Exchange Server 2003 and Full-Text Indexing

The account is the main domain admin, it is in the Enterprise admin, exchange admin, exchange enterprise admin, domain admin, and local admin groups, plus almost evey other group as well. i've looked for a deny permission somewhere but have not found any, although i may just not have found the correct place to look yet either.

I'd like to be able to tell you where to start, but it's something of a hunt-and-peck situation. Check perms using ADSIedit, you'll get perms on every object instead of only the store object.

D

OK, looked everywhere in Ad and in ESM, none of the properties seem to be incorrect, none of them seem to be directly related to MSSearch, but the ones that are are correct. i wne through all Exchange, Index, and Search AD objects and teh permissions are correct for all of them.

Any idea of where it should be, or if it could be something else and this is a bogus error message?

give me a corresponding event ID out of the applog, just recreate the pop-up error, and go check the log. Post the full error here, and remove any sensitive info...

D

That is the odd thing, there is no eventlog entry that corresponds to the pop-up error:
"You do not have sufficient permissions to administer Full-Text Indexing on this server.
Operation: Gathering Full-Text Indexing information.
ID no: c1034a95
Exchange System Manager"

Nothing in the system, app, or security logs. i've enabled all the diagnostic logging i know to enable and still nothing.

http://support.microsoft.com/default.aspx?scid=kb;en-us;295921

I did manage to find this...was this server rebuilt at some point?>

d

oops, I bet this is the one you tried before, huh? Sorry.....

D

Did this ever work? Is this a clean install, or an upgrade? How long has it been like this?

D

Yeah, tried both before, sorry.

The server was built up from scratch, there were several issues because our old Exchange 5.5 org was named Webridge, Inc. which has two invalid characters. After much research and 90 minutes on hold with MS, they gave me a magic setup flag that got us past that. Now that the server is up and running, we get this error.

We also get an error from the public folder property pages that is not related to Full-Text Indexing.

That could be the IIS Exchange virtual directories, those have to be up and running clean for the ESM to be able to manage public folders. May be a totally separate issue.

Did you use Exmerge to move all your email or did you join this box to a 5.5 org? Sounds like you used the ADC...

D

It was joined to the 5.5 org, so far one user has been moved over, for testing, no problems. This happened when we tried to test the full text indexing and replicate the public folders.

What can i check in the IIS stuff to validate it is good?

ok, cool. Did you create a PF connection agreement? Have you created the PF replicas since the problem has occurred? And is the User CA a 2 way agreement?

D

Yes, yes, and yes. Ran PFMigrate.wsf to add the replication data to both servers, all 343 folders were done succesfully, all 4 system folders were done successfully.

Of course that is another odd issue. The replication ran through for all but 14 folders, ove rthe course of 48 hours. Now it is not staying in sync, although it says it is in sync, new items are not replicating, and the fodlers that never did replicate are empty on the new server. And right clicking a public folder and saying properties through a message about the mail property pages and replication being delayed.

Something broke in the AD, this is very odd behavior. Is the ADC service actually running now? If you turned up diagnostics logging on the ADC, and forced replication, you'd get a slew of messages, maybe that would point you in the right direction. I'd clear my applog first though, and save it off, because it will create a ton of messages.

D

ADC is running. i'll try the event log thing and post any further info here.

OK, got it to work, here's how:
Went to C:\Program Files\common files\system\MSSearch\bin\srcadmin.msc
Once in that console i was able to find properties on the public folders, and there was the promised land, a series of denies inherited from some upper level parent that it doesn't identify and you couldn't see. Unchecked the inherit permissions box, copied the permissions and then removed the Deny ones.

The Full-Test Indexes are now working. Thank you very much, you were right, it was just a matter of locating the permissions property page for the object.

nicely done!!!

David