RE: NTFS permissions on E2K3 database folders

Hi McR,

Thanks for your update.

I am jenny and I am backup of John for he is OOF. I am sorry for
inconvenience for that.

From your description, I understand that you want to know why the
Authenticated Users and Power Users groups have access rights to the
Mdbdata folder. This because that all exchange user mailboxes data, public
folders and Transaction logs are stored under the Exchsrvr\Mdbdata folder,
and all mail-enabled users need access their mailboxes data under the
folder. Even the users who are non-mail enabled users have permissions to
access public folders, they also need permissions to access the Mdbdata
folder.

The permissions listed in the KB article 821915 are the minimum permissions
required to ensure the move database folder process performed successfully.
Please try to test and let me know the result.

Please let me know if you have further question on the issue. I am glad to
be further assistance to you.

Sincerely,

Jenny Wu

Sincerely,
Jenny Wu, MCSE 2000/2003, MCSA 2000/2003, MCDBA, MCSD
Microsoft Online Partner Support

Get Secure! - www.microsoft.com/security
=====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------
Thread-Topic: NTFS permissions on E2K3 database folders
thread-index: Aca2NRqD+ymlDlt/QGmCjGrhe4Q4PA==
X-WBNR-Posting-Host: 12.179.116.62
From: =?Utf-8?B?bWNSb24=?= <mcron@xxxxxxxxxxxxxx>
References: <D8BC14C8-5FC9-4860-87DC-42F36F0078B1@xxxxxxxxxxxxx>
<swTiIWgtGHA.2500@xxxxxxxxxxxxxxxxxxxxx>
Subject: RE: NTFS permissions on E2K3 database folders
Date: Wed, 2 Aug 2006 06:11:02 -0700
Lines: 44
Message-ID: <979C4690-5E6F-4BB0-9961-222299BF623F@xxxxxxxxxxxxx>
MIME-Version: 1.0
Content-Type: text/plain;
charset="Utf-8"
Content-Transfer-Encoding: 7bit
X-Newsreader: Microsoft CDO for Windows 2000
Content-Class: urn:content-classes:message
Importance: normal
Priority: normal
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.1830
Newsgroups: microsoft.public.exchange.setup
Path: TK2MSFTNGXA01.phx.gbl
Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.exchange.setup:142556
NNTP-Posting-Host: TK2MSFTNGXA01.phx.gbl 10.40.2.250
X-Tomcat-NG: microsoft.public.exchange.setup

John, thanks for helping me out. Do you have any insight into why the
Authenticated Users and Power Users groups need access?

Thanks again for taking time to point me to this article.

McR

"John Chen [MSFT]" wrote:

Hello,

Thank you for posting.

Please have a look at this article:
How to move Exchange databases and logs in Exchange Server 2003
http://support.microsoft.com/?id=821915

You must grant the following default permissions to the new Mdbdata
folder
that contains the log files and database files:
- Administrators: Full Control
- Authenticated Users: Read and Execute, List Folder Contents, Read
- Creator Owner: None
- Server Operators: Modify, Read and Execute, List Folder Contents,
Read,
Write
- System: Full Control

Hope this helps.

Sincerely,
John Chen, MCSE, MCSA, MCDBA, MCSD
Microsoft Online Partner Support

Get Secure! - www.microsoft.com/security

=====================================================
When responding to posts, please "Reply to Group" via
your newsreader so that others may learn and benefit
from your issue.
=====================================================

This posting is provided "AS IS" with no warranties, and confers no
rights.





.

Relevant Pages

  • Re: Directory Permissions - What gives?
    ... OK I can agree with that and "I stand corrected" on the guest account. ... Authenticated Users groups. ... If you had the parent folder shared at Everyone=FULL or even better ... permissions from the parent folder and add Group B and have inheritance ...
    (microsoft.public.windows.server.general)
  • Re: mydocuments missing after logff logon sbs2003 win xp
    ... For the roaming profile shared folder permission settings, ... Roaming Profile Share and NTFS Permissions: ... Administrators: Full Control ... Authenticated Users: Modify,Read & Execute, List Folder Contents, Read, ...
    (microsoft.public.windows.server.sbs)
  • RE: SYSVOL/NETLOGON visibile by ALL USERS
    ... the share permissions for the ... Authenticated Users - Full Control ... The file permissions for the Sysvol folder may or may not be affected. ... Authenticated Users - Read, Read and Execute, and List Folder ...
    (microsoft.public.windows.file_system)
  • Re: Authenticated users permissions
    ... In NTFS when you block inheritance at a folder, ... will turn them into the initial explicit permissions on the new inheritance ... > Authenticated Users access. ...
    (microsoft.public.security)
  • Re: NTFS Permissions for public share
    ... the ability to change permissions since Change "caps" what they ... Authenticated Users: List ... Full Control (This folder, subfolders, and files) ...
    (microsoft.public.windows.server.security)