Solved

Exchange 5.5 Problems!!

Posted on 2002-07-15
4
1,902 Views
Last Modified: 2008-04-12
Ok, need some help here. I recently re-ran the Exchange Optimizer after adding memory. Now the server won't start complaining with an error of:

"
The Microsoft Exchange Directory service depends on the Microsoft Exchange System Attendant service which failed to start because of the following error:
After starting, the service hung in a start-pending state.  
"

I was thinking it was a problem with the Exchange System Account even though I have not touched it. The odd things are:

1) When I log on the the server with the Exchange System Account (my default admin, rookie mistake I know, I get a lot of access denied errors. When I try to start Exchange Admin, read the event logs, etc, I get access denied. The account was not modified by me in any way. I am the on;y one who admins the server. I have about 5 family members that use the server for email, I don't suspect them with foul play.
2) When I try to change the account in which the various Exchange services start with, I get the message:

"
Cannot set the startup parameters for the Microsoft Exchange System attendant.
Error 1057 occurred: The account name is invalid or does not exist.
"

Does that message have to do with the fact that Exchange can only use the System Account that was specified during install? So now, I can only get the Exchange Dircetory and the System Attendant will start but only using the "LocalSystem" account.

3) When I try to run the Exchange Admin with ANY full Admin account, I get the error:

"
A connection could not be made to the Microsoft Exchange Server computer.
You do not have the permissions required to complete the operation.
Microsoft Exchange Directory
ID no: DS_E_INSUFFICIENT_ACCESS_RIGHTS
"

WTF does that mean??

I have a strange feeling that somehow my domin accounts got really screwed up. (another rookie mistake making the mail server a DC)

I can access the event logs with another Admin account but not the Exchange System Account (again, my primary login account).
The earlier event logs say that the account was locked out. I have account lockout policy in place to deter intrusion. The elapsed time would have passed for the lockout.

I have no ERD. (another BIG mistake).

I mention the Optimizer because that coincided with the start of the problems, although, I have the feeling it's only coincidence.

I started the process described in MS's white paper about changing the Service Account, but I can't start "admin /r"
let alone "admin".

It's an Exhcnage Server 5.5 with SP 4. I tried to re-run the SP4 Setup but got the same message as when trying to start the Exchange Admin. "DS_E_INSUFFICIENT_ACCESS_RIGHTS"

Any thoughts?
0
Comment
Question by:daJman
  • 2
4 Comments
 
LVL 5

Author Comment

by:daJman
ID: 7155669
got it working...seems as though it was acl problems. I undid changes I made with Security Expressions (shitty app btw) a couple months ago (no idea why they took so long to haunt me) and everything is as it was.
0
 
LVL 1

Expert Comment

by:StevePalmer
ID: 7156803
It may have taken so long to haunt you as security changes only take effect when the user next logs on.  Thats when the new security token is granted.  So it could be that when the service started it relogged in and picked up the changes you had made a couple of months ago.
0
 
LVL 5

Author Comment

by:daJman
ID: 7157171
Good point but I must have ran Exchange Admin since then and I KNOW I've use Event Viewer. That was the freakiest thing, access dened for event viewer. I'll award the points if anyone can give specific possible reasons and/or causes for the strange happenings. The one thing that I did learn, had to do with one of the errors listed above;

"
Cannot set the startup parameters for the Microsoft Exchange System attendant.
Error 1057 occurred: The account name is invalid or does not exist.
"

I figured when you chose the account for the service to start, it automatically put the correct password. Not true, even though there are * 's MS states in Q159925:

"A set of asterisks are placed in the Password and Confirm Password boxes automatically when a user account is chosen. Those asterisks do not necessarily represent the correct password for the chosen account and an entry must be typed there. If no password is specified, this error occurs, however, Windows NT will accept the wrong password.
"

I didn't know that.

I want to know about the most prevelant error I recieved "DS_E_INSUFFICIENT_ACCESS_RIGHTS".
What ACL's whould have to be in place to get this error? Strict ACL's on the DS folders/registry keys? What keys?
0
 
LVL 1

Accepted Solution

by:
BooMod earned 0 total points
ID: 9207811
I'm going to PAQ this question as per request
http://www.experts-exchange.com/Community_Support/Q_20717768.html

Normally, we post a 3 day warning for other experts.  StevePalmer, if you believe this action is incorrect, please post back here or in the request and we can reconsider this action.

* I will be absent from Monday to Saturday next week

BooMod
Community Support Moderator

0

Featured Post

6 Surprising Benefits of Threat Intelligence

All sorts of threat intelligence is available on the web. Intelligence you can learn from, and use to anticipate and prepare for future attacks.

Join & Write a Comment

Local Continuous Replication is a cost effective and quick way of backing up Exchange server data. The following article describes the steps required to configure Local Continuous Replication. Also, the article tells you how to restore from a backup…
Learn to move / copy / export exchange contacts to iPhone without using any software. Also see the issues in configuration of exchange with iPhone to migrate contacts.
In this video we show how to create a Distribution Group in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Recipients >>…
In this video we show how to create an Accepted Domain in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Mail Flow >> Ac…

707 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

18 Experts available now in Live!

Get 1:1 Help Now