Announcement

Collapse
No announcement yet.

ExMerge Permissions - I have Send/Receive As

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • ExMerge Permissions - I have Send/Receive As

    Hi,

    I am trying to export messages from one server via a pst and then import them into a new server on a different domain. I am at my wits end with the permissions. I seem to be damned if I do, and damned if I don't

    I have created a new account. I have given myself rights to Send As and Receive As for the entire server. If I try and log in with this user and run the GUI I can't see a list of mailboxes to export. If I give myself Domain Admins rights I can then see all of the mailboxes but the deny eventually catches up and I can't export any more.

    What am I doing wrong?

    Thanks,

    Richard

  • #2
    Re: ExMerge Permissions - I have Send/Receive As

    Domain admins permissions sometimes are not enough, follow the next article steps and read the permissions issue in the end (those are the same tasks):
    http://www.petri.com/brick_level_bac...ng_exmerge.htm
    CNE 5, CCA, MCSE NT4.0-2003, MCSE 2003 messaging, Exchange Server MVP.
    Tzahi Kolber - IT Supervisor
    Polycom Israel.

    Comment


    • #3
      Re: ExMerge Permissions - I have Send/Receive As

      Originally posted by tkolber View Post
      Domain admins permissions sometimes are not enough, follow the next article steps and read the permissions issue in the end (those are the same tasks):
      http://www.petri.com/brick_level_bac...ng_exmerge.htm
      I have read that article and the article about grant full mailbox rights. I have done as they have specified. I have:
      • created a new user
      • delegated control for the organization as Exchange Full Administrator
      • Went to the Properties of the Server, added the user, and gave full control ensuring that the Send As and Receive As blocks were allowed. Both denies were clear
      • Waited for the properties to propegate
      • I still cannot pull up a list of mailboxes when logged on as a user.


      Help!

      Comment


      • #4
        Re: ExMerge Permissions - I have Send/Receive As

        1. Can you do it with Administrator or any other user?
        2. Maybe you are getting block by Deny permission some whare - check at the Administrative group and server levels permissions.
        CNE 5, CCA, MCSE NT4.0-2003, MCSE 2003 messaging, Exchange Server MVP.
        Tzahi Kolber - IT Supervisor
        Polycom Israel.

        Comment


        • #5
          Re: ExMerge Permissions - I have Send/Receive As

          When I run as the Administrator I can see the user's mailboxes, but it fails on the export because I have the deny on send/receive as. Any other user I get an error...Error creating EntryID for the user I specified. This appears to be because I can't see the mailboxes.

          Do you know what permissions you have to set to see the mailboxes?

          Thanks for your help,
          Richard

          Comment


          • #6
            Re: ExMerge Permissions - I have Send/Receive As

            Here's some more information. I tried creating a new user account because I thought the other one would have some vestiges of the Domain Admin stuff left over.

            After creating the account I delegated Full Exchange Admin control. That immediately inherited a Deny on send/receive as at the server level. I tried delegating Administrator and that did the same thing. I tried delegating View Only and the denies went away.

            I then tried ExMerge and I couldn't see the mailboxes. Where is that right set?

            Thanks for your help,

            Richard

            Comment


            • #7
              Re: ExMerge Permissions - I have Send/Receive As

              I really need to type this up...

              The way I create accounts for the import/export is thus...

              1. I create a special account that is mail enabled but not a member of Domain Admins, Administrators, or any group other than Domain Users.

              2. I use the delegate control wizard in ESM (Right click on the org and choose the option) to grant this account Exchange View Only rights.

              3. I then use admodify.net (download from the same URL) to grant this special user account Full Mailbox ONLY permissions on all of the account.

              4. On the workstation that I will use to do the extraction/import:
              a. I grant the special account Administrator privileges (ie local admin, not a domain setting).
              b. The workstation has Exchange Management Tools and Outlook installed.
              c. Outlook is configured for the special account and a message sent to the account to ensure it is working correctly.

              Exmerge is then extracted from the downloaded zip file and dropped in to the bin directory on the workstation and run from there.

              Domain Admins, Administrator, Exchange Full Admin etc, all get certain denies that stops things from working. The principle is simple - minimal settings required.

              Simon.
              --
              Simon Butler
              Exchange MVP

              Blog: http://blog.sembee.co.uk/
              More Exchange Content: http://exchange.sembee.info/
              Exchange Resources List: http://exbpa.com/
              In the UK? Hire me: http://www.sembee.co.uk/

              Sembee is a registered trademark, used here with permission.

              Comment


              • #8
                Re: ExMerge Permissions - I have Send/Receive As

                Thanks for your response. I am working on it now. We are trying to automate the process. Is there anything that would prevent me from doing this on the exchange server?

                Thanks,
                Richard

                Comment


                • #9
                  Re: ExMerge Permissions - I have Send/Receive As

                  If you can login to the machine with the special account then no.
                  However if the Exchange server is a domain controller then you are stuck because only domain admins can login to a domain controller without some heavy permission hacking.

                  Simon.
                  --
                  Simon Butler
                  Exchange MVP

                  Blog: http://blog.sembee.co.uk/
                  More Exchange Content: http://exchange.sembee.info/
                  Exchange Resources List: http://exbpa.com/
                  In the UK? Hire me: http://www.sembee.co.uk/

                  Sembee is a registered trademark, used here with permission.

                  Comment


                  • #10
                    Re: ExMerge Permissions - I have Send/Receive As

                    OK,

                    I am much further along. I have finally gotten Outlook installed on the box. I have done as you have said. I have created an account, made it an administrator on the local machine. I sent it mail and verified it. I did everything else.

                    When I start exmerge I now can now see the mailboxes. I can export the Administrator's mailbox fine, but if try any other user's mailbox it won't work, saying I don't have permissions on the mail store.

                    Thank you for your help.

                    Richard

                    Comment


                    • #11
                      Re: ExMerge Permissions - I have Send/Receive As

                      Sorry,

                      My tool, disabled the account I was trying to exmerge out, so the user I was using couldn't be exmerged. Thank you for your help. You are a life-saver. I will figure out the reputation points thingy and give you lots :>


                      Thanks again,

                      Richard

                      Comment

                      Working...
                      X