HP OpenView Storage Mirroring High Availability for Exchange Server 2000/2003 Application Notes (May 2005, T2558-88020)

30
Use the following procedure to assign the Write servicePrincipalName permission to a user or
group.
1. Open ADSIEdit and go to CN=Server_Name,CN=Computers,DC=Domain_name,DC=com.
2. Right-click on the entry, then choose Properties.
3. Select the Security tab, then click Advanced.
4. Click Add. Click on Object Types and verify that Computers is selected. Click OK.
5. Type in your target_name and click CheckName.
6. Select Full Control, then click OK.
Failback
During failback, the Write servicePrincipalName permission on the target's computer account in
Active Directory must be assigned back to the account that will modify the SPNs on the source.
To update the permissions on the source, follow the SPN Failover procedure, except assign Full Control to
your source_name instead.
Routing master
Failover
If your source server is the routing master, you will need to modify the security settings so that the routing
master role can be moved to the target. There are two options available for modifying the security settings
for the routing master role:
• Use the -u parameter and specify an ID that has sufficient authority to perform the operations.
• Change specific Active Directory attributes to allow the update to be performed by the scripts run from
the Failover Control Center.
You must use ADSIEdit (from the Windows Support Tools) to assign the correct permissions to allow for the
updating of the Routing Master.
1. Open ADSIEdit and go to CN=Routing Groups,CN=Computers,DC=Domain_name,DC=com.
2. Right-click on the entry, then choose Properties.
3. Select the Security tab, then click Advanced.
4. Click Add. Click on Object Types and verify that Computers is selected. Click OK.
5. Type in your target_name and click CheckName.
6. Select Full Control, then click OK.
Failback
If your source server was the routing master, you will need to modify the security settings so that the routing
master role can be returned.
To update the permissions on the source, follow the Routing Groups Failover procedure, except assign Full
Control to your source_name instead.