Link to home
Create AccountLog in
Avatar of afrilling
afrilling

asked on

Cannot expand Public Folders in System Manager - c1030af1

I am trying to expand Public Folders, but get an error message that says:  The requested operation is forbidden. - ID no:  c1030af1 - Exchange System Manager.

I have looked at other solutions at Microsoft, and Experts Exchange, but none have worked so far.  
Avatar of Roachy1979
Roachy1979
Flag of United Kingdom of Great Britain and Northern Ireland image

Cause and solution here:

http://www.petri.co.il/error_c1030af1_on_pf_properties.htm

I've had this problem myself in the past and this resolved it!
Avatar of afrilling
afrilling

ASKER

This did not help.  I checked these settings, and both check boxes were clear.  Just for kicks, I went ahead and set them, restarted IIS, and saw a different error.  I cleared them, restarted IIS, and am back to original error.
Check out this thread it has a few links and a solution from one user:

http://forums.techarena.in/showthread.php?t=348892
Found the following resources

http://forums.msexchange.org/m_1800440185/mpage_1/tm.htm#1800463834
http://support.microsoft.com/kb/281146

Apparently running the DSACLS tool to reassign permissions seems to work with this issue.  It apparently occurs when permissions are not copied, but removed when the SSL status changes on a folder

dsacls CN=Someone,OU=Software,OU=Engineering,DC=Microsoft,DC=Com /g "Everyone":GA /i:t



Avatar of LeeDerbyshire
ESM uses WebDAV to access Public Folder properties.  Are your Public Folders available via OWA, if you go to http://server/public ?
LeeDerbyshire

Yes, I can access Public Folder through OWA.
When you use ESM, you should also see entries in your IIS Log file showing requests for '/Public'.  Can you see any?  Note that the times are in GMT.
Here's an  IIS log entry

2008-03-03 13:52:58 W3SVC4 10.1.0.xxx SEARCH /ExAdmin/Admin/amtrim.com/Public+Folders/ - 80 - 10.1.0.xxx Exchange+Admin 403 2 0
Interesting.  403;2 means 'Read Access Denied'.  Are there any more similar entries immediately after that one?  Or does it stop there?
Here is another fuller entry:

#Software: Microsoft Internet Information Services 6.0
#Version: 1.0
#Date: 2008-03-03 15:18:20
#Fields: date time s-sitename s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs(User-Agent) sc-status sc-substatus sc-win32-status
2008-03-03 15:18:20 W3SVC4 10.1.0.xxx SEARCH /ExAdmin/Admin/amtrim.com/Public+Folders/ - 80 - 10.1.0.xxx Exchange+Admin 403 2 0
2008-03-03 15:18:38 W3SVC4 10.1.0.xxx SEARCH /ExAdmin/Admin/amtrim.com/Public+Folders/NON_IPM_SUBTREE/ - 80 - 10.1.0.xxx Exchange+Admin 403 2 0

On another note, while going through one of the solutions, I added Exadmin to the default website since I run under another site (same server, address, port).  Now I get a c1030af2 error, and the IIS log has the following:

#Software: Microsoft Internet Information Services 6.0
#Version: 1.0
#Date: 2008-03-03 16:26:22
#Fields: date time s-sitename s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs(User-Agent) sc-status sc-substatus sc-win32-status
2008-03-03 16:26:22 W3SVC4 10.1.0.xxx SEARCH /ExAdmin/Admin/amtrim.com/Public+Folders/ - 80 - 10.1.0.xxx Exchange+Admin 500 0 0
The solution on the link I sent to you said the problem they had was with permission setting in Directory Security settings, take a look at it.
Strange.  IIS creates a different log file for each web site, so ESM has always been looking at your W3SVC4 web site (I guess this means 4th in order, although you may have created/deleted 2 and 3 in the past).  You will find the Default Web Site log in the W3SVC1 folder, but I expect that you will not find any /Public+Folders/ entries in there.

Since no user name has been logged (only a '-'), it looks like your W3SVC4/ExAdmin VDir has anonymous access enabled.  Can you check?  It should be Basic and Integrated only.
ASKER CERTIFIED SOLUTION
Avatar of afrilling
afrilling

Link to home
membership
Create an account to see this answer
Signing up is free. No credit card required.
Create Account