Exchange Public Folder Email Problem

Do you have more info on this mail? Does it have a subject line? There could be a chance that it is a virus...do you have NAV for Exchange running and monitoring your store?

dawne :)

No there is no other info as far as subject or date/time for the email.  I have Mcafee Group sheild running monitoring the store and all the virus definitions are up to date.

Andy

Double check the AV and make sure you aren't scanning the M: drive. Have you ever changed perms on the M: drive previously? It's a really bad idea, and could cause the same behavior you're seeing now. Just asking...

D

Hey Dawne!

They were changed some how not sure what changed them, but I had to reset the permissions on this pub folder in the M: drive.  I am not sure yet how these file permissions were changed.  I think maybe urlscan, from the iis lockdown tool, installation a couple of days ago did it.  I have the permissions corrected now is there any way to get rid of this email???

Andy

You NEVER reset perms on the M: drive; ignore it like it isn't there. E2K3 removed it so you don't have to look at it. Yes, URLscan and iislockdown is what broke this in the first place. So with any luck, you can go into ADSIedit, on the public folder store object and force the perms to propogate down. Maybe readd a security object, then apply it?

On the long side, re-apply the Windows SP, reinstall Exchange (not uninstall, reinstall :) ), and then re-apply the service pack for Exchange. Since the M: drive is virtual, it's the mapping of the EXIFS, IIS hooks could be damaged, and need to be reset.

D

I had to reset the permissions via the M: drive because I wasn't able to change them with System manager because the IIS lockdown tool changed the permissions folder permissions.  I wasn't able to reset the permissions using ADSIedit on the public folder store object.  The email still exists.  All other pieces of Exchange are working fine.  So now the only way to remove that email is to reinstall Exchange?  Is there any other ways to fix this maybe?  Otherwise I will reinstall soon.

Andy

I have reinstalled exchange and sp's as directed above and still have the same problem.  Cannot remove any email's in the Public folder.  New messages are no problem but there are 2 or 3 that act the same as described above.  Any ideas?

Andy

Well, there's a way, but I won't do it, cause it could make it worse, and I'm not going to try it and be responsible. i'm going to suggest you call MS support. Next time, never touch the M: drive perms, it's not meant for that in ANY situation.

D

Like I said I didn't originally touch the M: drive permission's the IIS lockdown tool did.  I had to change the permissions after that back to default in the M: drive because I couldn't set them anymore from System Manager (got an error when I attempted to)  I have resolved the problem by deleteing the public folder and restoring it from backup.  I simply left out the emails that were the problem.  I was lucky and able to do this because of the public folder structure we use.  Thanks for all of your suggestions.

Regards

Andy

that's what IISlocdown does. That's why many times you have to uninstall and reinstall IIS and then reinstall Exchange, not play with the M: drive. It isn't real, only virtual, and once you do that, it damages the metabase.

Glad you got it fixed!