Solved

How to allow Exchange System Manager usage through terminal services?

Posted on 2008-10-20
4
292 Views
Last Modified: 2010-04-07
Hello experts. I've been trying to give permission to a non-local admin to run Exchange System Manager while connected to the domain controller via terminal services. It complained about the "create global objects" permission, which I gave to the user by editing the local domain controller policy. The user still gets the error to my undying frustration and cannot run System Manager on the domain controller while connected via terminal services. This user also has the Exchange Admin permission. Any ideas?

Thanks,
Foggier
0
Comment
Question by:Foggier
  • 2
  • 2
4 Comments
 
LVL 15

Expert Comment

by:tenaj-207
ID: 22764519
A couple of questions.

1) If you install ESM on the end users desktop is he able open it?
2) If so then if you remove hiim from the local administrators group does it give you the same message?
3) On the server does the user only have domain user rights?
4) Have you looked at the link below in your trouble shooting?  The link reviews the different permissions needed to perform different functions.
http://technet.microsoft.com/en-us/library/bb124053(EXCHG.65).aspx
0
 

Author Comment

by:Foggier
ID: 22769036
1. Yes, but complains about "an Exchange server could not be found in the domain" whenever write changes are attempted (fixing this would also solve the problem).
2. The user only gets the "global objects create" permission error when he attempts to open ESM on the local box through terminal services- he's never been part of local admin on the domain controller.
3. Yes, he also has "power users".
4. Yes, I have. From the error message and what the user is trying to do (i.e. add email address to a public folder), it seems he only needs the global create permission.
0
 
LVL 15

Accepted Solution

by:
tenaj-207 earned 250 total points
ID: 22788311
Sorry for the delay in response.  In regards to fixing the  issue with running ESM on the desktop.  Have you looked at this MS KB article?  Method two looks easier than method one.

http://support.microsoft.com/?id=905809
0
 

Author Comment

by:Foggier
ID: 22800580
I'll try that. I'm very much booked with other tasks/etc.
0

Featured Post

What Security Threats Are You Missing?

Enhance your security with threat intelligence from the web. Get trending threat insights on hackers, exploits, and suspicious IP addresses delivered to your inbox with our free Cyber Daily.

Join & Write a Comment

"Migrate" an SMTP relay receive connector to a new server using info from an old server.
Marketers need statistics and metrics like everybody else needs oxygen. In this article we explain how to enable marketing campaign statistics for Microsoft Exchange mail.
In this video we show how to create a Contact in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Recipients >> Contact ta…
In this video we show how to create an Address List in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Organization >> Ad…

758 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

23 Experts available now in Live!

Get 1:1 Help Now