Ureader.com  
Microsoft software help and Community
   home   |   control panel login   |   archive   |  
 
Exchange
2000.active.directory
2000.admin
2000.announcements
2000.app.conversion
2000.applications
2000.clients
2000.clustering
2000.connectivity
2000.development
2000.documentation
2000.general
2000.information.store
2000.interop
2000.kms
2000.misc
2000.protocols
2000.realtime.collabo.
2000.setup
2000.transport
2000.win2000
admin
application.conversion
applications
clients
clustering
connectivity
design
development
misc
mobility
setup
tools
  
 
date: Mon, 30 Jan 2006 07:46:29 -0800,    group: microsoft.public.exchange.tools        back       


ExBPA scan under different accounts   
I am trying to run the ExBPA 2.5 using two different accounts.. I have our 
Domain Administrator putting in his credentials into the AD field, and I am 
putting my credentials in the Exchange field.... I keep receiving an error 
stating that there are no administrative groups available.  If I take our 
Domain Adminstrator's credentials out, and use mine, then it works fine.  

The reason I'm trying to do this is because I don't have enough permission 
under my account for the ExBPA to gather all WMI queries, most of them fail.

Anyone have any suggestions on how I can resolve this?

Thanks

Jim Higgins
date: Mon, 30 Jan 2006 07:46:29 -0800   author:   James

Re: ExBPA scan under different accounts   
Hi Jim,

Does your domain administrator have view only permissions to the Exchange 
Org?

-- 
Paul Bowden
Program Manager
Exchange Server Best Practices Analyzer
http://www.microsoft.com/exchange/analyzers

This posting is provided "AS IS" with no warranties, and confers no rights.

"James"  wrote in message 
news:D435A554-9769-4285-ADCF-1ECE4EE66C5D@microsoft.com...
>I am trying to run the ExBPA 2.5 using two different accounts.. I have our
> Domain Administrator putting in his credentials into the AD field, and I 
> am
> putting my credentials in the Exchange field.... I keep receiving an error
> stating that there are no administrative groups available.  If I take our
> Domain Adminstrator's credentials out, and use mine, then it works fine.
>
> The reason I'm trying to do this is because I don't have enough permission
> under my account for the ExBPA to gather all WMI queries, most of them 
> fail.
>
> Anyone have any suggestions on how I can resolve this?
>
> Thanks
>
> Jim Higgins
date: Mon, 30 Jan 2006 18:53:59 -0800   author:   Paul Bowden [MSFT]

Re: ExBPA scan under different accounts   
No he doesn't... is that a requirement?

"Paul Bowden [MSFT]" wrote:

> Hi Jim,
> 
> Does your domain administrator have view only permissions to the Exchange 
> Org?
> 
> -- 
> Paul Bowden
> Program Manager
> Exchange Server Best Practices Analyzer
> http://www.microsoft.com/exchange/analyzers
> 
> This posting is provided "AS IS" with no warranties, and confers no rights.
> 
> "James"  wrote in message 
> news:D435A554-9769-4285-ADCF-1ECE4EE66C5D@microsoft.com...
> >I am trying to run the ExBPA 2.5 using two different accounts.. I have our
> > Domain Administrator putting in his credentials into the AD field, and I 
> > am
> > putting my credentials in the Exchange field.... I keep receiving an error
> > stating that there are no administrative groups available.  If I take our
> > Domain Adminstrator's credentials out, and use mine, then it works fine.
> >
> > The reason I'm trying to do this is because I don't have enough permission
> > under my account for the ExBPA to gather all WMI queries, most of them 
> > fail.
> >
> > Anyone have any suggestions on how I can resolve this?
> >
> > Thanks
> >
> > Jim Higgins 
> 
> 
>
date: Tue, 31 Jan 2006 05:21:29 -0800   author:   James

Re: ExBPA scan under different accounts   
Currently, we do require this.  When we are checking the connectivity and 
permissions, we do a query against the AD to get the list of Exchange admin 
groups and servers so we can populate the server list that appears on the 
scan options screen.  We are using the AD credentials to do this query.

We really should be using the Exchange credentials instead (when we are 
actually doing the scan, we use Exchange credentials for that logic).  I 
have created a bug to track this fix, and we should have it in our next 
binary update (I don't have a firm date for when that might be, however).

Sorry for the inconvenience, James.  You are going to have to work around it 
for now (by giving the AD creds view permissions to the Exchange org, or 
some other equivalent).  It's interesting that no one has reported this 
issue before.

"James"  wrote in message 
news:39B03B66-376B-435B-8BA9-9126AD7FA36C@microsoft.com...
> No he doesn't... is that a requirement?
>
> "Paul Bowden [MSFT]" wrote:
>
>> Hi Jim,
>>
>> Does your domain administrator have view only permissions to the Exchange
>> Org?
>>
>> -- 
>> Paul Bowden
>> Program Manager
>> Exchange Server Best Practices Analyzer
>> http://www.microsoft.com/exchange/analyzers
>>
>> This posting is provided "AS IS" with no warranties, and confers no 
>> rights.
>>
>> "James"  wrote in message
>> news:D435A554-9769-4285-ADCF-1ECE4EE66C5D@microsoft.com...
>> >I am trying to run the ExBPA 2.5 using two different accounts.. I have 
>> >our
>> > Domain Administrator putting in his credentials into the AD field, and 
>> > I
>> > am
>> > putting my credentials in the Exchange field.... I keep receiving an 
>> > error
>> > stating that there are no administrative groups available.  If I take 
>> > our
>> > Domain Adminstrator's credentials out, and use mine, then it works 
>> > fine.
>> >
>> > The reason I'm trying to do this is because I don't have enough 
>> > permission
>> > under my account for the ExBPA to gather all WMI queries, most of them
>> > fail.
>> >
>> > Anyone have any suggestions on how I can resolve this?
>> >
>> > Thanks
>> >
>> > Jim Higgins
>>
>>
>>
date: Tue, 31 Jan 2006 08:06:42 -0800   author:   Jon Avner [MSFT]

Google
 
Web ureader.com


    COPYRIGHT 2007, YARDI TECHNOLOGY LIMITED, ALL RIGHT RESERVE  |   contact us