-
Title
Verify that the Spotlight Diagnostic Test Engine service account has sufficient rights to browse -
Description
Discovery Fails for Spotlight on Messaging giving the following message:
Active Directory object is missing. DN=cn=configuration,dc=ad,dc=quest,dc=com, filter=(objectClass=msExchAdminGroup), scope=Subtree.
Verify that the Spotlight Diagnostic Test Engine service account has sufficient rights to browse the Exchange container in Active Directory.
-
Resolution
Ensure the Spotlight on Messaging Service Account is created in the Root domain instead of a Child Domain which may host the Exchange Org and Spotlight server.
The Service account need to be a Member of View-Only Exchange Administrators group in order to have:
- Read access to Active Directory to enumerate Exchange objects (organization / administrative groups / routing groups / servers) in the configuration partition, and computer.In a Exchange 2003 / 2010 environment add the service account to the Exchange Organization Management Group.