IFS Drive Permissions
Just Migrated an exchange server (2003)to different hardware and I have to enable the IFS drive (M: Drive) (Don't lecture, I know). However, I can only have permission to get into the administrator folder. I don't like changing Exchange system permission but I must have access to all folders. Where do I change the permissions to do so.
Thanks,
T
August 27th, 2008 10:22pm
<insert lecture here>
http://www.petri.co.il/restore_the_m_drive_mapping_in_exchange_2003.htm
or
http://support.microsoft.com/kb/821836
Free Windows Admin Tool Kit Click here and download it now
August 27th, 2008 11:02pm
I had already restored the ifs drive, but I only have permission to view the admin folder...
August 27th, 2008 11:08pm
Have you tried to make changes on the information store level? I believe they kinda "replicate" back to the file-level permissions. I do know there are issues when you modify the file-level permissions directly:
"if you using the Windows NT ACL Editor to change the permissions settings on a MAPI public folder (by pressing the CTRL key, and then clicking Client Permissions, or directly from drive M through Windows Explorer), the Exchange Installable File System does not write back the MAPI permissions"
http://support.microsoft.com/kb/330508
I'm looking for more info...
Free Windows Admin Tool Kit Click here and download it now
August 27th, 2008 11:18pm
"Use only the Permissions dialog box provided by Outlook and the Client Permissions dialog box provided by Exchange System Manager to modify MAPI permissions. When you use the Outlook or Exchange System Manager user interface to edit MAPI permissions, Exchange reverses the translation to store the modified security descriptor and maintains the Exchange Canonical ACL format. However, if you edit permissions using the Windows file system user interface (for example, by using the M:\ drive supplied by the Installable File System in Exchange 2000Server), the security descriptor will be stored using the normal Windows ACL format. This means that the ACEs will be in a different sequence, and Exchange will no longer be able to translate the security descriptor into MAPI permissions. For more information about this issue, see the Microsoft Knowledge Base article 270905, "Unable to Set Client Permissions on Public Folders Through Exchange System Manager." "
http://technet.microsoft.com/en-us/library/bb123461(EXCHG.65).aspx
August 27th, 2008 11:31pm
Go to ESM, right-click Mailbox Store, select Properties->Security tab->clear the checkbox of deny permission for Send As and Receive As which set to that user account you will use to access mailbox. After that, restart IS service
Notes: Also clear the same deny permission for those groups which the user belong to
Workaround:
Please use MAPI Editor to access users mailboxes and public folder
1. Login PC with administrators username and password
2. Create a mail profile for administrator
3. Then launch MAPI Editor
4. Sessions menu->choose Logon and Display Store Table->choose mail profile in jumped window
5. MDB menu->Get Mailbox Table->select the server which contain the stores and click OK
6. Now you can access all users mailbox and public folder
Free Windows Admin Tool Kit Click here and download it now
September 2nd, 2008 12:08pm