Geeks With Blogs
Hornet's Nest A few of Mike Hoerner's Favorite Topics


If you see any Critical Permissions inheritance block on Exchange server object entries listed in the Exchange Pre-Deployment Analyzer report for your Exchange environment, it is highly recommended that you fix these Critical entries before you install your first Exchange 2010 server.

pre-deployment

If you do not fix these Critical entries, you may encounter the following error messages when you run the Exchange Management Console or run specific Exchange PowerShell commands to view public folder information.  Please note you may encounter other error messages related to Permissions inheritance block that are not covered here.

When you click on Public Folder Management Console under the Exchange Management Console Tool, you may see the error messages Unexpected error (0x79CBAAF3) while executing command ‘get-publicfolder … and Object reference not set to an instance of an object when you click on Default Public Folders or System Public Folders in the Public Folder Management Console.

permInherit3 

In the Exchange Management Shell, you may see the error message Object reference not set to an instance of an object when you execute the Get-PublicFolder or Get-PublicFolderStatistics Powershell commands.

permInherit2

To fix the problem, you will need to enable (or tick) the Allow inheritable permissions from the parent to propagate to this object and all child objects.  Include these with entries explicitly defined here. checkbox for the Exchange 2003 Server that has inheritable permissions blocked.  You can use Exchange System Manager or ADSI Edit to make the change.

In Exchange System Manager, you will need to select the server in the Servers Container for the Administrative Group.  Right-click the server name and click Properties.  Click the Security tab and click Advanced.  Tick the Allow inheritable permissions from the parent to propagate to this object and all child objects.  Include these with entries explicitly defined here. checkbox if it’s not checked.

permInherit4

In ADSI Edit, connect to the Configuration container.  Click until you get to the Administrative Groups container.  Select the server under the Servers container.  Right-click the server name and click Properties.  Click the Security tab and click Advanced.  Tick the Allow inheritable permissions from the parent to propagate to this object and all child objects.  Include these with entries explicitly defined here. checkbox if it’s not checked.

After you make the change, please allow for enough time for Active Directory replication to complete depending on the size of your environment before you view public folder information again.

A big thanks to Microsoft Premier Support for their help isolating the cause of the public folder error messages due to the Critical Permissions inheritance block on Exchange server object entries listed in the Exchange Pre-Deployment Analyzer report.

Posted on Friday, July 16, 2010 4:37 PM | Back to top


Comments on this post: Exchange 2010 Deployment Notes – Exchange Pre-Deployment Analyzer Notes

No comments posted yet.
Your comment:
 (will show your gravatar)


Copyright © BWCA | Powered by: GeeksWithBlogs.net