[Okta Webinar] Learn how to a build a cloud-first strategyRegister Now

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 2376
  • Last Modified:

editing with ADSIedit, all fields i want to change are greyed out

Logging in as domain admin,
connect to the adsi, I can see the area I want to change but it is greyed out.
I have run ADSIedit as administrator, logged in with domain\administrator account, but not all of the attributes are editable,  state  <not set>

trying to follow an article for send and receive issues on a exch 2010 server...        msExchSmtpReceiveMaxMessageSize

any help would be nice, not a very big user of ADSIedit....
0
cvvood
Asked:
cvvood
  • 5
  • 5
  • 3
1 Solution
 
Em ManCommented:
hmmm... I was able to edit it, but because I am a member of Enterprise Domain Admins.
0
 
Em ManCommented:
Also I am an Exchange Full Administrator. (under Exchange Admin Delegation)
0
 
Krzysztof PytkoActive Directory EngineerCommented:
Check with Enterprise Administrator or Schema Administrator account. By default only them are allowed to modify anything in Schema.

Regards,
Krzysztof
0
Get your Disaster Recovery as a Service basics

Disaster Recovery as a Service is one go-to solution that revolutionizes DR planning. Implementing DRaaS could be an efficient process, easily accessible to non-DR experts. Learn about monitoring, testing, executing failovers and failbacks to ensure a "healthy" DR environment.

 
cvvoodAuthor Commented:
OK, the Admin is a member of:   administrators, domain admins, domain users, enterprise admins group policy creator owners, organization management, schema admins.

I am accessing the server through RDP if that makes any difference.

everything is still greyed out..
0
 
Krzysztof PytkoActive Directory EngineerCommented:
Check that attribute's security tab and check if other administrator didn't change permissions to modify that object.
Can you tell me please what you exactly want t ochange and where?
Thanks in advance

Krzysztof
0
 
cvvoodAuthor Commented:
krzysztof,

I have exchange 2010, where some of the defaults are listed in the Directory like:
msExchESEParamCacheSizeMax
msExchMaxAttachmentSize

but still no luck, I cannot edit, I am logged in as Domain Admin,  with Schema admin and the likes.
0
 
Krzysztof PytkoActive Directory EngineerCommented:
OK, but where in ADSI Edit, you try to do that?
If in Configuration -> Services -> Microsoft Exchange -> <OrganizationName> -> Administrative Groups -> <AdministrativeGroup> -> Servers -> <ServerName> -> InformationStore then by default these attributes cannot be modified by Domain Admins or Schema Admins. You need to be a member of Enterprise Admins or Organization Management (I checked that in my test environment)

Can you verify once again if you are member of one of these groups, please?

Krzysztof
0
 
cvvoodAuthor Commented:
yes, did look into that. I am attaching a copy of the "member of" for the Administrator
adsi-memberof.jpg
0
 
Em ManCommented:
Are you using the version of ADSIEdit that comes with Windows 2008 Server? If not, you can install it by opening a command prompt and entering ServerManagerCmd -i RSAT-ADDC
0
 
cvvoodAuthor Commented:
PS C:\Users\administrator.*******> ServerManagerCmd -i RSAT-ADDC

Servermanagercmd.exe is deprecated, and is not guaranteed to be supported in future releases of
at you use the Windows PowerShell cmdlets that are available for Server Manager.


ArgumentNotValid: Invalid role, role service, or feature: 'RSAT-ADDC'. The name was not found.
0
 
Krzysztof PytkoActive Directory EngineerCommented:
OK, try to do that this way. Download and install RSAT on your clients (if Win7) or install Support Tools from Server 2003 CD1 (if XP) and run on your machine adsiedit.msc and check again.

On a server, you may do one more step. Go to

c:\Users\<UsedProfile>\AppData\Roaming\Microsoft\MMC
and delete adsiedit file. Re-run console and check again. Maybe something wrong with console? Permissions are correct, for sure

Krzysztof
0
 
cvvoodAuthor Commented:
This is a 2008 r2 environment,  should I do it from the cd's for 2008 r2?  and the command line didn't work for installing the adsiedit from the command line. I went to Features and installed the rsat tools.
0
 
Krzysztof PytkoActive Directory EngineerCommented:
If you have 2008 R2 DC then adsiedit.msc is available by default and there you should go to delete that configuration file.
For 2008 R2 member server you need to add RSAT tools and from Control Panel chose what to install. See this (it's for 7 but the same steps are for 2008)
http://www.petri.co.il/remote-server-administration-tools-for-windows-7.htm

Krzysztof
0

Featured Post

Creating Active Directory Users from a Text File

If your organization has a need to mass-create AD user accounts, watch this video to see how its done without the need for scripting or other unnecessary complexities.

  • 5
  • 5
  • 3
Tackle projects and never again get stuck behind a technical roadblock.
Join Now