|
What I did was the following:
I used Adfind as Joe suggested and the output of
that showed me that the I had no acces to the 'All Address Lists' and the 'All
Global Address Lists'. I pasted the dn's of both of them into dsacls (from ADAM
SP1/R2) and reset the permissions on those objects for the Authenticated Users
group.
After I had done this I now could see both of them in ESM
again. I then saw the GAL had dissapeard so I first thought to kick of the RUS
(this 'reloads' the GAL) but this didnt help (this was not really a surprise to
me since the RUS kicks in every minute anyway).
I
recreated the GAL and now everything was back to normal and I was a happy man
;-).
Again
thanks for everybody who contributed, nice work.
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Michael B. Smith Sent: donderdag 9 februari 2006 21:08 To: [email protected] Subject: RE: [ActiveDir] Exchange - ESM - "All Address Lists" and "All Global Address Lists" disappeared Lets here what you
did. From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Victor
W. I want to thank
everybody who contributed to this thread. The problem has been solved
:-) From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of TIROA
YANN True ....
execpt if you install the rdp client on windows 2000...
:o)) Cordialement, De : [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] De la part de Steve
Rochford Not with Windows 2000
:-) Steve From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of TIROA
YANN Hi, Just launch
rdp client with the /console switch as this mstsc /console, this will give
u interactive logon to your server. Cordialement, De : [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] De la part de Steve
Rochford One tiny little point
which might be worth adding dont try doing this using a remote desktop
session as I did the other week. I sat there cursing the machine, confident that
Id got the syntax etc right. It was only much later when I looked at the real
console screen that I saw lots of cmd windows which had all opened and were
running in the local system context
Steve From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of TIROA
YANN Yes. 1)go to
start -> execute and type cmd.exe 2) Then
will have to type this command "at <your_local_time + 1mn>
/interactive cmd.exe" (without quote). Example: if
your local time is 20:05, then you will type
"at 20:06
/interactive cmd.exe" This will
open an other instance of cmd.exe 1 mn after your local time.
This second
instance of cmd.exe is running under the local system account, type whoami and u
will see it. 3) at the
second instance of cmd.exe, launch ESM [1] or type DSACLS "CN=All Global Address
Lists,CN=Address Lists Container,CN=First Organization,CN=Microsoft
Exchange,CN=Services,CN=Configuration,DC=Example,DC=com" /N /G
"Authenticated Users":SDRCWDWOWPRPCALO [1]: after reading the whole KB, I
will use the dsacls command suggested by the KB because , the command will do
the job for u as resetting the good ACEs for Authenticated
Users. Yann |
