Link to home
Start Free TrialLog in
Avatar of savesme
savesme

asked on

Help, adprep /forestperp sdprep /domain prep screwed up my domain permissions

I am upgraded a Windows server 2003 domain, and exchange 2007 box to small business server 2008.  I started by running adprep /forestprep and /domainprep from the 2008 cd on the 2003 DC.  Shortly after that users noticed they couldn't log into their emails.  Outlook just keep giving a credentials prompt and nothing would work.  They can't log into owa either.  Also a shared drive is inaccessible with their domain credentials.  But they can still log into the workstations.  The only backup we have is from august which is of no help.  I NEED HELP!  one funny thing is the Admin account i used during this process is the only one that still functions normally?!?

Please help, need urgent response
Avatar of asdlkf
asdlkf
thats because exchange 2007 is not AD integrated

You'll need to go through each account and grant owner/full access permissions in EXCHANGE, not in AD.


basicly, you need something like this:

get-mailbox | foreach-object { add-adpermission $_.username -user domain.com\$_.username -accessrights "fullaccess" }

(its not .username... its like... something else. Anyway, do a get-mailbox <username> | fl and look for the attribute that contains the username. )

(this is an exchange management shell command by the way)
Avatar of savesme
savesme

ASKER

ok, thanks, i'll try that now..  FYI i'm not sure it's just the exchange permissions, they can't log into a shared folder anymore either.  But the admin domain account i mentioned earlier that still works can.  Does that ring a bell?
Avatar of savesme
savesme

ASKER

i get a warning that appropriate ACE is already present.  Same problem.  Some more info i probably should have mentioned...if we add a new user to exchange(which creates it in AD) or if we create a user in AD then add the mailbox, we still can't login.  
thanks again
Avatar of savesme
savesme

ASKER

i didn't get very far, i ran adprep /forestprep and adprep/domainprep and that's when this all started
Avatar of suppsaws
suppsaws
Flag of Belgium image
let me first ask; how many users is this domain?
because, if it's max 7 or so, you'd better do no migration at all, but just a new installation.
It's not that easy to migrate from a regular server 2003 + exchange 2007 to sbs 2008
Avatar of savesme
savesme

ASKER

yeah figuring that out now actually.  Heading in the direction of creating a new domain, and using exmerge to bring the mail over.  And then can i run usmt for the workstations?  Does this sound like a good course of action at this point?
ASKER CERTIFIED SOLUTION
Avatar of suppsaws
suppsaws
Flag of Belgium image
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial