Thanks for the reply Mark, but my problem does not appear to be related to the msexchmasteraccountsid and msexchuseraccountcontrol values (and I suspect any problems with these would have more serious effects than I am experiencing).
Permissions on what OU - this is inside the mail store, not an OU. I did however find an article that recommended running exchange setup /domainprep again to reset the default permissions for exchange server objects but it doesn't seem to have made any difference. Anyone got any other ideas? > -----Original Message----- > From: Mark Harford [mailto:mark.harford@;bbc.co.uk] > Sent: 21 October 2002 18:56 > To: Exchange Discussions > Subject: RE: Default Mailbox Permissions > > > Is your Recipient Update Service running properly, is there a > Recipient > Policy that applies to these users & have you done anything funny like > blocking inheritance of permissions to the OU these new users are in? > > I'd check the msexchmasteraccountsid and > msexchuseraccountcontrol values aer > as outlined in the following article > http://support.microsoft.com/default.aspx?scid=kb;en-us;Q296479 > > rgrds > > Mark > > -----Original Message----- > From: Mark Dewell [mailto:M.Dewell@;uel.ac.uk] > Sent: 21 October 2002 14:07 > To: Exchange Discussions > Subject: Default Mailbox Permissions > > > We have been running Exchange 2000 since summer 2001 and have just > discovered that any user accounts created since June 2002 do > not get the > correct mailbox permissions set. > > The usual mailbox permissions for SELF should be 'Read > permissions' and > 'Full mailbox access'. These are set when the mailbox > initialises (i.e. the > first time someone connects to it, or when the first message > is delivered to > it). > > The faulty accounts do not show any permissions set for SELF > on the usual > security tab, however the Advanced permissions show that 'Full mailbox > access' has been set for SELF and applies to 'This object only'. > > The symptoms from the user perspective are that they can > access their own > mailbox, but can not expand Public Folders. > > The fix is to grant 'Read permissions' and 'Full mailbox > access' on the > normal security window (by default this will then apply to > 'This object and > subcontainers'). These are the usual default permissions. > > The only other clue we have is that these faulty accounts > have been created > using our in-house VB script which sets the following properties > objUser.homeMDB = "CN=Eng Students,CN=Barking > Students,CN=InformationStore .... etc" > objUser.mail = userName & "@UEL-Exchange.uel.ac.uk" > objUser.mailNickname = userName > objUser.mDBUseDefaults = TRUE > > However, this script has been in use since the previous autumn but the > problem only began occuring last June. Accounts created using > ADUC do not > have any problems (but we create something like 5000 accounts > every autumn - > hence the need to script the process). > > The only other significant happening during the summer was > that we remove > the original First Exchange Server from the system. I think > we transferred > everything off ok (I found and followed various articles on Microsoft > support > site) before removal. > > Can anyone shed any light on why this may have started > happening and how to > fix it? > > ---< Mark Dewell : Senior Network Supervisor > >--- > ---< : University of East London, Dagenham, > Essex, UK >--- > > _________________________________________________________________ > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > Archives: http://www.swynk.com/sitesearch/search.asp > To unsubscribe: mailto:leave-exchange@;ls.swynk.com > Exchange List admin: [EMAIL PROTECTED] > > > BBCi at http://www.bbc.co.uk/ > > This e-mail (and any attachments) is confidential and may contain > personal views which are not the views of the BBC unless specifically > stated. > If you have received it in error, please delete it from your > system, do > not use, copy or disclose the information in any way nor act in > reliance on it and notify the sender immediately. Please note > that the > BBC monitors e-mails sent or received. Further communication will > signify your consent to this. > > > _________________________________________________________________ > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > Archives: http://www.swynk.com/sitesearch/search.asp > To unsubscribe: mailto:leave-exchange@;ls.swynk.com > Exchange List admin: [EMAIL PROTECTED] > _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:leave-exchange@;ls.swynk.com Exchange List admin: [EMAIL PROTECTED]
