Exchange server still working, but no "Administrative Groups" appe

Thornton@discussions.microsoft.com Jonathan Thornton

unread,

Sep 12, 2008, 10:35:02 AM9/12/08

to

Hello,

Our IT sub-contractors have moved on and left me a problem - no
"Administrative Groups" appear in our MS Exchange Server w\ SP2.

I've tried to get more experienced support, but people seem at a loss as to
where to begin looking. I am keen not to fiddle unnecessarily as currently
the server is working OK.

I can note that when I try to add our mailbox store to the "Mailbox Recovery
Center", then Exchange responds with message ID no c1041723 "You do not have
the permissions required to complete the operation on the information store"

Any idea where I should start?

Regards,

Jonathan Thornton

Wayne Hollomby

unread,

Sep 12, 2008, 10:43:34 AM9/12/08

to

What permission does the account have you are accessing Exchange System
manager with ?

Sound like a permission issue to me

See http://support.microsoft.com/kb/823018

Wayne

"Jonathan Thornton" <Jonathan Thor...@discussions.microsoft.com> wrote in
message news:EFE04A4A-331A-44A5...@microsoft.com...

a@tleederbyshired.0.tc.0.m Lee Derbyshire [MVP]

unread,

Sep 12, 2008, 10:46:53 AM9/12/08

to

"Jonathan Thornton" <Jonathan Thor...@discussions.microsoft.com> wrote in
message news:EFE04A4A-331A-44A5...@microsoft.com...

I don't have E2003 any more, but it's not just a case of selecting 'Show
Administrative Groups' on the Org properties, is it? ISTR that there was an
option like that in the ESM snap-in.

Lee.

--
______________________________________

Outlook Web Access For PDA , OWA For WAP
www.leederbyshire.com
email a@t leederbyshire d.0.t c.0.m
______________________________________

Jonathan Thornton

unread,

Sep 12, 2008, 10:53:02 AM9/12/08

to

The account I'm using has "Exchange Full Administrator" permissions. Using
the domain admin account.

Regards,

Jonathan

Oliver Moazzezi [MVP]

unread,

Sep 12, 2008, 10:51:56 AM9/12/08

to

> I don't have E2003 any more, but it's not just a case of selecting 'Show
> Administrative Groups' on the Org properties, is it? ISTR that there was
> an option like that in the ESM snap-in.

That's correct - however having a quick peek at ESM shows I cannot de-select
it (it's ticked but greyed out) - so I presume that's a Native Mode thing.

Oliver

Jonathan Thornton

unread,

Sep 12, 2008, 10:58:14 AM9/12/08

to

No, this box is already ticked - probably should have said this before!

Regards,

Jonathan

WildPacket

unread,

Sep 12, 2008, 11:46:13 AM9/12/08

to

Have you considered re-applying exchange SP2?

Jonathan Thornton

unread,

Sep 15, 2008, 5:36:04 AM9/15/08

to

On attempting to reinstall I get the following message:
"-You must be at least a Full Exchange Administrator at the Administrative
Group level to run setup. You must use an account that has been granted the
Full Exchange Administrator role on the current Administrative Group and on
the Administrative Group containing the current Routing Group, or a higher
level role, using the Exchange Administrative Delegation Wizard"

I've tried using the delegation wizard to set these permissions - but
because the "First Administrative Group" doesn't appear, or has already had
these permissions removed, I don't think it has any effect.

How can I take back permissions for the "First Administrative Group"
manually - is it possible to do this through ADSIedit?

Thanks for everyone's help so far!

Regards,

Jonathan

Jonathan Thornton

unread,

Sep 15, 2008, 6:45:00 AM9/15/08

to

Solved it!

I delved into "Active Directory Explorer" - navigated to CN=Configuration,
CN=Services, CN=Microsoft Exchange, CN=First Organization, CN=Administrative
Groups, CN=First Administrative Group - discovered that "deny" permissions
had been set for various groups.

Not sure how, or who - but I hope this comes in useful for somebody else.

Regards,

Jonathan