Public Folder Permissions problems after restore from tape - SBS 2000

Posted on 2006-04-12
Last Modified: 2007-12-19

I believe I have a bit of a "chicken and the egg" problem after rebuilding the SBS server, creating an NEW AD and restoring the exchange databases from backup (using ntbackup).  
For several long-winded reasons I decided to recreate the AD information by manually creating new user and computer accounts. I used the same OU names and domain information to make it work.
I got both databases to mount (priv and Pub) without incident and was sucessfull in remapping the mailboxes to new user accounts. So far so good.

My problem is specificaly with the Public folders.  I sensed we were having permision problems and after looking around it seems I was right ..
Here is what I got...

If I look at the public folder properties in Outlook I am not given the options to look at the security tab so I  can only look at the permissions in the SUMMARY tab which shows the folder is owned by an unresolved SID. I presume it to be the SID from the Admin account of the old AD.
I went to the ESM to try view/edit permissions there but I can NOT open any public folder properties.  When I try I get an LDAP error that looks like this:

There is no such object on the server

Facility: LDAP Provider
ID no: 800072030
Exchange System Manager

Additional symptoms  -  User can read and write to the public folders but can't create new ones nor can they CC email to them anymore.  
Can someone please recomend a tool I could use to assume administrative ownership over the public folders again?



Question by:jc07874
    LVL 26

    Expert Comment

    LVL 7

    Accepted Solution

    Use Exchange System Manager to add a replica of the top-level folder (only). After you do so, you can propagate the folder rights successfully to all of the subfolders.

    You can run pfdavadmin utility to reset the PF Permissions.


    Author Comment

    OK .. I used the PFDadmin tool to get 1/2 way there.  Now I can move the folders around and has solved my permissions problem.
    I can move the folders around to the
    But I still have the LDAP error. So I think I still need to do the replication of the top level folder.  However I have never done this and not sure how. I tried to chang he properties of the TOp level folder "PUBLIC FOLDERS" but the Pfadmin tool say  you can't change permissions on this folder.  I must be missing something.

    COuld you point me to or walk me thru the process of how to replicate the top level folder as I have seen noted in several places. Also I am not sure which top level folder the docs refer too.

    Much Thanks  - I think I am seeing light at the end of the tunnel.



    Author Comment


    I guess I am saying is I am not clear how or why to set up replication if I only have one exchange server.

    LVL 35

    Expert Comment

    are you able to access the properties of the public folders now via Outlook.

    do you get the LDAP error when you check the properties of the new folders or just all of the old folders.

    Author Comment

    I was finaly able to do what Kunal suggested.
    I was then able to see permissions and remove the unresolved cids from the prevoious defunct domain.
    After doing that I was able to mail enable all the folders and set opject correctly.



    Featured Post

    Do email signature updates give you a headache?

    Do you feel like you are constantly making changes to email signatures? Are the images not formatting how you want them to? Want high-quality HTML signatures on all devices, including on mobiles and Macs? Then, let Exclaimer solve all your email signature problems today.

    Join & Write a Comment

    Easy CSR creation in Exchange 2007,2010 and 2013
    Use these top 10 tips to master the art of email signature design. Create an email signature design that will easily wow recipients, promote your brand and highlight your professionalism.
    In this video we show how to create a Distribution Group in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Recipients >>…
    This video discusses moving either the default database or any database to a new volume.

    733 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    21 Experts available now in Live!

    Get 1:1 Help Now