[jpearcy]

I know all of the guys here that answer alot of the posts are saying ok another guy that dosent know BES didnt setup his permissions correctly. Well I will admit it I have only setup BES 3 times and they were all with Exchange 2003. This time it is with Exchange 2007. I followed the guide that is posted here on the forum.

Output of exchange permissions:

Identity User Deny Inherited Rights
-------- ---- ---- --------- ------
hq.DOMAIN.net/Ech... DOMAIN\BESadmin False False Send-As
hq.DOMAIN.net/Ech... DOMAIN\BESadmin False False Receive-As
hq.DOMAIN.net/Ech... DOMAIN\BESadmin False False ms-Exch-Store-Admin
hq.DOMAIN.net/Ech... DOMAIN\BESadmin False False ReadProperty
hq.DOMAIN.net/Ech... DOMAIN\BESadmin False False ListObject, Generi...
hq.DOMAIN.net/Ech... DOMAIN\BESadmin False False Self, WriteProperty
hq.DOMAIN.net/Ech... DOMAIN\BESadmin False False ReadControl




When I run IEMSTEST I get Failed to create a folder in USER mailbox.

In alot of other posts people have just said you have a permission problem and its left at that. Can anyone please help a little more than that. Thanks in advance

[Keyscan]

I have seen rare occasions where the write permission to the store is required for some reason with exchange 2003 for iemstest to pass. Not too sure about 2007.

[RaGe]

Hello, warning with installation guide for Exchange 2007, the command line is false !!!!

I explain :

This is the command of some guide :

set-mailboxserver "exchange_server" | add-adpermission –user "BESAdmin" –accessrights ExtendedRight –extendedrights Send-As, Receive-As, ms-Exch-Store-Admin


This is THE RIGHT COMMAND :

get-mailboxserver "exchange_server" | add-adpermission -user BESAdmin -accessrights GenericRead, GenericWrite -extendedrights Send-As, Receive-As, ms-Exch-Store-Admin

It's not the same, the first doesn't work, the second is perfect,

And don't forget also to give fisrt the view only administrator permission for besadmin on exchange.

Bye

[jpearcy]

I was pretty sure I tried:

get-mailboxserver "exchange_server" | add-adpermission -user BESAdmin -accessrights GenericRead, GenericWrite -extendedrights Send-As, Receive-As, ms-Exch-Store-Admin

Before and I just ran it again and it warned me because those permissions were already in place.

[Keyscan]

Yeah you need to run get-mailboxserver command if you are on the exchange server. If you are connecting remotely, they recommend to use set-mailboxserver i believe.