Solved

Running ExMerge on an Exchange Server that is a DC

Posted on 2010-09-13
7
505 Views
Last Modified: 2012-06-21
So I have a Catch 22 here... I need to run Exmerge to get a copy of some mailboxes but my Exchange 2003 server is a DC. I created a special user and delegated control as you are supposed to do but it still doesn't work because the user has to be a member of the Local Admin group which we all know does not exist on a DC. But if I use an account that is a member of Domain Admins or Enterprise Admins there is an explicit DENY permission.

Is my only option to change the permissions on the store and remove the DENY for the Domain Admins? I really hate to do that...

0
Comment
Question by:EGSAdmin
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
7 Comments
 
LVL 32

Accepted Solution

by:
endital1097 earned 500 total points
ID: 33667691
add that user with receive-as and send-as permission to the mailbox store within exchange system manager
an explicit allow overrides the deny granted to domain admins
0
 
LVL 34

Expert Comment

by:Shreedhar Ette
ID: 33667743
Hi,

Refer this article:
http://support.microsoft.com/kb/292509

Hope this helps,
Shree
0
 
LVL 28

Expert Comment

by:sunnyc7
ID: 33668096
can you get the exmerge log from
c:\program files\exchsrvr\bin

or the location you are running exmerge from.

that may provide clues.

thanks
0
Best Practices: Disaster Recovery Testing

Besides backup, any IT division should have a disaster recovery plan. You will find a few tips below relating to the development of such a plan and to what issues one should pay special attention in the course of backup planning.

 

Author Comment

by:EGSAdmin
ID: 33668562
Ok, I thought the Deny always took precidence, I did not relaize there wasa difference if the permission was inherited. I will try the chage tomorrow and see if that works.

Is there any way to get the user I created per the above KB article to work? This would not be an issue accept the Exchange Server is running as a DC also so it is not a local admin on the exchange server...
0
 
LVL 32

Expert Comment

by:endital1097
ID: 33668566
exchange is different here where the explicit allow will override the deny
you just need to assign the permission at the database level
0
 
LVL 17

Expert Comment

by:lucid8
ID: 33671182
Advice above is correct on user for ExMerge, however, if that fails, check out http://www.lucid8.com/product/digiscope.asp 
Troy
0
 

Author Comment

by:EGSAdmin
ID: 33672933
OK, so I got it to work by just giving an Member of Domain Admins an Explicit Allow... Even though when you change the permissions it says that the deny will take precedence...
New-Bitmap-Image.bmp
0

Featured Post

Free NetCrunch network monitor licenses!

Only on Experts-Exchange: Sign-up for a free-trial and we'll send you your permanent license!

Here is what you get: 30 Nodes | Unlimited Sensors | No Time Restrictions | Absolutely FREE!

Act now. This offer ends July 14, 2017.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

While rebooting windows server 2003 server , it's showing "active directory rebuilding indices please wait" at startup. It took a little while for this process to complete and once we logged on not all the services were started so another reboot is …
This article aims to explain the working of CircularLogArchiver. This tool was designed to solve the buildup of log file in cases where systems do not support circular logging or where circular logging is not enabled
To add imagery to an HTML email signature, you have two options available to you. You can either add a logo/image by embedding it directly into the signature or hosting it externally and linking to it. The vast majority of email clients display l…
A short tutorial showing how to set up an email signature in Outlook on the Web (previously known as OWA). For free email signatures designs, visit https://www.mail-signatures.com/articles/signature-templates/?sts=6651 If you want to manage em…

707 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question