Restoring Info Store on Exchange 5.5 PDC

[MrBaseball]

We are trying to restore an old information store in exchange 5.5. We loaded Win NT4.0 and Exchange 5.5 on a PC and set it up as a PDC. Its not on the network. When we try to select the server within exchange it gives us the error : "You do not have the permissions required to complete the operation. Microsoft Exchange Director ID No: DS_E_Insufficient_Access_Rights."

Our install of exchange works fine until we attempt to recover the old data store. Are there some security settings I need to change to get rid of the error?

We need to access a couple emails in the old information store. Anybody have any ideas?

-Ben

 

[Santa]

Make sure that you are logging into the server/machine with the Exchange Server Admin account.

This is not always the Administrator account and if it isn't the Administrator account does not get automatic administrative privys to the Exchange box.

 

[MrBaseball]

Thanks for the reply. I just double checked and our admin account is the Exchange Server Admin account. Any other ideas?

 

[bozo1]

There is alot more to it than just having an account with the proper permissions.

Download the word document from here.

Follow the directions that start on Page 18 (Full Server Restore) TO THE LETTER. (You can ignore the 'requirement' that the hardware be identical, that doesn't matter.)

 

[Santa]

Did you apply all the service packs necessary to bring it to the correct SP as when the database was in production?

 

[MrBaseball]

Ok, I'll check out that document. Thanks.

Yep, we restored the server to the same service pack level as when the back up was made.

 

[Saltin]

Is your Exchange admin username/password identical to the previous one? It should be.

 

[me19562]

If you put it back a copy of the information store file, before start any of the Exchange services you need to run from the command line this
command: isinteg - patch and if I'm not wrong you need to be in the "Drive:\exchsrv\bin directory and if I was you a run before that a
eseutil with the soft repair switch the after that again a eseutil -f to defragment the database and free up some space. Be sure that you have a copy of the information store before do anything and have a lot of free space.


Good Luck

 

[Santa]

You should only do a isinteg - patch when you get an error message saying that the information store service can not be started

More info here: Link

Are all your services starting up correctly?

Are you getting any error codes in the event log?

 

[MrBaseball]

Originally posted by: Santa
You should only do a isinteg - patch when you get an error message saying that the information store service can not be started

More info here: Link

Are all your services starting up correctly?

Are you getting any error codes in the event log?

The Directory Services and Exchange Service Attendant are starting, but the Information Store is not - Error 4021.

-Ben

 

[bozo1]

Here is the technote on how to correct the error. Basically it is directing you to do the steps that are described in the article I linked.

 

[Santa]

Differnt Security ID (SID) problem?

Likley..
I couldn't get into the support site at microsoft tonight but here is another Support file I found.. May want to double check when support site is back online but this is a cached page from google.

XADM: Service Specific Error 4021 Starting Information Store
The information in this article applies to:
Microsoft Exchange Server, versions 4.0, 5.0, 5.5
SYMPTOMS
The DS_E_INSUFFICIENT_ACCESS_RIGHTS error occurs when you try to start the Microsoft Exchange Server information store service. This error is displayed in a dialog box with the following text:

The Microsoft Exchange Information Store service returned
service specific error 4021.
The event viewer will also show this same error.
CAUSE
This error occurs because a directory store database is restored which contains a service account with an incorrect security ID (SID). This may happen if the Windows NT Security Account Manager (SAM) database has been lost or re-created. The Exchange Server directory service will start, but after starting the information store service, the error message displays.
WORKAROUND
1. The directory service can be regenerated using the restored version of the information store databases.
2. Reinstall Exchange Server with the new service account and restore only the information store databases.
3. Run the Isinteg -patch command to synchronize the GUIDs between the information store and directory service databases.
4. Start the Exchange Server directory service.
5. In the Exchange Server Administrator program, choose the Exchange Server computer's Server Properties page.
6. On the Advanced tab, under DS/IS consistency adjustment, select All inconsistencies, and then click Adjust.

NOTE: In Exchange 5.5, select the Synchronize with the directory check box, and then create new directory entries for mailboxes that do not have a corresponding directory entry.
Your directory should be repopulated and contain a service account with a proper SID.

If a .CSV file with exported directory information is available, that information can be imported into the Microsoft Exchange Server directory.

 

[MrBaseball]

We tried to use the Isinteg patch but it said that we didn't have sufficient rights. Im thinking the Adminsistrator account must be different from when it was backed up. Im going to double check with our IT manager about the Admin name and password at the time it was backed up..


Thanks for all the help. Hopefully we can get this working

-Ben

 

[bozo1]

Having done this dozens of times - 5-6 times to recover from an actual disaster and as a test once a month for many years - I reiterate that you must follow the directions in Microsofts document to the letter or it simply will not work.

The account you use to install Exchange on the recovery box DOESN'T MATTER. Your problem is that you are restoring the Directory Store which is expecting different SIDs from what you have on your stand-alone machine and you changing the name of your service account isn't going to fix that.

Follow the document. Restore only the Information Store as directed in the document. You don't restore the Directory Store and if you do, you'll end up in the same boat you are now. After you restore the IS, the consistency adjuster will allow your new service account to take ownership of all the IS mailboxes. At that point, your service will start and you will be able to open whatever mailbox you need.

Again, Microsoft's document isn't just a suggestion, it's the only way it will work. Wipe the machine and start over.

<throws hands up>

 

[Santa]

I'm with bozo1 on that. Sounds like you are in a bind and since it is a standalone domain I would just wipe and do over.

 

[MrBaseball]

Thats what we are planning on doing Wed. We are going to start over and follow that microsoft document. We didn't have much time to mess with it on Monday.