Microsoft KB Archive Search

Notice: This website is an unofficial Microsoft Knowledge Base (hereinafter KB) archive and is intended to provide a reliable access to deleted content from Microsoft KB. All KB articles are owned by Microsoft Corporation. Read full disclaimer for more details.

  1. Home
  2. After you install Exchange Server 2007 CCR Service Pack 2, the Exchange Management Console displays an error: "Warning: The server administrator '<CCR_node>' not a member of the Exchange View-Only Administrators"

After you install Exchange Server 2007 CCR Service Pack 2, the Exchange Management Console displays an error: "Warning: The server administrator '<CCR_node>' not a member of the Exchange View-Only Administrators"

View products that this article applies to.

Symptoms

After you install the Microsoft Exchange Server 2007 Cluster Continuous Replication (CCR) Service Pack 2 (SP2), you receive the following warning through the Exchange Management Console:
Warning:
The server administrator 'CCR_node' not a member of the Exchange View-Only Administrators.
Additionally, the Exchange Management Console displays the following error bar message:
Some warnings were reported while loading data. Click here for details�

↑ Back to the top

Cause

This is issue was caused by the installation of Exchange 2007 CCR SP2. This does not result in any incorrect behavior in CCR. The warning message indicates that certain objects have more permissions than they require.

↑ Back to the top

Workaround

To work around this issue, follow these steps:
  1. Open the Adsiedit.msc tool. This tool is included in Windows Server 2008 and requires that the Active Directory Domain Services (AD DS) role or tools are installed. This tool is also available in Windows Server 2003 Support Tools.

    For more information about the Adsiedit.msc tool, visit the following Microsoft Web site:
    ADSI Edit (adsiedit.msc) Overview
  2. Click the computer node in the navigation pane
  3. On the Action menu, click Setting, and then click Connect To.
  4. In the Connection Point area, click Select a well known Naming Context.
  5. In the drop-down menu, point to Configuration, then click OK
  6. Expand Configuration [domainControllerName.example.com], expand CN=Configuration,DC=example,DC=com, expand CN=Services, expand CN=Microsoft Exchange, expand CN=[orgName], expand CN=Administrative Groups, expand CN=Exchange Administrative Group, expand CN=Servers, and then expand Clustered_Mailbox_server.
  7. Right-click Clustered_Mailbox_server, and then click Properties. Note the properties of the clustered mailbox server.
  8. Click the Security tab.
  9. Find the server account for the passive node of your cluster. Remove all permissions for this account except for the following Read permissions:
    • Read
    • Read Metabase Properties
    • Store Read Only Access
    • View Information Store Status
  10. Click Advanced.
  11. In the Advanced dialog box, select a row that references the passive node of your cluster.
  12. Click Edit.
  13. Click the Properties tab.
  14. Add the following permissions that have the scope, "This Object Only":
    • Write property msExchEdgeSyncCred
    • Write property msExchServerSite
  15. Click OK.
  16. Click Edit.
  17. Add the following permissions that have the scope "This Object and all descendant objects":
    • List Contents
    • Read All Properties
    • Read Permissions
  18. Trigger a replication among the domain controllers.
  19. Refresh the Exchange Management Console. After you do this, the Exchange View-Only Administrator group is removed.
  20. Use Windows PowerShell to verify that the Exchange View-Only Administrator group is removed. To do this, follow these steps:
    1. Click Start, point to All Programs, point to Microsoft Exchange Server 2007, and then click Exchange Management Shell.
    2. Type Get-ExchangeAdministrator, and then press ENTER.
    3. Verify that the Exchange View-Only Administrator group is no longer part of the computer accounts.
  21. Test failover and client access.
Also, repeat steps 9 through 21 for the active node.

↑ Back to the top

Keywords: KB975807, kbprb, kbsurveynew, kbtshoot, kbexpertiseadvanced, kbexchcluster

↑ Back to the top

Article Info
Article ID : 975807
Revision : 1
Created on : 2/1/2010
Published on : 2/1/2010
Exists online : False
Views : 366