While delegating control to the newly created user account to back up the Exchange 2000/2003 server, the delegation wizard fails to grant permissions to the user.

Article:TECH33254  |  Created: 2004-01-14  |  Updated: 2012-01-02  |  Article URL http://www.symantec.com/docs/TECH33254
Article Type
Technical Solution

Product(s)

Issue



While delegating control to the newly created user account to back up the Exchange 2000/2003 server, the delegation wizard fails to grant permissions to the user.


Error



Failed to grant permission for Domain\ User on this object : /dc=com/dc=/cn=Configuration
The delegation wizard could not grant/change permissions for : Domain\User

While delegating control to the newly created user account to back up the Exchange 2000/2003 server, the following error may be encountered:

Figure 1:

 

 Figure 2


Cause



This issue may occur if the logged on user is not an Exchange administrator.

The delegation wizard will fail to grant permissions to the newly created user account if the user is not logged into the Exchange server as the Exchange Administrator. 

After acknowledging the above error, another error is encountered.

Solution



To back up Microsoft Exchange mailboxes, it is necessary that the account used for the backup has sufficient permissions. The user may either use the default Backup Exec (tm) Service Account or create a separate account with equivalent permissions. It may be necessary to delegate control to this account by using the Delegate Control feature provided in the Exchange System Manager.
 
** Note: For further information on what rights the Backup Exec Service Account needs and for configuration of Microsoft Exchange 5.5/2000/2003 individual mailbox backups, please refer to the Related Documents section of this TechNote.  
To resolve this issue, you must log out of the current user profile and log back in as the Exchange Administrator. The Exchange Administrator must also be a member of the Domain Administrators group.  
Note: Only the account used to install Exchange or the accounts that have been delegated control explicitly by the account that was used while installing Exchange can delegate control using the Delegation Wizard.
 
After logging on back to the server using either of the above specified accounts:
 
1. From the Microsoft Exchange program group, start System Manager
 
2. With the Exchange Organization icon highlighted, select Action | Delegate Control  
 
Figure 3
  
 
3. Run the Delegation Wizard to grant the newly created user account permissions to back up the Exchange server. 
 
Figure 4
 
 
Figure 5
   
4. Click OK 
 
5. Click Next .
 
6. Click Finish. 



Legacy ID



269495


Article URL http://www.symantec.com/docs/TECH33254


Terms of use for this information are found in Legal Notices