Only Exchange organization full administrator is now a SID!

[Immortal777]

I recently looked at the 'Delegate Control' on the exchange organization and the only account there now shows up as a SID. Luckily, I made another account a full administrator over the domain in ESM, so I can still administrate most user functions, but I can't make any changes to the base organization. Is there a way to 'highjack' that SID or add a user as a full admin so I can regain control of the organization? We are unsure of when the problem occurred, so a full restore is not an option.

There isn't much information on the web for this kind of situation, so ANY help would be appreciated.

Thanks in advance,
Immortal777

 

[Spirit]

If you use ADU&C you should be able to create a new user account and add them to the exchange groups and then that new user will be able to change the permissions on the ESM and recreate the delegations that you had before.

Iain

 

[Immortal777]

I appreciate your interest in my problem, but I'm not sure to which "Exchange groups" you are referring. The only item in the delegation is a single SID, so in my thinking no groups have rights there. The only groups in ADU&C that referrence Exchange are "Exchange Domain Servers", "Exchange Enterprise Servers" and "Exchange Services". Being a member of these groups does not allow me to add delegate rights to the organization.

Immortal777

 

[paulha]

This may help

http://support.microsoft.com/default.aspx?scid=kb;en-us;q262054

http://www.msexchange.org/tutorials/How_to_get_access_to_all_mailboxes_in_Exchange_2000_Server.html

Paul

 

[ljrosenberg]

We are having the same problem. The wizard does not fix it - it will not run, at least not on our E2003 box. We are almost at the point of reinstalling Exchange.

 

[paulha]

What problem are you having on 2003, SID, rights, or both ?

 

[ljrosenberg]

The same one Immortal777 is having - the permissions tab only shows the SID, not the account. The information store would not mount. We have worked around it by granting the domain admin account priviledges, but we have been unable to figure out what happened to the Exchange Full Administrator account. It looks like it was deleted, but nobody is 'fessing up and I seriously doubt that happened.