Exchange Administrator group missing
System details: Exchange 2003 (up to date) on Server 2003 R2 SP2 Standard(up to date). This was a P2V and is now on Hyper-V. At some point Exchange was "rebuilt" by another IT admin (not sure if it was before or after the P2V). I
am now trying to clean up some issues.
There is no Exchange Administrators group in Active directory. Exchange is still working fine, but the only Exchange groups are Exchange Enterprise Servers and Exchange Domain Servers. Obviously I need to be able to have Exchange Admin access
to properly manage Exchange. I'm trying to find out if there is a way to recreate this group or if I'm going to have to go through more drastic measures. I've done some quick searching and have not been able to find any info on this issue.
June 21st, 2010 11:40pm
On Mon, 21 Jun 2010 20:40:14 +0000, Camride wrote:
>
>
>System details: Exchange 2003 (up to date) on Server 2003 R2 SP2 Standard(up to date). This was a P2V and is now on Hyper-V. At some point Exchange was "rebuilt" by another IT admin (not sure if it was before or after the P2V). I am now trying to clean
up some issues.
>
>There is no Exchange Administrators group in Active directory. Exchange is still working fine, but the only Exchange groups are Exchange Enterprise Servers and Exchange Domain Servers. Obviously I need to be able to have Exchange Admin access to properly
manage Exchange. I'm trying to find out if there is a way to recreate this group or if I'm going to have to go through more drastic measures. I've done some quick searching and have not been able to find any info on this issue.
Just create the group! Call it whatever you like. Then assign it the
Exchange role you want and populate the group with whatever users you
want. There's nothing special about that group, IIRC.
---
Rich Matheisen
MCSE+I, Exchange MVP
--- Rich Matheisen MCSE+I, Exchange MVP
Free Windows Admin Tool Kit Click here and download it now
June 22nd, 2010 5:44am
Hi,
Exchange Administration Delegation Wizard provides an interface that you can use to configure administrative permissions for Exchange Server objects in Active Directory.
So I recommend you to use Exchange Administration Delegation Wizard to check if you have Exchange Administrator group.
Overview of Exchange administrative role permissions in Exchange 2003
http://support.microsoft.com/kb/823018/en-us
More information about permission on Exchange Administrator role
Organization Rights:
All permissions (except for Change permissions) on the MsExchConfiguration container (this object and its subcontainers).
Deny Receive-As permissions and Send-As permissions on the Organization container (this object and its subcontainers).
Administrative Group Rights:
Read, List object, and List contents permissions on the MsExchConfiguration container (this object only).
Read, List object, and List contents permissions on the Organization container (this object and its subcontainers).
All permissions (except for Change, Deny Send-As, and Deny Receive-As permissions) on the Administrator Group container (this object and its sub-containers).
All permissions (except for Change permissions) on the Connections container (this object and its subcontainers).
Read, List object, List contents, and Write properties permissions on the Offline Address Lists container (this object and its subcontainers).
Overview of Exchange administrative role permissions in Exchange 2003
http://support.microsoft.com/kb/823018/en-us
Besides, when we run
DomainPrep, it will create “Exchange Enterprise Server” domain local group,”Exchange Domain Servers” global group and “,Microsoft Exchange System Objects”
container.
Exchange Server 2003 Deployment
http://technet.microsoft.com/en-us/library/aa996080(EXCHG.65).aspx
Regards,
Xiu
June 22nd, 2010 6:20am