"Access denied" error message when you try to change a mail attribute by using an Exchange administrator account that has delegated permissions (820338)



The information in this article applies to:

  • Microsoft Exchange 2000 Server
  • Microsoft Exchange 2000 Enterprise Server

SYMPTOMS

When you log on by using an Exchange 2000 administrator account that has delegated permissions, and you try to modify Exchange attributes for an object in Microsoft Active Directory directory service, you receive the following error message:
Access denied.
This problem occurs even though you have the appropriate attribute-level permissions to make changes to the mail attributes of the object.

RESOLUTION

Cumulative Rollup Information

To resolve this problem, obtain the September 2003 Exchange 2000 Server Post-Service Pack 3 (SP3) Rollup. For additional information, click the following article number to view the article in the Microsoft Knowledge Base:

824282 September 2003 Exchange 2000 Server Post-Service Pack 3 Rollup

Hotfix Information

A supported fix is now available from Microsoft, but it is only intended to correct the problem that is described in this article. Apply it only to computers that are experiencing this specific problem. This fix may receive additional testing. Therefore, if you are not severely affected by this problem, Microsoft recommends that you wait for the next Microsoft Exchange 2000 Server service pack that contains this fix.

To resolve this problem immediately, contact Microsoft Product Support Services to obtain the fix. For a complete list of Microsoft Product Support Services phone numbers and information about support costs, visit the following Microsoft Web site:NOTE: In special cases, charges that are ordinarily incurred for support calls may be canceled if a Microsoft Support Professional determines that a specific update will resolve your problem. The typical support costs will apply to additional support questions and issues that do not qualify for the specific update in question.

The English version of this fix has the file attributes (or later) that are listed in the following table. The dates and times for these files are listed in coordinated universal time (UTC). When you view the file information, it is converted to local time. To find the difference between UTC and local time, use the Time Zone tab in the Date and Time tool in Control Panel. Component: ADMIN
Date         Time    Version     Size       File name
--------------------------------------------------------- 
11-Jun-2003  19:52   6.0.6475.0     69,632  Ccmproxy.dll 
11-Jun-2003  19:52   6.0.6475.0  2,109,440  Cdoexm.dll 
11-Jun-2003  19:51   6.0.6475.0  8,466,432  Exadmin.dll 
11-Jun-2003  19:52   6.0.6475.0  1,867,776  Exmgmt.exe  
11-Jun-2003  19:52   6.0.6475.0     73,728  Inproxy.dll 
11-Jun-2003  19:52   6.0.6475.0  2,969,600  Mad.exe 
11-Jun-2003  19:52   6.0.6475.0  4,653,056  Maildsmx.dll 
11-Jun-2003  19:52   6.0.6475.0     77,824  Pcproxy.dll 
11-Jun-2003  19:52   6.0.6475.0     94,208  X400prox.dll
Note Because of file dependencies, this update requires Microsoft Exchange 2000 Server Service Pack 3 (SP3). For additional information, click the article number below to view the article in the Microsoft Knowledge Base:

301378 How to Obtain the Latest Exchange 2000 Server Service Pack

STATUS

Microsoft has confirmed that this is a problem in the Microsoft products that are listed at the beginning of this article.

Modification Type:MinorLast Reviewed:1/26/2006
Keywords:kbHotfixServer kbQFE kbQFE kbfix kbExchange2000preSP4fix kbbug KB820338 kbAudITPRO