Unable to access the Default Global Address List container in Exchange System Manager
Accidentally
I managed to set Deny permissions to the Full Controll check box on the
Security tab of the Default
Global Address List (GAL) Properties dialog box. For the group
"Everyone".
Now the
Default GAL no longer appears under All Global Address Lists, I can still
access it from Outlook on Server but nobody else on network can do it and mail
communication is broken.
I found
help in:
http://support.microsoft.com/?id=286296
However,
after I found exact container path using adsiedit.msc, I cannot get dsacls
work. When I typed in cmd:
dsacls
"CN=Default Global Address List,CN=All Global Address Lists,CN=Address
Lists Container,CN=nameofcompany,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=mydomainname"
it
returns only error message "Parameter is not valid" (roughly
translated from foreign language).
Container
path is as it is stated in adsiedit.msc, domain suffix was not listed here.
Also, I noticed there is missing class (I was expectating "Container"
value) status for Default GAL in adsiedit.msc.
I tried dsacls with shortest path "CN=Configuration,DC=mydomainname" up to almost full "CN=All Global Address Lists,....DC=mydomainname" and it always returns security parameters. Only if I add last part "Default Global Address List", it won` work.
Machine is running SBS2003 and Exchange Server 2003.
Big
thanks to every helping answer.
September 4th, 2006 7:02pm
According to number of replies, I messed it really bad. My plan is to make full disastery backup to tape (just in case) and then make restore of System State from backup made few hours before accident. This is the only one server on network and I did not made any changes from this time.As backup sw there is TapeWare 7.0, server is running SBS 2003 Premium, Exchange 2003, SQL.Will it work or should I be prepared for new arising problems?Thanks for Your help.M. Stasko
Free Windows Admin Tool Kit Click here and download it now
September 6th, 2006 9:36am