Exchange 2000 permissions problem. 1

[elricho]

Hey,

This morning I applied a bunch of hot fixes (314147, 318593, 319182) to windows 2000 and Q316056 to Exchange 2000.

Exchange appears to be functioning correctly (services running etc..) however none of the users can see the GAL, edit their calendars, print email, add contacts or enter tasks ...The error messages vary depending on what they're trying to do.

They can however create notes & send email fine ....

Everyone is using outlook 2000.

It looks like a permissions problem (a hunch seeing as they cant even see the GAL).

I backed out Q316056 but it made no difference.

Any suggestions ?

Mega thanks.

Cheers
richard

 

[kathanon]

Hi Richard

Have just fixed our problem after much searching and so on. It DID turn out to be a hot fix problem after all. Even though we hadn't applied any recently (happened a month later on reboot). We hadn't even applied that particular hot fix, but I am assuming that this registry change was also included in the Hot fixes that we had applied to the server.

We managed to resolve it by editing the RestrictAnonymous registry key. Clients can now use the GAL and print again.

Q309622 on

http://support.microsoft.com

Hope this may be of some use

Kathy

 

[elricho]

Wicked !!!!! Woooo - Im doing the happy dance
Good find - Thanks Kathy.

cheers
r

PS - It worked

 

[kathanon]

I have just come across another problem, the registry edit worked fine, changed the RestrictAnonymous to 0x0, the GAL reappeared, people can print e mails etc. But I had to reboot the server again and it picked up the old registry setting and the same problem happened.

I had to edit the registry again. I was wondering if this will need to be done every time the server is rebooted.

Does anyone have any ideas of how to work around this please?

Thanks
Kathy

 

[ktcgibson]

One reason it may be reappearing is if you have Domain Controller Policy set for "No Access without explicit anonymous permissions." That sets RA to 2. Change to another option and see if that fixes it.