"Store Could Not Be Mounted" Error Message When You Try to Mount Mailbox Store or Public Folder Store

If you try to mount the Mailbox Store or the Public Folder Store, you may receive the following error message: If you click either Retry or Cancel, you receive the following error message: In the Application Event Log, you may find any or all of the following errors:

This issue may occur if the Microsoft Windows 2000 Group Policy Object has been deleted or modified. This modification or deletion results in a loss of the "SeSecurityPrivilege" right.

To verify that this is the cause, run the Policytest utility that is found on the Exchange CD-ROM in the Support\Utils\i386 folder.

When you run Policytest in a domain, the last line of the message you receive should state either of the following: -or- You may also receive a message that states that there is no Domain Controller with the permission "Manage auditing and security logs".

The "SeSecurityPrivilege" right is applied when you run Setup /domainprep. If you have determined that the Manage Auditing and Security Logs permission for the Exchange Enterprise Servers group is missing on any (or all) of the domain controllers, follow these steps to troubleshoot this issue:

1. Run the setup /domainprep command from the Setup\I386 folder on the Exchange CD-ROM.
   
   When you run this command, the appropriate permissions are added to one domain controller immediately, and then the change is replicated to the other domain controllers. For the best troubleshooting results, run setup /domainprep, and then immediately rerun Policytest.exe and note which domain controllers return the following message:
   Right found: "SeSecurityPrivilege"
   Wait approximately five minutes, and then rerun Policytest.exe.
2. Examine the output of Policytest.exe to determine if all of the domain controllers now have the appropriate permissions, or if none of them do. If all of the domain controllers return a "Right found: SeSecurityPrivilege" message, try to mount the databases. If none of the domain controllers have the appropriate permissions, go to the next step.
3. Check the Default Domain Controllers Policy. To do this, follow these steps:
   1. Start the Active Directory Users and Computers snap-in.
   2. Right-click the Domain Controllers container, and then click Properties.
   3. Click the Group Policy tab, and then verify that Default Domain Controllers Policy is listed in the Group Policy Object Links box.
      
      If the Group Policy Object Links box does not contain this setting, click Add, locate and click Default Domain Controllers Policy, and then click OK. After you complete this step, make sure that all of the domain controllers are synchronized to make sure that this change has been applied to all domain controllers.
   NOTE: If you find that there are additional Group Policies listed in the Group Policy Object Links box, examine the additional Group Policies to verify that they are not interfering with the rights assigned by Domainprep. To do this, follow these steps:
   1. Click Start, point to Programs, point to Administrative Tools, and then click Domain Controller Security Policy.
   2. Expand Security Settings, expand Local Policies, and then click User Rights Assignment.
   3. Under Policies, double-click Manage auditing and security log, and add the Exchange Enterprise Server group to the security window if it is not already there. After you complete this step, make sure that all of the domain controllers are synchronized to make sure that this change has been applied to all domain controllers.
   4. Wait approximately five minutes, and then rerun Policytest.exe.
4. Repeat step 1.

NOTE: After all of the Domain Controllers display the "Right found: SeSecurityPrivilege" message, you may have to stop and start the Microsoft Exchange Information Store service before the databases can be mounted.