I went in and compared our Exchange Enterprise Servers group to the forest level group and noticed we were missing one domain. It was around when we went AD so I don't know why that one domain was missing. All others were there and several of those are new domains since we migrated so new ones are coming in fine.
The error seems to be gone for now. I assume that some permission on my group is set wrong for that one domain since new ones are coming in just fine. Any ideas, and now that I have manually added the domain should I worry any more? Bob -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Ed Crowley [MVP] Sent: Sunday, July 18, 2004 10:10 PM To: Exchange Discussions Subject: RE: Find an object in AD by GUID? That's all that should be there. If you have more than one domain, the Exchange Domain Servers groups from all domains that have been DomainPrepped are to be members of the Exchange Enterprise Servers group. Ed Crowley MCSE+Internet MVP Freelance E-Mail Philosopher Protecting the world from PSTs and Bricked Backups!T -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Coleman, Hunter Sent: Sunday, July 18, 2004 1:20 PM To: Exchange Discussions Subject: RE: Find an object in AD by GUID? I don't see anything other than Exchange Domain Servers in my Exchange Enterprise Servers group, but this is on a test bench. I also don't have any Exch 5.5 servers in the Exchange Domain Servers group. >From the Exchange 2000 Permissions Guide v4.01: "What function do the Exchange Domain Servers and Exchange Enterprise Servers groups perform? Both of these groups are created through DomainPrep. They reside in the Users container in the domain and must not be moved or renamed (otherwise the Exchange 2000 servers in the domain will shut-down). Each time Exchange 2000 is installed on a computer, the computer account is added to the local Exchange Domain Servers global security group. In turn, this group is a member of the Exchange Enterprise Servers local security group in each domain. The Recipient Update Service is responsible for ensuring that all Exchange group nestings are complete within the forest. The Exchange Enterprise Servers group is given various permissions on the domain naming context in the Active Directory. Through these inherited permissions, the Recipient Update Service is able to modify Exchange-specific attributes on user accounts in each domain." -----Original Message----- From: Reasoner, Bob (PHES) [mailto:[EMAIL PROTECTED] Sent: Friday, July 16, 2004 3:25 PM To: Exchange Discussions Subject: RE: Find an object in AD by GUID? It does appear to be the correct GUID. I just noticed that my old 5.5 server isn't listed in the "Exchange Enterprise Servers" group should it be? The only members in my "Exchange Enterprise Servers" group is my E2K server, and the domain entries for the rest of the forest. I thought I had two GUID to check, but it is the same guid repeating twice (total of 4 error messages). The error is that it can't modify the group and tries to add a 5.5 guid that Is not currently in AD. Any ideas how to figure out which 5.5 guid it needs to add and how to modify it? The actual error is: LDAP returned the error [34] Unavailable when importing the transaction dn: <GUID=A8BEB3A2-C31B-42B2-B843-93479F02CB41> changetype: Modify member:add:<GUID=93C66039-1B17-4F0A-923B-DA1CBF9BE306> - DC=mydomain,DC=net -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Coleman, Hunter Sent: Friday, July 16, 2004 4:12 PM To: Exchange Discussions Subject: RE: Find an object in AD by GUID? I think I'd first confirm that you're getting the correct object back. Run adfind, but change it to -f "sn=reasoner" and make sure that it returns your user object. Then run it again specifying the objectGuid for your account that you got from the results of the sn=reasoner search, and verify that the adfind search by objectGuid returns your user object. If all of that matches up, then you can feel confident that the ADC log is in fact referring to your Exchange Enterprise Servers. -----Original Message----- From: Reasoner, Bob (PHES) [mailto:[EMAIL PROTECTED] Sent: Friday, July 16, 2004 2:48 PM To: Exchange Discussions Subject: RE: Find an object in AD by GUID? Thanks!!! Now I just have to figure out what to do with it as that guid belongs to my "Exchange Enterprise Servers" I assume that the ADC is trying to modify the group, but since that is an AD function I don't know why the ADC is trying to do it. We are part of a very large Govt org that has yet to complete the upgrade. Our Admin group is completely updated, but we still maintain one 5.5 server at the request of the exchange organization admins. Any ideas? Bob -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Coleman, Hunter Sent: Friday, July 16, 2004 3:29 PM To: Exchange Discussions Subject: RE: Find an object in AD by GUID? Since you only have 2 objects, this shouldn't be too bad. There are probably ways to further automate it if you keep plugging away. First, convert the objectGuid to a hex string. Split the guid from the the ADC log entry into pairs, like this: A8 BE B3 A2 C3 1B 42 B2 B8 43 93 47 9F 02 CB 41 If you assign indices to the pairs like this, 1=A8, 2=BE, 3=B3, 4=A2 and then rearrange to this index order 4 3 2 1 6 5 8 7 9 10 11 12 13 14 15 16 You'll end up with A2 B3 BE A8 1B C3 B2 42 B8 43 93 47 9F 02 CB 41 Now go to www.joeware.net/win32/index.html and download ADFind. Unzip it, and from a command line run C:\adfind -b dc=yourdomain,dc=com -s subtree -f "objectguid=\A2\B3\BE\A8\1B\C3\B2\42\B8\43\93\47\9F\02\CB\41" Make sure to replace "dc=yourdomain,dc=com" with your domain. You'll need to include the "\" delimitters as well, and you may want to pipe the output to a text file. Open the text file and you should have a bunch of attributes for the object, including Display Name and others that will be easy to identify the object by. Hunter -----Original Message----- From: Reasoner, Bob (PHES) [mailto:[EMAIL PROTECTED] Sent: Friday, July 16, 2004 10:19 AM To: Exchange Discussions Subject: Find an object in AD by GUID? I have two objects in AD that my ADC can't modify, but it won't tell me anything about them accept their GUID as in: ***Begin Log*** LDAP Modify on directory mygc.mydomain.com for entry '<GUID=A8BEB3A2-C31B-42B2-B843-93479F02CB41>' was unsuccessful with error:[0x34] Unavailable. DC=mydomain,DC=com ***End Log MS suggests that it is a problem with unmatched smtp addresses, but I can't figure out how to find the object to manually correct any incorrect entries. I suspect I could find it with LDP if I knew more about it. Any suggestions? ________________________________ Bob Reasoner Harris County Public Health & Environmental Services _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&; lang =english To unsubscribe send a blank email to %%email.unsub%% Exchange List admin: [EMAIL PROTECTED] To unsubscribe via postal mail, please contact us at: Jupitermedia Corp. Attn: Discussion List Management 475 Park Avenue South New York, NY 10016 Please include the email address which you have been contacted with. _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&; lang=english To unsubscribe send a blank email to %%email.unsub%% Exchange List admin: [EMAIL PROTECTED] To unsubscribe via postal mail, please contact us at: Jupitermedia Corp. Attn: Discussion List Management 475 Park Avenue South New York, NY 10016 Please include the email address which you have been contacted with. _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang =english To unsubscribe send a blank email to %%email.unsub%% Exchange List admin: [EMAIL PROTECTED] To unsubscribe via postal mail, please contact us at: Jupitermedia Corp. Attn: Discussion List Management 475 Park Avenue South New York, NY 10016 Please include the email address which you have been contacted with. _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang =english To unsubscribe send a blank email to %%email.unsub%% Exchange List admin: [EMAIL PROTECTED] To unsubscribe via postal mail, please contact us at: Jupitermedia Corp. Attn: Discussion List Management 475 Park Avenue South New York, NY 10016 Please include the email address which you have been contacted with. _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang =english To unsubscribe send a blank email to %%email.unsub%% Exchange List admin: [EMAIL PROTECTED] To unsubscribe via postal mail, please contact us at: Jupitermedia Corp. Attn: Discussion List Management 475 Park Avenue South New York, NY 10016 Please include the email address which you have been contacted with. _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang =english To unsubscribe send a blank email to %%email.unsub%% Exchange List admin: [EMAIL PROTECTED] To unsubscribe via postal mail, please contact us at: Jupitermedia Corp. Attn: Discussion List Management 475 Park Avenue South New York, NY 10016 Please include the email address which you have been contacted with. _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang =english To unsubscribe send a blank email to %%email.unsub%% Exchange List admin: [EMAIL PROTECTED] To unsubscribe via postal mail, please contact us at: Jupitermedia Corp. Attn: Discussion List Management 475 Park Avenue South New York, NY 10016 Please include the email address which you have been contacted with. _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang=english To unsubscribe send a blank email to [EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] To unsubscribe via postal mail, please contact us at: Jupitermedia Corp. Attn: Discussion List Management 475 Park Avenue South New York, NY 10016 Please include the email address which you have been contacted with.
