msExchRequireAuthToSendTo
GoodDay,
I am facing with a strange issue ref msExchRequireAuthToSendTo attribute. I
have no idea why and how can i fix it.
So, this is the situation:
--one DC and one Exchange Server.
--i ran ActiveDirectory Users&Computers(ADUC) to check security settings of
one user.
When i check Effective Permissions for one Domain Admin against that user on
DC I see checked ONLY Read msExchRequireAuthToSendTo, when i am doing same
thing on Exchange Server, I see also checked Write msExchRequireAuthToSendTo.
So, I am wondering why there is no consistency between ADUC on these two
servers....
Does anybody know why?
Thanks
October 25th, 2007 10:44am
Have you looked at this article?
http://support.microsoft.com/kb/827616
Deli
Free Windows Admin Tool Kit Click here and download it now
October 25th, 2007 12:48pm
Yup, this was the first KB which popped up firstly. And then i googled again and i got other blogs and articles, but no one of those articles helped me to understand why that attribute is not consistent in its rights(Read&Write). I mean, i cannot understand why that attribute isappearing with Write AND Readon an Exchange Server and with ONLY Read on a Domain Controller(desnt matter which DC or Exchange server i choose).
I am wondering if there is any patch which was applied in the past on Exchange Servers and did this...
thanks,
October 25th, 2007 1:53pm
I have read somewhere that the Effective Permissions dialog not allways shows the correct result
Is it only a display problem, I mean does it actually work as expected or are your really experiencing problems?
Deli
Free Windows Admin Tool Kit Click here and download it now
October 25th, 2007 2:10pm
Well, I started from another issue: when a certain Exchange Admin is trying to set Delivery Restrictions on user properties, that Admin is getting a LDAP Error, saying Access is denied.
And that change didnot succeed.
So i noticed that behaviour with msExchRequireAuthSendTo aatribute, Write and Read rights.
Thanks,
October 25th, 2007 10:53pm
Are you using Exchange 2003?
Being an Exchange Admin does not mean that you have access in Active Directory to all objects
Try to do the same configuration with a user that is both Exchange Admin and Domain Admin
Deli
Free Windows Admin Tool Kit Click here and download it now
October 25th, 2007 11:14pm
Well, i did this as well, and no luck, so far.
October 26th, 2007 10:59am
There must be something wrong with permsissions
Do you have one Active Directory Forest
How many domains do you have
Where is your exchange server located
Deli
Free Windows Admin Tool Kit Click here and download it now
October 26th, 2007 9:06pm
I have one forest with Parent Domain and2 child domains.
Exchange Servers are located in each of child domains. Accounts for Exchange Admins are defined in child domains.
October 29th, 2007 11:02am
Did you run setup /domainprep in each of the child domains when you installed Exchange?
Deli
Free Windows Admin Tool Kit Click here and download it now
October 29th, 2007 1:22pm