Re: database permissions
- From: "Ara" <ara@xxxxxxxxxx>
- To: "'[ExchangeList]'" <exchangelist@xxxxxxxxxxxxx>
- Date: Mon, 24 Jan 2005 20:24:18 -0800
Hi
As I said on my other post nit being able to do remote backup made me do
this. Even I if got to exchange box and log in with domain admin and use
built in windows back up and try to do an information store backup, then I
get denied access but using just the folder backup work fine. Any idea?
Do you use veritas remote agent for exchange? Is yes under what account and
permission? What files and folder that account has access o?
Thank you
> -----Original Message-----
> From: Danny [mailto:nocmonkey@xxxxxxxxx]
> Sent: Monday, January 24, 2005 11:03 AM
> To: [ExchangeList]
> Subject: [exchangelist] Re: database permissions
>
> http://www.MSExchange.org/
>
> On Mon, 24 Jan 2005 00:18:01 +0100, ara@xxxxxxxxxx <ara@xxxxxxxxxx> wrote:
> > http://www.MSExchange.org/
> >
> > I would apperciate to get any help or comment on this. I had permisiions
> > issues with AD and veritas remote agent for exchange. I think I have
> > done lots of work on this and no go. I did install a test windows
> > server. Did install exchange with service pack1 and did print all
> > users' permissions and I did a mix and match to figure out what is
> > messed also making conflicts with veritas and denied permission.
> > I have found crazy things such as owner was a member of enterprise
> > administrators!!!
> > Doing the work, I have found that on test machine, there is a group
> > called server operators and has some permission on the exchange data
> > folder. But on actual server that group is missing and I have done all
> > crazy things to add that group to it and it can't find the damn object,
> > even by typing it fully or manually browsing to built-in objects and
> > look for it. There are some screen shots to see if you can give me hand
> > on this Your time is appreciated
> > http://faran.us/1.jpg
> > http://faran.us/2.jpg
> > http://faran.us/3.jpg
> > Also I have to mention that exchaneg 2003, server 2003 standard, server
> > is installed on c: and data are on raid which is d:
>
> Show us the error message(s), then we can discuss troubleshooting.
>
> If you would like some advice on how to setup the NTFS permissions on
> your Exchange server, download the "Securing Exchange 2000 Servers and
> AD DCs - pdf or doc" from:
>
> http://sewpsc.sewp.nasa.gov/docs.shtml
>
> My Exchange Server 2003 NTFS permissions are as follows:
>
> NTFS Permissions:
>
> C:\ Admin - Full, System - Full, Creater Owner - Subfolders &
> files only - Full
> Users - This folder, subfolder, and files - Transverse,
List,
> Read,
> Read, Read Perms
> This folder and subfolders - create folders & append
> data
> Subfolders only - create files, write data
> Everyone - this folder only - Traverse, list, read, read,
read
> perms
>
> D:\ Same as C:\
>
> E:\ Admin - Full, System - Full, Authenticated Users - R &X , R,
> List
> Server Operators - All but, full
>
>
> F:\ Same as E:\
>
> C:\ = OS
> D:\ = Program Files
> E:\ = Exchange DB
> F:\ = Exchange log files
>
> Cheers,
>
> ...D
>
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
> Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp
> Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Other Internet Software Marketing Sites:
> World of Windows Networking: http://www.windowsnetworking.com
> Leading Network Software Directory: http://www.serverfiles.com
> No.1 ISA Server Resource Site: http://www.isaserver.org
> Windows Security Resource Site: http://www.windowsecurity.com/
> Network Security Library: http://www.secinf.net/
> Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
> ------------------------------------------------------
> You are currently subscribed to this MSEXchange.org Discussion List as:
> ara@xxxxxxxxxx
> To unsubscribe visit
> http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
> Report abuse to listadmin@xxxxxxxxxxxxxx
Other related posts:
