How to fix open relay exchange 2003


Posted on 15th July 2013 by Mike in Exchange 2003 |Windows 2003

, ,

Ever setup an open relay on exchange server 2003? Its really easy to do. In fact out of the box it is an open relay. There are a few tricky configurations you must make and mistakes are costly. So do/fix it right the first time by following this post, and forget all those other posts/sites out there that only give you half the story.

In short, here’s the fix:
non-relaying-2003-exchange server

So here’s the long version.

If you’ve been an open relay for a while, your server will crawl until you stop the smtp service. After you do that, continue…

Open exchange manager and drill down to your default smtp virtual server properties.

Under the access tab select the button in access controls and give anonymous access. This allows other SMTP servers on the internet to connect to authenticate with your server without a username / password. You’d only want to use basic or integrated windows auth if your server was receiving email from other servers you own (corporate mail farms etc). More specifically, if you do not enable anonymous, only servers who know the username / pass can authenticate and deliver mail to your server.

Under Relay Restrictions, the ip addresses are nearly useless. Selecting allow all computers to relay regardless… will allow all the anonymously authenticated servers to relay (nothing you want to do). The thing you’re looking for under relay restrictions is the permissions. You want to give authenticated users submit permission (allow), and leave their relay permissions blank or select deny to explicitly deny it. Now add a group that contains all the users in your organization and allow them to submit and relay. Apply everything and restart the SMTP service.

If your queues were backed up from being an open relay they should clear pretty quickly.

Access Denied Installing Driver – Registry Permission Issue Fix

1 comment

Posted on 6th December 2009 by Mike in Atlanta Computer Repair

, , , , , , ,

Got an access denied when installing Hauppauge WinTV driver I googled forever before I found the fix. So here it is to help the other computer engineers out there. I saw many issues that were solved using the methods below. Some were regarding installing itunes, some were installing video or sound cards, all errored with permission denied or access denied, or they couldnt edit a registry key due to permission issues, etc.

In XP Pro…
secedit /configure /cfg %windir%\repair\secsetup.inf /db secsetup.sdb /verbose

This here works in both XP Pro & XP Home
Download SubInAcl.exe, Install the program.

Now create a new text document and copy the following into it.

cd /d "%programfiles%\Windows Resource Kits\Tools"

subinacl /subkeyreg HKEY_CURRENT_USER /grant=administrators=f /grant=system=f /grant=restricted=r /grant=YOURUSERNAME=f /setowner=administrators > %HOMEPATH%\Desktop\subinacl_output.txt
subinacl /keyreg HKEY_CURRENT_USER /grant=administrators=f /grant=system=f /grant=restricted=r /grant=YOURUSERNAME=f /setowner=administrators >> %HOMEPATH%\Desktop\subinacl_output.txt

subinacl /subkeyreg HKEY_LOCAL_MACHINE /grant=administrators=f /grant=system=f /grant=users=r /grant=everyone=r /grant=restricted=r /setowner=administrators >> %HOMEPATH%\Desktop\subinacl_output.txt
subinacl /keyreg HKEY_LOCAL_MACHINE /grant=administrators=f /grant=system=f /grant=users=r /grant=everyone=r /grant=restricted=r /setowner=administrators >> %HOMEPATH%\Desktop\subinacl_output.txt

subinacl /subkeyreg HKEY_CLASSES_ROOT /grant=administrators=f /grant=system=f /grant=users=r /setowner=administrators >> %HOMEPATH%\Desktop\subinacl_output.txt
subinacl /keyreg HKEY_CLASSES_ROOT /grant=administrators=f /grant=system=f /grant=users=r /setowner=administrators >> %HOMEPATH%\Desktop\subinacl_output.txt

subinacl /subdirectories %programfiles%\ /grant=administrators=f /grant=system=f /grant=users=e >> %HOMEPATH%\Desktop\subinacl_output.txt

subinacl /subdirectories %windir%\ /grant=administrators=f /grant=system=f /grant=users=e >> %HOMEPATH%\Desktop\subinacl_output.txt

WARNING – This is very risky!!! I hope you have a WinPE or similar cd so you can manually restore your registry if you need to.

Now, create a backup of your registry please!

Save the file as resetreg.cmd and run it. Sit back and watch while SubInAcl fixes your registry permissions… A log file named “subinacl_output.txt” will appear on your desktop and will have the log of what took place.

If you get lucky like I did, this will completely screw up your windows install. Then you can restore from your backup and try again, and perhaps restore an earlier restore point snapshot, and eventually this may fix the the problem. It did for me… after several attempts.