views
Last Modified: 2008-04-12
Ok, need some help here. I recently re-ran the Exchange Optimizer after adding memory. Now the server won't start complaining with an error of:

"
The Microsoft Exchange Directory service depends on the Microsoft Exchange System Attendant service which failed to start because of the following error:
After starting, the service hung in a start-pending state.  
"

I was thinking it was a problem with the Exchange System Account even though I have not touched it. The odd things are:

1) When I log on the the server with the Exchange System Account (my default admin, rookie mistake I know, I get a lot of access denied errors. When I try to start Exchange Admin, read the event logs, etc, I get access denied. The account was not modified by me in any way. I am the on;y one who admins the server. I have about 5 family members that use the server for email, I don't suspect them with foul play.
2) When I try to change the account in which the various Exchange services start with, I get the message:

"
Cannot set the startup parameters for the Microsoft Exchange System attendant.
Error 1057 occurred: The account name is invalid or does not exist.


Does that message have to do with the fact that Exchange can only use the System Account that was specified during install? So now, I can only get the Exchange Dircetory and the System Attendant will start but only using the "LocalSystem" account.

3) When I try to run the Exchange Admin with ANY full Admin account, I get the error:

"
A connection could not be made to the Microsoft Exchange Server computer.
You do not have the permissions required to complete the operation.
Microsoft Exchange Directory
ID no: DS_E_INSUFFICIENT_ACCESS_RIGHTS
"

WTF does that mean??

I have a strange feeling that somehow my domin accounts got really screwed up. (another rookie mistake making the mail server a DC)

I can access the event logs with another Admin account but not the Exchange System Account (again, my primary login account).
The earlier event logs say that the account was locked out. I have account lockout policy in place to deter intrusion. The elapsed time would have passed for the lockout.

I have no ERD. (another BIG mistake).

I mention the Optimizer because that coincided with the start of the problems, although, I have the feeling it's only coincidence.

I started the process described in MS's white paper about changing the Service Account, but I can't start "admin /r"
let alone "admin".

It's an Exhcnage Server 5.5 with SP 4. I tried to re-run the SP4 Setup but got the same message as when trying to start the Exchange Admin. "DS_E_INSUFFICIENT_ACCESS_RIGHTS"

Any thoughts?
0
Comment
Question by:daJman
  • 2
4 Comments
 
LVL 5

Author Comment

by:daJman
ID: 7155669
got it working...seems as though it was acl problems. I undid changes I made with Security Expressions (shitty app btw) a couple months ago (no idea why they took so long to haunt me) and everything is as it was.
0
 
LVL 1

Expert Comment

by:StevePalmer
ID: 7156803
It may have taken so long to haunt you as security changes only take effect when the user next logs on.  Thats when the new security token is granted.  So it could be that when the service started it relogged in and picked up the changes you had made a couple of months ago.
0
 
LVL 5

Author Comment

by:daJman
ID: 7157171
Good point but I must have ran Exchange Admin since then and I KNOW I've use Event Viewer. That was the freakiest thing, access dened for event viewer. I'll award the points if anyone can give specific possible reasons and/or causes for the strange happenings. The one thing that I did learn, had to do with one of the errors listed above;

"
Cannot set the startup parameters for the Microsoft Exchange System attendant.
Error 1057 occurred: The account name is invalid or does not exist.


I figured when you chose the account for the service to start, it automatically put the correct password. Not true, even though there are * 's MS states in Q159925:

"A set of asterisks are placed in the Password and Confirm Password boxes automatically when a user account is chosen. Those asterisks do not necessarily represent the correct password for the chosen account and an entry must be typed there. If no password is specified, this error occurs, however, Windows NT will accept the wrong password.
"

I didn't know that.

I want to know about the most prevelant error I recieved "DS_E_INSUFFICIENT_ACCESS_RIGHTS".
What ACL's whould have to be in place to get this error? Strict ACL's on the DS folders/registry keys? What keys?
0
 
LVL 1

Accepted Solution

by:
BooMod earned 0 total points
ID: 9207811
I'm going to PAQ this question as per request
http://www.experts-exchange.com/Community_Support/Q_20717768.html

Normally, we post a 3 day warning for other experts.  StevePalmer, if you believe this action is incorrect, please post back here or in the request and we can reconsider this action.

* I will be absent from Monday to Saturday next week

BooMod
Community Support Moderator

0

Featured Post

Free Tool: ZipGrep

ZipGrep is a utility that can list and search zip (.war, .ear, .jar, etc) archives for text patterns, without the need to extract the archive's contents.

One of a set of tools we're offering as a way to say thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

This process describes the steps required to Import and Export data from and to .pst files using Exchange 2010. We can use these steps to export data from a user to a .pst file, import data back to the same or a different user, or even import data t…
This article explains how to install and use the NTBackup utility that comes with Windows Server.
The video tutorial explains the basics of the Exchange server Database Availability groups. The components of this video include: 1. Automatic Failover 2. Failover Clustering 3. Active Manager
This video shows how to quickly and easily add an email signature for all users on Exchange 2016. The resulting signature is applied on a server level by Exchange Online. The email signature template has been downloaded from: www.mail-signatures…

792 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question