This integration can make MailEnable services are susceptible to changes made to the Windows environment.  If the Windows platform has been modified by "lockdown utilities" or changes have been made to the default security settings, MailEnable may not function correctly.

1. Registry Permission Changes (changes to the permissions on reliant or commonly used registry keys)
2. File System Permission changes (reliant DLLs are denied access by the System, IME_ADMIN and/or IME_USER accounts)
3. Missing or corrupted system libraries (e.g. ADO libraries are corrupt or non-existent)
4. DCOM (COM+) security permission changes (changes made to DCOM security settings can cause MailEnable COM components to fail)
5. Configuration changes made to COM+ or IIS (e.g. changing the process isolation to low priority within IIS)
6. Policy Changes (changes in the privilege or rights associated with the System, IME_ADMIN and/or IME_USER account)
 

1. Registry Permissions

MailEnable's IME_USER and IME_ADMIN need read access to certain branches of the registry.
These accounts are members of the Users group, and are therefore given access to the necessary branches of the registry.

It is possible that the Users group is either disabled or is restricted access to the registry.
If this is the case, then the IME_ADMIN and IME_USER accounts need to be given explicit access to some registry keys (so that MailEnable can effectively access the registry).

The IME_ADMIN account needs access to:

HKEY_LOCAL_MACHINE\SOFTWARE\Classes
HKEY_LOCAL_MACHINE\SOFTWARE\Mail Enable\Mail Enable

Note: You may want to ensure that IME_ADMIN has access to the following keys:

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Scripting.Dictionary
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Scripting.Encoder
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Scripting.FileSystemObject
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Scripting.Signer

Some "lockdown utilities" restrict access to limit the use of the Scripting File System object
The IME_USER account needs access to:

HKEY_LOCAL_MACHINE\SOFTWARE\Classes

2. File System Permission Changes

MailEnable relies on many system libraries and therefore requires read access to these libraries.

MailEnable's IME_USER and IME_ADMIN need read access to the following shared system folders and files:

IME_ADMIN requires read access to the following files:

WindowsSystemDirectory\scrrun.dll
WindowsSystemDirectory\msvbvm60.dll
WindowsSystemDirectory\msxml3.dll
ProgramFilesDir\Common Files\System\ado
ProgramFilesDir\Common Files\System\msadc
ProgramFilesDir\Common Files\System\ole db
ProgramFilesDir\Common Files\System\ado\msader15.dll
ProgramFilesDir\Common Files\System\ado\msado15.dll
ProgramFilesDir\Common Files\System\ado\msadrh15.dll
ProgramFilesDir\Common Files\System\ado\msader15.dll
ProgramFilesDir\Common Files\System\MSADC\msadce.dll
ProgramFilesDir\Common Files\System\MSADC\msadcer.dll
ProgramFilesDir\Common Files\System\OLE DB\msdasql.dll
ProgramFilesDir\Common Files\System\OLE DB\msdasqlr.dll
ProgramFilesDir\Common Files\System\OLE DB\oledb32.dll
ProgramFilesDir\Common Files\System\OLE DB\oledb32r.dll

IME_USER requires read access to the following files:

ProgramFilesDir\Common Files\System\ado\msader15.dll
ProgramFilesDir\Common Files\System\ado\msado15.dll
ProgramFilesDir\Common Files\System\ado\msadrh15.dll
ProgramFilesDir\Common Files\System\ado\msader15.dll
ProgramFilesDir\Common Files\System\MSADC\msadce.dll
ProgramFilesDir\Common Files\System\MSADC\msadcer.dll
ProgramFilesDir\Common Files\System\OLE DB\msdasql.dll
ProgramFilesDir\Common Files\System\OLE DB\msdasqlr.dll
ProgramFilesDir\Common Files\System\OLE DB\oledb32.dll
ProgramFilesDir\Common Files\System\OLE DB\oledb32r.dll

IME_ADMIN requires full access to the following folders and subfolders:

MailEnable\Config
MailEnable\Postoffices
MailEnable\Queues

IME_USER requires read access to the following folders and subfolders:
MailEnable\BIN\WebMail
MailEnable\BIN\WebAdmin

IME_ADMIN requires read access to the following folders and subfolders:

MailEnable\Bin

3. Missing or Corrupted System Libraries

Missing or corrupt system libraries can cause MailEnable to fail. Ensure that MSXML, ADO and the Scripting Runtime are functioning on the system.

MailEnable's Diagnostic Report should briefly test these resources to ensure that they are functioning correctly, however there are also Knowledge Base articles that advise as to diagnosing and correcting these issues.

4. DCOM (COM+) Security Permission Changes

MailEnable's web mail and web admin rely heavily on COM+ and there are many configuration settings in relation to COM+ security that specifically control access to components.

If the DCOM launch permissions are modified from the default, MailEnable's web mail component may not be able to function.

Specifically, IME_ADMIN and IME_USER both need Launch and Execute rights under DCOM.

A knowledge base relating to Windows 2003 Service Pack 1, that outlines some considerations with respect to COM+:

See: http://www.mailenable.com/kb/content/article.asp?ID=ME020364