1
OALGen Fehler in Exchange Server 2007
Hallo,
ich hoffe ihr könnt mir helfen. Ich habe vor kurzem hier bei uns in der Firma ein Exchange Server 2007 angeschafft. Maschine läuft soweit auch wunderbar und Exchange lies sich auch fast Problemlos installieren. Allerdings habe ich jetzt das Problem, dass ich innerhalb von Exchange kein "Offline-Address-Buch" generieren kann. Vielleicht kann mir ja jemand einen Tipp geben. Ich habe die Fehlermeldungen diesem Beitrag hinzugefügt.
Umgebung Hardware:
Intel XEON X5430 Quadcore 2,66 MHz
4 GB PC2-5300 Fully-Buffere DIMMs (DDR2-667)
3x 146 GB SAS Hotplug
Umgebung Software:
MS Windows Server Standard 2008
MS Exchange Server Standard 2007 SP1
Wäre für jeden Tipp dankbar.
Gruß BeckerADMIN
ich hoffe ihr könnt mir helfen. Ich habe vor kurzem hier bei uns in der Firma ein Exchange Server 2007 angeschafft. Maschine läuft soweit auch wunderbar und Exchange lies sich auch fast Problemlos installieren. Allerdings habe ich jetzt das Problem, dass ich innerhalb von Exchange kein "Offline-Address-Buch" generieren kann. Vielleicht kann mir ja jemand einen Tipp geben. Ich habe die Fehlermeldungen diesem Beitrag hinzugefügt.
Umgebung Hardware:
Intel XEON X5430 Quadcore 2,66 MHz
4 GB PC2-5300 Fully-Buffere DIMMs (DDR2-667)
3x 146 GB SAS Hotplug
Umgebung Software:
MS Windows Server Standard 2008
MS Exchange Server Standard 2007 SP1
Wäre für jeden Tipp dankbar.
Gruß BeckerADMIN
Share on Facebook
Share on Twitter
Share on Reddit
Share on LinkedinPlease also mark the comments that contributed to the solution of the article
Content-Key: 111838
Url: https://administrator.de/contentid/111838
Printed on: April 25, 2024 at 12:04 o'clock
1 Comment
Also habe habe das Problem inzwischenlösen können. Es war ein Berechtigungsfehler im AD. Habe die Hilfe in einem Blog gefunden. Hier die Lösung wie es mir geholfen hat.
How to fix this
All Global Address List permissions should be as followed:
Authenticate Users Allow Aces - "Read", "Open Address List", "List Contents"
Exchange Servers Allow Aces - "Read", "Open Address List"
SYSTEM Allow Aces - "Read", 'Write", "Create All Child Objects", "Delete All Child
Objects", "Open Address List"
You can add these permissions using the Exchange Scripting Console:
1. First you need to set the container by typing the following:
$container = "CN=Default Global
Address List,CN=All Global Address Lists,CN=Address Lists Container,CN=Mix
Organization,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=mix,DC=test,DC=lab"
2. You need to add the access rights for the Authenticated Users by running the following
command:
Add-ADPermission $container -User "Authenticated Users" -AccessRights GenericRead, ListChildren -ExtendedRights Open-Address-Book
Once you run this command you will see the following output listed below:
Identity User Deny Rights
\Default Global A... Domain\Authenticated Users False Open-Address-Book
\Default Global A... Domain\Authenticated False ReadProperty
\Default Global A... Domain\Authenticated False ListObject, GenericExecute
\Default Global A... Domain\Authenticated False ListChildren
3. You need to add the access rights for the Exchange Servers Group by running the following
command:
Add-ADPermission $container -User "Exchange Servers" -AccessRights GenericRead -ExtendedRights Open-Address-Book
Identity User Deny Rights
\Default Global A... Domain\Exchange Servers False Open-Address-Book
\Default Global A... Domain\Exchange Servers False ReadProperty
\Default Global A... Domain\Exchange Servers False ListObject, GenericExecute
4. You need to add the access rights for the System account by running the following
command:
Add-ADPermission $container -User System -AccessRights GenericAll
Identity User Deny Rights
\Default Global A... NT AUTHORITY\SYSTEM False
\Default Global A... NT AUTHORITY\SYSTEM False CreateChild, DeleteChild
\Default Global A... NT AUTHORITY\SYSTEM False Self, ReadProperty, WriteProperty
\Default Global A... NT AUTHORITY\SYSTEM False DeleteTree, ListObject, Delete, Generic Execute, WriteDacl, WriteOwner
Gruß BeckerADMIN
How to fix this
All Global Address List permissions should be as followed:
Authenticate Users Allow Aces - "Read", "Open Address List", "List Contents"
Exchange Servers Allow Aces - "Read", "Open Address List"
SYSTEM Allow Aces - "Read", 'Write", "Create All Child Objects", "Delete All Child
Objects", "Open Address List"
You can add these permissions using the Exchange Scripting Console:
1. First you need to set the container by typing the following:
$container = "CN=Default Global
Address List,CN=All Global Address Lists,CN=Address Lists Container,CN=Mix
Organization,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=mix,DC=test,DC=lab"
2. You need to add the access rights for the Authenticated Users by running the following
command:
Add-ADPermission $container -User "Authenticated Users" -AccessRights GenericRead, ListChildren -ExtendedRights Open-Address-Book
Once you run this command you will see the following output listed below:
Identity User Deny Rights
\Default Global A... Domain\Authenticated Users False Open-Address-Book
\Default Global A... Domain\Authenticated False ReadProperty
\Default Global A... Domain\Authenticated False ListObject, GenericExecute
\Default Global A... Domain\Authenticated False ListChildren
3. You need to add the access rights for the Exchange Servers Group by running the following
command:
Add-ADPermission $container -User "Exchange Servers" -AccessRights GenericRead -ExtendedRights Open-Address-Book
Identity User Deny Rights
\Default Global A... Domain\Exchange Servers False Open-Address-Book
\Default Global A... Domain\Exchange Servers False ReadProperty
\Default Global A... Domain\Exchange Servers False ListObject, GenericExecute
4. You need to add the access rights for the System account by running the following
command:
Add-ADPermission $container -User System -AccessRights GenericAll
Identity User Deny Rights
\Default Global A... NT AUTHORITY\SYSTEM False
\Default Global A... NT AUTHORITY\SYSTEM False CreateChild, DeleteChild
\Default Global A... NT AUTHORITY\SYSTEM False Self, ReadProperty, WriteProperty
\Default Global A... NT AUTHORITY\SYSTEM False DeleteTree, ListObject, Delete, Generic Execute, WriteDacl, WriteOwner
Gruß BeckerADMIN
