Home | Troubleshooting |  Quick Setup  |  Cisco How to  |  MS-MVP  |  Wireless  |  Forums   | Site Map | Services  | Donations | Careers  | Search                           Select a Topic VPN How To Network How To Remote Access How To Windows How To Internet How To New Topics

How to verify Exchange talking to DC

After installing Exchange, you may want to verify if the Exchange has correct settings and can talk to domain controllers or it doesn't have permission issue. To verify if Exchange has an issue with DC, you can use policytest.exe.

Policytest.exe is located in the Support\Utils\I386 folder on the Exchange 2000 Server CD, or in the Support\ExDeploy folder on the Exchange Server 2003 CD. Here are the example running policytest.exe:

Microsoft Windows [Version 5.2.3790]
(C) Copyright 1985-2003 Microsoft Corp.

C:\Documents and Settings\boblin>policytest

This tool will check every domain controller in the local
domain to see if the "Manage auditing and security logs"
privilege granted to the "Exchange Enterprise Servers"
group by DomainPrep has replicated to that DC. If the
policy change has not yet replicated to all DCs, then
you should avoid making policy changes on any DC that
has not received those changes yet.

You must have Domain Admin rights to run this tool
successfully. If you see an error that says:
!! LsaEnumerateAccountRights returned error 5 !!
then you don't have permission to open the LSA on the
given DC.

===============================================
Local domain is "CHICAGOTECH.NET" (chicagotech)
Account is "CHICAGOTECH\Exchange Enterprise Servers"
========================
DC = "DC1"
In site = "Default-First-Site-Name"
Right found: "SeSecurityPrivilege"
========================
DC = "DC2"
In site = "Default-First-Site-Name"
Right found: "SeSecurityPrivilege"

Post your questions, comments, feedbacks and suggestions

Contact a consultant

Related Topics