RE: [ActiveDir] Exchange and AD

[Bernard, Aric]

As most have eluded to, Exchange is highly reliant on AD and therefore name resolution.  I would start by having a look at the health of AD.  Are you having any replication or name resolution issues from the perspective of the DC?  Maybe a DCDiag is in order?     Aric   From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Brenda Casey Sent: Monday, April 18, 2005 3:00 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Exchange and AD   I have checked all of the ACL's on the MS EXchange container earlier in the day and had to add the Exchange computer.  All is correct now, but we are still getting the same error message.   This is the first Exchange 200X server in the org to I have nothing to compare it to.   Thanks, Brenda   Brenda Casey, Network Manager Lincoln Center     From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Grillenmeier, Guido Sent: Monday, April 18, 2005 2:10 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Exchange and AD is this your first Exchange 200x server in the org? if not, do others have the same problem?   Did you actually check the ACLs on the MS Exchange container in the configuration NC (e.g. via ADSI edit)? I've had an occurrance, where these were corrupt.   /Guido   From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Brenda Casey Sent: Montag, 18. April 2005 20:54 To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Exchange and AD The Exchange server is listed in the Computers OU.  We have not moved teh Exchange groups out of the default users container. The entire error in the app log is: Microsoft Exchange System Attendant does not have sufficient rights to read Exchange configuration objects in Active Directory. Wait for replication to complete and then check to make sure the computer account is a member of the "Exchange Domain Servers" security group. For more information, click http://www.microsoft.com/contentredirect.asp. For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.   Thanks, Brenda   From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Michael B. Smith Sent: Monday, April 18, 2005 12:48 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Exchange and AD What OU is the server in? Have you moved any of the Exchange groups from their default location? What is the complete event?   The most common cause of this is moving the Exchange Domain Servers or Exchange Enterprise Servers groups out of the default users container.   From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Brenda Casey Sent: Monday, April 18, 2005 2:39 PM To: ActiveDir@mail.activedir.org Subject: [ActiveDir] Exchange and AD During the install of Exchange, the Microsoft Exchange System Attendant is unable to start.  After bypassing the start of this service during the install and then rebooting the server the following error is generated in the Application Log file. Microsoft Exchange System Attendant does not have sufficient rights to read Exchange configuration objects in Active Directory. Wait for replication to complete and then check to make sure the computer account is a member of the "Exchange Domain Servers" security group. For more information, click http://www.microsoft.com/contentredirect.asp. For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. We have read several KB articles, but have been unable to find a solution.  Any help would be appreciated!  (The Exchange Server computer account is not disable, and does exist in AD). Thanks, Brenda