Hello all, I'm having a bit trouble with exchange permission, somewhere along the line I thinksomeone ticked deny in a permision on exchange system manager, I thinkit wasfor the group Domain Admins. Basically when running Exchange Administration Delagation Wizard and editing permissions there, when I click finish I recieve the error "Failed to grant permission for Domain\User on this object" click ok "The delegation wizard could not grant/change permissions for Domain\User." Does anyone have any ideas how I can sort this permissiosn issue out? Thanks Tom.

get into adsiedit (support tools form server cd) and under the domain configuration container, you'll see excange and first administrative group. Somewhere under there, you'll need to find that deny permission and undo it.

Thanks knighlty, I haven't used adsiedit before, could you give me a little more instructions please? when I open it and connect to my domain controller I do not see exchange and first administrative group, the only thing to do with exchange I can see it CN=Microsoft Exchange System Objects? Thanks again Tom.

you need to go into the Configuration context, then into Services then you will find Exchange & finally the Organization Name below that you will find a tree structure similar to that of Exchange System Manager.

where is the Configuration context, I cannot find this in ADSI Edit?

when you open Adsiedit, it should open three contexts, first is Domain, Second is Configuration & Third Schema (I think). The following is the tree where you will find what you are looking for: 1. Install Support Tools from Windows 2003 CD 1 2. Click Start > Run > typeADSIEDIT.MSC > click OK 3. Navigate to the following: Configuration (Domain) \ Cn=Configuration,DC=xxxxxxx,DC=com \ CN=Services\CN=Microsoft Exchange

Long one here but stick with me please, just trying to give you all the details. when browsing through ADSI edit there are loads of folders in there, do i look through them all or are there some obvious places that could have a deny. Basically there's so many problems with our original EXCHANGE2003 server I am trying tomigrate toExchange2007 (MAIL2) stored on another server. But I get an error when moving mailboxs, i'm asuming it's down to this permissions issue. From the new 2007 (MAIL2) server when trying to move one mailbox (TEST2) from the problematic 2003 (EXCHANGE2003)server I recieve. 2007 ERROR"TEST2Failed Error:Error was found for TEST2 (TEST2@domain.com) because: Error occurred in the step: Approving object. Failed to open object 'LDAP://DC.DOMAIN.com/CN=Mailbox Store (EXCHANGE2003),CN=First Storage Group,CN=InformationStore,CN=EXCHANGE2003,CN=Servers,CN=First Administrative Group,CN=Administrative Groups,CN=First Organization,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=cnluk,DC=com' with error: There is no such object on the server., error code: -1056749240 Exchange Management Shell command attempted:'eee0f28c-920f-42dd-96f2-0556d36f5c16' | move-mailbox -TargetDatabase 'CN=Mailbox Database,CN=First Storage Group,CN=InformationStore,CN=MAIL2,CN=Servers,CN=Exchange Administrative Group (FYDIBOHF23SPDLT),CN=Administrative Groups,CN=First Organization,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=DOMAIN,DC=com' Elapsed Time: 00:00:00" And from EXCHANGE2003 moving the same TEST2 mailbox I recieve this error. 2003 ERROR "Move Mailbox" dcName="DC" buildNumber="7638" runningAs="admin@domain.com"> <timespan startTime="2007-11-01 12:18:06.291" milliseconds="12781" /> - <moveMailbox mixedMode="false" maxBadItems="0"> - <destination> <database>/dc=com/dc=domain/cn=Configuration/cn=Services/cn=Microsoft Exchange/cn=First Organization/cn=Administrative Groups/cn=Exchange Administrative Group (FYDIBOHF23SPDLT)/cn=Servers/cn=MAIL2/cn=InformationStore/cn=First Storage Group/cn=Mailbox Database</database> </destination> </moveMailbox> <taskSummary errorCount="1" completedCount="0" warningCount="0" errorCode="0x00000000" /> - <items> - <item adsPath="TEST2" class="user"> <progress code="0" milliseconds="12781">Opening destination mailbox.</progress> - <summary isWarning="false" errorCode="0xc1050000"> The requesting program is an incompatible version. Contact your system administrator about upgrading your Microsoft Exchange client. This version of the client application is incompatible with the version of Microsoft Exchange Server running on the server computer. Microsoft Exchange Server Information Store ID no: 80040110-0510-80040110 - <details> - <source> <database>/dc=com/dc=DOMAIN/cn=Configuration/cn=Services/cn=Microsoft Exchange/cn=First Organization/cn=Administrative Groups/cn=First Administrative Group/cn=Servers/cn=EXCHANGE2003/cn=InformationStore/cn=First Storage Group/cn=Mailbox Store (EXCHANGE2003)</database> If any one can help its greatly appreciated!