Link to home
Start Free TrialLog in
Avatar of svandeneshof
svandeneshof

asked on

Where can i change "everyone" permission?

Maybe a weird question but i cant find the "everyone" and "anonymous" user in the active directory. I have to find those users bcus I changed their permissions and have to change it back.

Iam using W2003 ent. server with Exchange 2003 with all service packs

Thank you,
Sander
Avatar of Pete Long
Pete Long
Flag of United Kingdom of Great Britain and Northern Ireland image

you cant - thay are bulit in groups though groups is a bad word, because (as you have found you CANT edit their properties or membership)
You must have changed the permissions on some AD objects or other resources for these two build in groups. To restore or revert back the changes, you either need to restore the AD backup. or manually do it.
You cant find the groups as PeteLong mentioned and not even edit anything there.
Thanks,
Amit Aggarwal.
Avatar of svandeneshof
svandeneshof

ASKER

I changed the permissions in the public folders, iam affraid i cant access the public folders myself anymore, even when iam administrator... When I look into the root: System Manager / Administrative Groups / First Administrative Group / Folders, the "folders" seem to be empty. But... When i try to make a new Public Folder Tree called "Public Folders" it says: The object Public Folders already exists. Enter a unique directory name for this object.

thanks!
ASKER CERTIFIED SOLUTION
Avatar of aa230002
aa230002
Flag of India image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
i know this question is closed but for future refrence when u are locked out because
of applying deny permission to everyone group (as far as exchange is concerned) it can be undone either through ADSIedit or active directory sites and services....
I closed the cased bcus there was no solution for me, i had to backup before i messed up :) Vahik, can you please explain about the ADSIedit?

cheers!
what is ADSIEdit tool??? it is a window in to AD data.....where u can manipulate AD objects their security and attributes directly....

now how to solve ur problem....
go to active directory sites and services and enable SHOW SERVICES NODE...
then find FOLDER HIREARCHIES....right click on the public folder\security  and undo what u did in ESM.....close and go back to ESM\public folders and u will see them reappear...
i do this all the times when i teach a new guy about what EVERYONE group means in AD environment.....hahahahah....i can see petelong(another oldtimer)smilling....(dont do this on a production server unless it is your last day)

another test....in the ESM right click on the default global address list and DENY everyone and see what happens....u cant even fix this through ADSIEdit....MS has a long article as to how to fix this....My solution(should sell it to MS) go to
active directory sites and services right click on the default global address list and UNDO DENY.....BOOM everything reappears again....(well most of the times)

also sometimes when u delete a server(usually an exchnage or DC) directly or through ADSIEdit and try to rejoin another server with the same name u get a complaint from AD that server already exist....well it does, and if u look closely in the Active directory sites and services u will find it....

so why is that active directory sites and services has the final say in these matters???? it is the way active directory is engineered and implemented......if u remember how polices are applied(site..domain..ou..bla bla)  and how ur first domain controller is actually part of the "default first site"....well u got to do some reading and time for me to go to bed....
all u folks take care and good luck....
i feel like a real noob, iam very glad you want to help me. Iam in the AD sites and services but cant find the "show services node". My system is dutch so its hard to find
maybe there is an option to help me remote desktop?
In Active Directory Sites & Services, you need to select "show services node" from View Menu.

Thanks,
Amit Aggarwal.
GREAT! The public Folders is visible again! But when i try to access the folder through ESM it says:

The HTTP Service used by Public Folders is not available, possible causes are that Public Stores are not mounted and the Information Store service is not running.

ID no: c1030af3
Exchange System Manager

thanks!
You have reverted the permissions on  PF hierarchies only. Thats only an object in Active Directory. Permissions on each and every public folder are stored in Public Folder hierarchy. This whole PF hierarchy is again the contents of one Public Folder named "1-1" with in Public Folder store.
So, you need to revert the permission on each and every public folder also. I would suggest you to use PFDavAdmin to take the backup of whatever you have right now. and then, try to set the permission for Everyone or Anonymous again using PFDavAdmin tool.
2nd Restore from Backup - PF Store backup.

All the best !
Thanks,
Amit Aggarwal.
@ vahik: Perfect! you gave me the sollution:

go to active directory sites and services and enable SHOW SERVICES NODE...
then find FOLDER HIREARCHIES....right click on the public folder\security  and undo what u did in ESM

I could remove all changes i made and that gave back all right permissions. After that i used a good backup of IIS and now everything is working fine. MANY MANY thanks to you and other people who helpt me!

Vahik you deserve at least 500 points because i was so stuck!

Thanks again!