Active Directory Rights and Exchange 2007
Hi ... Hoping someone can assist me with the following problem. I was told to submit this question to this forum. I have a Windows Server 2008 R2 Domain Controller and Exchange 2007 version 8.03.0192.001. We have approximately 250 users configured with Exchange mailboxes. We have an account named "Account_1" that has "Full Access Permission" to all mailboxes. However this account is unable to access approximately 9 mailboxes. I have tried the following to correct this problem: 1. Delete and re-add "Full Access Permission" within Exchange. 2. Re-boot Exchange. 3. Opened Active Directory, opened the user account, clicked the "Security" tab, clicked "Advanced", un-checked "Include Inheritable Permissions from this object's parent" checkbox, clicked "Add" on the security pop-up window, clicked OK. I then re-checked the checkbox and clicked Ok. Step number 3 temporarily fixed the problem but a few hours later the problem re-appeared. Any suggestions ? JD
January 24th, 2012 3:09pm

I feel Include Inheritable Permissions are getting removed on its own. Can you verify now. is Include Inheritable Permissions Checked ? Go to any one of your DC and run "repadmin /syncall /Aped" You are trying to sync your DC's verify you don't have replication Errors" Regards Satheshwaran Manoharan
Free Windows Admin Tool Kit Click here and download it now
January 24th, 2012 4:09pm

Hi Satheshwaran, The "Include Inheritable Permissions" is checked. There do not seem to be any errors with replication. We have two Domain Controllers in our environment. I executed the following two commands on the Primary Domain Controller. Could this be a case of corrupted mailboxes ?: repadmin /replsum * /bysrc /bydest /sort:delta repadmin /replsum * /bysrc /bydest /sort:failures Here are the results: Beginning data collection for replication summary, this may take awhile: ..... Source DSA largest delta fails/total %% error AD2 31m:42s 0 / 5 0 AD1 31m:30s 0 / 5 0 Destination DSA largest delta fails/total %% error AD1 31m:43s 0 / 5 0 AD2 31m:31s 0 / 5 0 JD
January 24th, 2012 7:51pm

I forgot to mention the following Satheshwaran, Exchange 2007 (version 8.03.0192.001) is installed on a Windows 2003 R2 Standard Server 64-Bit with SP2. Our Domain Controllers are Windows Server 2008 R2 Standard 64-Bit. Regards, JD
Free Windows Admin Tool Kit Click here and download it now
January 24th, 2012 9:22pm

Hello, Just for a test to grant the Full Access Permission to another user and see if it works properly. Thanks, Simon
January 26th, 2012 11:17am

Hi Simon, It's the same result with another user. Thanks, JD
Free Windows Admin Tool Kit Click here and download it now
February 8th, 2012 7:39pm

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics