|
How to verify Exchange talking to DC
After installing Exchange, you may want to verify if the
Exchange has correct settings and can talk to domain controllers or it
doesn't have permission issue. To verify if Exchange has an issue with DC,
you can use policytest.exe.
Policytest.exe is located in the Support\Utils\I386
folder on the Exchange 2000 Server CD, or in the Support\ExDeploy folder on
the Exchange Server 2003 CD. Here are the example running policytest.exe:
Microsoft Windows [Version 5.2.3790]
(C) Copyright 1985-2003 Microsoft Corp.
C:\Documents and Settings\boblin>policytest
This tool will check every domain controller in the local
domain to see if the "Manage auditing and security logs"
privilege granted to the "Exchange Enterprise Servers"
group by DomainPrep has replicated to that DC. If the
policy change has not yet replicated to all DCs, then
you should avoid making policy changes on any DC that
has not received those changes yet.
You must have Domain Admin rights to run this tool
successfully. If you see an error that says:
!! LsaEnumerateAccountRights returned error 5 !!
then you don't have permission to open the LSA on the
given DC.
===============================================
Local domain is "CHICAGOTECH.NET" (chicagotech)
Account is "CHICAGOTECH\Exchange Enterprise Servers"
========================
DC = "DC1"
In site = "Default-First-Site-Name"
Right found: "SeSecurityPrivilege"
========================
DC = "DC2"
In site = "Default-First-Site-Name"
Right found: "SeSecurityPrivilege"
Post your questions, comments, feedbacks and suggestions
Contact a consultant
Related Topics
|
