後來查到下列blog說明,解決了幾個點的問題:http://blogs.technet.com/b/richardroddy/archive/2010/06/16/msexchange-adaccess-dsaccess-errors-and-the-manage-auditing-and-security-right.aspx
- 執行rsop.msc,確認Exchange Server獲得的群組原則內容
- 確認Manage auditing and security log項目裡面Administrators、Exchange Servers、Exchange Enterprise Servers安全性群組有在清單裡面,且是由Default Domain Controllers Policy所指派