Move Exchange DB and logs on SBS2003 - define also security ?

I will be moving the Exchange database and logs to a different drive. Found multiple articles explaining how, seems fairly simple and straightforward. But while most of them only tell to move them using ESM, I found a few articles which also indicate that you have to set security on the destination folder (ex: Microsoft's KB821915 http://support.microsoft.com/default.aspx?kbid=821915), task that is not mentionned in the other articles. Is it necessary ? Or does the ESM move will take care of assigning all the proper security on the destination folders ?

Thanks.
ndidomenicoAsked:
Who is Participating?
 
Jon BrelieSystem ArchitectCommented:
No, it simply means that you add the Server Operators permissions as defined instead of using a power users group or another non-DC equivalent.
0
 
Jon BrelieSystem ArchitectCommented:
ESM will not set security on destination folders.
0
 
Maen Abu-TabanjehNetwork Administrator, Network ConsultantCommented:
0
Simplify Active Directory Administration

Administration of Active Directory does not have to be hard.  Too often what should be a simple task is made more difficult than it needs to be.The solution?  Hyena from SystemTools Software.  With ease-of-use as well as powerful importing and bulk updating capabilities.

 
Bruno PACIIT ConsultantCommented:
Hi,

You have to follow the Microsoft article step by step.
Is it useful to say that articles from Microsoft knowledge base are much more precise and reliable about Microsoft products than any other forum ?

Have a nice day
0
 
Maen Abu-TabanjehNetwork Administrator, Network ConsultantCommented:
i forgot to ask you , did you stop exchange services before you move?
0
 
Jon BrelieSystem ArchitectCommented:
You don't need to stop exchange services.  You only need to dismount the database you are going to move.
0
 
Maen Abu-TabanjehNetwork Administrator, Network ConsultantCommented:
Enphyniti ..thank you for information , i thought its like information store service in 2007
0
 
ndidomenicoAuthor Commented:
I can stop the services if necessary.
I'm not sure I understand properly the last part of the KB821915 article concerning security assignment. Since this is a SBS server, I should follow the security assignments for a DC, as mentionned here:

"... You must grant the following default permissions to the new Mdbdata folder that contains the log files and database files:
•Administrators: Full Control
•Authenticated Users: Read and Execute, List Folder Contents, Read
•Creator Owner: None
•Server Operators: Modify, Read and Execute, List Folder Contents, Read, Write
•System: Full Control
Note Only assign permissions to the Server Operators group if the Exchange server is a domain controller. Otherwise, assign permissions to the Power Users group. Only domain controllers should have permissions to the built-in Server Operators group. Stand-alone and member servers should have permissions to the built-in Power Users group.
You may also have to grant the following permissions to the root drive that contains the new Mdbdata folder:
•System: Full Control "

Let's assume the destination folder will be D:\Program Files\Exchsrvr\Mdbdata.
Does this mean that I should assign Modify, Read and Execute, List folder Contents, Read, Write on the "Mdbdata" folder ONLY for the "Server Operators" group, and NOT enter any of the other listed security assignments for Administrators, Authenticated Users, Creator, System. ?

0
 
Jon BrelieSystem ArchitectCommented:
Enter the rest of the permissions as stated.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.