Exchange Server administrative privileges are required to export mailboxes reliably.

Error code

Product

Applies to

BA1754

BackupAssist

BackupAssist v3 and later

Description

When BackupAssist performs a mailbox export, it automatically grants Mailbox Rights to the backup user for each user whose mailbox is to be exported.

This step is required in order to export items from a mailbox, because by default, only the mailbox's owner has the rights to access their mailbox.

In order for BackupAssist to automatically grant these rights, it needs to have full control on the Exchange database. By default, this is normally granted to the Administrator account on your domain.

If you are not using the Administrator account as your backup user, then you may need to manually assign Full Control on the Exchange Stores that you wish to backup by following the procedure below.

Resolution

There are two methods of granting rights to your backup user. You may use either method.

1. Granting rights to your Exchange Server

To do this, please follow these steps:

  1. Open the Exchange System Manager on your Exchange Server
  2. At the top level, right click and choose "Delegate Control" - as pictured below.
  3. Using the wizard, add in your backup user identity to the list of users, and choose "Exchange Administrator"
  4. Complete the wizard

2. Granting rights to an individual Exchange Storage Group only:

To do this, please follow these steps:

  1. Open the Exchange System Manager on your Exchange Server
  2. Find your Mailbox Store (usually under Administrative Groups > First Administrative Group > Servers > ServerName > First Storage Group).
  3. Right click and select Properties
  4. Click the Security Tab
  5. Add Full Control to your backup user
  6. Repeat this process for all the information stores that contain the mailboxes you are exporting.

It may be necessary to wait up to 15 minutes for the permissions granted to take effect. Alternatively, you can reset cached permissions by stopping and restarting all Exchange services, the IIS Admin Service, and the Windows Management services. Because of this latency, you should grant necessary permissions as soon as you know you will need them, not just before you need to use them.

Alternatively, you can follow the instructions provided in the Microsoft KB:

http://support.microsoft.com/kb/292509

Last updated

Created

Further assistance

03rd Dec 2007

16th Mar 2007

BackupAssist Support page