Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

deleted Value of "otherWellKnownObjects" in ADSIedit

1,181 views
Skip to first unread message

acuralex54-medi...@yahoo.com

unread,
Oct 14, 2008, 1:40:00 PM10/14/08
to
Hello,

I was trying to fix something on our Exchange 2007 SP1 server and I
made a mistake...

I deleted the Value (;;;;; (i d'ont know how many ";")) of
otherWellKnownObjects in adsiedit and I want now to bring it back.

Because now I get:
[PS] C:\Documents and Settings\amaltais\Desktop>get-
exchangeadministrator
Get-ExchangeAdministrator : Group "3d604b35-d992-4155-
aafd-8c0ae688ea0f" was no
t found. Please make sure you have typed it correctly.
At line:1 char:25
+ get-exchangeadministrator <<<<

(In the console under Organization Configuration; tab Exchange
Administrators, all the groups are gone.) In AD, they are still
there.


Someone could tell me how to rebuilt this value in adsiedit?


Thx
Alex

Jamestechman

unread,
Oct 14, 2008, 2:16:47 PM10/14/08
to
Try running Exchange setup with the Setup.com /PrepareAD to recreate
those groups.


How to Prepare Active Directory and Domains
http://technet.microsoft.com/en-us/library/bb125224(EXCHG.80).aspx


James Chong (MVP)
MCITP | EMA; MCSE | M+, S+,
Security+, Project+, ITIL
msexchangetips.blogspot.com

acuralex54-medi...@yahoo.com

unread,
Oct 14, 2008, 3:04:08 PM10/14/08
to
Hello James,

I think it's a good idea but can you CONFIRM 100% that will NOT
overwrite, delete, modify the existing settings of our server? (It's
a production server running well!)

Waiting for your confirmation before going further.

Thx,
Alex

Jamestechman

unread,
Oct 14, 2008, 3:23:57 PM10/14/08
to
No issue; should've referenced this article, it explictly goes over
recreating the groups if deleted using prepareAD.

Repair the Exchange 2007 Security Groups
If you delete the Exchange security groups, it is possible to use
Setup for recovery. The screen shot in Figure 8 shows what happens if
you immediately rerun Setup /p after deleting the Exchange security
groups.


Figure 8 Running Setup /PrepareAD after deleting the Exchange
security groups


White Paper: Preparing Active Directory for Exchange 2007
http://technet.microsoft.com/it-it/library/bb288907(EXCHG.80).aspx


James Chong (MVP)
MCITP | EMA; MCSE | M+, S+,
Security+, Project+, ITIL
msexchangetips.blogspot.com

acuralex54-medi...@yahoo.com

unread,
Oct 15, 2008, 10:55:19 AM10/15/08
to
Hello!

setup /preparead worked properly, the exchange administrator are back
available in the Exchange console.

But now, look what I found:

[PS] C:\Documents and Settings\amaltais\Desktop>get-receiveconnector
Get-ReceiveConnector : The Exchange group with GUID "3f965b9c-
f167-4b4a-936c-b8
efb19c4784" was not found. This group was automatically created during
Exchange
Setup, but has been subsequently removed.
At line:1 char:20
+ get-receiveconnector <<<<

So now I don't see any receive connector. But hopefully, it seems to
work in background (We can receive internal and external emails)

Any idea to bring back this?

Thx again,
Alex

Jamestechman

unread,
Oct 15, 2008, 11:08:24 AM10/15/08
to
You might have to grant the permissions to that connector via
adsiedit; or try to delete the connector; it may or may not let you
delete though; if not you should be able to delete via adsiedit.
However I would try granting the permissions to the recreated group
again first.


1. start run adsiedit.msc
2. Expand to CN=Connections,CN=Exchange Routing Group
(DWBGZMFD01QNBJR),CN=Routing Groups,CN=Exchange Administrative Group
(FYDIBOHF23SPDLT),CN=Administrative Groups,CN=company,CN=Microsoft
Exchange,CN=Services,CN=Configuration,DC=company,DC=com

3. On right pane; right click properties of your routing group
connector.

4. I have the following; note they may not be the default setup; just
using mine as reference.

exchange domain severs
exchange org admin;
exchange public folder admins
exchange servers
exchange services

James Chong (MVP)
MCITP | EMA; MCSE | M+, S+,
Security+, Project+, ITIL
msexchangetips.blogspot.com

acuralex54-medi...@yahoo.com

unread,
Oct 15, 2008, 1:37:33 PM10/15/08
to
Hello,

I found the SMTP receive connectors under CN=SMTP Receive Connectors,
CN=Protocols, CN=myserver, CN=Servers, CN=Exchange Administrative
Group (FYDIBOHF23SPDLT).

There I can see our 3 connectors... (That's why it's working even if
I don't see it in the console I think!).

So, I checked the rights of the 3 objects and all the groups (the new
ones) are there.
Do you have another idea?

Thx very much,
Alex

Jamestechman

unread,
Oct 15, 2008, 3:13:51 PM10/15/08
to
Try removing those groups in the permissions then re-add them. Then
run get-receiveconnector and see if the errors come up. If this
doesn't correct it; you can delete the connector in adsiedit and just
recreate it in the shell.


James Chong (MVP)
MCITP | EMA; MCSE | M+, S+,
Security+, Project+, ITIL
msexchangetips.blogspot.com

acuralex54-medi...@yahoo.com

unread,
Oct 15, 2008, 3:48:33 PM10/15/08
to
Other information I got when I tried to run again setup /prepareAD :

M:\E2K7-EN64-SP1>setup /preparead

Welcome to Microsoft Exchange Server 2007 Unattended Setup

Preparing Exchange Setup

Copying Setup Files .........................
COMPLETED

No server roles will be installed

Performing Microsoft Exchange Server Prerequisite Check

Organization Checks .........................
COMPLETED

Configuring Microsoft Exchange Server

Organization Preparation ......................... FAILED
The well-known object entry B:
32:9C5B963F67F14A4B936CB8EFB19C4784:CN=Exchan
geLegacyInterop1\0ADEL:c858e242-7dfe-4405-a82a-c5a32de0f5fc,CN=Deleted
Objects,D
C=medicalintelligence,DC=local of the otherWellKnownObjects attribute
on contain
er object CN=Configuration,DC=medicalintelligence,DC=local points to
an invalid
DN or a deleted object. Please remove the entry and rerun the task.

Jamestechman

unread,
Oct 15, 2008, 3:56:59 PM10/15/08
to
Are you running this again or this was the error you got the first
time?

James Chong (MVP)
MCITP | EMA; MCSE | M+, S+,
Security+, Project+, ITIL
msexchangetips.blogspot.com

acuralex54-medi...@yahoo.com

unread,
Oct 15, 2008, 4:41:40 PM10/15/08
to
This error was on this 3rd time (original, yesterday, then today)

But, doesn't matter now! Everything is fixed! I restored the deleted
groups and now my get-receiveconnector doesn't give any error!
http://articles.techrepublic.com.com/5100-10878_11-5599995.html
http://technet.microsoft.com/en-us/sysinternals/bb963906.aspx

Thx for all your great help!
Alex


Jamestechman

unread,
Oct 15, 2008, 4:56:01 PM10/15/08
to
nice; glad you got it working.

James Chong (MVP)
MCITP | EMA; MCSE | M+, S+,
Security+, Project+, ITIL
msexchangetips.blogspot.com


On Oct 15, 4:41 pm, acuralex54-medicalintellige...@yahoo.com wrote:
> This error was on this 3rd time (original, yesterday, then today)
>
> But, doesn't matter now! Everything is fixed! I restored the deleted

> groups and now my get-receiveconnector doesn't give any error!http://articles.techrepublic.com.com/5100-10878_11-5599995.htmlhttp://technet.microsoft.com/en-us/sysinternals/bb963906.aspx

bjsingh

unread,
Feb 25, 2010, 11:48:53 PM2/25/10
to
I have the same problem.

Configuring Microsoft Exchange Server

Organization Preparation ......................... FAILED
The well-known object entry B:
32:9C5B963F67F14A4B936CB8EFB19C4784:CN=Exchan

geLegacyInterop1\0ADEL:c858e242-n tdfe-4405-a82a-c5a32de0f5fc,CN=Delete


Objects,D
C=medicalintelligence,DC=local of the otherWellKnownObjects attribute
on contain
er object CN=Configuration,DC=medicalintelligence,DC=local points to
an invalid
DN or a deleted object. Please remove the entry and rerun the task.

Is there any solution to fix this problem.
any help will be appricated. Thx

acuralex54-medicalintelligenc wrote:

Other information I got when I tried to run again setup /prepareAD

18-Oct-08

M:\E2K7-EN64-SP1>setup /preparead

Preparing Exchange Setup

Organization Checks .........................
COMPLETED

Configuring Microsoft Exchange Server

Previous Posts In This Thread:

On Tuesday, October 14, 2008 8:46 PM
acuralex54-medicalintelligenc wrote:

deleted Value of "otherWellKnownObjects" in ADSIedit
Hello,

I was trying to fix something on our Exchange 2007 SP1 server and I
made a mistake...

I deleted the Value (;;;;; (i d'ont know how many ";")) of
otherWellKnownObjects in adsiedit and I want now to bring it back.

Because now I get:
[PS] C:\Documents and Settings\amaltais\Desktop>get-
exchangeadministrator
Get-ExchangeAdministrator : Group "3d604b35-d992-4155-
aafd-8c0ae688ea0f" was no
t found. Please make sure you have typed it correctly.
At line:1 char:25
+ get-exchangeadministrator <<<<

(In the console under Organization Configuration; tab Exchange
Administrators, all the groups are gone.) In AD, they are still
there.


Someone could tell me how to rebuilt this value in adsiedit?


Thx
Alex

On Tuesday, October 14, 2008 8:46 PM
Jamestechman wrote:

Try running Exchange setup with the Setup.
Try running Exchange setup with the Setup.com /PrepareAD to recreate
those groups.

James Chong (MVP)
MCITP | EMA; MCSE | M+, S+,
Security+, Project+, ITIL
msexchangetips.blogspot.com

On Oct 14, 1:40=A0pm, acuralex54-medicalintellige...@yahoo.com wrote:

On Tuesday, October 14, 2008 8:46 PM
acuralex54-medicalintelligenc wrote:

Hello James,I think it's a good idea but can you CONFIRM 100% that will
Hello James,

I think it's a good idea but can you CONFIRM 100% that will NOT
overwrite, delete, modify the existing settings of our server? (It's
a production server running well!)

Waiting for your confirmation before going further.

Thx,
Alex

On Tuesday, October 14, 2008 8:46 PM
Jamestechman wrote:

No issue; should've referenced this article, it explictly goes overrecreating
No issue; should've referenced this article, it explictly goes over
recreating the groups if deleted using prepareAD.

Repair the Exchange 2007 Security Groups
If you delete the Exchange security groups, it is possible to use
Setup for recovery. The screen shot in Figure 8 shows what happens if
you immediately rerun Setup /p after deleting the Exchange security
groups.


Figure 8 Running Setup /PrepareAD after deleting the Exchange
security groups


White Paper: Preparing Active Directory for Exchange 2007
http://technet.microsoft.com/it-it/library/bb288907(EXCHG.80).aspx

James Chong (MVP)
MCITP | EMA; MCSE | M+, S+,
Security+, Project+, ITIL
msexchangetips.blogspot.com

On Oct 14, 3:04=A0pm, acuralex54-medicalintellige...@yahoo.com wrote:

On Saturday, October 18, 2008 1:05 AM
acuralex54-medicalintelligenc wrote:

Hello!
Hello!

setup /preparead worked properly, the exchange administrator are back
available in the Exchange console.

But now, look what I found:

[PS] C:\Documents and Settings\amaltais\Desktop>get-receiveconnector
Get-ReceiveConnector : The Exchange group with GUID "3f965b9c-
f167-4b4a-936c-b8
efb19c4784" was not found. This group was automatically created during
Exchange
Setup, but has been subsequently removed.
At line:1 char:20
+ get-receiveconnector <<<<

So now I don't see any receive connector. But hopefully, it seems to
work in background (We can receive internal and external emails)

Any idea to bring back this?

Thx again,
Alex

On Saturday, October 18, 2008 1:05 AM
Jamestechman wrote:

You might have to grant the permissions to that connector viaadsiedit; or try
You might have to grant the permissions to that connector via
adsiedit; or try to delete the connector; it may or may not let you
delete though; if not you should be able to delete via adsiedit.
However I would try granting the permissions to the recreated group
again first.


1. start run adsiedit.msc
2. Expand to CN=Connections,CN=Exchange Routing Group
(DWBGZMFD01QNBJR),CN=Routing Groups,CN=Exchange Administrative Group
(FYDIBOHF23SPDLT),CN=Administrative Groups,CN=company,CN=Microsoft
Exchange,CN=Services,CN=Configuration,DC=company,DC=com

3. On right pane; right click properties of your routing group
connector.

4. I have the following; note they may not be the default setup; just
using mine as reference.

exchange domain severs
exchange org admin;
exchange public folder admins
exchange servers
exchange services

James Chong (MVP)


MCITP | EMA; MCSE | M+, S+,
Security+, Project+, ITIL
msexchangetips.blogspot.com

On Oct 15, 10:55 am, acuralex54-medicalintellige...@yahoo.com wrote:

On Saturday, October 18, 2008 1:05 AM
acuralex54-medicalintelligenc wrote:

Hello,I found the SMTP receive connectors under CN=SMTP Receive
Hello,

I found the SMTP receive connectors under CN=SMTP Receive Connectors,
CN=Protocols, CN=myserver, CN=Servers, CN=Exchange Administrative
Group (FYDIBOHF23SPDLT).

There I can see our 3 connectors... (That's why it's working even if
I don't see it in the console I think!).

So, I checked the rights of the 3 objects and all the groups (the new
ones) are there.
Do you have another idea?

Thx very much,
Alex

On Saturday, October 18, 2008 1:05 AM
Jamestechman wrote:

Try removing those groups in the permissions then re-add them.
Try removing those groups in the permissions then re-add them. Then
run get-receiveconnector and see if the errors come up. If this
doesn't correct it; you can delete the connector in adsiedit and just
recreate it in the shell.

James Chong (MVP)
MCITP | EMA; MCSE | M+, S+,
Security+, Project+, ITIL
msexchangetips.blogspot.com

On Oct 15, 1:37 pm, acuralex54-medicalintellige...@yahoo.com wrote:

On Saturday, October 18, 2008 1:05 AM
acuralex54-medicalintelligenc wrote:

M:\E2K7-EN64-SP1>setup /preparead

Preparing Exchange Setup

Organization Checks .........................
COMPLETED

Configuring Microsoft Exchange Server

On Saturday, October 18, 2008 1:05 AM
Jamestechman wrote:

Are you running this again or this was the error you got the firsttime?
Are you running this again or this was the error you got the first
time?

James Chong (MVP)


MCITP | EMA; MCSE | M+, S+,
Security+, Project+, ITIL
msexchangetips.blogspot.com

On Saturday, October 18, 2008 1:05 AM
acuralex54-medicalintelligenc wrote:

This error was on this 3rd time (original, yesterday, then today)But, doesn't
This error was on this 3rd time (original, yesterday, then today)

But, doesn't matter now! Everything is fixed! I restored the deleted
groups and now my get-receiveconnector doesn't give any error!
http://articles.techrepublic.com.com/5100-10878_11-5599995.html
http://technet.microsoft.com/en-us/sysinternals/bb963906.aspx

Thx for all your great help!
Alex

On Saturday, October 18, 2008 1:05 AM
Jamestechman wrote:

nice; glad you got it working.
nice; glad you got it working.

James Chong (MVP)
MCITP | EMA; MCSE | M+, S+,
Security+, Project+, ITIL
msexchangetips.blogspot.com


Submitted via EggHeadCafe - Software Developer Portal of Choice
SharePoint - Managing Unused or Archive sites automatically
http://www.eggheadcafe.com/tutorials/aspnet/96bf1f1c-ab6f-43f1-9a5b-a2a8deb60cad/sharepoint--managing-unu.aspx

Ed Crowley [MVP]

unread,
Feb 27, 2010, 1:58:56 AM2/27/10
to
Remove the entry.
--
Ed Crowley MVP
"There are seldom good technological solutions to behavioral problems."
.

"BJ Singh" wrote in message news:2010225...@itboons.com...

0 new messages