recipient admin gets access denied on one mailbox server
Hi, our help desk is a member of recipient administrators. one user is only able to set mailbox properties on one of our mailbox server roles. recipient admin is an organization wide group. what could be causing this? the error is access denied when trying to change mailbox permissions or change send as permissions. Exchange 2007 SP3 environment thanks, rudif
July 13th, 2012 12:46pm

You need to open adsiedit, config, exchange.....find your exchange server properties security tab. Compare the security perms from the working one with the bad one. James Chong MCITP | EA | EMA; MCSE | M+, S+ Security+, Project+, ITIL msexchangetips.blogspot.com
Free Windows Admin Tool Kit Click here and download it now
July 13th, 2012 2:53pm

What is the exact error? Could you please provide the error code recorded in Exchange server Application event log? It would help us research. Thanks. Refer to: http://technet.microsoft.com/en-us/library/bb310770(EXCHG.80).aspx Hope it is helpful. Fiona Liao TechNet Community Support
July 16th, 2012 3:51am

Hi, The error is "Failed to commit the change on object <GUID> because access is denied. It was running command 'Get-MailboxPermission' The user getting the error is a member of Recipient Administrators but is the only one in the group getting access denied. I realized that the only time the user gets the error is when the mailbox is in a particular server, which doesn't make sense for a member of Recipient Administrators. Thanks, rudif
Free Windows Admin Tool Kit Click here and download it now
July 16th, 2012 12:47pm

I Rudif, Thansk for the reply. I researched based on the information provided, and I'd suggest you run the cmdlet below: Add-ADPermission Identity CN=<Your Org>,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=<Your Domain>,DC=<Your Domain> user "<Domain\User>" -extendedRights ms-Exch-Store-Admin -InheritanceType All Hope it is helpful. If the issue continues, please create a new user, join the user into Recipient Administrators group and then try again. Fiona Liao TechNet Community Support
July 16th, 2012 11:31pm

I Rudif, Thansk for the reply. I researched based on the information provided, and I'd suggest you run the cmdlet below: Add-ADPermission Identity CN=<Your Org>,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=<Your Domain>,DC=<Your Domain> user "<Domain\User>" -extendedRights ms-Exch-Store-Admin -InheritanceType All Hope it is helpful. If the issue continues, please create a new user, join the user into Recipient Administrators group and then try again. Fiona Liao TechNet Community Support
Free Windows Admin Tool Kit Click here and download it now
July 16th, 2012 11:32pm

Hello, Is there any update?Fiona Liao TechNet Community Support
July 18th, 2012 10:24pm

IF no more questions on this thread, we may mark it as answered. Thanks.Fiona Liao TechNet Community Support
Free Windows Admin Tool Kit Click here and download it now
July 23rd, 2012 3:58am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics