ADMT permissions issue, intra-forest migration

-

hi,

we consolidating root/child domain infrastructure, have root domain , using admt move users.

the problem exchange "send as" permissions. exchange 2013 in root domain.

after user migration root domain "send as" permissions lost (full access permissions remain). send , full access permissions granted universal groups in child domain.

what issue here?

hi,

thanks post.

regarding issue, please refer following troubleshooting steps:

1. allow inherited permission adsiedit.msc

opened adsiedit.msc,  looking "allow inheritable permissions parent propagate object , child objects." option on adminsdholder system container. if option unchecked, should check option. ad sites , services force dc replication between domain controllers.

2. remove affected accounts of following groups

  • administrators     
  • account operators
  • server operators
  • print operators
  • backup operators
  • domain admins
  • schema admins
  • enterprise admins
  • cert publishers

the "send as" right removed user object after configure "send as" right in active directory users , computers snap-in in exchange server

https://support.microsoft.com/en-us/kb/907434

additional information reference:

troubleshooting user migration issues

http://technet.microsoft.com/en-us/library/cc974359(ws.10).aspx  

best regards,

alvin wang

please remember mark replies answers if , un-mark them if provide no help. if have feedback technet subscriber support, contact tnmff@microsoft.com.



Windows Server  >  Directory Services



Comments

Post a Comment

Popular posts from this blog

Azure MFA with Azure AD and RDS

-
i have setup following lab in azure , need help. a server (domain controller) , remote desktop services. and server multi factor authentication server. i have setup following one http://www.rdsgurus.com/uncategorized/step-by-step-using-windows-server-2012-r2-rd-gateway-with-azure-multifactor-authentication/ and when im connecting got following error. the user "domain\username", on client computer "xxx.xxx.xxx.xxx", did not meet connection authorization policy requirements , therefore not authorized access rd gateway server. authentication method used was: "ntlm" , connection protocol used: "rpc-http". following error occurred: "23003". also on security log i've got following authentication details: connection request policy name: ts gateway authorization policy network policy name: - authentication provider: radius proxy authentication server: test.test.local authenticati...
Read more

Failed to setup initiator portal. Error status is given in the dump data.

-
hi team, server configured boot san  after booting  facing issue windows server 2008 r2 system logs continuously generating iscsi port error event id 5 failed setup initiator portal. error status given in dump data. eventdata \device\raidport1 000004000100000000000000050000c0000000000000000000000000000000000000000000000000070200c0 binary data: in words 0000: 00040000 00000001 00000000 c0000005 0008: 00000000 00000000 00000000 00000000 0010: 00000000 00000000 c0000207 in bytes 0000: 00 00 04 00 01 00 00 00 ........ 0008: 00 00 00 00 05 00 00 c0 .......À 0010: 00 00 00 00 00 00 00 00 ........ 0018: 00 00 00 00 00 00 00 00 ........ 0020: 00 00 00 00 00 00 00 00 ........ 0028: 07 02 00 c0 ...À hi, please read through article below troubleshoot issue: error event id 5 logged in system log on computer uses iscsi software initiator connect iscsi target device http://suppo...
Read more

Invalid pointer on gpresult /h gpreport.html

-
hello guys i getting following error when trying generate gpresult /h  xxx.html invalid pointer this happening on windows 7 pc using test group policy. tried pc same thing when same gpo applied . hi, try apply some other gpo clients, html report generated succefully? if no, may caused unregistered .dll files, try register .dll files previous thread suggested: http://social.technet.microsoft.com/forums/en-us/winservergp/thread/0ea20c5d-c0ae-457d-89d4-a1686a359e72 if yes, please tell detailed information problematic gpo settings reproduce problem , troubleshooting it. regards, cicely Windows Server  >  Group Policy
Read more