exmerge berechtigungsfehler

1. offizieller Beitrag

    Hi,


    ich habe ein berechtigungsproblem mit exmerge.


    lustigerweise habe ich das tool schon des öffteren installiert und habs eigentlich immer zum laufen gebracht. auf unserem sbs funkt es aber nicht und ich komme nicht auf den fehler... irgend etwas dürfte ich vergessen haben.


    es funktioniert nur mit meinem administrator account, das ist auch der user den ich der gruppe exmerge hinzugefüht habe.


    ich habe folgendes gemacht:
    - exmerge ins bin verzeichnis kopoert
    - die ini auf german editiert
    - sicherheitsgruppe exmerge erstellt
    - im Ex System Manager der gruppe exmerge das recht "Exchange Administrator - nur Ansicht" zugewiesen
    - dem postfachspeicher der gruppe exmerge das recht send und receive as geährt


    die gruppe exmerge enthält bei mir den user administrator


    wenn ich exmerge starte funktioniert der export aber leider nut mit dme administrator postfach, sonst bekomme ich immer den fehler das ich nich die nötige berechtigung habe??? aber die habe ich ja eigentlich vergeben...


    wenn ich der gruppe exmerge im postfachspeicher das recht vollzugriff gebe, ändert dies leider auch nichts.


    was habe ich den falsch gemacht???


    danke, lg renè

    -----------------------------------------------------------
    Gruss Renè

    Mhhh, der log sagt mir dass ich nicht die notwendigen rechte habe. Ich werde nun zum 20x die Rechte kontrollieren... vielleicht sehe ich den wald vor lauter bäumen nicht?


    ****************************************************************
    Microsoft Exchange Mailbox Merge Program, v6.5.7529.0
    Start Logging:November 16, 2006 22:47:34
    ****************************************************************
    [22:47:34] Logging Level: Maximum
    [22:47:34] Reading settings from file 'E:\Programme\Exchsrvr\bin\EXMERGE.INI'.
    [22:47:34] Data directory name read from .INI file: 'C:\PST'.
    [22:47:34] Merge action read from .INI file: 0
    [22:47:34] DomainControllerForSourceServer read from INI file: ''
    [22:47:34] SrcServerLDAP-Port read from INI file: ''
    [22:47:34] Source server name read from .INI file: 'DC1'.
    [22:47:34] Entered Routine: (CADRoutines::IdentifyFamilyOfExchangeRunningOnServer)
    [22:47:34] Entered Routine: (CADRoutines::GetNamingContextData)
    [22:47:34] BaseDN: 'LDAP://DC1/rootDSE'
    [22:47:34] Ending Routine: (CADRoutines::GetNamingContextData)
    [22:47:34] Default Naming Context: 'DC=S3Partner,DC=local'
    [22:47:34] Entered Routine: (CADRoutines::GetNamingContextData)
    [22:47:34] BaseDN: 'LDAP://rootDSE'
    [22:47:34] Ending Routine: (CADRoutines::GetNamingContextData)
    [22:47:34] Default Naming Context: 'DC=S3Partner,DC=local'
    [22:47:34] Accessing Domain Controller 'DC1'
    [22:47:34] Entered Routine: (CADRoutines::GetExchangeServerNameInfo)
    [22:47:34] BaseDN: 'LDAP://DC1/CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=S3Partner,DC=local'
    [22:47:34] Got IDirectorySearch interface
    [22:47:34] Set search preferences
    [22:47:34] Filter used: '(&(objectCategory=msexchExchangeServer)(cn=DC1))'
    [22:47:34] Successfully executed directory search
    [22:47:34] Ending Routine: (CADRoutines::GetExchangeServerNameInfo)
    [22:47:34] 'DC1' is running Exchange Server 2000 or later
    [22:47:34] Ending Routine: (CADRoutines::IdentifyFamilyOfExchangeRunningOnServer)
    [22:47:34] Source server read from settings file is 'DC1'.
    [22:47:34] DomainControllerForDestServer read from INI file: ''
    [22:47:34] SrcServerLDAP-Port read from INI file: ''
    [22:47:34] Destination server name read from .INI file: ''.
    [22:47:34] Message selection start date read from .INI file: ''.
    [22:47:34] Reading list of subjects for messages to be selected from file ''
    [22:47:34] Subject string match criteria read from INI file: 0
    [22:47:34] Reading list of attachment names for messages to be selected from file ''
    [22:47:34] Attachment name string match criteria read from INI file: 0
    [22:47:34] Folder process setting read from .INI file: 2
    [22:47:34] Apply to sub folders setting, read from .INI file: 0
    [22:47:34] List of folders to be ignored has been read. 0 folders in the list.
    [22:47:34] DelimiterUsedInMailboxFile setting read from .INI file: 0
    [22:47:34] File containing list of mailboxes, read from .INI file: ''.
    [22:47:34] Remove intermediate PST files setting read from .INI file: 1
    [22:47:34] Date attribute read from .INI file: 0
    [22:47:34] Data import method read from .INI file: 1
    [22:47:34] ReplaceDataOnlyIfSourceItemIsMoreRecent setting read from .INI file: 1
    [22:47:34] Copy user data setting read from .INI file: 1
    [22:47:34] Copy associated folder data setting read from .INI file: 0
    [22:47:34] Copy folder permissions setting read from .INI file: 0
    [22:47:34] Copy dumpster items setting read from .INI file: 0
    [22:47:34] UseThisPSTFileForAllMailboxes setting read from .INI file: ''
    [22:47:34] MapFolderNameToLocalisedName setting read from .INI file: 0
    [22:47:34] RenameFoldersBasedOnFolderMappings setting read from INI file: 0
    [22:47:34] RenameSpecialFolders setting read from INI file: 1
    [22:47:34] Default Locale read from INI file: 1031
    [22:47:34] UseLastLogonLocaleID setting read from INI file: 0
    [22:47:34] Current machine locale ID is 0x407
    [22:47:34] Command line received:
    [22:47:34] Processor architecture: Intel
    [22:47:34] Operating System Version 5.2 (Build 3790)
    [22:47:35] Personal Folders service name got from EXMERGE.INI file is 'Persönliche Ordner' (LocalisedPersonalFoldersServiceName entry in section [EXMERGE]).
    [22:47:35] Exchange Server service name got from EXMERGE.INI file is 'Microsoft Exchange-Nachrichtenspeicher' (LocalisedExchangeServerServiceName entry in section [EXMERGE]).
    [22:47:47] Entered Routine: (CADRoutines::IdentifyFamilyOfExchangeRunningOnServer)
    [22:47:47] Entered Routine: (CADRoutines::GetNamingContextData)
    [22:47:47] BaseDN: 'LDAP://DC1/rootDSE'
    [22:47:47] Ending Routine: (CADRoutines::GetNamingContextData)
    [22:47:47] Default Naming Context: 'DC=S3Partner,DC=local'
    [22:47:47] Entered Routine: (CADRoutines::GetNamingContextData)
    [22:47:47] BaseDN: 'LDAP://dc1/rootDSE'
    [22:47:47] Ending Routine: (CADRoutines::GetNamingContextData)
    [22:47:47] Default Naming Context: 'DC=S3Partner,DC=local'
    [22:47:47] Accessing Domain Controller 'DC1'
    [22:47:47] Entered Routine: (CADRoutines::GetExchangeServerNameInfo)
    [22:47:47] BaseDN: 'LDAP://DC1/CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=S3Partner,DC=local'
    [22:47:47] Got IDirectorySearch interface
    [22:47:47] Set search preferences
    [22:47:47] Filter used: '(&(objectCategory=msexchExchangeServer)(cn=DC1))'
    [22:47:47] Successfully executed directory search
    [22:47:47] Ending Routine: (CADRoutines::GetExchangeServerNameInfo)
    [22:47:47] 'DC1' is running Exchange Server 2000 or later
    [22:47:47] Ending Routine: (CADRoutines::IdentifyFamilyOfExchangeRunningOnServer)
    [22:47:47] Entered Routine: (CADRoutines::GetExchangeServerStorageGroupInfo)
    [22:47:47] BaseDN: 'LDAP://dc1/CN=InformationStore,CN=DC1,CN=Servers,CN=erste administrative gruppe,CN=Administrative Groups,CN=S3PARTNER,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=S3Partner,DC=local'
    [22:47:47] Got IDirectorySearch interface
    [22:47:47] Set search preferences
    [22:47:47] Filter used: '(objectClass=msexchPrivateMDB)'
    [22:47:47] Successfully executed directory search
    [22:47:47] Ending Routine: (CADRoutines::GetExchangeServerStorageGroupInfo)
    [22:47:47] Entered Routine: (CADRoutines::GetMailboxesHomedOnExchangeServerDatabases)
    [22:47:47] Mailbox '/o=S3PARTNER/ou=first administrative group/cn=Configuration/cn=Servers/cn=DC1/cn=Microsoft System Attendant' will be ignored as its DN contains strings in the ignore list
    [22:47:47] Mailbox '/o=S3PARTNER/ou=first administrative group/cn=Configuration/cn=Connections/cn=SMTP (DC1)/cn={DDAFAFAA-6ED9-4767-B12C-514CD9B4E5BD}' will be ignored as its DN contains strings in the ignore list
    [22:47:47] Mailbox '/o=S3PARTNER/ou=first administrative group/cn=Recipients/cn=SystemMailbox{DDAFAFAA-6ED9-4767-B12C-514CD9B4E5BD}' will be ignored as its DN contains strings in the ignore list
    [22:47:48] Found 17 mailbox(es) homed on database 'ERSTE SPEICHERGRUPPE/POSTFACHSPEICHER (DC1)'.
    [22:47:48] Ignored 3 mailbox(es) homed on database 'ERSTE SPEICHERGRUPPE/POSTFACHSPEICHER (DC1)'.
    [22:47:48] Found 17 mailbox(es) homed on the specified databases.
    [22:47:48] Ignored 3 mailbox(es) homed on the specified databases.
    [22:47:48] Ending Routine: (CADRoutines::GetMailboxesHomedOnExchangeServerDatabases)
    [22:47:48] Entered Routine: (CMapiSession::CreateSystemAttendantProfile)
    [22:47:48] Entered Routine: (CAdminProfileRoutines::CreateSystemAttendantProfile)
    [22:47:48] Entered Routine: (CAdminProfileRoutines::CreateSystemAttendantProfile)
    [22:47:48] Entered Routine: (CAdminProfileRoutines::HackMapiSvcInfForSA)
    [22:47:48] Ending Routine: (CAdminProfileRoutines::HackMapiSvcInfForSA)
    [22:47:48] Ending Routine: (CAdminProfileRoutines::CreateSystemAttendantProfile)
    [22:47:48] Ending Routine: (CAdminProfileRoutines::CreateSystemAttendantProfile)
    [22:47:48] Ending Routine: (CMapiSession::CreateSystemAttendantProfile)
    [22:47:48] Entered Routine: (CMapiSession::Logon)
    [22:47:48] Entered Routine: (CMapiSession::MapiInit)
    [22:47:48] Successfully initialized MAPI.
    [22:47:48] Ending Routine: (CMapiSession::MapiInit)
    [22:47:48] MAPI Logon successful.
    [22:47:48] Ending Routine: (CMapiSession::Logon)
    [22:47:48] Entered Routine: (CMapiSession::GetMailboxesOnServer)
    [22:47:48] Getting list of mailboxes on the server.
    [22:47:48] Found default store.
    [22:47:48] Opened Exchange Server Store.
    [22:47:48] Entered Routine: (CMapiSession::GetMailboxesOnServerFromPrivateIS)
    [22:47:48] GetMailboxesOnServerFromPrivateIS: QueryInterface succeeded
    [22:47:48] GetMailboxesOnServerFromPrivateIS: GetMailboxTable succeeded
    [22:47:48] Number of mailbox records read: 17. (CMapiSession::GetMailboxesOnServerFromPrivateIS)
    [22:47:48] Ending Routine: (CMapiSession::GetMailboxesOnServerFromPrivateIS)
    [22:47:48] Finished getting list of mailboxes.
    [22:47:48] Ending Routine: (CMapiSession::GetMailboxesOnServer)
    [22:47:48] Session logoff successful.
    [22:47:48] Entered Routine: (CMapiSession::DeleteOurProfile)
    [22:47:48] Ending Routine: (CMapiSession::DeleteOurProfile)
    [22:47:48] Time to get mailbox data: 1 seconds
    [22:48:02] Using attribute 'PR_MESSAGE_DELIVERY_TIME' for date operations.
    [22:48:02] Merging data into target store. The program will copy only those messages that do not exist in the target store.
    [22:48:02] Associated folder data will NOT be copied to the target store.
    [22:48:02] Using 'German' (0x407) as the default locale (Code page 1252)
    [22:48:02] All mailboxes will be processed, regardless of locale
    [22:48:02] Using default locale for all mailboxes
    [22:48:02] Program will use 1 worker threads
    [22:48:02] Initializing worker thread (Thread0)
    [22:48:02] ((Thread0)) Before CopyMailboxData -FS
    [22:48:02] Entered Routine: EDKRoutines::CopyMailBoxData)
    [22:48:02] Using locale 'German' (0x407) and code page 1252 to connect to mailbox
    [22:48:02] Copying data from mailbox 'Florian FS. Stein' ('FS') on Server 'DC1' to file 'E:\DOKUMENTE UND EINSTELLUNGEN\ADMINISTRATOR\DESKTOP\PST_EXMERGE_EXPORT\FS.PST'.
    [22:48:02] DN of object is '/O=S3PARTNER/OU=FIRST ADMINISTRATIVE GROUP/CN=RECIPIENTS/CN=FS'.
    [22:48:02] Entered Routine: (CMapiSession::MapiInit)
    [22:48:02] Successfully initialized MAPI.
    [22:48:02] Ending Routine: (CMapiSession::MapiInit)
    [22:48:02] Entered Routine: (CMapiSession::CreateEMSPSTProfile)
    [22:48:02] Ending Routine: (CMapiSession::CreateEMSPSTProfile)
    [22:48:02] Successfully created profile.
    [22:48:02] Entered Routine: (CMapiSession::Logon)
    [22:48:02] Entered Routine: (CMapiSession::MapiInit)
    [22:48:02] Successfully initialized MAPI.
    [22:48:02] Ending Routine: (CMapiSession::MapiInit)
    [22:48:02] MAPI Logon successful.
    [22:48:02] Ending Routine: (CMapiSession::Logon)
    [22:48:02] Entered Routine: (CMapiSession::GetSession)
    [22:48:02] Ending Routine: (CMapiSession::GetSession)
    [22:48:02] Entered Routine: EDKRoutines::OpenStores)
    [22:48:02] OpenStores: Start
    [22:48:02] GetMsgStoresTable successful.
    [22:48:02] Checking service 'Microsoft Exchange-Nachrichtenspeicher'
    [22:48:02] Found service 'MSEMS' in current profile.
    [22:48:02] Error opening message store (MSEMS). Verify that the Microsoft Exchange Information Store service is running and that you have the correct permissions to log on. (0x8004011d)
    [22:48:02] Ending Routine: EDKRoutines::OpenStores)
    [22:48:02] Errors encountered. Copy process aborted for mailbox 'Florian FS. Stein' ('FS').
    [22:48:02] Entered Routine: (CMapiSession::DeleteOurProfile)
    [22:48:02] Ending Routine: (CMapiSession::DeleteOurProfile)
    [22:48:02] Session logoff successful.
    [22:48:03] Ending Routine: EDKRoutines::CopyMailBoxData)
    [22:48:03] ((Thread0)) CopyMailboxData Failed -FS
    [22:48:03] ((Thread0)) Incremented progress bar
    [22:48:03] Number of items copied from the source store for all mailboxes processed: 0
    [22:48:03] Total number of folders processed in the source store: 0
    [22:48:03] 0 mailboxes successfully processed. 1 mailboxes were not successfully processed. 0 non-fatal errors encountered.
    [22:48:03] Process completion time: 00:00:00
    [22:48:03] MAPI uninitialized.
    [22:48:04] MAPI uninitialized.

    -----------------------------------------------------------
    Gruss Renè

    habe exmerge am dienstag gebraucht und bin nach diesem how to vorgegangen wie üblich und es hat sofort funktioniert.


    To grant your administrative logon account temporary rights to read all mailboxes in an Exchange database


    1.


    Create a Windows Security Group, and name it something such as "Exchange Recovery Administrators".


    2.


    Add the Windows account you are using to run ExMerge to this group. This account should already be an Exchange administrator account and have local administrator permissions on the Exchange server(s) involved in the mailbox merge process.


    3.


    In Exchange System Manager, locate the target database and open its Properties dialog box. On the Security tab, add the Exchange Recovery Administrators group and grant this group Full Control permissions on the database.


    It may be necessary to wait up to 15 minutes for the permissions granted to take effect. Alternatively, you can reset cached permissions by stopping and restarting all Exchange services, the IIS Admin Service, and the Windows Management services. Because of this latency, you should grant necessary permissions as soon as you know you will need them, not just before you need to use them.
    Note


    As of this writing, only Receive As permission is essential for ExMerge to function properly with a database running in an ordinary storage group. You can therefore restrict the Exchange recovery administrators group to this permission rather than Full Control. If granting only Receive As permission does not work, you should then grant Full Control as an initial troubleshooting step.


    gruss
    smü

    MCT, MCSE Messaging, CCNA, CCEA

    Genau das gleiche Probleme habe ich wie der Threadersteller auch. Hab extra ein exmerge Benutzerkonto, eine Benutzergruppe die Adminrechte hat.


    Rechte auf receive und send as habe ich auch. dennoch geht es nicht.

    hi loki!


    bei mir lag der fehler daran dass der benutzer mit dem exmerge ausgeführt wird zur gruppe der domain admins gehört und diesem user standardmässig send und receive as verboten wird.


    prüfe einfach mal alle gruppenzugehörigkeiten des user und gegebenenfalls änder die rechte. dann funkt es zu 100 Prozent.


    SG Renè

    -----------------------------------------------------------
    Gruss Renè

    Also ich habe gerade eben nach geschaut.


    Der Benutzer war in der Gruppe der Domänenadmins, ist jetzt wieder draussen.


    Der Benutzer als auch die Gruppe die ich extra erstellt habe, hat Zugriff auf receive as und send as. Wieder der gleiche Fehler, durchaus sehr merkwürdig.


    Der Benutzer ist nur den Gruppen:


    Domänen Benutzer
    Exchange Admins
    Exchange Backup ( Die Gruppe die ich erstellt habe )
    Remote Desktop Benutzer


    Aus der Gruppe Exchange Admins sollte ich ihn wohl nicht rausschmeissen, sonst hat er ja kein Zugriff mehr auf die Speichergruppe?

    su musst den user auch nicht raus schmeissen.


    geh einfach auf die berechtigungen des postfachspeichers im system-manager und überprüfe die gruppen denen der user noch zugeordnet ist.


    bei den administratoren und den organisations admins sind sowohl "send as" als "auch receive as" berechtigungen auf der einen seite zugelassen jedoch zusätzlich verweigert.


    es zählt hier natürlich das restriktive recht also verweigert.


    wenn der user in einer dieser gruppen mitglied ist kann er exmerge nicht mit den richtigen rechten ausführen.


    also entweder das hackerl bei verweigern im postfachspeicher wegnehmen oder dem user andere gruppen zuweisen.

    -----------------------------------------------------------
    Gruss Renè