As I'm sure you know, I've got nothing. However, you did things slightly out of order, and while I can't see why it would make a difference, I would create a different account in the local admin group with a mailbox and then delegate permissions, wait for replication, just to be sure.
On Thu, Apr 28, 2011 at 3:08 PM, Steven M. Caesare <[email protected]>wrote: > I created the mailbox prior to modifying the script credentials. I tested > over the course of several hours… > > > > -sc > > > > *From:* Jonathan Link [mailto:[email protected]] > *Sent:* Thursday, April 28, 2011 2:49 PM > > *To:* NT System Admin Issues > *Subject:* Re: Script access against Exchange 2003 WMI objects > > > > So, it didn't originally? How long did you wait after creating the mailbox > did the script run? > > On Thu, Apr 28, 2011 at 2:45 PM, Steven M. Caesare <[email protected]> > wrote: > > Did that too… made no difference. > > > > -sc > > > > *From:* Jonathan Link [mailto:[email protected]] > *Sent:* Thursday, April 28, 2011 2:00 PM > *To:* NT System Admin Issues > > > *Subject:* Re: Script access against Exchange 2003 WMI objects > > > > Does the service account have a mailbox? > > On Thu, Apr 28, 2011 at 11:57 AM, Steven M. Caesare <[email protected]> > wrote: > > So, any ideas what permissions you need to read WMI objects exported by > Exchange (2003)? > > > > I have a script that’s looking at the emails the IMF filter is dropping in > the UCE archive. > > > > Running it as my personal domain admin account it works just fine. As a > service account: permission denied. > > > > Things I’ve done/checked: > > > > - Delegate rights to account via Exchange SysMgr (view-only up thru > FullAdmin) > > > > -Add svc account to local admins group on Exchange server > > > > - Verified NTFS local access rights to the folder the script resides in > > > > -Verified full perms on the MicrosoftExchangeV2 WMI object via the WMI MMC > (permissions are already there for local admin group) > > > > > > The only thing I haven’t done is make the service acct a Doman Admin, which > I’m hesitant to do for obvious reasons. > > > > The WBEM logs and Windows Event logs aren’t complaining about anything. I > don’t have a debugger on this machine, so starting the script with the > debugging switches doesn’t do anything. > > > > Any other ideas? Any way to crank up logging on the script engines or the > WMI providers? > > > > -sc > > > > > > ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ > > > ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ > > --- > To manage subscriptions click here: > http://lyris.sunbelt-software.com/read/my_forums/ > or send an email to [email protected] > with the body: unsubscribe ntsysadmin > > > > ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ > ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ > > --- > To manage subscriptions click here: > http://lyris.sunbelt-software.com/read/my_forums/ > or send an email to [email protected] > with the body: unsubscribe ntsysadmin > > ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ > ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ > > --- > To manage subscriptions click here: > http://lyris.sunbelt-software.com/read/my_forums/ > or send an email to [email protected] > with the body: unsubscribe ntsysadmin > > > > ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ > ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ > > --- > To manage subscriptions click here: > http://lyris.sunbelt-software.com/read/my_forums/ > or send an email to [email protected] > with the body: unsubscribe ntsysadmin > > ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ > ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ > > --- > To manage subscriptions click here: > http://lyris.sunbelt-software.com/read/my_forums/ > or send an email to [email protected] > with the body: unsubscribe ntsysadmin > ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected] with the body: unsubscribe ntsysadmin
