How to configure the administrator account to use Exmerge 2003 in Exchange 2003 (823143)


The information in this article applies to:

  • Microsoft Exchange Server 2003 Enterprise Edition
  • Microsoft Exchange Server 2003 Standard Edition

SUMMARY

In Microsoft Exchange Server 2003, organization administrators and domain administrators are specifically denied Receive As and Send As permissions. However, if you want to use the Microsoft Exchange Mailbox Merge Wizard (ExMerge) on an Exchange 2003 computer, you can specifically grant permissions to the Exchange Server administrator account that you want to use with ExMerge.

MORE INFORMATION

To change permissions on your account so that you can use ExMerge with Exchange 2003, follow these steps:
  1. Create a security group, and then name it ExMerge. To do this, follow these steps:
    1. Click Start, point to Programs, point to Microsoft Exchange, and then click Active Directory Users and Computers.
    2. Expand your domain name, right-click the organizational unit or the container where you want to create the new security group, point to New, and then click Group.
    3. In the Group name box, type a name for the group. For example, type ExMerge. Make sure that Security is selected under Group type, and then click Next.
    4. Click Next, and then click Finish.
    5. Right-click the group that you created, and then click Properties.
    6. Click the Members tab, and then click Add.
    7. In the Select Users, Contacts, or Computers box, add the accounts or the groups that you want to use to run the ExMerge utility, and then click OK two times.

      Note If you are running Exchange Server on a Microsoft Windows Server 2003-based computer, the list of accounts and groups does not appear in the Select Users, Contacts, or Computers box. To locate the user account or the security group, click Advanced in the Select Users, Contacts, or Computers box, and then click Find Now. Locate the account or the security group in the Search results list, and then click OK.
  2. Make your user account a member of the security group that you created in step 1.

    Note Do not use the built-in administrator account, or any member of any group that is explicitly denied. For example, do not use the Domain Admins or the Enterprise Admins groups.
  3. In Exchange System Manager, open the properties of the target database object, and then add the security group that has full permissions on the Security page. If you do not add the group that has full permissions, you may receive the following error message in Exmerge:
    Error getting list of private information store databases on server.
    Additionally, if you do not add the security group that has full permissions, the following information may be logged in the Exmerge.log file:

    [16:29:13] Error 80072030 opening an LDAP connection. ('GC://CN=InformationStore,CN=Server Name,CN=Servers,CN=Site Name,CN=Administrative Groups,CN=Organization Name,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=Domain Name,DC=com') (CADRoutines::GetExchangeServerStorageGroupInfo)
    [16:29:13] Ending Routine: (CADRoutines::GetExchangeServerStorageGroupInfo)
    [16:29:13] Error getting list of private information store databases on server Server Name.
You can use ExMerge with Exchange 2003 when these permissions become effective.

For additional information, click the following article number to view the article in the Microsoft Knowledge Base:

322312 When the Mailbox Merge program tries to open the message store, the operation is unsuccessful

Modification Type:MinorLast Reviewed:11/7/2005
Keywords:kbinfo KB823143
©2004 Microsoft Corporation. All rights reserved.