Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 511
  • Last Modified:

Running ExMerge on an Exchange Server that is a DC

So I have a Catch 22 here... I need to run Exmerge to get a copy of some mailboxes but my Exchange 2003 server is a DC. I created a special user and delegated control as you are supposed to do but it still doesn't work because the user has to be a member of the Local Admin group which we all know does not exist on a DC. But if I use an account that is a member of Domain Admins or Enterprise Admins there is an explicit DENY permission.

Is my only option to change the permissions on the store and remove the DENY for the Domain Admins? I really hate to do that...

0
EGSAdmin
Asked:
EGSAdmin
1 Solution
 
endital1097Commented:
add that user with receive-as and send-as permission to the mailbox store within exchange system manager
an explicit allow overrides the deny granted to domain admins
0
 
Shreedhar EtteCommented:
Hi,

Refer this article:
http://support.microsoft.com/kb/292509

Hope this helps,
Shree
0
 
sunnyc7Commented:
can you get the exmerge log from
c:\program files\exchsrvr\bin

or the location you are running exmerge from.

that may provide clues.

thanks
0
Simplify Active Directory Administration

Administration of Active Directory does not have to be hard.  Too often what should be a simple task is made more difficult than it needs to be.The solution?  Hyena from SystemTools Software.  With ease-of-use as well as powerful importing and bulk updating capabilities.

 
EGSAdminAuthor Commented:
Ok, I thought the Deny always took precidence, I did not relaize there wasa difference if the permission was inherited. I will try the chage tomorrow and see if that works.

Is there any way to get the user I created per the above KB article to work? This would not be an issue accept the Exchange Server is running as a DC also so it is not a local admin on the exchange server...
0
 
endital1097Commented:
exchange is different here where the explicit allow will override the deny
you just need to assign the permission at the database level
0
 
lucid8Commented:
Advice above is correct on user for ExMerge, however, if that fails, check out http://www.lucid8.com/product/digiscope.asp 
Troy
0
 
EGSAdminAuthor Commented:
OK, so I got it to work by just giving an Member of Domain Admins an Explicit Allow... Even though when you change the permissions it says that the deny will take precedence...
New-Bitmap-Image.bmp
0

Featured Post

Concerto's Cloud Advisory Services

Want to avoid the missteps to gaining all the benefits of the cloud? Learn more about the different assessment options from our Cloud Advisory team.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now