Exchange2000_MailboxStoreMountStatus Knowledge Script generates false events. (NETIQKB52581)

  • 7752581
  • 02-Feb-2007
  • 21-Sep-2010

Environment

AppManager 6.0.x
AppManager 7.0.x

Situation

Exchange2000_MailboxStoreMountStatus Knowledge Script generates false events.
Exchange2000_PublicStoreMountStatus Knowledge Script generates events that did not occur.
Script events that Mailbox store is not mounted even though the Mailbox Store is mounted.

Resolution

To resolve this issue, grant the Netiqmc account permissions to the Mailbox Store object by delegating Exchange Admin permissions at the Organization or Administrative Group level or adding the permission to the desired Mailbox Store if inheritance has been disabled.

Alternatively, you can change the NetIQ Client Resource Monitor Service and NetIQ Client Communication Manager services to run as the account used by the Qexch2ka service because that account should have the necessary permissions to Exchange. After this permission change, you must restart the netiqmc and netiqccm services before you restart the job.



 



Cause

The Exchange2000_MailboxStoreMountStatus and Exchange2000_PublicStoreMountStatus Knowledge Scripts run under the credentials of the NetIQ Client Resource Monitor (netiqmc) service account. This account must have permissions to view the mount status of the actual mailbox store object in Exchange.

Additional Information

Formerly known as NETIQKB52581

Typically, granting the account Exchange View Only Admin rights at the Organization or Administrative Group level will provide enough rights to retrieve this status. However, if inheritance has been turned off in Exchange System Manager, the permissions may not be propagating down to the Mailbox Store object.

If the account has permissions to Exchange, possibly by being a member of the Local Administrators group on the Exchange server, but does not have permissions to the actual Mailbox Store object, a false value will be returned. The MountStatus KSs use a CDO call to query Exchange for this value. If the account has permissions to Exchange but not to the Mailbox Store, CDO returns a value of zero (0) rather than returning an access or permissions error. Typically, a mount status of 0 indicates an unmounted store and a mount status of 1 indicates a mounted store.