[Webinar] Streamline your web hosting managementRegister Today

x
?
Solved

editing with ADSIedit, all fields i want to change are greyed out

Posted on 2011-09-28
13
Medium Priority
?
2,431 Views
Last Modified: 2012-05-12
Logging in as domain admin,
connect to the adsi, I can see the area I want to change but it is greyed out.
I have run ADSIedit as administrator, logged in with domain\administrator account, but not all of the attributes are editable,  state  <not set>

trying to follow an article for send and receive issues on a exch 2010 server...        msExchSmtpReceiveMaxMessageSize

any help would be nice, not a very big user of ADSIedit....
0
Comment
Question by:cvvood
  • 5
  • 5
  • 3
13 Comments
 
LVL 6

Expert Comment

by:Em Man
ID: 36765672
hmmm... I was able to edit it, but because I am a member of Enterprise Domain Admins.
0
 
LVL 6

Expert Comment

by:Em Man
ID: 36767499
Also I am an Exchange Full Administrator. (under Exchange Admin Delegation)
0
 
LVL 39

Expert Comment

by:Krzysztof Pytko
ID: 36812969
Check with Enterprise Administrator or Schema Administrator account. By default only them are allowed to modify anything in Schema.

Regards,
Krzysztof
0
Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

 
LVL 5

Author Comment

by:cvvood
ID: 36816785
OK, the Admin is a member of:   administrators, domain admins, domain users, enterprise admins group policy creator owners, organization management, schema admins.

I am accessing the server through RDP if that makes any difference.

everything is still greyed out..
0
 
LVL 39

Expert Comment

by:Krzysztof Pytko
ID: 36890719
Check that attribute's security tab and check if other administrator didn't change permissions to modify that object.
Can you tell me please what you exactly want t ochange and where?
Thanks in advance

Krzysztof
0
 
LVL 5

Author Comment

by:cvvood
ID: 36943481
krzysztof,

I have exchange 2010, where some of the defaults are listed in the Directory like:
msExchESEParamCacheSizeMax
msExchMaxAttachmentSize

but still no luck, I cannot edit, I am logged in as Domain Admin,  with Schema admin and the likes.
0
 
LVL 39

Expert Comment

by:Krzysztof Pytko
ID: 36943746
OK, but where in ADSI Edit, you try to do that?
If in Configuration -> Services -> Microsoft Exchange -> <OrganizationName> -> Administrative Groups -> <AdministrativeGroup> -> Servers -> <ServerName> -> InformationStore then by default these attributes cannot be modified by Domain Admins or Schema Admins. You need to be a member of Enterprise Admins or Organization Management (I checked that in my test environment)

Can you verify once again if you are member of one of these groups, please?

Krzysztof
0
 
LVL 5

Author Comment

by:cvvood
ID: 36943959
yes, did look into that. I am attaching a copy of the "member of" for the Administrator
adsi-memberof.jpg
0
 
LVL 6

Expert Comment

by:Em Man
ID: 36946631
Are you using the version of ADSIEdit that comes with Windows 2008 Server? If not, you can install it by opening a command prompt and entering ServerManagerCmd -i RSAT-ADDC
0
 
LVL 5

Author Comment

by:cvvood
ID: 36948591
PS C:\Users\administrator.*******> ServerManagerCmd -i RSAT-ADDC

Servermanagercmd.exe is deprecated, and is not guaranteed to be supported in future releases of
at you use the Windows PowerShell cmdlets that are available for Server Manager.


ArgumentNotValid: Invalid role, role service, or feature: 'RSAT-ADDC'. The name was not found.
0
 
LVL 39

Expert Comment

by:Krzysztof Pytko
ID: 36948633
OK, try to do that this way. Download and install RSAT on your clients (if Win7) or install Support Tools from Server 2003 CD1 (if XP) and run on your machine adsiedit.msc and check again.

On a server, you may do one more step. Go to

c:\Users\<UsedProfile>\AppData\Roaming\Microsoft\MMC
and delete adsiedit file. Re-run console and check again. Maybe something wrong with console? Permissions are correct, for sure

Krzysztof
0
 
LVL 5

Author Comment

by:cvvood
ID: 36948739
This is a 2008 r2 environment,  should I do it from the cd's for 2008 r2?  and the command line didn't work for installing the adsiedit from the command line. I went to Features and installed the rsat tools.
0
 
LVL 39

Accepted Solution

by:
Krzysztof Pytko earned 2000 total points
ID: 36949292
If you have 2008 R2 DC then adsiedit.msc is available by default and there you should go to delete that configuration file.
For 2008 R2 member server you need to add RSAT tools and from Control Panel chose what to install. See this (it's for 7 but the same steps are for 2008)
http://www.petri.co.il/remote-server-administration-tools-for-windows-7.htm

Krzysztof
0

Featured Post

Creating Active Directory Users from a Text File

If your organization has a need to mass-create AD user accounts, watch this video to see how its done without the need for scripting or other unnecessary complexities.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

A safe way to clean winsxs folder from your windows server 2008 R2 editions
For anyone that has accidentally used newSID with Server 2008 R2 (like I did) and hasn't been able to get the server running again because you were unlucky (as I was) and had no backups - I was able to get things working by doing a Registry Hive rec…
This tutorial will walk an individual through setting the global and backup job media overwrite and protection periods in Backup Exec 2012. Log onto the Backup Exec Central Administration Server. Examine the services. If all or most of them are stop…
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …

591 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question