No permission to view/change/modify much of anything on Exchange Server 2007.

Hello.  We have a new server deployment with Windows Server 2003 Standard and Exchange 2007.  We had exchange 2007 all setup and working.  Mail was flowing to the internet from the exchange server/clients and all was well.  Then, all was not well.  Now, it seems as if we don't have any permissons to access hardly any of the features of Exchange.  When I open Exchange, I am greeted with the following error when I click on Exchange Configuration in the tree view of Exchange Managment Console:

"You do not have permissions to read the security descriptor on CN=SERVER1,CN=Servers,CN=Exchange Administrative Group (FYDIBOHF23SPDLT),CN=Administrative Groups,CN=First Organization,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=ourserver,DC=net.  It was running command 'get-ExchangeAdministrator'.

As I said everything was working until we installed Office 2003 on the server.  That's the only change that was made after the Exchange Server was successfully working.

A little background on the server:

Several different technicians have worked on this server.  It's current name SERVER1 was used when it was first built.  The name was changed at one point to something else after Exchange Server was installed the first time.  After changing the name back Exchange began to work.  However, a software installation was performed for some customer software and that software installed a 32-bit version of .Net Framework and broke Exchange.  .NET was completely removed (all versions) by the removal tool available from Microsoft and Exchange was completely (and forcibly) removed.  .NET framework was reinstalled (one version + patches at a time) and then we reinstalled Exchange Server and setup all the users and everything was great until (we're assuming) Office 2003 was installed.

More information:  Not only do we get the error above, but we can't access much of the Exchange Management Console.  The send connector area is blank as is Offline Address Book and a lot of other areas.  We can see all of the user mailboxes and they are able to store mail in them (the server is only used as storage right now with the users POPing their mail as we haven't set it to host it's own mail yet due to these problems), but we can't add mailboxes, change them or do anything in the console.

Thanks for your help,

Chris :o)
tganusAsked:
Who is Participating?
 
tganusConnect With a Mentor Author Commented:
We finally got this resolved.  Here's what our technician said he did to resolve the no permissions problem.

===================
Ok, these are the 2 steps I took.
 
First:
 
Removed a stored password that seemed to have been stuck in there.
 
Start > Run > rundll32.exe keymgr.dll
 
Second:
 
After I removed that stored username and password I (re)installed exchange 2007 SP1. After reboot everything was golden.
======================

Thanks for all your help akmilm!
0
 
akmilmCommented:
do you have the managment console on a workstation?
0
 
tganusAuthor Commented:
No. The management console is on the server with Exchange.
0
Has Powershell sent you back into the Stone Age?

If managing Active Directory using Windows Powershell® is making you feel like you stepped back in time, you are not alone.  For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why.

 
akmilmCommented:
Can you install exchange admin tools on your PC.
0
 
akmilmCommented:
Its the version of Mapi from the outlook install which has broken things - have you tried reinstalling the Exchange management tools?
0
 
tganusAuthor Commented:
No, we haven't tried that.  I will try that tomorrow.  Right now, the customer's location is closed and the CD isn't in the server.  I'm going to have the disc put in tomorrow morning so I can try the reinstall.  Thanks for the help!  =)
0
 
akmilmCommented:
how did this go?
0
 
tganusAuthor Commented:
Akmilm,  sorry for the delay.  I'm attempting to reinstall the Exchange 2007 Management Tools right now.  I can't for the life of me figure out how to do it.  I've tried running the DVD, using Add/Remove programs, etc. to no avail.  I must be missing something simple.  I thought it would let me select a reinstall/repair option at some point.  Please advise.  Thank you.  =)
0
 
akmilmCommented:
Custom exchange installation and then install the management agent
0
 
akmilmCommented:
sorry - tools
0
 
tganusAuthor Commented:
I'm assuming due to the broken permissions, the Exchange Installation CD/Repair option in add/remove won't let me deselect Management Tools so that I can reinstall it on the server.
0
 
akmilmCommented:
You need to select the management tools - to install
0
 
tganusAuthor Commented:
OK!  We finally got Exchange Management Tools loaded on a workstation in the domain.  The workstation is running XP Pro and has the 32-bit Exchange Managment Tools loaded.  I can go in and see and modify everything as normal.  With this new ability, can we now somehow fix the problems using the tools on the server?  I'm logged into the server/domain as administrator.

Thanks for your help and mostly your patience.  =)
0
 
akmilmCommented:
Hi copy the mapi32.dll from the workstation with the managment tools c:\windows\system32
and copy it in the same location on your exchange server
0
 
akmilmCommented:
or its on your exchange server under C:\Program Files\Exchsrvr\bin\mapi32.dll
0
 
akmilmConnect With a Mentor Commented:
0
 
tganusAuthor Commented:
I copied over the mapi32.dll and it had no effect.  After looking at all of the MAPI32.DLLs on the server, none of them were actually modified by the installation of Office 2K3.  There's also a MAPI32.DLL in the c:\windows\syswow64 directory.  I tried that one as well to no effect.  I also uninstalled Office2K3.  Any other ideas?
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.