Solved

How to allow Exchange System Manager usage through terminal services?

Posted on 2008-10-20
4
296 Views
Last Modified: 2010-04-07
Hello experts. I've been trying to give permission to a non-local admin to run Exchange System Manager while connected to the domain controller via terminal services. It complained about the "create global objects" permission, which I gave to the user by editing the local domain controller policy. The user still gets the error to my undying frustration and cannot run System Manager on the domain controller while connected via terminal services. This user also has the Exchange Admin permission. Any ideas?

Thanks,
Foggier
0
Comment
Question by:Foggier
  • 2
  • 2
4 Comments
 
LVL 15

Expert Comment

by:tenaj-207
ID: 22764519
A couple of questions.

1) If you install ESM on the end users desktop is he able open it?
2) If so then if you remove hiim from the local administrators group does it give you the same message?
3) On the server does the user only have domain user rights?
4) Have you looked at the link below in your trouble shooting?  The link reviews the different permissions needed to perform different functions.
http://technet.microsoft.com/en-us/library/bb124053(EXCHG.65).aspx
0
 

Author Comment

by:Foggier
ID: 22769036
1. Yes, but complains about "an Exchange server could not be found in the domain" whenever write changes are attempted (fixing this would also solve the problem).
2. The user only gets the "global objects create" permission error when he attempts to open ESM on the local box through terminal services- he's never been part of local admin on the domain controller.
3. Yes, he also has "power users".
4. Yes, I have. From the error message and what the user is trying to do (i.e. add email address to a public folder), it seems he only needs the global create permission.
0
 
LVL 15

Accepted Solution

by:
tenaj-207 earned 250 total points
ID: 22788311
Sorry for the delay in response.  In regards to fixing the  issue with running ESM on the desktop.  Have you looked at this MS KB article?  Method two looks easier than method one.

http://support.microsoft.com/?id=905809
0
 

Author Comment

by:Foggier
ID: 22800580
I'll try that. I'm very much booked with other tasks/etc.
0

Featured Post

Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article aims to explain the working of CircularLogArchiver. This tool was designed to solve the buildup of log file in cases where systems do not support circular logging or where circular logging is not enabled
A list of top three free exchange EDB viewers that helps the user to extract a mailbox from an unmounted .edb file and get a clear preview of all emails & other items with just a single click on mailboxes.
The basic steps you have just learned will be implemented in this video. The basic steps are shown to configure an Exchange DAG in a live working Exchange Server Environment and manage the same (Exchange Server 2010 Software is used in a Windows Ser…
To add imagery to an HTML email signature, you have two options available to you. You can either add a logo/image by embedding it directly into the signature or hosting it externally and linking to it. The vast majority of email clients display l…

679 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question