Windows Forum

Ask something
Discussion Locked

Exchange Administrator

0 helpful
11 replies

by rfraysier

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

I asked this question before, but accidentally closed without a correct response. So here goes again.........

Awhile back we had to move all our users mailboxes from one domain to another. We used a site connector to connect the two domains, set up a two way trust and added the administrator from each domain to the organization, site and server. The problem is, although we worked with microsoft on
setting this up, the domain admin account that we're now using doesn't have permissions adminenabled for the account. The other domain no longer exists and we have an unknown account with permissions admin rights, can't change the rights for our current domain admin, because we don't have the rights. We would like to add OWA to our site, ona seperate server, but because it requires the account with permission admin rights (and of course we don't have one), we aren't able to. Is there a back door that we can use to change permissions for our account or rename the 'unknown account' to alegitimate domain ac

11 replies

by calves

Try this:

On Exchanger Administratrion
Select Tools, Options, security tab, mark
"Show permission page for all objects"
"Display rights for roles on permissions"

Now all objects will have a security tab where you can determine access, admin, etc...
Also, you will be able to change roles as to who is admin, who is user.

I hope that helps you!

Good luck!

by rfraysier

Still not able to change the rights for domain admin on the site, get error message stating insufficient access rights.

by calves

I read and read your question, and now I am not sure that the first answer is the right one.
If you select your domain at the very top of the Exchange Tree, and select properties, security, can't you add another admin?
When you moved the Exchange,you said that you had both admins on both ends, did that include Exchange?
I haven't seen much help on the registry...

by rfraysier

The only user that has custom rights (which includes modify permissions) is the unknown user. The current domain admin has admin rights, which doesn't include modify permissions.

by mjacobson

If you can login on your Exchange Server using the Service Account you used when installing it, you will have rights to change any account/role/permission.

by gregory w. smith

The exchange server services are starting in the security context of a user account (under control panel, services) What is it? Is it's login cached even though the other domain no longer exists? Use this account to login to the machine and run Exchange Administrator.

by rfraysier

The account that starts the services is domain admin, but as I've said, when we run Exchange Administrator, that account doesn't have the rights to change permissions.

by mike.crain

Try this:

Set up a new server (Doesn't need to be a powerhorse). Set it up as the old domain. Lock out domain users (To prevent others from getting in this domain. Now it is affectivly the old domain. Just grant the new administrator account all the needfed permissions. Then re-establish the trusts and see if that helps.

by rfraysier

Will be setting up a new server to replace the present and restoring the mailboxes from backup. Hopefully this will alleviate the problem.

This discussion is closed to new replies.