Solved

How to allow Exchange System Manager usage through terminal services?

Posted on 2008-10-20
4
297 Views
Last Modified: 2010-04-07
Hello experts. I've been trying to give permission to a non-local admin to run Exchange System Manager while connected to the domain controller via terminal services. It complained about the "create global objects" permission, which I gave to the user by editing the local domain controller policy. The user still gets the error to my undying frustration and cannot run System Manager on the domain controller while connected via terminal services. This user also has the Exchange Admin permission. Any ideas?

Thanks,
Foggier
0
Comment
Question by:Foggier
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
  • 2
4 Comments
 
LVL 15

Expert Comment

by:tenaj-207
ID: 22764519
A couple of questions.

1) If you install ESM on the end users desktop is he able open it?
2) If so then if you remove hiim from the local administrators group does it give you the same message?
3) On the server does the user only have domain user rights?
4) Have you looked at the link below in your trouble shooting?  The link reviews the different permissions needed to perform different functions.
http://technet.microsoft.com/en-us/library/bb124053(EXCHG.65).aspx
0
 

Author Comment

by:Foggier
ID: 22769036
1. Yes, but complains about "an Exchange server could not be found in the domain" whenever write changes are attempted (fixing this would also solve the problem).
2. The user only gets the "global objects create" permission error when he attempts to open ESM on the local box through terminal services- he's never been part of local admin on the domain controller.
3. Yes, he also has "power users".
4. Yes, I have. From the error message and what the user is trying to do (i.e. add email address to a public folder), it seems he only needs the global create permission.
0
 
LVL 15

Accepted Solution

by:
tenaj-207 earned 250 total points
ID: 22788311
Sorry for the delay in response.  In regards to fixing the  issue with running ESM on the desktop.  Have you looked at this MS KB article?  Method two looks easier than method one.

http://support.microsoft.com/?id=905809
0
 

Author Comment

by:Foggier
ID: 22800580
I'll try that. I'm very much booked with other tasks/etc.
0

Featured Post

Is Your AD Toolbox Looking More Like a Toybox?

Managing Active Directory can get complicated.  Often, the native tools for managing AD are just not up to the task.  The largest Active Directory installations in the world have relied on one tool to manage their day-to-day administration tasks: Hyena. Start your trial today.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
ADFS: AADSTS50107: Requested federation realm object 8 106
Exchange 2016 Self Signed Certs 2 43
exchange, owa 4 48
Exchange 2016 CU5 10 33
Read this checklist to learn more about the 15 things you should never include in an email signature.
How to resolve IMCEAEX NDRs in Exchange or Exchange Online related to invalid X500 addresses.
In this video we show how to create a Contact in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Recipients >> Contact ta‚Ķ
To show how to generate a certificate request in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.:  First we need to log into the Exchange Admin Center. Navigate to the Servers >> Certificates‚Ķ

734 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question