how to get Credentials to create new mailbox?
Dummy question... User is member of the group: domainA.com/Microsoft Exchange Security Groups/Organization Management And by "Get-ManagementRoleAssignment -role "Mail Recipient Creation" I can see above group have such credentials in E2010. ...but still "new-mailbox" is unknown command. What I have forgot to do?Petri
May 9th, 2012 10:41am

Are you running this from the Exchange Management Shell?Sukh
Free Windows Admin Tool Kit Click here and download it now
May 9th, 2012 10:44am

Yes....or trying to do so. Also I tried to set public folder credentials, to that I got "access denied"... I tried also tried to use GUI but the same results. I can create the account using the ADUC and then enable-mailbox.Petri
May 9th, 2012 12:30pm

Hi, Please run Get-ManagementRoleAssignment -roleassignee user |fl role to check the roles that this user has. Note: To mail-enable public folders, the Mail Enabled Public Folders role must be used. By the way, how many Exchange Servers in the network? How many Domain controllers? Xiu Zhang TechNet Community Support
Free Windows Admin Tool Kit Click here and download it now
May 10th, 2012 3:27am

Dummy question... User is member of the group: domainA.com/Microsoft Exchange Security Groups/Organization Management And by "Get-ManagementRoleAssignment -role "Mail Recipient Creation" I can see above group have such credentials in E2010. ...but still "new-mailbox" is unknown command. What I have forgot to do? Petri Hi, Exchange 2010 SP1 came with two types of permissions models (Shared or split) and if chosed "split-model" during the Exchange 2010 installation, that would explain why you can't run new-mailbox but enable-mailbox works. Some other examples of cmdlets that will not work when using the split permission model is: New-Mailcontact, New-Distributiongroup and Remove-Mailbox. If you had any other version of Exchange installed in your Org, before you installed Exchange 2010 SP1/SP2 the above is not an answer to why you can't run new-mailbox etc, but if you didn't..keep on reading. You can change the permission model if you want to. It's all described in the Technet article below. But in short you need to prepare your AD again: setup.com /PrepareAD and /ActiveDirectorySplitPermissions:false Understanding Split Permissions http://technet.microsoft.com/en-us/library/dd638106.aspx Martina Miskovic
May 10th, 2012 4:03am

Martina could well be right, most go for shared rather than split which is the default. Can you confirm what you went with?Sukh
Free Windows Admin Tool Kit Click here and download it now
May 10th, 2012 5:47am

Hi Martina, No other server version installed. It is actually my test environment so I have one Exchange and one DC. Is there any change to check the split permission status?Petri
May 10th, 2012 7:13am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics