It may be worth running a Consistency Adjust on your 55 mailbox & PF server(s) to remove unknown permissions from mailboxes. Do NOT check the Sync with Directory option though. If E2K sees unknown permissions, it can block the known permissions (i.e. the assistant) from accessing folders to prevent a security loophole.
Mark -----Original Message----- From: Chris Anelick [mailto:[EMAIL PROTECTED]] Sent: 26 June 2002 16:50 To: Exchange Discussions Subject: RE: Public Folder Move I used ADMT to migrate the accounts, then set up the ADC, which populated the accounts with the Exchange info. I did not use ADClean. I ran the LDAP query today suggested in Q309222, the value you mention is not populated for any users. Ran into another situation today that may be related. I moved a couple of mailboxes yesterday, two of which were a manager and his assistant. The assistant had delegate permissions to the managers mailbox. This morning she cannot access any folders from the manager's mailbox. Default permissions will work, but any user specific permissions do not get applied/checked. Any suggestions on this? I am leaning toward login account issues, being that everyone is still logging in with their NT 4 account. -----Original Message----- From: Mark Harford [mailto:[EMAIL PROTECTED]] Sent: Tuesday, June 25, 2002 11:40 AM To: Exchange Discussions Subject: RE: Public Folder Move Did you use ADMT to clone NT4 SIDs onto ADC-created AD account Sidhistories or did you use the ADClean method to merge separate accounts created by ADMT? Regardless I'd take a look at Q309222 and check that the msexchmasteraccountsid value is not populated for enabled users in AD. Also if you look at their mailboxes using the Exchange 55 Admin tool connected to an Exchange 55 server, ensure that the Primary Windows NT account is set to be their new AD account if they are using that AD account or the NT4 account if they are still using that one. Also check in the Permissions tab to see if the account has full User permissions since the ADC has a habit of changing it to Custom. Mark -----Original Message----- From: Chris Anelick [mailto:[EMAIL PROTECTED]] Sent: 25 June 2002 14:54 To: Exchange Discussions Subject: RE: Public Folder Move Yes. -----Original Message----- From: Mark Harford [mailto:[EMAIL PROTECTED]] Sent: Tuesday, June 25, 2002 9:43 AM To: Exchange Discussions Subject: RE: Public Folder Move Can you see the PF hierarchy in ESM? -----Original Message----- From: Chris Anelick [mailto:[EMAIL PROTECTED]] Sent: 25 June 2002 14:39 To: Exchange Discussions Subject: RE: Public Folder Move Sorry, forgot to include that info. Yes, the 2000 domain is in native mode. The DL replicated as universal security groups into AD, and the membership was also correct. Also, the permissions are not limited to DLs, as my account is listed separately as an owner for some of these folders. -----Original Message----- From: Ed Crowley [mailto:[EMAIL PROTECTED]] Sent: Monday, June 24, 2002 6:21 PM To: Exchange Discussions Subject: RE: Public Folder Move Is the Windows 2000 domain native mode? Maybe you have a permissions issue with public folders using distribution lists for authentication? Ed Crowley MCSE+Internet MVP kcCC+I Tech Consultant hp Services Protecting the world from PSTs and Bricked Backups! -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Chris Anelick Sent: Monday, June 24, 2002 12:31 PM To: Exchange Discussions Subject: Public Folder Move I am in the process of migrating all of my users (135) to an E2K box. I have looked at Ed's Server Move doc from the FAQ. Here is what the system looks like right now. Old server - NT 4 SP6a, Exch. 5.5 SP4, Domain A New server - 2000 SP2, Exch. 2000 SP2, Domain B A two-way trust is set up between the new domains. I have installed the new server into the existing site and set up the replication agreements. I migrated all the user accounts with ADMT. So far so good, everything replicated back to AD. I then went about replicating some PF to the new server. As soon as the replication took place, I could not view anything in or below a second level folder. For example: All Public Folders-| | --Org-| | ---Dept-| | ---Folder Once replicated, I cannot view any items in the 'Dept.' folder, nor can I see the 'Folder' item in the hierarchy view. The folders were still homed on the 5.5 server. I was pretty sure that this all worked OK on my test server so I am not sure what I am missing. Few more details: All of the users are still using their Domain A login accounts (SID History was migrated to Domain B accounts). Permissions were replicated exactly as they were on 5.5 to the PF. Default permissions are set to none for the folder I am having problems with. I can change default permission to reviewer, and then I can have full access to the folder (I have Owner rights). I am suspecting it has something to do with the domain accounts they are logging into/trusts, but am not sure where to go from here. Anyone seen anything or know anything about this problem? Any help would be appreciated. _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] This e-mail (and any attachments) is confidential and may contain personal views which are not the views of the BBC unless specifically stated. If you have received it in error, please delete it from your system, do not use, copy or disclose the information in any way nor act in reliance on it and notify the sender immediately. Please note that the BBC monitors e-mails sent or received. Further communication will signify your consent to this. _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] This e-mail (and any attachments) is confidential and may contain personal views which are not the views of the BBC unless specifically stated. If you have received it in error, please delete it from your system, do not use, copy or disclose the information in any way nor act in reliance on it and notify the sender immediately. Please note that the BBC monitors e-mails sent or received. Further communication will signify your consent to this. _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] This e-mail (and any attachments) is confidential and may contain personal views which are not the views of the BBC unless specifically stated. If you have received it in error, please delete it from your system, do not use, copy or disclose the information in any way nor act in reliance on it and notify the sender immediately. Please note that the BBC monitors e-mails sent or received. Further communication will signify your consent to this. _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED]