Re: Exmerge run on a Domain controller

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

From: Brian Higgins (brian_at_-NO-accentconsulting-SPAM-.com)
Date: 02/21/05


Date: Mon, 21 Feb 2005 16:53:50 -0500

if you can, use the domain\administrator user account as it will have all
the necessary permissions.

I beleive that the permissions you need are Enterprise Admin and Domain
Admin (I think enterprise admins is a member of domain admins) also, on the
information store you need to make sure the account has Full Control (found
under System Manager > Servers > ServerName > StorageGroupName > Mailbox
Store > properties > security)

"George Orwell" <nobody@mixmaster.it> wrote in message
news:acbdfc6b2563057a505985126a063b82@mixmaster.it...
>I am running Exchange 2003 on Win2k3 server, and this server is also a
>domain controller. I am trying to run exmerge to export some old user
>mailboxes but thus far without much luck. I have ready the various "q"
>articles and I cant seem to get the right combination of rights to allow
>this to work. Specifically when I set up a new user (and group) according
>to the "q" article which is part of an administrators or domain
>administrators group Im not allowed to logon to the server because of the
>domain controller and local policy. If youve got exmerge to run on an
>Exchange 2003/win2k3 DC server could you post the steps (and the order of
>execution) needed to make this work.
>
> thanks
>
> -J
>



Relevant Pages

  • Re: enabling LDAP over SSL: Enterprise CA in separate AD tree
    ... The trick was to log into a DC in domain B as an Enterprise Admin and ... You just need to change permissions on the Domain COntroller or Domain ... Controller AUthentication certificate templates to allow each domain's ...
    (microsoft.public.windows.server.security)
  • Re: PLEASE HELP ME, THIS IS 3RD POST ALREADY
    ... do you have a default domain controller policy? ... Is it an enterprise admin? ... Below you said that your account is a domain admin- ...
    (microsoft.public.win2000.active_directory)
  • Add another DC
    ... a new domain controller in the domain. ... don't have sufficient priviligies to create an additional ... Enterprise Admin .So i have the rigths to do the operation ...
    (microsoft.public.win2000.active_directory)