Exchange Server Error

mic_y

Expert Member
Joined
Dec 23, 2004
Messages
1,645
Hey guys,

I administrate a SBS2k3 server, and in the event logs, I keep getting this error every day at 6am. This happens when the system is generating the performance report. I have looked around on the net, and cant find any way to allow sbsmonacc access to the mailbox store.

Its not too important, but I do find the error message a bit irritating, so was hoping you guys could help.

A copy of the error emssage is below:

The Microsoft Exchange Management service denied user "sbsmonacct" access to "CN=Mailbox Store (SOVIET-AIR-SERV),CN=First Storage Group,CN=InformationStore,CN=SOVIET-AIR-SERV,CN=Servers,CN=first administrative group,CN=Administrative Groups,CN=SOVIETAIRCHARTE,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=SovietAirCharter,DC=local" because the Access Control List (ACL) for it contained non-domain specific access control entries (ACE)
 

dabouncer

Expert Member
Joined
Jan 2, 2006
Messages
1,405
smime_support.gif


Security tab.
 

Good Life

Expert Member
Joined
Dec 20, 2008
Messages
3,041
Hey guys,

I administrate a SBS2k3 server, and in the event logs, I keep getting this error every day at 6am. This happens when the system is generating the performance report. I have looked around on the net, and cant find any way to allow sbsmonacc access to the mailbox store.

Its not too important, but I do find the error message a bit irritating, so was hoping you guys could help.

A copy of the error emssage is below:

Is that an event log message ? If not suggest looking at the event logs.
 

mic_y

Expert Member
Joined
Dec 23, 2004
Messages
1,645
hey Good Life, yeah that is the error message from the event log.

And dabouncer: I realise where to add the account that should be allowed access, but, the problem is that the "sbsmonacct" is only created while the update is generated. It gets deleted immediatly afterwards, so I tried adding it manually to the list of users/groups allowed to access the server, but, since the account doesnt exist in the AD, it refuses to add it to the list.

Any suggestions on any other way I can try and get this sorted?

Thanks for the help guys, its really appreciated.

EDIT: http://www.winserverhelp.com/ftopic5685.html Found this, but still dont really see how it will help me... maybe one of you guys can help me figure it out :)
 
Last edited:

dabouncer

Expert Member
Joined
Jan 2, 2006
Messages
1,405
Is the security group Enterprise Admins allowed access to the Mailbox Store? (It should be by default) As a test give security group Everyone full access to the Mailbox Store and see what happens? (Change this security back asap after testing)
 

mic_y

Expert Member
Joined
Dec 23, 2004
Messages
1,645
will try it a bit later (gotta study for 2 exams that I am writing tomorrow) and will report back with results as soon as I try.
 
Top