No admin rights, EAC not showing migration tabs etc
New installation of exchange 2013 CU7 onto fresh 2012 R2 server. Looking to migrate from exchange 2007. Installed pre-requisites, patches, all server updates. Installed exchange 2013 with no issues through the setup wizard, all went through fine. Administrator
account is part of the Organization management group, however when logging into EAC, i cannot get the migration option, or any other admin options. Its as if it doesnt real;ise I am an admin at all.
When i load the exchange powershell, I have to load the snapin into it before I can run Get- Commands, such as Get-Mailboxdatabase. After i load the snapin, it works fine.
I have prepared the schema and AD, I have checked the schema version and it is running at CU7 level. I have tried creating a new admin account without a mailbox on the 2007 box, and its still the same issues. I have re-installed Exchange twice, but the end
effect is always the same. No matter what account i try to log into the EAC, it doesnt give me the correct admin options. Any help is much appreciated.
thank you
February 26th, 2015 9:02am
February 26th, 2015 9:12am
Yup, doesn't make any difference. Please see SS link: I can log into the EAC, it just doesnt show the correct admin tools.
Screenshot
I also know the other SS is the wrong group, I have also added account into the correct ones.
-
Edited by
Shyal
21 hours 32 minutes ago
February 26th, 2015 9:21am
Weird, can you bounce IIS? and just double check to make sure the Administrator account or Domain Admins aren't a member of a group that has limited rights.
February 26th, 2015 11:02am
Not a part of anything that should stop access as far as I can see, and bouncing IIS just gives the same problems. Ive literally installed the server and exchange twice now, it must be an issue with permissions, or OU...creating a new admin, and only adding
to Organization management and domain admins, Still the same.
Im lost.
February 26th, 2015 11:39am
Yup, doesn't make any difference. Please see SS link: I can log into the EAC, it just doesnt show the correct admin tools.
Screenshot
I also know the other SS is the wrong group, I have also added account into the correct ones.
-
Edited by
Shyal
Thursday, February 26, 2015 2:20 PM
February 26th, 2015 2:19pm
Yup, doesn't make any difference. Please see SS link: I can log into the EAC, it just doesnt show the correct admin tools.
Screenshot
I also know the other SS is the wrong group, I have also added account into the correct ones.
-
Edited by
Shyal
Thursday, February 26, 2015 2:20 PM
February 26th, 2015 5:19pm
Anyone else got any ideas?
February 27th, 2015 5:48am
take the new user out of domain admins and try again.,
February 27th, 2015 9:44am
I appreciate the idea's mate but nope, took new admin out of domain admins, still exactly the same.
February 27th, 2015 11:13am
I would give AD replication some time to happen, and maybe cycle the Exchange Services too, just to force a reach out to AD to get the proper permissions.
If that doesn't help, it's time to go through the IIS Logs and see if there's anything there.
February 27th, 2015 11:23am
Oh boy, nothing helped, and nothing in logs.
Any chance the organization management doesnt have the correct authority in the OU? can this happen?
March 2nd, 2015 5:21pm
Bumping this, if anyone has any clues.
March 3rd, 2015 11:09am
Please, if anyone can tell me why my EAC is only showing the following:
Screenshot
-
Edited by
Shyal
Wednesday, March 04, 2015 4:41 PM
March 4th, 2015 4:41pm
Please, if anyone can tell me why my EAC is only showing the following:
Screenshot
-
Edited by
Shyal
Wednesday, March 04, 2015 4:41 PM
March 4th, 2015 4:41pm
After a complete reinstall of a fresh 2012 R2 install, and a fresh CU7 install, I'm getting exactly the same, which points me in the direction of an issue with rights in AD> is there anyway that Organization management may not be working correctly? If
so, what are the steps to check?
please advise.
March 5th, 2015 10:36am
MIght be worth a phone cal to msft at this point to see if htey can figure out the issue. I dont think its the problem with the role, bc you can do everything in the shell. the other thing i can think of is checking and disabling AV.
Other than that i'm out of ideas.
March 5th, 2015 4:03pm
Thanks anyway, another thing i will say is even after I load the snapin into exchange and im able to run Get commands, I cannot enter the product key, it says =ProductKey is not recognized as a CMLet again...this is all very strange.
So you think I'm going to need to pay for a Microsoft ticket to solve this?
March 9th, 2015 7:14am
I don't have any other ideas and unless someone else has an idea, that's probably the next step I would take.
As for the product key issue, make sure you are using Set-ExchangeServer to apply the product key.
So it should look like this:
Set-ExchangeServer -Identity 'SERVER01' -ProductKey "Product Key"
https://technet.microsoft.com/en-us/library/bb123716%28v=exchg.150%29.aspx?f=255&MSPPError=-2147217396
March 9th, 2015 11:24am
yup, thats the command Im using, yet it says cannot recognise -ProductKey.
Sigh, this is so ridiculous.
March 9th, 2015 12:36pm
For anyone else with this issue:
Opened a Microsoft request ticket, the Microsoft representative couldn't understand why the Prepare AD schema and Prepare AD wasn't working correctly. She spent 4 hours re-creating all Security groups by scratch and setting up permissions correctly as per
a lab exchange 2013 machine.
After the groups were correct, she installed the :
Install-CannedRbacRoles
Install-CannedRbacRoleAssignments
and then I could log in with everything all working.
Cheers
Jamie
-
Marked as answer by
Shyal
14 hours 43 minutes ago
March 16th, 2015 12:40pm