AD and/or mailbox permissions need to be processed and updated. How can permissions be examined if there is a problem and what is a good approach when troubleshooting such issues? Are there any tools which could be used during troubleshooting?
Microsoft has a utility called ExchDump, it can collect information from the following sources (depending on the parameter you specified at the command prompt):
RPC Endpoint Mapper
Local Security Database
ExchDump can be downloaded from MS website - http://www.microsoft.com/downloads/details.aspx?familyid=d88b807d-964e-4bf8-9344-754892e9f637&displaylang=en
Some websites have very good instructions how to use this tool, eg. this tutorial - http://www.msexchange.org/tutorials/Using-Exchange-Dump-Utility-ExchDump.html
If you have a ticket open with support and need to troubleshoot permissions or re-permissioning issues it is important to send to support the following data:
1. the INI file which was used when executing the wizard, eg. ADPW, EPW, etc.
2. the ExchDump output which demonstrates assigned permissions.
Exchdump will create two files in the same directory where ExchDump was located and from which you run the tool. One file has the extension.XML and another one is an HTM file. Usually you will need only the HTM file. The files are created with a time stamp in the file name so there is no confusion if you created multiple outputs, the latest one can be found by the time stamp.
Main advantage of this tool is that it does not modify anything and it is safe to install the tool on any computer, including Domain Controllers and Exchange servers.
Supported Operating Systems are:
Windows Server 2003