• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 454
  • Last Modified:

User rights for ExMerge

Hi  Experts.

An Exchange 2003/Exmerge question for you...

 I've created a group caled ExMerge so I can use ExMerge to export some mailboxes to PST format. As per  http://support.microsoft.com/kb/292509  .Ive given this group and the user account in the group local admin rights for the Exchange server.

I've checked and havnt got any denied rights for the group in Exchange System Manager.

However, when I run exmerge i still get an error in the log.

[12:44:11] Error opening message store (MSEMS). Verify that the Microsoft Exchange Information Store service is running and that you have the correct permissions to log on. (0x8004011d)

Help appreciated.





0
jmsjms
Asked:
jmsjms
  • 7
  • 6
  • 3
1 Solution
 
SteveIT ManagerCommented:
This Microsoft article details the required permissions for exmerge

http://support.microsoft.com/kb/292509
0
 
aoakeleyCommented:
1. I know you have siad that you have followed http://support.microsoft.com/kb/292509 but just double check it.
2. Double check that the acount you are using is not a member of domain admins
3. Restart Exchange System Agent and Info Store
0
 
aoakeleyCommented:
Exchange System Attendant (not agent) thinking about something else while typing
0
Has Powershell sent you back into the Stone Age?

If managing Active Directory using Windows Powershell® is making you feel like you stepped back in time, you are not alone.  For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why.

 
jmsjmsAuthor Commented:
I've re-read it about 5 times now... :-)

Re-booting server now to see if it makes a difference.  The user is a normal domain user (no admin permissions except local admin on server).  It was a domain admin account though.  I'm starting to think this may be a problem, perhaps AD is remembering this?  It rings bells...
0
 
aoakeleyCommented:
I normally create a new account specifically for the purpose of running exmerge....
0
 
SteveIT ManagerCommented:
Me too - created an account called exmerge (so i can remember what its for)

0
 
jmsjmsAuthor Commented:
booted server.  Still same error.

[14:33:12] Initializing worker thread (Thread0)
[14:33:12] Copying data from mailbox 'name'('name') on Server 'mailserver' to file 'H:\ARCHIVE\name.PST'.
[14:33:12] Error opening message store (MSEMS). Verify that the Microsoft Exchange Information Store service is running and that you have the correct permissions to log on. (0x8004011d)
[14:33:12] Errors encountered. Copy process aborted for mailbox 'name'('name').
0
 
aoakeleyCommented:
did you create new user account and add to your exmerge group?
0
 
SteveIT ManagerCommented:
Does it have mailbox store rights

Load exchange system manager right click top level and goto properties then security and add account with full rights

Also add under server
0
 
aoakeleyCommented:
Does your exmerge user have a mailbox -if not create one
If you only have a small number of accounts to merge you can give your exmerge account "Full Mailbox Access" ondividually on each account - that should fix it!
0
 
jmsjmsAuthor Commented:
I created a new user from scratch and it still comes up with the same error.

I've logged in via OWA using this account and successfully sent an email.

It's the only member of a global security group called exmerge.  It and the group exmerge have local admin rights.

I've removed the delegated rights to the group and re-done them from the  server level under First Administrative group in ESM as per http://support.microsoft.com/kb/292509

sgsm81:- Ive seen guidance from sembee/MS that "Exchange View Only Administrator" should be used.  I've actually tried full admin and it seems to put in the deny security rights!

I've looked at the security rights for the maillbox store.  It has inherited "view information store" and "Special" and it has "Send As"/"Recieve As" which I explicity gave it at this level.





0
 
aoakeleyCommented:
Try going into AD users and computers for the user you are exporting.
- properties of the user
- exchange advanced
- Mailbox rights
Give your exmerge user "Full mailbox Access"

try merge again
0
 
jmsjmsAuthor Commented:
I've tried an non-disabled account and it worked fine.  Looking around I noticed this thread
http://www.experts-exchange.com/Software/Server_Software/Email_Servers/Exchange/Q_24235689.html?sfQueryTermInfo=1+10+30+account+disabl+exmerg

Can anyone confirm wether exmerge on Exchange 2003 works should work with disabled accounts?
0
 
jmsjmsAuthor Commented:
I can exmerge accounts that werent disabled but the ones that were disabled still wont work...
0
 
aoakeleyCommented:
LOL - did not think to ask if the account was disabled. No it will not work on a disabled account.
0
 
jmsjmsAuthor Commented:
THanks to all that helped.
0

Featured Post

Has Powershell sent you back into the Stone Age?

If managing Active Directory using Windows Powershell® is making you feel like you stepped back in time, you are not alone.  For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why.

  • 7
  • 6
  • 3
Tackle projects and never again get stuck behind a technical roadblock.
Join Now