Exchange 2013 CU3 Can't view permissions on mailbox in EAC

Recently upgraded to CU3.  I'm not sure if my EAC problems are due to that or something else.  I could have swore this worked before, but I am not 100% positive.

If I go to "Recipients > Mailboxes > Properties on a mailbox > Mailbox Delegation" it says "Please wait...".  It stays like that for about 15-20 seconds, then finally comes back with:  "error.  Your request couldn't be completed.  Please try again in a few minutes".  I hit OK and the boxes for Send As, Send on Behalf, and Full Access are all empty.

I can view permissions on that same mailbox with PowerShell.

Also, if I do the same process for a Distribution Group, then that works okay in EAC!

December 3rd, 2013 12:52pm

Hi Nathan,

I recommend you do the following steps for troubleshooting:

1. Please run Get-RoleGroupMember "Organization Management" cmdlet to check if your administrator has the Organization Management" permission. If no, please add the administrator as a member of the Organization Management role.

2. If the issue persists, please refer to the above thread Dare provided to check if the value of 'system.serviceModel/serviceHostingEnvironment/multipleSiteBindingsEnabled' is true.

Hope it helps.

If there are any problems, please feel free to let me know.

Best regards,

December 4th, 2013 4:36am

Hi Amy,

Thanks for the response.  I tried both items that you listed.

1.  My account is already a member of the "Organization Management" role group.

2.  As soon as I make that change for multipleSiteBindingsEnabled, the ECP stops working and I get 500 errors in my browser.

Any other ideas?

Free Windows Admin Tool Kit Click here and download it now
December 9th, 2013 6:05pm

More information:  Every time I have this problem I see the following event in the Application Log.

Current user: 'nathan'
Web service call 'https://InternalServerName:444/ecp/DDI/DDIService.svc/GetObjectOnDemand?schema=MailboxService&msExchEcpCanary=n6zTLve7gEuD8gOAKAX0hBx310RYytAI2bS_4fVC4TQ7E2o8-ITUTnCbdANzN1dnXsSF5lZihpw.(https://LoadBalancedExternalName/ecp/DDI/DDIService.svc/GetObjectOnDemand?schema=MailboxService&msExchEcpCanary=n6zTLve7gEuD8gOAKAX0hBx310RYytAI2bS_4fVC4TQ7E2o8-ITUTnCbdANzN1dnXsSF5lZihpw.)' failed with the following error:
Microsoft.Exchange.Data.Directory.Recipient.NonUniqueRecipientException: Multiple objects with Sid S-1-5-32-544 were found.

I looked up that SID and it points to:  Builtin\Administrators group.

December 18th, 2013 6:13pm

Hi

Almost the same problem here...
Editing a Resorce Room...

Request for URL 'https://InternalServerName:444/ecp/UsersGroups/EditRoomMailbox.aspx?pwmcid=8&ReturnObjectType=1&id=21b9ba56-12cf-4138-ba3d-9de2342f28b2(https://LoadBalancedExternalName/UsersGroups/EditRoomMailbox.aspx?pwmcid=8&ReturnObjectType=1&id=21b9ba56-12cf-4138-ba3d-9de2342f28b2)' failed with the following error:
System.Web.HttpUnhandledException (0x80004005): Exception of type 'System.Web.HttpUnhandledException' was thrown. ---> System.Reflection.TargetInvocationException: Exception has been thrown by the target of an invocation. ---> System.Reflection.TargetInvocationException: Exception has been thrown by the target of an invocation. ---> Microsoft.Exchange.Data.Directory.Recipient.NonUniqueRecipientException: Multiple objects with Sid S-1-5-32-548 were found.

Did you fix it?

Regards

Robban

Free Windows Admin Tool Kit Click here and download it now
January 21st, 2014 7:59pm

No fix yet, unfortunately.  We've been doing the tasks through PowerShell as a workaround.

I'll have to call Microsoft support about it, I just haven't worked up the willpower to do so yet.

January 27th, 2014 7:17pm

Hi

What Windows Server version are you running on?
I have this problem and another on Exchange 2013 EAC, I have reported them both to Partner Support.
Thay say 2012R2 server that I am running on is not a supported OS for Exchange 2013 CU3...
But they are still checking the problem.

SP1 (CU4) will support 2012R2 server.

Regards
Robban

Free Windows Admin Tool Kit Click here and download it now
January 28th, 2014 9:00am

I have Exchange 2013 CU3 running on 2012 R1, so, a fully supported version.
January 28th, 2014 4:41pm

Hi

Any update on this?

Kind regards

Robban

  • Proposed as answer by Jack_DuFF Wednesday, August 27, 2014 9:46 AM
  • Unproposed as answer by Jack_DuFF Wednesday, August 27, 2014 9:46 AM
Free Windows Admin Tool Kit Click here and download it now
June 3rd, 2014 1:00pm

Hi Robban,

just dealing with the same issue:

  • Multiple objects with Sid S-1-5-32-548 were found. (thats actually Account Operators group)

Double check what kind of AD rights are granted on objects you cannot view.

Get-ADPermission -Identity "affected object" | sort user | ft user,*rights*

If you will see more rights for S-1-5-32-548 than:

S-1-5-32-548                                          {GenericAll}

for examle extended rights (send-as), just remove them from the objects. It worked for me.

August 27th, 2014 9:46am

Hi,

did you already upgrade to the most recent Exchange 2013 CU?

Free Windows Admin Tool Kit Click here and download it now
August 27th, 2014 11:20am

Hi Thomas,

yes (CU5), but we saw this error also before migration from Exchange 2010 (in that time we had Exchange 2013 SP1). The problem was that no one was managing the mailboxes from 2013 EAC yet, so we didnt pay too much attention to it before migration.

August 28th, 2014 6:43am

Hi

Yes, same solution fixed my problem, removing all S-1-5-32-548.
I got an OK from Microsoft also on that workaround for my other problem with Resources.

Regards
Robert

Free Windows Admin Tool Kit Click here and download it now
September 3rd, 2014 8:34am

How do you remove S-1-5-32-548 ????

what is the power shell command ?

June 22nd, 2015 11:54am

Hi Riaz,

PowerShell to remove "Send As" permissions, similarly you can remove others.

Get-Mailbox  User1 | Remove-ADPermission -User "S-1-5-32-548" -ExtendedRights "Send As"

Free Windows Admin Tool Kit Click here and download it now
July 3rd, 2015 12:34am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics