Re: Permission to add email address to user

On Wed, 1 Mar 2006 11:17:10 -0500, "Nuevo" <imaneophyte@xxxxxxxxx>
wrote:

You need to apply permissions on the storage group or dbs that the user will
modifying email addresses for. Have you done this, if so what permissions
have you given them. You do not need to make them a local admin on the
Exchange server.



"Giving the kiadmin user Exchange Full Administrator rights gives the
same result"

Joe is correct. There was/is a know issue created by the DCOM issues
Windows 2003 SP1 wherby a remote workstation can not make changes to
email addresses unless they are also a local admin on the machine.
This is addressed in KB905809 which has been pulled for some reason.


Nue
"Joe" <Joe@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:3C2C80E3-A6C7-434C-A583-065452A1152F@xxxxxxxxxxxxxxxx
There is a problem with Exchange 2003 running on Windows 2003 SP1 system.
If
you can add kiaadmin to the local administrators group on the server
running
Exchange, that will fix it. There aren't any other good solutions that
I've
found, but it seems that Microsoft knows about the problem.

Search this group for c10308a2 for more information.

Joe

"Nikolaj Pedersen" wrote:

We have a setup with a root domain called sun.local (SUN) and a child
domain
called ki.sun.local (KI). The forest and both domains are in Windows 2003
functional level.
The SUN domain has an Exchange 2003 server running in native mode.

In the SUN domain the user sunadmin is Enterprise Admin, Domain Admin and
Exchange Full Administrator.
In the KI domain the user kiadmin is Domain Admin. kiadmin had been made
Exchange View Only Admin on the Exchange organization.

We would like kiadmin to be able to create and administer new users in
the
KI domain and everything seems to work fine except adding or editing
emailadresses. When trying to add or edit an email address on a user we
get
the following error:

An Exchange Server could not be found in the domain.
Check if the Microsoft System Attendant service is running on the
Exchange
Server.
ID no: c10308a2
Microsoft Active Directory - Exchange Extension

Giving the kiadmin user Exchange Full Administrator rights gives the same
result.
If we log onto the KI DC with SUN\sunadmin it works fine.
The kiadmin user can use ADSIEdit to change the proxyAddresses property
directly, but then no check is made for duplicate addresses.

Any suggestions how to make this work?

--
Regards
Nikolaj Pedersen
Systems administrator
Aarhus University

.

Relevant Pages

  • Re: Permissions required to manage Public Folders
    ... but our way of replicating our Public Folders doesn't work ... >I (Admin from CENTRAL) right click on OURS folder, goes to Replication tab, ... >sets replicas and adds my Exchange 2003, OK's, everything works ... >Exchange Full Administrator or Exchange Administrator role on CENTRAL seems ...
    (microsoft.public.exchange.admin)
  • Re: Ex2007, Issues with Exchange permissions with Org-Admin
    ... exchange 2007 server. ... I am logged in as domain admin. ... that administrator is part of the ...
    (microsoft.public.exchange.admin)
  • Re: Move Exchange Servers between Administrative Groups
    ... Overview of Exchange administrative role permissions in Exchange 2003 ... "An administrator who has Exchange Full Administrator permissions at ... Server 2003 on a server that is in an administrative group." ... Exchange to new AG we only needed to have Exchange Full Admin rights at AG ...
    (microsoft.public.exchange.admin)
  • Re: Move Exchange Servers between Administrative Groups
    ... Exchange Admin. ... Domains have little to do with Exchange installation ... server added to the Exchange Domain Servers group. ... Group you must have Exchange Full perm and local Administrator permissions, ...
    (microsoft.public.exchange.admin)
  • Re: Email being received on my renamed admin account
    ... I'd still like to know how someone could have even guessed my admin name. ... > which you never use to send internet emails. ... > accounts that exists on your Exchange server, ...
    (microsoft.public.windows.server.sbs)