这里的报错an invalid directory pathname was passed就是表示Authenticated Users对Address Lists Container的完全控制是deny的。
一般的解决方法就是使用DSACLS把权限重置回来,而具体的命令你也应该已经找到了,这边我贴出来以便他人参考:
- Assume ownership of the object using DSACLS:
DSACLS "dn of active directory object" /G domain name\useraccount:WO
Ex::
DSACLS "CN=All Address Lists,CN=Address Lists Container,CN=Solaris
Organization,CN=Microsoft
Exchange,CN=Services,CN=Configuration,DC=sds-solaris-domaina,DC=internal" /G
domain\administrator:WO
- Grant Rights to the object using DSACLS: (this will wipe the current DACLS and
replace them with what you select"
DSACLS "dn of active directory object" /N /G domain name\useraccount:GA
Ex:
DSACLS "CN=All Address Lists,CN=Address Lists Container,CN=Solaris
Organization,CN=Microsoft
Exchange,CN=Services,CN=Configuration,DC=sds-solaris-domaina,DC=internal" /N /G
domain\administrator:GA
- Set the objects permissions back to the Schema Defaults:
DSACLS "dn of object" /S
Ex:
DSACLS "CN=All Address Lists,CN=Address Lists Container,CN=Solaris
Organization,CN=Microsoft
Exchange,CN=Services,CN=Configuration,DC=sds-solaris-domaina,DC=internal" /S
- Inherit Permissions
Use ADSIEdit to re select the checkbox for Inherit Permissions
如果还不行的话,建议重新跑一边setup /forestprep,不过做这个之前务必预先做好AD的备份。
参考:
http://technet.microsoft.com/en-us/library/bb124110(v=exchg.65).aspx