New installation of exchange 2013 CU7 onto fresh 2012 R2 server. Looking to migrate from exchange 2007. Installed pre-requisites, patches, all server updates. Installed exchange 2013 with no issues through the setup wizard, all went through fine. Administrator account is part of the Organization management group, however when logging into EAC, i cannot get the migration option, or any other admin options. Its as if it doesnt real;ise I am an admin at all. 

When i load the exchange powershell, I have to load the snapin into it before I can run Get- Commands, such as Get-Mailboxdatabase. After i load the snapin, it works fine. 

I have prepared the schema and AD, I have checked the schema version and it is running at CU7 level. I have tried creating a new admin account without a mailbox on the 2007 box, and its still the same issues. I have re-installed Exchange twice, but the end effect is always the same. No matter what account i try to log into the EAC, it doesnt give me the correct admin options. Any help is much appreciated. 

thank you

Try accessing the ECP using the URL Below:

https://<Exchange2013CAS>/ecp?ExchClientVer=15

Yup, doesn't make any difference. Please see SS link: I can log into the EAC, it just doesnt show the correct admin tools. 

Screenshot

I also know the other SS is the wrong group, I have also added account into the correct ones. 

• Edited by Shyal 21 hours 32 minutes ago

Weird, can you bounce IIS? and just double check to make sure the Administrator account or Domain Admins aren't a member of a group that has limited rights. 

Not a part of anything that should stop access as far as I can see, and bouncing IIS just gives the same problems. Ive literally installed the server and exchange twice now, it must be an issue with permissions, or OU...creating a new admin, and only adding to Organization management and domain admins, Still the same. 

Im lost.

Yup, doesn't make any difference. Please see SS link: I can log into the EAC, it just doesnt show the correct admin tools. 

Screenshot

I also know the other SS is the wrong group, I have also added account into the correct ones. 

• Edited by Shyal Thursday, February 26, 2015 2:20 PM

Yup, doesn't make any difference. Please see SS link: I can log into the EAC, it just doesnt show the correct admin tools. 

Screenshot

I also know the other SS is the wrong group, I have also added account into the correct ones. 

• Edited by Shyal Thursday, February 26, 2015 2:20 PM

Anyone else got any ideas? 

take the new user out of domain admins and try again.,

I appreciate the idea's mate but nope, took new admin out of domain admins, still exactly the same. 

I would give AD replication some time to happen, and maybe cycle the Exchange Services too, just to force a reach out to AD to get the proper permissions. 

If that doesn't help, it's time to go through the IIS Logs and see if there's anything there.

Oh boy, nothing helped, and nothing in logs. 

Any chance the organization management doesnt have the correct authority in the OU? can this happen?

Bumping this, if anyone has any clues.

Please, if anyone can tell me why my EAC is only showing the following: 

Screenshot

• Edited by Shyal Wednesday, March 04, 2015 4:41 PM

Please, if anyone can tell me why my EAC is only showing the following: 

Screenshot

• Edited by Shyal Wednesday, March 04, 2015 4:41 PM

After a complete reinstall of a fresh 2012 R2 install, and a fresh CU7 install, I'm getting exactly the same, which points me in the direction of an issue with rights in AD> is there anyway that Organization management may not be working correctly? If so, what are the steps to check?

please advise. 

MIght be worth a phone cal to msft at  this point to see if htey can figure out the issue.  I dont think its the problem with the role, bc you can do everything in the shell.  the other thing i can think of is checking and disabling AV.  Other than that i'm out of ideas.

Thanks anyway, another thing i will say is even after I load the snapin into exchange and im able to run Get commands, I cannot enter the product key, it says =ProductKey is not recognized as a CMLet again...this is all very strange. 

So you think I'm going to need to pay for a Microsoft ticket to solve this? 

I don't have any other ideas and unless someone else has an idea, that's probably the next step I would take. 

As for the product key issue, make sure you are using Set-ExchangeServer to apply the product key. 

So it should look like this:

Set-ExchangeServer -Identity 'SERVER01' -ProductKey "Product Key"

https://technet.microsoft.com/en-us/library/bb123716%28v=exchg.150%29.aspx?f=255&MSPPError=-2147217396

yup, thats the command Im using, yet it says cannot recognise -ProductKey. 

Sigh, this is so ridiculous. 

For anyone else with this issue: 

Opened a Microsoft request ticket, the Microsoft representative couldn't understand why the Prepare AD schema and Prepare AD wasn't working correctly. She spent 4 hours re-creating all Security groups by scratch and setting up permissions correctly as per a lab exchange 2013 machine. 

After the groups were correct, she installed the :

Install-CannedRbacRoles

Install-CannedRbacRoleAssignments

and then I could log in with everything all working. 

Cheers

Jamie

• Marked as answer by Shyal 14 hours 43 minutes ago