I have exchange 2003 on a windows 2003 server with SP1. I use Veritas ExecBackup on another server to do weekly backups. I cannot open the mailboxes to do a backup. Since the exchange server has a limited role in AD it has access to AD users and computers and it does not allow one to add a user to the Allow log on locally in Local Security Settings (Add is greyed out). When I open a user’s profile and look at the permissions for mailbox rights the veritas has ALLOW and DENY for Full Mailbox Access. I have yet to figure out where the DENY statement is coming from. Any ideas?