Hello,  

I just updated Exchange 2013 CU5 to CU7 over the weekend.  Went well enough, no major issues noted and mail flowed throughout the upgrade.  Configuration: 2 Mailbox servers role in DAG configuration, 2 CAS servers using a 3rd party NLB.  

First business day after and I have a user requesting a Contact with an external email address.  

Went through the ECP and was unable to create the contact because the + sign indicating New is missing indicating from the Recipient Contacts area.

Went into Exchange Powershell. New-Mailcontact does not autocomplete when tabbed, typed out it returns this:

New-Mailcontact : The term 'New-Mailcontact' is not recognized as the name of a cmdlet, function, script file, or
operable program. Check the spelling of the name, or if a path was included, verify that the path is correct and try
again.

I can do a Get-MailContact and it returns the exiting Contacts.

For CU7 was the Get-MailContact eliminated?

I've researched the web.  Nothing indicates any issue with the release notes and not seeing anything on line about this.  I'm running Exchange Powershell so I'm not having to do the PS Session or Import modules and the other Exchange powershell cmdlets are working.  The only change that has been made was the CU7 update.  The existing Contacts were created using ECP and Powershell both.  I understand that it's a complete uninstall and reinstall of Exchange via the Upgrade to CU7 download.

Downloaded CU7 from the MX download site for CU7

Our workaround was to create the Contact in AD then follow the Enable-MailContact and then add the Contact to the account that wanted email forwarding to the contact.  

This is a time consuming workaround and shouldn't have to be done.

Myself and one other Exchange Admin both attempted this with the same result.  We are both Organization Admin roles.  RBAC permissions have been confirmed.  Mail recipients is an Assigned Role.

Has anyone else seen the issue post CU7 or has anyone resolved the issue with the New-MailContact cmdlet?

Any help greatly appreciated.

Hi,

It should be a RBAC permission issue.

First of all, please check if you and the other Exchange admin are also in the recipient management role group.

Get-RoleGroupMember "Recipient Management"

Then check if the organization management role and recipient management role are in the Mail Recipient Creation management role

Get-ManagementRoleAssignment -Role "Mail Recipient Creation" | fl User

Next check if the New-MailContact cmdlet exists in the Mail Recipient Creation role entry.

Get-ManagementRoleEntry "Mail recipient creation\New*

Understanding Role Based Access Control

https://technet.microsoft.com/en-us/library/dd298183.aspx?f=255&MSPPError=-2147217396

Best Regards.