Exchange 2003 permissions problem...

Posted on 2009-02-15
Last Modified: 2012-05-06
Hi there,

Since this morning all users are receiving the following error in outlook when they try and send emails:

"You do not have sufficient permission to perform this operation on this object. See the folder contact or your system administrator"

the server is a SBS and I don't beleive that anyone has changed any of the folder/exchange permissions so i'm at a bit of a loss as to what's happened. Also no users are receiving inbound emails. All the appropriate exchange services are running correctly and the exchange database is mounted correctly. Also outlook web access is not sending or receiving.

Any assistance would be greatly appreciated. Thanks in advance!
Question by:aussiecomp
    LVL 7

    Expert Comment

    LVL 17

    Expert Comment

    Ensured that the SendAs permission is intact on the mailbox which needs an owner
    · Referred - Users cannot send e-mail messages from a mobile device or from a
    shared mailbox in Exchange 2000 Server and in Exchange Server 2003
    <> and restarted the Information Store
    service and forced the AD replication
    LVL 9

    Expert Comment

    Run ExBPA in the Health check mode and Permissions check mode and see if it reports any critical errors or warnings such as Permission inheritance disabled, etc.

    Author Comment

    Thanks for your help guys but am still having the problem.

    Firstly I tried manu4us solution but all the permissions were correct and this did not resolve this issue.
    I could not really understand x-sams solution, none of the mailboxes are shared
    I ran the exbpa tool and there were no permission errors.

    Does anyone have any more ideas? thanks in advance :)

    Accepted Solution

    On further investigation I discovered that that the exchange database had become corrupted.
    Even through the database was mounted correctly, apparently it was having major problems. To resolve, I had to dismount the database, stop the store service, create a backup of the database and run eseutil /h to repair the database then move the database back to it's original location.
    Then remounted the database and all was good. I will run a defrag after hours.

    Wierd symptoms and strange that the best practices tool didn't pick up on it... anyway resolved in the end. Thanks for all your help!

    Author Comment

    LVL 3

    Expert Comment

    Hello  aussiecomp,

    You mentioned Weird symptoms and strange that the best practices tool 

    The Truth is EXBPA will not check the Exchange database logical corruption. You have to enable ISINTEG (with right Switch) to check the Logical corruption of database.
    Logical corruption to Exchange Server is a very common problem. It could occur due to corruption problems with Information Store, Tables, Keys, and Indexes or sometimes to whole database.
    Logical database corruption is more problematic and difficult to identify than the physical database corruption. The database administrator and users are generally unaware of logical corruption incidence. Unluckily Exchange Server does not contain any in-built utility to diagnose it.

    There are so many reasons due to which the logical corruption can take place
    1.      Deletion of Edb.log File
    2.      Write Back Cache
    3.      Also with Eseutil/p which incompetent disk space
    Regardless of the cause of logical database corruption, the ultimate result would be the inaccessible Exchange Server database and the loss of data.

    Most of the time below error pops-up due to Permission or DB corruption issue.  What we have to look for?

    The Eseutil repair mode corrects database problems at the page and Extensible Storage Engine (ESE) table levels but not at the application level.

    After repairing a database using Eseutil, ISInteg should be run to repair the database at an application level.

    In short, Eseutil looks at each Exchange database page and table and ensures consistency and integrity within each table. ISInteg, recommended to be run after Eseutil, repairs a database at the application level and ensures the integrity of the relationships between tables.

    ISINTEG: The Information Store Integrity (ISInteg) utility can be used to perform this Exchange application-level analysis and repair.

    ISINTEG is aware of the relation between database tables and records that turn them into folders and messages.

    - After you run ISINTEG FIX, you will see many warnings but you can safely ignore these messages. You should only pay attention to the end of ISINTEG. There should be zero errors reported. If there is an error, run ISINTEG again.

    NOTE: Always use ESEUTIL/P as last option, since its repairs and rearranges the physical pages of database. Use these tools with caution when you want to repair your information store. It is always a good idea to make a backup before you use ESEUTIL to repair your Exchange databases.

    "You do not have sufficient permission to perform this operation on this object. See the folder contact or your system administrator"
    LVL 17

    Expert Comment

    If you dont mind can you share the resolution you found out for this issue ...

    Featured Post

    Do You Know the 4 Main Threat Actor Types?

    Do you know the main threat actor types? Most attackers fall into one of four categories, each with their own favored tactics, techniques, and procedures.

    Join & Write a Comment

    Granting full access permission allows users to access mailboxes present in their database. By giving full access permission one can open and read the content of any mailbox but cannot send emails from that mailbox.
    Use email signature images to promote corporate certifications and industry awards.
    In this video we show how to create a User Mailbox in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Recipients >> Mailb…
    To add imagery to an HTML email signature, you have two options available to you. You can either add a logo/image by embedding it directly into the signature or hosting it externally and linking to it. The vast majority of email clients display l…

    745 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    17 Experts available now in Live!

    Get 1:1 Help Now