I have a problem with opening any tool on exchange 2010 sp1
toolbox and only user with high level permission (such as Enterprise Admin)can
open any tool and explorer data under "CN=Org Name,CN=Microsoft
Exchange,CN=Services,CN=Configuration" and errors as below based on Tool:
1.Best Practice analyzerèNo exchange administrative
group were found in the organization
2.Message Trackingèmessage tracking is currently
3.Tracking log explorerè"Failed to connect to the
Microsoft Exchange Transport Log Search service on computer..."
"...Verify that the Microsoft Exchange Transport Log Search service is
started on the target computer."
4.Role Based Access Control (RBAC)èRole Based Access Control (RBAC) user Editor is currently unavailable
So any domain admin account on any child domain has
exchange server on his/her site will not be able to open any tool on exchange
2010 toolbox therefore I have tried to
add one of child domain admin account (administrator account ) under "CN=Org
Name,CN=Microsoft Exchange,CN=Services,CN=Configuration" on ADSIEDIT with full
permission and inherited but this doesn’t solve the problem.
Thank you for your support.
- Edited by Fadi Fawwaz Haddad Saturday, February 18, 2012 9:59 AM
No. All child domain Admins are not member of Org
Admins and usually we create customs RBAC with our needed permissions.
I tried to add domain
admin account on Recipient management group
but this didn’t solve the problem
Any user on Org Admins can open any tool on exchange 2010
Best Regards, Fadi.F.Haddad
- Edited by Fadi Fawwaz Haddad Monday, February 20, 2012 6:51 AM