Hi, Any ideas why I'm getting this kind of error like below: Cmdlet failed. Cmdlet Get-User, parameters {ErrorAction=SilentlyContinue, Identity=standard.ee/Microsoft Exchange Security Groups/Discovery Management}. XML: <Data>View Entire Forest: 'True', Configuration Domain Controller: 'DC1', Preferred Global Catalog: 'DC1', Preferred Domain Controllers: '{ DC1 }'</Data> <Data>Microsoft.Exchange.Configuration.Tasks.ManagementObjectNotFoundException: The operation couldn't be performed because object 'DOMAIN.XX/Microsoft Exchange Security Groups/Discovery Management' couldn't be found on 'DC1'.</Data> DC1 and DOMAIN.XX are changed accordingly. User who is performing this healt data collection belongs "Discovery Management" security group.rgds Sven

Hi According to your error"The operation couldn't be performed because object 'DOMAIN.XX/Microsoft Exchange Security Groups/Discovery Management' couldn't be found on", you can preare for AD again. You can also add new group into discover group and add user into this group. Can you test it by admin account ? Terence Yu TechNet Community Support

Hi, At the moment, the user whos performing collection of healt data is domain admin, enterprise admin and also added as member of "discovery management" (as user not trough group). Also this user is member of "exchange organization administrators" trough "enterprise admin" group. So.. the permissions seems to be more than enough. Also BPA does not report any problems with permissions check. I will take a deeper look into AD.rgds Sven