Re: Problem with creating email-enabled objects and SMTP addresses

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

has anyone encountered this same issue without attributing it to SP1?
It would appear there is a bit of latency between this issue arising in
my environment and the application of said service pack...Enough so
that I cannot blindly link the 2 events.


nick.bishop@xxxxxxxxx wrote:
> Petr Komenda wrote:
> > Hello,
> >
> > we are experiencing the same problem after instalation of SP1 for W2003
> > server, adding user to the administrators of exchange server helps, but is
> > no solution for us.
> >
> > Any solution???
> >
> > Thank you
> > Petr Komenda
> >
> >
> >
> > "Shawn Kondel" <Shawn.Kondel@xxxxxxx> wrote in message
> > news:O$z3EmCiFHA.3960@xxxxxxxxxxxxxxxxxxxxxxx
> > >
> > > I am having trouble creating mail-enabled contacts and users (can't get
> > > pass
> > > Create an Exchange e-mail address part). Or adding additional SMTP
> > > addresses to mail-enabled groups and mailbox-enable users). I can only
> > > create mailbox-enable users and mail-enbled group both using default SMTP
> > > address. All this from Windows XP workstation using Active Directory
> > > Users
> > > and Computer MMC snap-in using logging on as standard domain user. (no
> > > administrator privilege)
> > >
> > > Error message popup as I tried to adding SMTP addresses.
> > > ------
> > > An Exchange Server could not be found in the domain.
> > > Check if the Microsoft System Attendant service is running on the Exchange
> > > Server.
> > >
> > > ID no: c10308a2
> > > Microsoft Active Directory - Exchange Extension
> > > -----
> > >
> > > I even delegated the user the full control permission on all available
> > > objects from Active Directory U&C Manager. And even gave Exchange Full
> > > Administration permission. But still have same error results. I already
> > > went through "Working with Active Directory Permission in Exchange Server
> > > 2003" from MS TechNet and use some of the DSACLS snippets to create
> > > appropriate objects. Didn't work.
> > >
> > > But when I put user as a member of administrators group, THAT WORK, I have
> > > no trouble adding or modifying SMTP addresses. (BUT this is something I do
> > > NOT want to have). Exchange Admin users are to administer the designated
> > > OU
> > > objects only, not give them full control to other OU objects or to create
> > > other objects beside users, groups, and contacts.
> > >
> > > Is there a fix or workaround from all this?
> > > I spent weeks trying to figure this one out. I can do all this remotely
> > > to
> > > Exchange 2000 on Windows 2000 server remotely, but not to Exchange Server
> > > 2003 on Windows Server 2003
> > >
> > > Environment:
> > >
> > > Server:
> > > Windows Server 2003 SP1
> > > Exchange Server 2003 SP1
> > >
> > > Examine user credentials:
> > > member of domain Users group
> > > delegated as Exchange View Only Administration
> > > delegated tasks of creating and deleting Users, Group, and Contacts
> > > objects
> > > using Active Directory Users and Computer Delegate Control wizard.
> > >
> > > Workstation:
> > > Windows XP SP2
> > > Windows Server 2003 SP1 Administration Tools Pack
> > > Exchange Server 2003 System Management Tool
> > >
> > >
> > > Shawn Kondel
> > > USU Math & Stat Department.
> > > Utah State University
> > >
> > >
> > >
>
> Hey guys,
> I just finished troubleshooting this issue with Microsoft and they are
> currently working on the knowledgebase article for it. The one they
> created internally was not accurate, anyway the problem lies in the
> fact that they have removed anonymous access to the Service Control
> Manager in Windows 2003 SP1 and therefore your client trying to create
> SMTP addresses is not able to query the System Attendant service to
> check and make sure everything is OK. Follow these steps to correct
> the issue
>
> run the following command from a command prompt on the Exchange
> servers:
> sc sdset scmanager
> "D:(A;;CCLCRPRC;;;<SID>)(A;;CC;;;AU)(A;;CCLCRPRC;;;IU)(A;;CCLCRPRC;;;SU)(A;;CCLCRPWPRC;;;SY)(A;;KA;;;BA)S:(AU;FA;KA;;;WD)(AU;OIIOFA;GA;;;WD)"
> (without the quotation marks)
>
> * Note <SID> is to be replaced with the SID (Security Identifier) of
> the group of users you want to grant permissions to. The easiest way
> to get this value is to dump the user out using LDP.exe. Please let me
> know if you need any assistance getting the value. The attribute will
> be objectsid: 5-1-5...
>
> 271201 XADM: Alternative Methods to Obtain a Dump of an Object
> http://support.microsoft.com/?id=271201

.

Relevant Pages

  • Re: Problem with creating email-enabled objects and SMTP addresses
    ... > server, adding user to the administrators of exchange server helps, but is ... >> Create an Exchange e-mail address part). ... All this from Windows XP workstation using Active Directory ... >> But when I put user as a member of administrators group, THAT WORK, I have ...
    (microsoft.public.exchange.admin)
  • Re: ExMerge - What am I doing wrong?
    ... I then went into the user's exchange advanced tab that is being merged and made sure that they had Send/Receive available for that specific user. ... I also made sure that on the information store itself that the temporary Power User had full control and wasn't denied anything. ... I gave the user full control on the exchange server in the exchange management tool. ...
    (microsoft.public.windows.server.sbs)
  • Re: How to block users access to Exchange 2003 (during virus outbreak)
    ... With Windows 2003 SP1 there is the Security Control Wizard. ... could setup a security policy that would block access to the Exchange server ... But in your case we would use the SCW blocking of Exchange to our benefit. ...
    (microsoft.public.exchange.admin)
  • Re: AD Design
    ... Taskpads are a way to show the administrators only what you want them to ... I don't recommend Taskpads. ... An Exchange server per site is difficult but only if you need to recover the ...
    (microsoft.public.windows.server.active_directory)
  • RE: Migration to new Exchange Enterprise SP2
    ... Do you mean the server object SERVERNAME$? ... It is already with FULL CONTROL. ... The new server was Exchange Standard SP1. ... Expand Configuration, expand Configuration ...
    (microsoft.public.exchange.setup)