Re: database permissions

  • From: "Ara" <ara@xxxxxxxxxx>
  • To: "'[ExchangeList]'" <exchangelist@xxxxxxxxxxxxx>
  • Date: Wed, 26 Jan 2005 10:31:18 -0800

Hello
Thank you for the tip. I never thought about that and will try soon to see
if it helps me to get around this.
Once again, thank you all for helps on this

> -----Original Message-----
> From: Trung Le [mailto:trungle@xxxxxxxx]
> Sent: Wednesday, January 26, 2005 12:07 AM
> To: [ExchangeList]
> Subject: [exchangelist] Re: database permissions
> 
> http://www.MSExchange.org/
> 
> Hi Ara,
> 
> The only permission necessary for the agent Veritas to run on the other
> computer is "backup operator" and also a local administrator on the
> computer
> which you want to back up.  When you install the Veritas backup, it will
> create a necessary privilege account for this purpose.  Then make sure to
> add that account into local administrator group of any computer and/or
> server you want to back up.
> 
> I don't know if mine is the best or not for I'm not an Exchange expert.
> But
> that is how I run backup on all our servers (W2K and W2003 in W2K
> environment) with Vritas version 8.x.  I don't use MS backup, but Veritas,
> and do the normal and incremental backup the whole computer!  ;-)  It
> works
> for us, and even with the stand alone servers [of course, the Veritas
> account has to be in local administrator group].  Hope it helps!  :-)
> 
> Best,
> 
> Trung Le
> ----- Original Message -----
> From: "Ara" <ara@xxxxxxxxxx>
> To: "[ExchangeList]" <exchangelist@xxxxxxxxxxxxx>
> Sent: Monday, January 24, 2005 10:20 PM
> Subject: [exchangelist] Re: database permissions
> 
> 
> > http://www.MSExchange.org/
> >
> > Hi
> > Using the test scenario I have made, everything works and on real
> servers
> > due to messed up permissions they had this gets access denied. So I am
> > trying to do a mix and match and figure out who should have access to
> what
> > on a simulation environment with same domain name I have made. I have
> done
> > reading on net and veritas support up and down with absolutely no luck.
> > That's why I thought maybe making an environment close to it might help.
> > Thank you
> >
> >> -----Original Message-----
> >> From: Mulnick, Al [mailto:Al.Mulnick@xxxxxxxxxx]
> >> Sent: Monday, January 24, 2005 9:34 AM
> >> To: [ExchangeList]
> >> Subject: [exchangelist] Re: database permissions
> >>
> >> http://www.MSExchange.org/
> >>
> >> Actually, you can run these again, but if you're running Exchange 2003
> it
> >> won't reset the permissions. That is a one time deal in 2003 vs. 2000
> >> where
> >> that was an acceptable operation to reset groups etc (domainprep).
> >> Forestprep is more for extending the schema than it is about
> permissions,
> >> and since the schema is already extended, there's nothing really
> >> significant
> >> for forestprep to do for you. This might be of interest to you:
> >> http://www.msexchange.org/tutorials/Forestprep-Domainprep-
> Explained.html
> >>
> >> What I'm not getting is what exactly the problem is that you're running
> >> into.  Can you give us the symptoms vs. the details you found out while
> >> troubleshooting it?
> >>
> >> If I had to guess, you're having some trouble backing up the server,
> but
> >> I'm
> >> not sure this is the case and I think digging in that deep on the
> server
> >> permissions could be a devastating issue if you get something wrong or
> >> don't
> >> realize how permissions should be set/changed in production machines.
> >>
> >> Local permissions are one thing, while the domain/forest permissions
> are
> >> another.  They need to both be there to make it work together though :)
> >>
> >> Al
> >>
> >>
> >> -----Original Message-----
> >> From: Ara [mailto:ara@xxxxxxxxxx]
> >> Sent: Monday, January 24, 2005 12:18 PM
> >> To: [ExchangeList]
> >> Subject: [exchangelist] Re: database permissions
> >>
> >> http://www.MSExchange.org/
> >>
> >> Hello
> >> Thank you for reply. But do you think it is safe to while there is
> >> already
> >> an exchange running? How about forest prerp? Do I have to do it try to
> >> install exchange again on top of old one and do setup.exe/domainprep?
> >> Thanks for help
> >>
> >> > -----Original Message-----
> >> > From: Dominic [mailto:emaildominic@xxxxxxxxxxx]
> >> > Sent: Monday, January 24, 2005 8:09 AM
> >> > To: [ExchangeList]
> >> > Subject: [exchangelist] Re: database permissions
> >> >
> >> > http://www.MSExchange.org/
> >> >
> >> > Server operators have nothing to do with exchange servers
> >> administration.
> >> > for any permission issue just run domainprep. It will reset the
> >> > permission and create the required groups.
> >> > Thanks
> >> >
> >> > Dominic@india,mumbai
> >> > ----- Original Message -----
> >> > From: <ara@xxxxxxxxxx>
> >> > To: "[ExchangeList]" <exchangelist@xxxxxxxxxxxxx>
> >> > Cc: <ara@xxxxxxxxxx>
> >> > Sent: Monday, January 24, 2005 4:48 AM
> >> > Subject: [exchangelist] database permissions
> >> >
> >> >
> >> > > http://www.MSExchange.org/
> >> > >
> >> > >
> >> > > I would apperciate to get any help or comment on this. I had
> >> > > permisiions issues with AD and veritas remote agent for exchange. I
> >> > > think I have done lots of work on this and no go. I did install a
> >> > > test windows server. Did install exchange with service pack1 and
> did
> >> > > print all users' permissions and I did a mix and match to figure
> out
> >> > > what is messed also making conflicts with veritas and denied
> >> permission.
> >> > > I have found crazy things such as owner was a member of enterprise
> >> > > administrators!!!
> >> > > Doing the work, I have found that on test machine, there is a group
> >> > > called server operators and has some permission on the exchange
> data
> >> > > folder. But on actual server that group is missing and I have done
> >> > > all crazy things to add that group to it and it can't find the damn
> >> > > object, even by typing it fully or manually browsing to built-in
> >> > > objects and look for it. There are some screen shots to see if you
> >> > > can give me hand on this Your time is appreciated
> >> > > http://faran.us/1.jpg http://faran.us/2.jpg http://faran.us/3.jpg
> >> > > Also I have to mention that exchaneg 2003, server 2003 standard,
> >> > > server is installed on c: and data are on raid which is d:
> >> > >
> >> > > ------------------------------------------------------
> >> > > List Archives:
> >> > > http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
> >> > > Exchange Newsletters:
> http://www.msexchange.org/pages/newsletter.asp
> >> > > Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ
> >> > > ------------------------------------------------------
> >> > > Other Internet Software Marketing Sites:
> >> > > World of Windows Networking: http://www.windowsnetworking.com
> >> > > Leading Network Software Directory: http://www.serverfiles.com
> >> > > No.1 ISA Server Resource Site: http://www.isaserver.org Windows
> >> > > Security Resource Site: http://www.windowsecurity.com/ Network
> >> > > Security Library: http://www.secinf.net/ Windows 2000/NT Fax
> >> > > Solutions: http://www.ntfaxfaq.com
> >> > > ------------------------------------------------------
> >> > > You are currently subscribed to this MSEXchange.org Discussion List
> >> as:
> >> > emaildominic@xxxxxxxxxxx
> >> > > To unsubscribe visit
> >> > http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
> >> > > Report abuse to listadmin@xxxxxxxxxxxxxx
> >> > >
> >> >
> >> > ------------------------------------------------------
> >> > List Archives:
> >> > http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
> >> > Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp
> >> > Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ
> >> > ------------------------------------------------------
> >> > Other Internet Software Marketing Sites:
> >> > World of Windows Networking: http://www.windowsnetworking.com Leading
> >> > Network Software Directory: http://www.serverfiles.com
> >> > No.1 ISA Server Resource Site: http://www.isaserver.org Windows
> >> > Security Resource Site: http://www.windowsecurity.com/ Network
> >> > Security Library: http://www.secinf.net/ Windows 2000/NT Fax
> >> > Solutions: http://www.ntfaxfaq.com
> >> > ------------------------------------------------------
> >> > You are currently subscribed to this MSEXchange.org Discussion List
> as:
> >> > ara@xxxxxxxxxx
> >> > To unsubscribe visit
> >> > http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
> >> > Report abuse to listadmin@xxxxxxxxxxxxxx
> >>
> >>
> >> ------------------------------------------------------
> >> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
> >> Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp
> >> Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ
> >> ------------------------------------------------------
> >> Other Internet Software Marketing Sites:
> >> World of Windows Networking: http://www.windowsnetworking.com Leading
> >> Network Software Directory: http://www.serverfiles.com
> >> No.1 ISA Server Resource Site: http://www.isaserver.org Windows
> Security
> >> Resource Site: http://www.windowsecurity.com/ Network Security Library:
> >> http://www.secinf.net/ Windows 2000/NT Fax Solutions:
> >> http://www.ntfaxfaq.com
> >> ------------------------------------------------------
> >> You are currently subscribed to this MSEXchange.org Discussion List as:
> >> al.mulnick@xxxxxxxxxx To unsubscribe visit
> >> http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
> >> Report abuse to listadmin@xxxxxxxxxxxxxx
> >>
> >> ------------------------------------------------------
> >> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
> >> Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp
> >> Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ
> >> ------------------------------------------------------
> >> Other Internet Software Marketing Sites:
> >> World of Windows Networking: http://www.windowsnetworking.com
> >> Leading Network Software Directory: http://www.serverfiles.com
> >> No.1 ISA Server Resource Site: http://www.isaserver.org
> >> Windows Security Resource Site: http://www.windowsecurity.com/
> >> Network Security Library: http://www.secinf.net/
> >> Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
> >> ------------------------------------------------------
> >> You are currently subscribed to this MSEXchange.org Discussion List as:
> >> ara@xxxxxxxxxx
> >> To unsubscribe visit
> >> http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
> >> Report abuse to listadmin@xxxxxxxxxxxxxx
> >
> >
> > ------------------------------------------------------
> > List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
> > Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp
> > Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ
> > ------------------------------------------------------
> > Other Internet Software Marketing Sites:
> > World of Windows Networking: http://www.windowsnetworking.com
> > Leading Network Software Directory: http://www.serverfiles.com
> > No.1 ISA Server Resource Site: http://www.isaserver.org
> > Windows Security Resource Site: http://www.windowsecurity.com/
> > Network Security Library: http://www.secinf.net/
> > Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
> > ------------------------------------------------------
> > You are currently subscribed to this MSEXchange.org Discussion List as:
> > trungle@xxxxxxxx
> > To unsubscribe visit
> > http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
> > Report abuse to listadmin@xxxxxxxxxxxxxx
> >
> 
> 
> 
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
> Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp
> Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Other Internet Software Marketing Sites:
> World of Windows Networking: http://www.windowsnetworking.com
> Leading Network Software Directory: http://www.serverfiles.com
> No.1 ISA Server Resource Site: http://www.isaserver.org
> Windows Security Resource Site: http://www.windowsecurity.com/
> Network Security Library: http://www.secinf.net/
> Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
> ------------------------------------------------------
> You are currently subscribed to this MSEXchange.org Discussion List as:
> ara@xxxxxxxxxx
> To unsubscribe visit
> http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
> Report abuse to listadmin@xxxxxxxxxxxxxx



Other related posts: