Re: database permissions

  • From: "Trung Le" <trungle@xxxxxxxx>
  • To: "[ExchangeList]" <exchangelist@xxxxxxxxxxxxx>
  • Date: Wed, 26 Jan 2005 02:07:17 -0600

Hi Ara,

The only permission necessary for the agent Veritas to run on the other computer is "backup operator" and also a local administrator on the computer which you want to back up. When you install the Veritas backup, it will create a necessary privilege account for this purpose. Then make sure to add that account into local administrator group of any computer and/or server you want to back up.

I don't know if mine is the best or not for I'm not an Exchange expert. But that is how I run backup on all our servers (W2K and W2003 in W2K environment) with Vritas version 8.x. I don't use MS backup, but Veritas, and do the normal and incremental backup the whole computer! ;-) It works for us, and even with the stand alone servers [of course, the Veritas account has to be in local administrator group]. Hope it helps! :-)

Best,

Trung Le
----- Original Message ----- From: "Ara" <ara@xxxxxxxxxx>
To: "[ExchangeList]" <exchangelist@xxxxxxxxxxxxx>
Sent: Monday, January 24, 2005 10:20 PM
Subject: [exchangelist] Re: database permissions



http://www.MSExchange.org/

Hi
Using the test scenario I have made, everything works and on real servers
due to messed up permissions they had this gets access denied. So I am
trying to do a mix and match and figure out who should have access to what
on a simulation environment with same domain name I have made. I have done
reading on net and veritas support up and down with absolutely no luck.
That's why I thought maybe making an environment close to it might help.
Thank you

-----Original Message-----
From: Mulnick, Al [mailto:Al.Mulnick@xxxxxxxxxx]
Sent: Monday, January 24, 2005 9:34 AM
To: [ExchangeList]
Subject: [exchangelist] Re: database permissions

http://www.MSExchange.org/

Actually, you can run these again, but if you're running Exchange 2003 it
won't reset the permissions. That is a one time deal in 2003 vs. 2000
where
that was an acceptable operation to reset groups etc (domainprep).
Forestprep is more for extending the schema than it is about permissions,
and since the schema is already extended, there's nothing really
significant
for forestprep to do for you. This might be of interest to you:
http://www.msexchange.org/tutorials/Forestprep-Domainprep-Explained.html

What I'm not getting is what exactly the problem is that you're running
into.  Can you give us the symptoms vs. the details you found out while
troubleshooting it?

If I had to guess, you're having some trouble backing up the server, but
I'm
not sure this is the case and I think digging in that deep on the server
permissions could be a devastating issue if you get something wrong or
don't
realize how permissions should be set/changed in production machines.

Local permissions are one thing, while the domain/forest permissions are
another.  They need to both be there to make it work together though :)

Al


-----Original Message----- From: Ara [mailto:ara@xxxxxxxxxx] Sent: Monday, January 24, 2005 12:18 PM To: [ExchangeList] Subject: [exchangelist] Re: database permissions

http://www.MSExchange.org/

Hello
Thank you for reply. But do you think it is safe to while there is already
an exchange running? How about forest prerp? Do I have to do it try to
install exchange again on top of old one and do setup.exe/domainprep?
Thanks for help


> -----Original Message-----
> From: Dominic [mailto:emaildominic@xxxxxxxxxxx]
> Sent: Monday, January 24, 2005 8:09 AM
> To: [ExchangeList]
> Subject: [exchangelist] Re: database permissions
>
> http://www.MSExchange.org/
>
> Server operators have nothing to do with exchange servers
administration.
> for any permission issue just run domainprep. It will reset the
> permission and create the required groups.
> Thanks
>
> Dominic@india,mumbai
> ----- Original Message -----
> From: <ara@xxxxxxxxxx>
> To: "[ExchangeList]" <exchangelist@xxxxxxxxxxxxx>
> Cc: <ara@xxxxxxxxxx>
> Sent: Monday, January 24, 2005 4:48 AM
> Subject: [exchangelist] database permissions
>
>
> > http://www.MSExchange.org/
> >
> >
> > I would apperciate to get any help or comment on this. I had
> > permisiions issues with AD and veritas remote agent for exchange. I
> > think I have done lots of work on this and no go. I did install a
> > test windows server. Did install exchange with service pack1 and did
> > print all users' permissions and I did a mix and match to figure out
> > what is messed also making conflicts with veritas and denied
permission.
> > I have found crazy things such as owner was a member of enterprise
> > administrators!!!
> > Doing the work, I have found that on test machine, there is a group
> > called server operators and has some permission on the exchange data
> > folder. But on actual server that group is missing and I have done
> > all crazy things to add that group to it and it can't find the damn
> > object, even by typing it fully or manually browsing to built-in
> > objects and look for it. There are some screen shots to see if you
> > can give me hand on this Your time is appreciated
> > http://faran.us/1.jpg http://faran.us/2.jpg http://faran.us/3.jpg
> > Also I have to mention that exchaneg 2003, server 2003 standard,
> > server is installed on c: and data are on raid which is d:
> >
> > ------------------------------------------------------
> > List Archives:
> > http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
> > Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp
> > Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ
> > ------------------------------------------------------
> > Other Internet Software Marketing Sites:
> > World of Windows Networking: http://www.windowsnetworking.com
> > Leading Network Software Directory: http://www.serverfiles.com
> > No.1 ISA Server Resource Site: http://www.isaserver.org Windows
> > Security Resource Site: http://www.windowsecurity.com/ Network
> > Security Library: http://www.secinf.net/ Windows 2000/NT Fax
> > Solutions: http://www.ntfaxfaq.com
> > ------------------------------------------------------
> > You are currently subscribed to this MSEXchange.org Discussion List
as:
> emaildominic@xxxxxxxxxxx
> > To unsubscribe visit
> http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
> > Report abuse to listadmin@xxxxxxxxxxxxxx
> >
>
> ------------------------------------------------------
> List Archives:
> http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
> Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp
> Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Other Internet Software Marketing Sites:
> World of Windows Networking: http://www.windowsnetworking.com Leading
> Network Software Directory: http://www.serverfiles.com
> No.1 ISA Server Resource Site: http://www.isaserver.org Windows
> Security Resource Site: http://www.windowsecurity.com/ Network
> Security Library: http://www.secinf.net/ Windows 2000/NT Fax
> Solutions: http://www.ntfaxfaq.com
> ------------------------------------------------------
> You are currently subscribed to this MSEXchange.org Discussion List as:
> ara@xxxxxxxxxx
> To unsubscribe visit
> http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
> Report abuse to listadmin@xxxxxxxxxxxxxx


------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: World of Windows Networking: http://www.windowsnetworking.com Leading Network Software Directory: http://www.serverfiles.com No.1 ISA Server Resource Site: http://www.isaserver.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this MSEXchange.org Discussion List as: al.mulnick@xxxxxxxxxx To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=exchangelist Report abuse to listadmin@xxxxxxxxxxxxxx

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp
Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com
Leading Network Software Directory: http://www.serverfiles.com
No.1 ISA Server Resource Site: http://www.isaserver.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this MSEXchange.org Discussion List as:
ara@xxxxxxxxxx
To unsubscribe visit
http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
Report abuse to listadmin@xxxxxxxxxxxxxx


------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp
Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com
Leading Network Software Directory: http://www.serverfiles.com
No.1 ISA Server Resource Site: http://www.isaserver.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this MSEXchange.org Discussion List as: trungle@xxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
Report abuse to listadmin@xxxxxxxxxxxxxx






Other related posts: