asked on

Running ExMerge on an Exchange Server that is a DC

So I have a Catch 22 here... I need to run Exmerge to get a copy of some mailboxes but my Exchange 2003 server is a DC. I created a special user and delegated control as you are supposed to do but it still doesn't work because the user has to be a member of the Local Admin group which we all know does not exist on a DC. But if I use an account that is a member of Domain Admins or Enterprise Admins there is an explicit DENY permission.

Is my only option to change the permissions on the store and remove the DENY for the Domain Admins? I really hate to do that...

ASKER CERTIFIED SOLUTION

endital1097

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

Shreedhar Ette

Hi,

Refer this article:
http://support.microsoft.com/kb/292509

Hope this helps,
Shree

sunnyc7

can you get the exmerge log from
c:\program files\exchsrvr\bin

or the location you are running exmerge from.

that may provide clues.

thanks

EGSAdmin

ASKER

Ok, I thought the Deny always took precidence, I did not relaize there wasa difference if the permission was inherited. I will try the chage tomorrow and see if that works.

Is there any way to get the user I created per the above KB article to work? This would not be an issue accept the Exchange Server is running as a DC also so it is not a local admin on the exchange server...

endital1097

exchange is different here where the explicit allow will override the deny
you just need to assign the permission at the database level

lucid8

Advice above is correct on user for ExMerge, however, if that fails, check out http://www.lucid8.com/product/digiscope.asp
Troy

EGSAdmin

ASKER

OK, so I got it to work by just giving an Member of Domain Admins an Explicit Allow... Even though when you change the permissions it says that the deny will take precedence...
New-Bitmap-Image.bmp