Re: Domain Admins cannot access mailboxes!

Chris-

Why are your domain admins accessing mailboxes? This is not access to hand
out that liberally.

--
Thanks,
Brian Desmond
Windows Server MVP - Directory Services

www.briandesmond.com


"CELEMCS" <CELEMCS@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:841C7318-C0A7-438E-9110-430A634B15F3@xxxxxxxxxxxxxxxx
Hello,

Recently we had a DC crash. This DC was also an Exchange Server and was
our
main DC (PDC emulator, GC, Schema Master....etc)

The server has Windows 2000 SP4 - Exchange Server 2003 SP2.

We restored from tape and had some issues with recovering the directory
services. After a couple hours of work we were able to get Active
Directory
back together (for the most part), but we are now unable to properly
backup
our Exchange Server. Symantec Backup Exec cannot open the IS... and Domain
Admins cannot access anyone's mailboxes. Individuals can access their own
mailboxes - but that's it.

I have tried adjusting some security settings in "Local Domain Security"
on
the server, AD, and Exchange System Manager.... but nothing has changed.

Any ideas on how to resolve? Or how to discover what the problem is?
Thank you,
Chris L.


.

Relevant Pages

  • RE: tale of two servers- admin permissions
    ... If you are in the Domain Admins group, ... another account to access mailboxes. ... I've built a second server and forgotten what I did so mailbox on ...
    (microsoft.public.exchange.admin)
  • Re: 1st 2003 dc
    ... # Jorge de Almeida Pinto # MVP Windows Server - Directory Services ... /domainprep on the DC from each Domain involved that holds the FSMO Role ... that is a member of the Domain Admins group). ... the server properly) the roles will migrate automatically anyway. ...
    (microsoft.public.windows.server.active_directory)
  • Re: 1st 2003 dc
    ... # Jorge de Almeida Pinto # MVP Windows Server - Directory Services ... /forestprep on the DC that holds the FSMO Role of Schema Master (and you ... account that is a member of the Domain Admins group). ... remove the server properly) the roles will migrate automatically ...
    (microsoft.public.windows.server.active_directory)
  • Re: Exchange 2003 admin rights restriction in a single forest
    ... We will have two domains in one forest. ... Exchange 2003 server residing in the same organization. ... By default no one has access to users mailboxes but the users themselves. ... We want only Domain Admins from Domain1 to do this. ...
    (microsoft.public.exchange.design)
  • Permission messed up after moving mailboxes between servers
    ... Windows 2000 server, which was also a DC before. ... longer have permission to open other user's mailboxes. ... - Account Operators ... - Domain Admins ...
    (microsoft.public.exchange.admin)
Loading