i have test network with two domain (main.domain, new.domain) in one forest.

main.domain contains Exchange 2013 SP1 CU8.

I can successfully create any objects in new.domain as Main\administrator

when i try to create or add mailbox to exist user in new.domain then i got error:

i added "MAIN\Exchange trusted subsystem" into new.domain with Full permissions, and then i still receive error, but account is created without password and disabled:

i compared permission on MAIN.domain and NEW.domain, and MAIN contains more permissions for Exchange.

How i can automatically create same/necessary permissions in NEW.domain?

i did in NEW.domain "setup /PrepareAD / PrepareSchema" - doesn't help.

Thank you!

• Edited by Anahaym 19 hours 31 minutes ago