• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 307
  • Last Modified:

Exchange 2003 to new hardware Lost individual permissions to others calendars/inbox

We recently moved our Exchange 2003/windows 2000 server to a new Exchange 2003/windows 2003 server. We did the replication of public/system folders and moved mailboxes using the ESM. When we turned off the old server everyone that had permissions to see others calendars/inbox's etc.. could not open them anymore, except for system admin's. If we turn the old server back on it works fine. I have tried redoing the permissions when the old server is turned off, but this does not work. Did we miss a step or is there a way to fix this? We have not uninstalled Exchange on the old server yet or removed it from the group, because of this problem. Please help me.
0
barrettt
Asked:
barrettt
  • 9
  • 6
  • 2
1 Solution
 
questionforrajaCommented:
Hi

Have you rehomed the system folders to the new exchange server, also try outlook/ cleanfreebusy when you launch Outlook

Thanks
0
 
barretttAuthor Commented:
we did replication on system folders from old server to new server, is this what you mean by rehome? What is the outlook/ cleanfreebusy thing??
thanks
0
 
questionforrajaCommented:
Rehoming is different then replication check the below article

http://support.microsoft.com/kb/822931/en-us


Outlook /cleanfreebusy Cleans and regenerates free/busy information.

0
Concerto's Cloud Advisory Services

Want to avoid the missteps to gaining all the benefits of the cloud? Learn more about the different assessment options from our Cloud Advisory team.

 
barretttAuthor Commented:
Thats the article we followed. How does outlook/cleanfreebusy have anything to do with peoples permissions to view/edit other calendars or email? Would this have to be run on every machine?
0
 
SembeeCommented:
If you have done a conventional swing migration then everything should have come across.
How are you setting permissions? Do you set permissions on a per folder basis within Outlook or a per mailbox within ADUC?

Clearing free busy information would have nothing to do with this - that simply publishes information in to the server. It also deals with calendar information only, whereas you have stated the problem is with mailboxes as well.

Was the original server a domain controller as well?

Simon.
0
 
barretttAuthor Commented:
We did a swing except we moved the mailboxes before replicating the folders (public/system). We set permissions both ways, mostly through outlook though. The original server was not a domain controller. Any ideas?
Thanks
0
 
SembeeCommented:
There should be no reason why it failed. Most of the permissions are held in the domain, unless they are on the folders when they are stored in the mailbox. I haven't seen this happen before - and I have done a ton of mailbox moves.

Simon.
0
 
barretttAuthor Commented:
Simon,
I think you were helping me with some other exchange issues before: http://www.experts-exchange.com/Networking/Email_Groupware/Exchange_Server/Q_21793824.html
We still have three exchange servers: one for the disclaimer and spam filter, one is the new 2003 server, and the one we want to turn off but can't because of the permissions issue. Do you think we need to give the system time once the old exchange server is off, we only tested it briefly and then turned it back on? Any other ideas?
Thanks
0
 
SembeeCommented:
Have you been through the full process for removing the old server?
Re-homing the public folders for example - including removing the replicas pointing at the old server?

Exchange and Outlook is a bit odd in the way that it works with the servers - if the server is still there (ie listed in replicas and ESM) then they will try to use it, even if the machine isn't on. While others recommend turning off the machine to see if anything breaks, I don't actually recommend that method at all. Finish the replication off - get all the data on to the new server, then remove the replicas - nothing else will confirm if it is functioning correctly or not.

Simon.
0
 
barretttAuthor Commented:
We re-homed all the folders, I just double checked there is only one place the old server shows up in ESM under adminstrative groups==>Folders==>public folders(system showing)==>System Config The old server is still listed and if I try to remove it , a prompt for Network username/password comes up but it does not accept my domain network user/pass.  Also the server is still listed under servers (first admin group).  Should I remove the server from the first admin group? OR did I miss something else?
0
 
SembeeCommented:
The only way that you should remove the server is by using Add/Remove Programs. That removes it the correct way. I would probably do it once the users are offline (one evening) so if their Outlook is attached to the old server it doesn't get upset.

Simon.
0
 
barretttAuthor Commented:
Simon,
We are going to try this next week,  so I will keep you posted. Thanks for all the help and hopefully this does the trick.
0
 
barretttAuthor Commented:
Ok, we removed exchange from the old server. But (knew this was coming) the permissions still do not work. If I add someone as a delegate they can open those mailboxes/calendars just fine. But if through OUtlook I add someone as say a reviewer on my calendar they still cannot open my calendar. I have logged off/on restarted Outlook, but the permissions are still not working, they are there (if I open the properties of a calendar the old permissions are still stored there they just don't do anything). Is this fixable, does it take time for the system to pick up on the fact that the old server is gone? any ideas?
THanks
0
 
SembeeCommented:
Permission changes in Exchange are cached. It can therefore take a while before they are available to everyone. Three to four hours is the usual time for the cache to be flushed.
It will also take Exchange and the domain time to replicate out the changes to the Exchange structure. If you have only just made the changes to remove the server then you may have issues for most of today.

Simon.
0
 
barretttAuthor Commented:
Simon,
It has been a day and the permissions are still not working correctly. Do I need to recreate all the permissions, or should I give it more time?
Thanks
0
 
barretttAuthor Commented:
well, the mystery has finally been solved!! When a user is trying to open another users calendar/inbox they have been going to file-open and then clicking on one of the names already listed (meaning that they have opened it in the past). So I tried typing it in new in the open other users folder and they open fine, but if you use the "history" for lack of better term it says the information store is not available. I guess the "history" might be looking for the old exchange server and when you type it in new it opens it just fine, since it is probably going to the new server. Thanks Simon for all the help, again.
0
 
SembeeCommented:
The mailboxes have been moved, so the underlying information is different. Outlook updates many things, but information that is cached client side - such as that drop down list - would not get updated.

Glad to hear that you got it resolved.

Simon.
0

Featured Post

 [eBook] Windows Nano Server

Download this FREE eBook and learn all you need to get started with Windows Nano Server, including deployment options, remote management
and troubleshooting tips and tricks

  • 9
  • 6
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now