[Kablooey]

Make sure that the besadmin account is not nested into any native admin groups such as Domain, Schema, etc., Admins within Active Directory. This is a security "feature" of AD which came out in 2006-7. If the besadmin account needs God rights within the Domain, you have to assign them explicitly and not by adding them to an admin group. Even adding the account to a group with the name Admins can be problematic...

[Luukr]

Originally Posted by Kablooey

Make sure that the besadmin account is not nested into any native admin groups such as Domain, Schema, etc., Admins within Active Directory. This is a security "feature" of AD which came out in 2006-7. If the besadmin account needs God rights within the Domain, you have to assign them explicitly and not by adding them to an admin group. Even adding the account to a group with the name Admins can be problematic...

Done that!

But what about the Exchange view only Administrators group?

Thanks so far!

[qthaiduongvnn]

thx for your concern.
In the mean time is the problem solved
the services where starting under the wrong account

Guy