[ActiveDir] Exchange 2K3 Private Information Store Disappeared

2004-11-02 Thread Monte Barnett \(Tech\)

  Okay, here's the scenario: Exchange Server 2003 (upgraded in June from
2K w/current SPs) has, over the past two weeks, begun allowing users to
open other users mailboxes. Up until now, it was secure in that people
had to assign delegates, but now it's pretty much wide open.
Additionally, the Private Information Store shows *none* of the user
logons or mailboxes. Two user mailboxes won't open (Cannot be found /
Does not exist errors opening with Outlook). But .. all other users
can open their mailboxes, send  receive mail, use the global address
book, and do pretty much anything they normally do with e-mail. From
Active Directory Users  Computers, we cannot add email accounts, nor
can we make changes to existing users' Mailbox Rights from the Exchange
Advanced tab within User Properties. Clicking the Mailbox Right button
returns There is no such object on the server.  Facility: Win32  ID no:
c0072030   Microsoft Active Directory - Exchange Extension. 

  As it stands, we're thinking there's little time left before this
self-destructs. Things came to a halt yesterday afternoon, and after
several hours of getting no answers from Microsoft, our Network Admin
found that the Exchange Connector in AD Sites  Services wasn't working,
deleted  re-created it, then restarted the three Global Catalog
Servers, which got mail back up and limping along. 

  Any ideas?

   
Monte Barnett
Network Specialist
Burlington-Edison School District
491 N. Burlington Blvd
Burlington, WA  98233
(360) 757-3344 

List info   : http://www.activedir.org/mail_list.htm
List FAQ: http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/


[ActiveDir] Moving/Copying Users To A New Domain

2002-04-24 Thread Monte Barnett (Tech)


   Greetings!

 OK, here's the story: Like a few other folks, we've just discovered
that our backups (using BackupExec) did NOT have the Active Directory info
backed up properly. The previous DC is toast, and restoring to either the
old hardware config or a new hardware config has been nothing short of a
lesson in futility. The other server in the domain, even after seizing
control, will not behave as the new PDC. After numerous errors trying to
reestablish a necessary trust with Domain A, we successfully removed the
trust from Domain A, but any attempts to remove it from the problem domain
(Domain B) returns an Active Directory dialog box with the error The
specified user does not exist. We've been fighting to reconstruct things
for three days now and we've pretty well decided to just move on. We have
the users' data directories  files, and have a new Domain C already set
up and trusted with Domain A.

 So, here's what we'd *like* to do: Since we can still see all of the
old users in Domain B, we need to know if there is a way to copy the user
accounts to Domain C. If there *is* some way to do that, it'd certainly be
easier than spending the next several days running batch files  scripts to
create the old users in the new domain, then setting up sharing 
permissions on 1200+ directories on the data drive.

 Is this even possible, or are we simply going to have to roll up our
sleeves and do it long hand? 

  Thanks,

  Monte Barnett
  Network Tech
  Burlington-Edison School District
  Burlington, WA 98233
  (360) 757-3344
List info   : http://www.activedir.org/mail_list.htm
List FAQ: http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/