Go Premium for a chance to win a PS4. Enter to Win

x
?
Solved

Exchange mailbox store not visible following a change of permissions

Posted on 2014-11-21
12
Medium Priority
?
126 Views
Last Modified: 2014-12-04
Hi I was trying to export mailboxes from exchange server Version: 6.5.7226.0 on sbs 2003. Exmerge logged an error which suggested that the admin account on the server did not have full read write access to the mailboxes. I right clicked on the mailbox store and chose properties->security and it seem that there were some deny permissions so I went into the advanced and unchecked the inherit permissions tickbox.

I now cannot see the private mailbox store in ESM at all, Is there any way to get this mailbox store remounted?
0
Comment
Question by:GazClimbs
  • 6
  • 4
  • 2
12 Comments
 
LVL 38

Expert Comment

by:Hypercat (Deb)
ID: 40458170
This article lists the minimum required permissions for the mailbox store:

http://support.microsoft.com/kb/328229

When you unchecked the "inherit permissions" check box, you may have inadvertently removed all permissions from the mailbox store.  In order to restore the permissions, you may have to use ADSIEdit. Have you ever used this tool?
0
 
LVL 31

Expert Comment

by:Gareth Gudger
ID: 40458544
Can you recheck inherited permissions?
0
 

Author Comment

by:GazClimbs
ID: 40461563
Thanks hypercat, no I have not used this tool before, any advice for me?

Gareth, I cannot see the store in ESM so no I cannot edit the permissions
0
NFR key for Veeam Backup for Microsoft Office 365

Veeam is happy to provide a free NFR license (for 1 year, up to 10 users). This license allows for the non‑production use of Veeam Backup for Microsoft Office 365 in your home lab without any feature limitations.

 
LVL 31

Expert Comment

by:Gareth Gudger
ID: 40462003
Unfortunately, I don't have an Exchange 2003 server in front of me anymore and I'm getting old. ;)

Does it give you the security tab at the server level?

As Hypercat mentioned, might have to download and installed ADSI Edit to fix these permissions.
http://technet.microsoft.com/en-us/library/cc773354(v=ws.10).aspx
0
 

Author Comment

by:GazClimbs
ID: 40462139
Thanks Gareth,
  That document has no information about using the tool to interact with exchange storage groups, can you direct me towards anything useful?

Gaz
0
 
LVL 38

Expert Comment

by:Hypercat (Deb)
ID: 40462200
This article describes where to go in the ADSIEDIT.msc to find the permissions for the Exchange information store.  It specifically describes adding the Exchange server computer to the permissions, but you can add other appropriate permissions in the same way:

http://technet.microsoft.com/en-us/library/aa997766(v=exchg.65).aspx

The article has you add the permissions at the Server level. Since it seems that you have removed the inheritance from the mailbox store level, what I'd recommend that you do would be to just check the permissions at the server level first.  If they seem normal, check the information store object permissions.  If the info store is inheriting the permissions (as it should be), then drill down further to the specific mailbox store level.  At that point, all you should have to do would be to re-check the "Inherit permissions" box and the correct permissions from the upper level would be applied.
0
 
LVL 38

Expert Comment

by:Hypercat (Deb)
ID: 40462213
Here's a picture of how it will look in ADSIEDIT.msc.  This is an Exchange 2007 server, so your 2003 will look slightly different, but the basic idea is the same:

ADSIEDIT console showing Exchange objects
I have erased all the domain naming information, so don't be confused by the blank spaces in the picture.
0
 
LVL 38

Expert Comment

by:Hypercat (Deb)
ID: 40462217
Also, if you're running Exchange 2003 on a Windows 2003 server, you'll have to install the Windows 2003 support tools in order to have adsiedit.msc available.  This tool is included in later OS's, but is an add-on with the Support Tools for Windows 2003.
0
 
LVL 38

Expert Comment

by:Hypercat (Deb)
ID: 40462230
PPS :-| Another additional instruction:  Once you have adsiedit.msc installed and open, you'll see a blank window with just the adsiedit.msc object.  You need to right-click on ADSI Edit and click "Connect to."  Then in the dialog box, click the down arrow under "Select a well known Naming Context:" and select "Configuration."  This will get you to the correct starting point for getting to the Exchange settings.
0
 

Author Comment

by:GazClimbs
ID: 40464371
adsi
I can drill down as far as the first storage group as in the screenshot but when I right click on the mailbox store and choose properties I get the error above,

Any help greatly appreciated, all I need to do is mount this store and exmerge a few gb of mail

Gaz
0
 
LVL 38

Accepted Solution

by:
Hypercat (Deb) earned 2000 total points
ID: 40464477
Follow the instructions in the first article I posted to make sure that the Exchange server computer is member of the Exchange Domain Servers global group.
0
 

Author Closing Comment

by:GazClimbs
ID: 40481242
Thanks for you attention in this matter hypercat, I ended up creating a recovery group and accessing the mailboxes in this way, cheers
0

Featured Post

Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Stellar Exchange Toolkit: this 5 in 1 toolkit comes loaded with mega-software tool. Here’s an introduction to tools’ usage and advantages:
If you have come across a situation where you need to find some EDB mailbox recovery techniques, then here you will find the same. In this article, we will take you through three techniques using which you will be able to perform EDB recovery. You …
This video demonstrates how to sync Microsoft Exchange Public Folders with smartphones using CodeTwo Exchange Sync and Exchange ActiveSync. To learn more about CodeTwo Exchange Sync and download the free trial, go to: http://www.codetwo.com/excha…
Michael from AdRem Software outlines event notifications and Automatic Corrective Actions in network monitoring. Automatic Corrective Actions are scripts, which can automatically run upon discovery of a certain undesirable condition in your network.…
Suggested Courses
Course of the Month12 days, 13 hours left to enroll

972 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question