Active Directory Rights and Exchange 2007
Hi ... Hoping someone can assist me with the following problem. I was told to submit this question to this forum.
I have a Windows Server 2008 R2 Domain Controller and Exchange 2007 version 8.03.0192.001. We have approximately 250 users configured with Exchange mailboxes. We have an account named "Account_1" that has "Full Access Permission" to all mailboxes.
However this account is unable to access approximately 9 mailboxes. I have tried the following to correct this problem:
1. Delete and re-add "Full Access Permission" within Exchange.
2. Re-boot Exchange.
3. Opened Active Directory, opened the user account, clicked the "Security" tab, clicked "Advanced", un-checked "Include Inheritable Permissions from this object's parent" checkbox, clicked "Add" on the security pop-up window, clicked OK. I then
re-checked the checkbox and clicked Ok.
Step number 3 temporarily fixed the problem but a few hours later the problem re-appeared.
Any suggestions ?
JD
January 24th, 2012 3:09pm
I feel Include Inheritable Permissions are getting removed on its own.
Can you verify now. is Include Inheritable Permissions Checked ?
Go to any one of your DC and run "repadmin /syncall /Aped"
You are trying to sync your DC's verify you don't have replication Errors"
Regards
Satheshwaran Manoharan
Free Windows Admin Tool Kit Click here and download it now
January 24th, 2012 4:09pm
Hi Satheshwaran,
The "Include Inheritable Permissions" is checked. There do not seem to be any errors with replication. We have two Domain Controllers in our environment. I executed the following two commands on the Primary Domain Controller.
Could this be a case of corrupted mailboxes ?:
repadmin /replsum * /bysrc /bydest /sort:delta
repadmin /replsum * /bysrc /bydest /sort:failures
Here are the results:
Beginning data collection for replication summary, this may take awhile:
.....
Source DSA largest delta fails/total %% error
AD2 31m:42s 0 / 5 0
AD1 31m:30s 0 / 5 0
Destination DSA largest delta fails/total %% error
AD1 31m:43s 0 / 5 0
AD2 31m:31s 0 / 5 0
JD
January 24th, 2012 7:51pm
I forgot to mention the following Satheshwaran,
Exchange 2007 (version 8.03.0192.001) is installed on a Windows 2003 R2 Standard Server 64-Bit with SP2.
Our Domain Controllers are Windows Server 2008 R2 Standard 64-Bit.
Regards,
JD
Free Windows Admin Tool Kit Click here and download it now
January 24th, 2012 9:22pm
Hello,
Just for a test to grant the Full Access Permission to another user and see if it works properly.
Thanks,
Simon
January 26th, 2012 11:17am
Hi Simon,
It's the same result with another user.
Thanks,
JD
Free Windows Admin Tool Kit Click here and download it now
February 8th, 2012 7:39pm