The CAS, HUB Transport, MBX or UM server is not a member of the Exchange Servers group

[This topic is intended to address a specific issue called out by the Exchange Server Analyzer Tool. You should apply it only to systems that have had the Exchange Server Analyzer Tool run against them and are experiencing that specific issue. The Exchange Server Analyzer Tool, available as a free download, remotely collects configuration data from each server in the topology and automatically analyzes the data. The resulting report details important configuration issues, potential problems, and nondefault product settings. By following these recommendations, you can achieve better performance, scalability, reliability, and uptime. For more information about the tool or to download the latest versions, see "Microsoft Exchange Analyzers" at https://go.microsoft.com/fwlink/?linkid=34707.]  

Topic Last Modified: 2010-04-28

The Microsoft Exchange Best Practices Analyzer examines the Active Directory directory service to determine whether Client Access servers (CAS), HUB Transport servers, Mailbox servers (MBX), and Unified Messaging (UM) in the Exchange organization are members of the Exchange Servers security group. If the Analyzer tool determines that a server is not a member of the Exchange Servers security group, the tool generates an error message.

If the Client Access server is not a member of the Exchange Servers security group, Outlook Web Access users who have mailboxes that are hosted on that particular Client Access server receive the following error message when they try to access a public folder:

HTTP Error 404 - File or directory not found.

Internet Information Services (IIS)

To access public folders from a mailbox that is hosted on a Client Access server, the Client Access server must be a member of the Exchange Servers group. The Exchange Servers group has the permissions that are required to access other Exchange servers under the correct context.

To address this issue, add the Client Access server to the Exchange Servers group.

If a HUB Transport server, an MBX server, or a UM server is not a member of the Exchange Servers security group, services may not start, and users may be unable to access their mailboxes.

To address this issue, add the HUB Transport server, the MBX server, or the UM server to the Exchange Servers group.

To add a server to the Exchange Servers group

  1. On a domain controller, click Start, click Run, type dsa.msc, and then click OK.

  2. In the Active Directory Users and Computers snap-in, locate the appropriate domain, and then click the Microsoft Exchange Security Groups container.

  3. In the details pane, double-click Exchange Servers.

  4. Click the Members tab, and then add the server to the Members list.

For More Information

For more information about how to manage public folders in Exchange 2007, see Managing Public Folders.