none
Warning "Unable to check the security for the Deleted Objects container" while Publishing Topology - SbB 2015 Standard Edition RRS feed

  • Question

  • Hi

    We are installing SfB SE server for the first time. The account that we are using is member of Domain Admins. The initial Publish failed to create the required folders / files with DFS share, later once we provided the required permissions and re-run the Publish wizard created all required folders and files. But the warning "Unable to check the security for the Deleted Objects container. Only users who are listed as owners on the Deleted Objects security descriptor are able to check the security on this container." is not yet corrected even after adding the account to Enterprise & Schema admins and run the Publich wizard  3-4 times. Can we ignore this warning and also is it ok to run the Publish wizard multiple times using the same configuration file?

    Thanks in advance


    LMS

    Saturday, January 16, 2016 10:11 PM

Answers

  • You can safely ignore the warning and you can publish the same topology multiple times without harming anything.  There are many environments where the team publishing just don't have these permissions. 

    Please remember, if you see a post that helped you please click "Vote As Helpful" and if it answered your question please click "Mark As Answer". SWC Unified Communications This forum post is based upon my personal experience and does not necessarily reflect the opinion or view of Microsoft, its employees, or other MVPs.

    Sunday, January 17, 2016 9:57 PM
  • Hi Laljeev Madanamma,

     

    Run the following cmdlet to check the access permission of this container.

    Dsacls.exe “CN=Deleted Objects,DC=Domain,DC=com”

     

    You should see the output like this.


     

    If it returns "Insufficient access rights to perform the operation", you may run the cmdlet with /takeownership parameter.

    Dsacls.exe “CN=Deleted Objects,DC=Domain,DC=com” /takeownership

     

    Moreover, you can run the cmdlet with /g parameter to grant the permissions that you specify to the user.

     

    Here’re some related articles, you can use them as reference.

    https://technet.microsoft.com/en-us/library/bb676691%28v=exchg.80%29.aspx?f=255&MSPPError=-2147217396

    https://technet.microsoft.com/en-us/library/cc771151.aspx 

     

     

    Best regards,

    Eric


    Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact tnmff@microsoft.com.

    Monday, January 18, 2016 7:38 AM
    Moderator

All replies

  • You can safely ignore the warning and you can publish the same topology multiple times without harming anything.  There are many environments where the team publishing just don't have these permissions. 

    Please remember, if you see a post that helped you please click "Vote As Helpful" and if it answered your question please click "Mark As Answer". SWC Unified Communications This forum post is based upon my personal experience and does not necessarily reflect the opinion or view of Microsoft, its employees, or other MVPs.

    Sunday, January 17, 2016 9:57 PM
  • Hi Laljeev Madanamma,

     

    Run the following cmdlet to check the access permission of this container.

    Dsacls.exe “CN=Deleted Objects,DC=Domain,DC=com”

     

    You should see the output like this.


     

    If it returns "Insufficient access rights to perform the operation", you may run the cmdlet with /takeownership parameter.

    Dsacls.exe “CN=Deleted Objects,DC=Domain,DC=com” /takeownership

     

    Moreover, you can run the cmdlet with /g parameter to grant the permissions that you specify to the user.

     

    Here’re some related articles, you can use them as reference.

    https://technet.microsoft.com/en-us/library/bb676691%28v=exchg.80%29.aspx?f=255&MSPPError=-2147217396

    https://technet.microsoft.com/en-us/library/cc771151.aspx 

     

     

    Best regards,

    Eric


    Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact tnmff@microsoft.com.

    Monday, January 18, 2016 7:38 AM
    Moderator