With the ADUC, have you installed any Exchange Service packs on your management station? It's not just for servers but for the Admin console too, I have found issues here before my not doing this.
Mark -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Susan Bradley Sent: 22 October 2005 23:26 To: [email protected] Subject: Re: [ActiveDir] Can't access root domain I should probably shut up and lurk until the real gurus show up ...but I guess I need to let you know why I'm so annoyingly insistent on the 'exact' error message that you are seeing 'word for word'. 99.99% of the help I give in SBS newsgroups I honestly never see in real life...I try to stay away from such things as running out of room on Exchange and what not.... but if you give me the 'exact' error message ...man can I google [and no ... I cannot MSN search you need google groups for this]. It appears permission based but the more 'exact' of an error message you have... the better I can narrow down the issue. Those error messages often times show up in KB titles and what not. Right now googling on 'Active directory users and computers cannot find the exchange server' ... I'm hitting more basic setup issues. Jeroen Peters wrote: >The message is the same as when loging on with a wrong username/password. >The result is also the same, no acccess to the share. And I'm really sure >that I type the correct username/password :-) >The message in Active directory users and computers when editing exchange >settings states that it cannot find the exchange server. (DNS is ok, clients >have no problem finding the Exchange server). > >Regards, > >Jeroen > >-----Original Message----- >From: [EMAIL PROTECTED] >[mailto:[EMAIL PROTECTED] On Behalf Of Susan Bradley >Sent: Saturday, October 22, 2005 11:51 PM >To: [email protected] >Subject: Re: [ActiveDir] Can't access root domain > >When access is denied... what's the message you get? > >Jeroen Peters wrote: > > > >>The MS DTC errors are now gone (reset the log and restarted service), >>thanks! Rest of the issues remain. >> >>Regards, >> >>Jeroen >> >>-----Original Message----- >>From: [EMAIL PROTECTED] >>[mailto:[EMAIL PROTECTED] On Behalf Of Susan Bradley >>Sent: Saturday, October 22, 2005 11:12 PM >>To: [email protected] >>Subject: Re: [ActiveDir] Can't access root domain >> >>http://www.eventid.net/display.asp?eventid=53258&eventno=4493&source=MS >>DTC&p >>hase=1 >> >>Try that event code. >> >>Susan Bradley wrote: >> >> >> >> >> >>>I'm SBS sir. We're used to this. Honestly it's not 'that' long for >>>us... my box shuts down in a reasonable time fram. Actually it's +3 >>>not +1 gig...but we don't need the /3 gig switch settings either .... >>>we max at 4 gig and there are KBs that specifically state that the /3 >>>is irrelevant to us... >>> >>>But back to you....Do you have the exact error messages as I'm not >>>finding 71/72 with MSDTC >>>http://www.eventid.net/display.asp?eventid=72&source= >>> >>>Jeroen Peters wrote: >>> >>> >>> >>> >>> >>>>Yes, that's installed but that aren't the symptoms. I have only >>>>switches, no routers between the domains. The DC in the root domain >>>>is reachable by RDP. >>>> >>>>On Exchange on DC's, you really should avoid that. I've done it >>>>because of budget reasons, and I regret it very much. It is also >>>>inreversable, you can't demote a DC with exchange on it. Normal >>>>restarting is history to, you have to first shutdown exchange >>>>(scripted that) before you shutdown or restart, or you want to wait a >>>>really long time. >>>>When you add ram above 1GB, you have a problem too because DC's with >>>>+1GB >>>>ram need a different configuration then exchange servers with +1GB >>>>ram. In short, Exchange on DC's sucks. >>>> >>>>Regards, >>>> >>>>Jeroen >>>> >>>>-----Original Message----- >>>>From: [EMAIL PROTECTED] >>>>[mailto:[EMAIL PROTECTED] On Behalf Of Susan >>>>Bradley >>>>Sent: Saturday, October 22, 2005 9:59 PM >>>>To: [email protected] >>>>Subject: Re: [ActiveDir] Can't access root domain >>>> >>>>And BTW....I don't see a problem running Exchange on a DC ;-) >>>> >>>>You'll need this hotfix http://support.microsoft.com/?kbid=898060 >>>>anyway before applying Exchange 2003 sp2. >>>> >>>>Jeroen Peters wrote: >>>> >>>> >>>> >>>> >>>> >>>> >>>> >>>>>Hi, >>>>> >>>>>I'm having the following issues: >>>>>When I try to open a share on our root domain from the child domain >>>>>I get prompted for an username and password, but I'm not allowed to >>>>>open it although I log on with the root domain admin. The root >>>>>domain DC also runs Exchange (I know, bad) and I'm no longer capable >>>>>of editing exchange settings via active directory users and >>>>>computers from the child domain. I'm however capable to access >>>>>Exchange via the server manager from the child domain. >>>>>When editing share permissions on a file server in the child domain >>>>>I get prompted for the root domain admin, but access is denied. When >>>>>I cancel the prompt I can edit the permissions as usual. The root >>>>>domain admin can no longer log on to servers in the child domain via >>>>>remote desktop connection. From the root domain I can browse the >>>>>child domain normally. Access to Exchange from the child domain >>>>>(Outlook) works ok, as does OWA. >>>>>This behavior started when one of the two DC's in the child domain >>>>>was updated to SP1. All servers run Server 2003. >>>>>The updated server also gives MS DTC errors (event id 72 and 71, MS >>>>>DTC could not correctly process a DC Promotion/Demotion event). >>>>>When access is denied, no security events are logged. >>>>>Any clues? >>>>> >>>>>Thanks, >>>>> >>>>>Jeroen Peters >>>>> >>>>> >>>>> >>>>> >>>>> >>>>List info : http://www.activedir.org/List.aspx >>>>List FAQ : http://www.activedir.org/ListFAQ.aspx >>>>List archive: >>>>http://www.mail-archive.com/activedir%40mail.activedir.org/ >>>> >>>>List info : http://www.activedir.org/List.aspx >>>>List FAQ : http://www.activedir.org/ListFAQ.aspx >>>>List archive: >>>>http://www.mail-archive.com/activedir%40mail.activedir.org/ >>>> >>>> >>>> >>>> >>>> >>>> >>>> >>>List info : http://www.activedir.org/List.aspx >>>List FAQ : http://www.activedir.org/ListFAQ.aspx >>>List archive: >>>http://www.mail-archive.com/activedir%40mail.activedir.org/ >>> >>> >>> >>> >>> >>List info : http://www.activedir.org/List.aspx >>List FAQ : http://www.activedir.org/ListFAQ.aspx >>List archive: >>http://www.mail-archive.com/activedir%40mail.activedir.org/ >> >>List info : http://www.activedir.org/List.aspx >>List FAQ : http://www.activedir.org/ListFAQ.aspx >>List archive: >>http://www.mail-archive.com/activedir%40mail.activedir.org/ >> >> >> >> >> >List info : http://www.activedir.org/List.aspx >List FAQ : http://www.activedir.org/ListFAQ.aspx >List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ > >List info : http://www.activedir.org/List.aspx >List FAQ : http://www.activedir.org/ListFAQ.aspx >List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ > > > List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
