Sign in
 
HomeOnline20132010Other VersionsLibraryForumsGalleryEHLO Blog
TechCenter >
> 
> 
Exchage 2010 SP2 Upgarde - Split Permissions

Answered Exchage 2010 SP2 Upgarde - Split Permissions

  • Wednesday, May 23, 2012 4:12 PM
     
      Has Code
    Sign In to Vote
    0

    Dear Experts,

    After updating SP2 on my Exchange 2010 organization . Its acts like split permissions are configured . But I dint choose any option while installing SP2; it was typical installation . How can i check split permissions are configured and done by whom.  

    setup.com /PrepareAD /ActiveDirectorySplitPermissions:false

    If there is any risk to use this command to revert to shared permissions. But I am sure no one configured split permissions , after SP2 upgrade its acts as same.

    Regards

    Chanderakkaran.

     

All Replies

  • Thursday, May 24, 2012 8:28 AM
    Moderator
     
     Answered
    Sign In to Vote
    0

    Hi Chanderakkaran,

    If the following are true, your organization is using Active Directory split permissions:
    • The Microsoft Exchange Protected Groups organizational unit (OU) exists.
    • The Exchange Windows Permissions security group is located in the Microsoft Exchange Protected Groups OU.
    • The Exchange Trusted Subsystem security group is a member of the Exchange Windows Permissions security group.
    • There are no regular management role assignments to the Mail Recipient Creation role or Security Group Creation and Membership role.

    It is safe to revert to shared permission, for detailed information, please see:

    Configure Exchange 2010 for Shared Permissions

    http://technet.microsoft.com/en-us/library/dd638146

    Frank Wang

    TechNet Community Support

     
  • Thursday, May 24, 2012 7:14 PM
     
     
    Sign In to Vote
    0

    Dear Frank ,

    Thanks for the updates and info...

    But didn't understand , after SP2 upgrade how its automatically  changed to AD split permissions. There is any bug in SP2 that change the shared permission in split permission.

    The SP2 upgrade was typical installation  , and there is no option to choose AD split permission.

    Regards

    Chanderakkaran

     
  • Friday, May 25, 2012 3:15 AM
    Moderator
     
     
    Sign In to Vote
    0
    But didn't understand , after SP2 upgrade how its automatically  changed to AD split permissions.

    Hi Chanderakkaran,

    Maybe you can get some hints in the ExchangeSetup.log file:  <system drive>\ExchangeSetupLogs\ExchangeSetup.log.

    According to Technet:

    Active Directory split permissions can only be enabled or disabled by running Setup on a computer that has Exchange 2010 SP1 installed.

    http://technet.microsoft.com/en-us/library/dd638106.aspx#Split

    Frank Wang

    TechNet Community Support