Re: Domain Admins cannot access mailboxes!

It's probably an ACL at the org level or somewhere in the tree.

My suggestion is to make a special account just for looking at mailboxes and
build some process around it (e.g. have to log who what and why, both of you
have to be present, etc).

--
Thanks,
Brian Desmond
Windows Server MVP - Directory Services

www.briandesmond.com


"CELEMCS" <CELEMCS@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:258FD71C-4DAB-4F14-BC74-064057082A1A@xxxxxxxxxxxxxxxx
Brian,

My domain admins are me and my network administrator. We cannot access
other
individual email mailboxes in Outlook like we could before the directory
services was restored. Also, I cannot access the mailboxes with NTBACKUP
or
Symantec's Backup Exec because of a permission issue (none of the accounts
I
can use will gain me access to properly backup the mailboxes).

-Chris


"Brian Desmond [MVP]" wrote:

Chris-

Why are your domain admins accessing mailboxes? This is not access to
hand
out that liberally.

--
Thanks,
Brian Desmond
Windows Server MVP - Directory Services

www.briandesmond.com


"CELEMCS" <CELEMCS@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:841C7318-C0A7-438E-9110-430A634B15F3@xxxxxxxxxxxxxxxx
Hello,

Recently we had a DC crash. This DC was also an Exchange Server and was
our
main DC (PDC emulator, GC, Schema Master....etc)

The server has Windows 2000 SP4 - Exchange Server 2003 SP2.

We restored from tape and had some issues with recovering the directory
services. After a couple hours of work we were able to get Active
Directory
back together (for the most part), but we are now unable to properly
backup
our Exchange Server. Symantec Backup Exec cannot open the IS... and
Domain
Admins cannot access anyone's mailboxes. Individuals can access their
own
mailboxes - but that's it.

I have tried adjusting some security settings in "Local Domain
Security"
on
the server, AD, and Exchange System Manager.... but nothing has
changed.

Any ideas on how to resolve? Or how to discover what the problem is?
Thank you,
Chris L.





.

Relevant Pages

  • Re: Domain Admins cannot access mailboxes!
    ... Just make a normal user account and delegate it the rights. ... Windows Server MVP - Directory Services ... My suggestion is to make a special account just for looking at mailboxes ...
    (microsoft.public.exchange2000.active.directory.integration)
  • Re: Domain Admins cannot access mailboxes!
    ... Windows Server MVP - Directory Services ... years I have not had any problems backing up the mailboxes... ... I cannot access the email boxes in my backup programs. ...
    (microsoft.public.exchange2000.active.directory.integration)
  • Re: OWA & Exchange Server w/New Name
    ... >> Brian Desmond ... >> Windows Server MVP ... I assume that I can gradually move mailboxes over several weeks, ... How would I schedule the wizard? ...
    (microsoft.public.exchange2000.general)
  • Re: Domain Admins cannot access mailboxes!
    ... How would you recommend setting up this special account? ... Windows Server MVP - Directory Services ... individual email mailboxes in Outlook like we could before the directory ... Symantec Backup Exec cannot open the IS... ...
    (microsoft.public.exchange2000.active.directory.integration)
  • RE: Domain admin mailbox rights on Exchange 2003
    ... Default installation of Exchange will not allow administrators to access ... they could grant themselves permissions there. ... Can I make sure that domain admins can't access certain people's ... mailboxes on an Exchange 2003 server? ...
    (Focus-Microsoft)
Loading