Announcement

Collapse
No announcement yet.

how to log on exchange services as a diffrent user?

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • how to log on exchange services as a diffrent user?

    hello everyone,

    i have been asked to do hardening on all server in a company.
    all the servers run windows server 2003 enterprise edition,and all client computer have windows xp.

    i finished hardning all dc,iis&member servers.

    i aplied the member server policy on the exchange,and it runs ok.
    the company asked me to create a special user that have a lot of power,this user is an exchange full administrator,administrator localy,domain admin,administrator on the domain - this user is a member of every group of administrators that exist on this domain.

    i plant a test enviorment,installed a dc,aplied the neccery gpo,another exchange server (with iis of cours) and a client computer

    the company request that this powerfull user will be used to run all the exchange services.
    when i use the log on tub on the services of the exchange (system attended,information store and the MTA) i get three typs of error id:
    1000;1005;7005

    what else should i do?
    how can i run this services with this user on the logon tub?

  • #2
    Re: how to log on exchange services as a diffrent user?

    Have you changed the services that require this username and password??

    have you set the account to logon as a service??

    Done some diging and it looks like it is NOT recommended to change the service account

    http://support.microsoft.com/?id=239762
    Last edited by wullieb1; 6th July 2006, 10:41.

    Comment


    • #3
      Re: how to log on exchange services as a diffrent user?

      yes,i have change the services that require this user name and password.
      the exchange system attended,MTA and information store.

      how do i set the account to log on as a service? do you mean by going to the services,right click and choose the tab of lon on service?because im doing that and im choosing the powerfull user that i have created and when im doing restart to the service it gives me all the errors...

      the company works that way for a long time,im doing this on a test enviorment to check my gpo's before crashing there network....
      im doing it on a vmware,but everythin is working well so i dont think this is the issue...

      Comment


      • #4
        Re: how to log on exchange services as a diffrent user?

        Having not done it for a long time i'll need to dig deep but i'm sure it can be done via GPO.

        Comment


        • #5
          Re: how to log on exchange services as a diffrent user?

          afaik, exchange 2000/2003 won't run anymore on a serviceaccount. All services running on the local system account
          I used to be with with Exchange 5.5

          a quote from:
          http://www.petri.co.il/grant_full_ma..._2000_2003.htm
          In Microsoft Exchange Server 5.5, when you grant Service Account Admin privileges on the Site container to a Microsoft Windows account, you grant that account unrestricted access to all mailboxes. Because Exchange 2000 and Exchange Server 2003 do not use a service account, even accounts with Enterprise Administrators rights are denied rights to access all mailboxes, by default.
          Edit: Just found this topic
          http://forums.petri.com/showthread.php?t=8402
          Last edited by Dumber; 6th July 2006, 15:55.
          Marcel
          Technical Consultant
          Netherlands
          http://www.phetios.com
          http://blog.nessus.nl

          MCITP(EA, SA), MCSA/E 2003:Security, CCNA, SNAF, DCUCI, CCSA/E/E+ (R60), VCP4/5, NCDA, NCIE - SAN, NCIE - BR, EMCPE
          "No matter how secure, there is always the human factor."

          "Enjoy life today, tomorrow may never come."
          "If you're going through hell, keep going. ~Winston Churchill"

          Comment

          Working...
          X