Hello, 

This is regarding a problem with Microsoft Exchange Server 5.5, sp4,
running on Windows NT Server 4.0, sp6a. I'm looking for a solution to
my problem that involves the least amount of email downtime for my
users. The simplest solution, whatever that might be.

I administer a single Exch 5.5 organization with two sites, one server
per site. In Exchange Administrator, while connected to one of the
servers, I must have inadvertantly removed a permission from the
one-and-only system account configured for each site.

Now when I start Exch Administrator to connect to my default site I
get the following error:

A connection could not be made to the Microsoft Exchange Server computer 'name'

You do not have the permissions required to complete the operation.

Microsoft Exchange Directory

ID no: DS_E_INSUFFICIENT_ACCESS_RIGHTS

I can connect to my other site/server, but not to the one with the
problem. Email continues to work correctly in the site and throughout
the organization. I haven't yet restarted the problem server or any of
its Exchange services for fear of them not being able to restart.

I have not changed or changed any Windows accounts or rights. The
service account being used is the same for both sites, and it does
have the Logon Locally, Log on as Service, and Restore Files and
Directories rights.

How do I restore access to the directory without another service
account in Exchange able to modify permissions? I've tried
the Msft Knowledgebase and Technet but couldn't find a clear answer there. While
our email continues to work, I know that sooner or later I'm going to
have to make some change to a user's email account or something that
will require access to the directory in the locked out site.

Thank you very much, 
Chad