Hello, We are running an exchange 2003 server on Windows 2003. We have many public folders and in the process of trying to lock these folders down one of them has fallen apart. What happened was that someone changed the permissions on a public folder that had mail enabled. They set a full deny on the Pre-Windows 2000 group. This locked out the folder permissions from everyone include admins. It also took down the e-mail function. When trying to open the properties of the public folder it throws the error c1038a21. We have tried varies microsoft suggested fixes such as fixing the ps_pf_proxy. In further testing it seems to be the active directory object that is what is causing the problem. We cannot reset the permissions on this object to do anything with it. Is there anyway besides a full restore of the AD to work with this object?
Hi, pfdavadmin (can be downloaded from Microsoft) might help resetting the permissions. Leif wrote in message news:1149606406.658266.214750@j55g2000cwa.googlegroups.com... > Hello, > We are running an exchange 2003 server on Windows 2003. We > have many public folders and in the process of trying to lock these > folders down one of them has fallen apart. What happened was that > someone changed the permissions on a public folder that had mail > enabled. They set a full deny on the Pre-Windows 2000 group. This > locked out the folder permissions from everyone include admins. It > also took down the e-mail function. When trying to open the properties > of the public folder it throws the error c1038a21. We have tried > varies microsoft suggested fixes such as fixing the ps_pf_proxy. > In further testing it seems to be the active directory object that is > what is causing the problem. We cannot reset the permissions on this > object to do anything with it. > Is there anyway besides a full restore of the AD to work with this > object? >
Well I was too quick to write this message. The fix was easy (well now that we know). Had to log into server with 2000 type login (me@home.local) and was able to reset permissions, was logging in with pre-windows 2000 log in (me). Feel almost silly for not trying this before. Muchach@gmail.com wrote: > Hello, > We are running an exchange 2003 server on Windows 2003. We > have many public folders and in the process of trying to lock these > folders down one of them has fallen apart. What happened was that > someone changed the permissions on a public folder that had mail > enabled. They set a full deny on the Pre-Windows 2000 group. This > locked out the folder permissions from everyone include admins. It > also took down the e-mail function. When trying to open the properties > of the public folder it throws the error c1038a21. We have tried > varies microsoft suggested fixes such as fixing the ps_pf_proxy. > In further testing it seems to be the active directory object that is > what is causing the problem. We cannot reset the permissions on this > object to do anything with it. > Is there anyway besides a full restore of the AD to work with this > object?
