Solved

Access Denied - Microsoft Active Directory - Exchange Extension error.

Posted on 2006-11-17
5
1,195 Views
Last Modified: 2008-01-09
Greetings all,

Another question for you . . we have recently added 2 new DC's to our domain - these are both Server 2003 machines. ADPREP/ DOMIANPREP
ADPREP/FORESTPREP
was run on all of these servers as they were promotoed to DC's, the PDC also had these functions run on it.

I have one other server 2003 machine running exchange 2003. I can suddenly no longer see any exchange tasks or acces and exchange tasks from any of the DC's, when i access any Exchange task in AD on the server running exchange (which is NOT a DC) and try to amend anything like add an e-mail address to a user i am getting the following error.

Acces is Denied
Facility:Win32
ID No:c0070005
Microsoft Active Directory - Exchange Extension.

Any idea why this has happened? I have not run ADPREP/DOMAINPREP and ADPREP/FORESTPREP on this machine as it is not a DC - could this be the reason? Hope one of you will be able to advise and help me get things back to normal as at the moment i cannot seem to do any administration for Exchange in AD.

Many thanks.
0
Comment
Question by:No1_Reggie
  • 4
5 Comments
 
LVL 29

Accepted Solution

by:
mass2612 earned 250 total points
ID: 17976450
Hi,

I would suggest you try to re-install the Admin tools you better yet install them on a client machine and see if that works. First install the adminpak.msi from the updated Windows 2003 disks then install the Exchange tools. If this works on the client you shoudl be able to rectify on the server also.

http://msexchangeteam.com/archive/2004/06/07/150295.aspx
0
 
LVL 1

Author Comment

by:No1_Reggie
ID: 17977976
Thanks i will give this a try on a client machine first and see if it helps.
0
 
LVL 1

Author Comment

by:No1_Reggie
ID: 17978051
Hi Mass2612 - i am afraid this doesnt seem to be working. Installing the adminpak.msi on a client machine works fine, however i cannot access any of the exchange snap ins or extensions - no error messages, they just simply are not there. I have also checked on my 3 DC's - they also do not have any exchange snapins available in Active Directory Users and Computers. The exchange snapin only seems to be present on the exchange server itself and no other - this is still giving the same errors although i have not re-installed adminpak.msi on that machine for fear of losing it altogether. Any suggestions?

Many thanks.
0
 
LVL 1

Author Comment

by:No1_Reggie
ID: 17978559
Just another update on this - after reading up on this further i rebooted the server to find that all AD shortcuts had disappeared from the admin tools selection. I could still access them through using the mmc/add snap in function but could not even open AD Users and Computers now. I have re-installed ADMINPAK.MSI from the cd's and the shortcuts have re-appeared - but are still not working. Whenever i try to open AD Users and Computers i get the following message:

To manage users and groups on this computer, use local users and groups.
To manage users,groups and computers in a domain, log on as a user with Domain Administration rights.

Sounds simple enough right? I had a look at the logon screen to find - you guessed it, the darn thing was not logged on to the domain but only logged on to the local machine so none of the domain wide permissions were applied. Cant believe i missed that. Many thanks and apologies for wasting your time.
0
 
LVL 1

Author Comment

by:No1_Reggie
ID: 17978561
Mass2612 i have awarded you the points as your suggestion did bring back the exchange tasks functions for me. Many thanks.
0

Featured Post

Efficient way to get backups off site to Azure

This user guide provides instructions on how to deploy and configure both a StoneFly Scale Out NAS Enterprise Cloud Drive virtual machine and Veeam Cloud Connect in the Microsoft Azure Cloud.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Add user group members to local Administrators 2 54
setup share and NTFS permissions. 12 85
home folder path for users 4 85
Windows Services - Run a Program Grey Out 3 53
Organizations create, modify, and maintain huge amounts of data to help their businesses earn money and generally function.  Typically every network user within an organization has a bit of disk space to store in process items and personal files.   …
Setting up a Microsoft WSUS update system is free relatively speaking if you have hard disk space and processor capacity.   However, WSUS can be a blessing and a curse. For example, there is nothing worse than approving updates and they just have…
Nobody understands Phishing better than an anti-spam company. That’s why we are providing Phishing Awareness Training to our customers. According to a report by Verizon, only 3% of targeted users report malicious emails to management. With compan…
Finds all prime numbers in a range requested and places them in a public primes() array. I've demostrated a template size of 30 (2 * 3 * 5) but larger templates can be built such 210  (2 * 3 * 5 * 7) or 2310  (2 * 3 * 5 * 7 * 11). The larger templa…

792 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question