2000/2003 ExMerge permissions in a Terminal Server session

Home Forums Messaging Software Exchange 2000 / 2003 2000/2003 ExMerge permissions in a Terminal Server session

Viewing 1 post (of 1 total)
  • Author
  • Avatar

    First allow me to take a moment to thank everyone for a fantastic site and what promises to be a fantastic forum. What I am posting here is not a problem, or rather is a problem I have already found the solution too. (Not a bad first post eh?) I am posting the solution here because this site is where the best portion of my research was performed.

    I am the Sys Admin for a small municipality with limited resources. The last day or so I have been working with the ExMerge program in Exchange 2003 with the intention of creating brick level backups once a week to supplement the regular backups which use NT-backup. My Exchange server is down the hall from my office so normally I do my work in a Terminal Server (Administrative Mode) session.

    I had significant issues with setting the correct permissions to access the mailboxes. Daniel’s article http://petri.com/grant_full_mailbox_rights_on_exchange_2000_2003.htm although very good did not seem to be working for me. Since Domain Admins had an explicit Deny on the Exchange Receive As permission I had created a new user for this purpose, I added the new user to both the Server Administrators group and a new security group called Email Managers.

    Initially I would not be able to view the list of mailboxes and I would get this as the last entries in my ExMerge.log…

    [14:06:33] Error initializing MAPI. (CAdminProfileRoutines::CreateSystemAttendantProfile)
    [14:06:33] Error initializing MAPI.
    [14:06:33] Error initializing MAPI.
    [14:06:33] MAPI has not been initialized (CMapiSession::DeleteOurProfile)
    [14:06:33] Error encountered getting mailbox information from the private information store database(s) on server ‘EXCHANGE’. Make sure you have adequate permissions on the Information Store object. Please refer to the ‘ExMerge.log’ log file for more information.

    My problem as it turns out was solely due to the Terminal Session I was working in. Non-Administrators working in a term session do not have the right to “Create Global Objects” (see http://support.microsoft.com/kb/821546.) Had I been working at the console, or had I scheduled my process using the AT command everything would have worked hours ago.

    To add the Create Global Objects permission to an account or group follow these steps on the server running ExMerge.

    • Click Start, point to Programs, point to Administrative Tools, and then click Domain Controller Security Policy.
    • Expand Security Settings, expand Local Policies, and then click User Rights Assignment.
    • In the right pane, double-click Create global objects.
    • Click to select the Define these policy settings check box, and then click Add.
    • Add the User or Group you are working with and then click OK.
    • In the Security Policy Setting dialog box, click OK, and then quit the Domain Controller Security Policy utility.

    (You must wait 15 minutes and/or restart the Information Store for the changes to take effect.)

    Hopefully this will save some poor soul the couple hours I lost…

Viewing 1 post (of 1 total)

You must be logged in to reply to this topic.