While delegating control to the newly created user account to back up the Exchange 2000/2003 server, the delegation wizard fails to grant permissions to the user.

Article:TECH33254

Created: 2004-01-14

Updated: 2012-01-02

Article URL http://www.symantec.com/docs/TECH33254

Article Type
Technical Solution

Product(s)

Show all

Languages

Show all

Problem

While delegating control to the newly created user account to back up the Exchange 2000/2003 server, the delegation wizard fails to grant permissions to the user.

Error

Failed to grant permission for Domain\ User on this object : /dc=com/dc=/cn=Configuration
The delegation wizard could not grant/change permissions for : Domain\User .

While delegating control to the newly created user account to back up the Exchange 2000/2003 server, the following error may be encountered:

Figure 1:

Figure 2

Cause

This issue may occur if the logged on user is not an Exchange administrator.

The delegation wizard will fail to grant permissions to the newly created user account if the user is not logged into the Exchange server as the Exchange Administrator.

After acknowledging the above error, another error is encountered.

Solution

To back up Microsoft Exchange mailboxes, it is necessary that the account used for the backup has sufficient permissions. The user may either use the default Backup Exec (tm) Service Account or create a separate account with equivalent permissions. It may be necessary to delegate control to this account by using the Delegate Control feature provided in the Exchange System Manager.

** Note: For further information on what rights the Backup Exec Service Account needs and for configuration of Microsoft Exchange 5.5/2000/2003 individual mailbox backups, please refer to the Related Documents section of this TechNote.

To resolve this issue, you must log out of the current user profile and log back in as the Exchange Administrator. The Exchange Administrator must also be a member of the Domain Administrators group.

Note: Only the account used to install Exchange or the accounts that have been delegated control explicitly by the account that was used while installing Exchange can delegate control using the Delegation Wizard.

After logging on back to the server using either of the above specified accounts:

1. From the Microsoft Exchange program group, start System Manager

2. With the Exchange Organization icon highlighted, select Action | Delegate Control

Figure 3