We help IT Professionals succeed at work.

Check out our new AWS podcast with Certified Expert, Phil Phillips! Listen to "How to Execute a Seamless AWS Migration" on EE or on your favorite podcast platform. Listen Now

x

Exchange Server 2003 and Full-Text Indexing

maladyetz
maladyetz asked
on
Medium Priority
1,198 Views
Last Modified: 2007-12-19
OK, Exchange 2003 is up and running. Anytime i click on the Indexing tab in a property page i get the following error:
---------------------------
Exchange System Manager
---------------------------
You do not have sufficient permissions to administer Full-Text Indexing on this server.



Operation: Gathering Full-Text Indexing information.

ID no: c1034a95

Exchange System Manager

Microsoft has no KB other than one for Exchange 2000, which i tried and it made no difference. Any ideas?
Comment
Watch Question

Senior Consultant, Exchange
Commented:
Unlock this solution and get a sample of our free trial.
(No credit card required)
UNLOCK SOLUTION

Author

Commented:
The account is the main domain admin, it is in the Enterprise admin, exchange admin, exchange enterprise admin, domain admin, and local admin groups, plus almost evey other group as well. i've looked for a deny permission somewhere but have not found any, although i may just not have found the correct place to look yet either.
David WilhoitSenior Consultant, Exchange

Commented:
I'd like to be able to tell you where to start, but it's something of a hunt-and-peck situation. Check perms using ADSIedit, you'll get perms on every object instead of only the store object.

D

Author

Commented:
OK, looked everywhere in Ad and in ESM, none of the properties seem to be incorrect, none of them seem to be directly related to MSSearch, but the ones that are are correct. i wne through all Exchange, Index, and Search AD objects and teh permissions are correct for all of them.

Any idea of where it should be, or if it could be something else and this is a bogus error message?
David WilhoitSenior Consultant, Exchange

Commented:
give me a corresponding event ID out of the applog, just recreate the pop-up error, and go check the log. Post the full error here, and remove any sensitive info...

D

Author

Commented:
That is the odd thing, there is no eventlog entry that corresponds to the pop-up error:
"You do not have sufficient permissions to administer Full-Text Indexing on this server.
Operation: Gathering Full-Text Indexing information.
ID no: c1034a95
Exchange System Manager"

Nothing in the system, app, or security logs. i've enabled all the diagnostic logging i know to enable and still nothing.
David WilhoitSenior Consultant, Exchange

Commented:
http://support.microsoft.com/default.aspx?scid=kb;en-us;295921

I did manage to find this...was this server rebuilt at some point?>

d
David WilhoitSenior Consultant, Exchange

Commented:
oops, I bet this is the one you tried before, huh? Sorry.....

D
David WilhoitSenior Consultant, Exchange

Commented:
Did this ever work? Is this a clean install, or an upgrade? How long has it been like this?

D

Author

Commented:
Yeah, tried both before, sorry.

Author

Commented:
The server was built up from scratch, there were several issues because our old Exchange 5.5 org was named Webridge, Inc. which has two invalid characters. After much research and 90 minutes on hold with MS, they gave me a magic setup flag that got us past that. Now that the server is up and running, we get this error.

We also get an error from the public folder property pages that is not related to Full-Text Indexing.
David WilhoitSenior Consultant, Exchange

Commented:
That could be the IIS Exchange virtual directories, those have to be up and running clean for the ESM to be able to manage public folders. May be a totally separate issue.

Did you use Exmerge to move all your email or did you join this box to a 5.5 org? Sounds like you used the ADC...

D

Author

Commented:
It was joined to the 5.5 org, so far one user has been moved over, for testing, no problems. This happened when we tried to test the full text indexing and replicate the public folders.

What can i check in the IIS stuff to validate it is good?
David WilhoitSenior Consultant, Exchange

Commented:
ok, cool. Did you create a PF connection agreement? Have you created the PF replicas since the problem has occurred? And is the User CA a 2 way agreement?

D

Author

Commented:
Yes, yes, and yes. Ran PFMigrate.wsf to add the replication data to both servers, all 343 folders were done succesfully, all 4 system folders were done successfully.

Of course that is another odd issue. The replication ran through for all but 14 folders, ove rthe course of 48 hours. Now it is not staying in sync, although it says it is in sync, new items are not replicating, and the fodlers that never did replicate are empty on the new server. And right clicking a public folder and saying properties through a message about the mail property pages and replication being delayed.
David WilhoitSenior Consultant, Exchange

Commented:
Something broke in the AD, this is very odd behavior. Is the ADC service actually running now? If you turned up diagnostics logging on the ADC, and forced replication, you'd get a slew of messages, maybe that would point you in the right direction. I'd clear my applog first though, and save it off, because it will create a ton of messages.

D

Author

Commented:
ADC is running. i'll try the event log thing and post any further info here.

Author

Commented:
OK, got it to work, here's how:
Went to C:\Program Files\common files\system\MSSearch\bin\srcadmin.msc
Once in that console i was able to find properties on the public folders, and there was the promised land, a series of denies inherited from some upper level parent that it doesn't identify and you couldn't see. Unchecked the inherit permissions box, copied the permissions and then removed the Deny ones.

The Full-Test Indexes are now working. Thank you very much, you were right, it was just a matter of locating the permissions property page for the object.
David WilhoitSenior Consultant, Exchange

Commented:
nicely done!!!

David
Unlock the solution to this question.
Thanks for using Experts Exchange.

Please provide your email to receive a sample view!

*This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

OR

Please enter a first name

Please enter a last name

8+ characters (letters, numbers, and a symbol)

By clicking, you agree to the Terms of Use and Privacy Policy.