"Active Directory operation failed on " when assigning Send As permissions on a distribution group

February 22, 2012, 2:15 am

≫ Next: Managed Folder to a specific AD Group of users

≪ Previous: Users not listed as allowed to submit in-policy meeting requests are still able to have meeting requests automatically approved.

I'm trying to give a mailbox user Send As right for a distribution group. But the cmdlet comes back with this:

Get-DistributionGroup MyGroup | Add-ADPermission -user albert -ExtendedRights Send-As
Active Directory operation failed on <DC fqdn>. This error is not retriable. Additional information: Access is denied.
Active directory response: 00000005: SecErr: DSID-03151E07, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0
+ CategoryInfo : WriteError: (0:Int32) [Add-ADPermission], ADOperationException
+ FullyQualifiedErrorId : FE24751F,Microsoft.Exchange.Management.RecipientTasks.AddADPermission

What could be the problem, considering the items below :

- inheritance is not broken to the level of the distribution group object

- the account used to run the cmdlet is a member of the Organization Management group

- creating a new distribution group in the same OU and running the command works as expected; checking the permission for this group against MyGroup (using Get-DistributionGroup testgroup | Get-ADPermission | Sort-Object User,AccessRights | ft user,accessrights,extendedrights,properties) shows no differences.

- adding the permission using ADUC results in the user being able to Send As the group, however I'm trying to find out the root cause of the Powershell cmdlet execution problem

- there is no Deny permission on the group's ACL

- the group didn't have the "Hide Membership" feature of Exchange 2003 applied, so there shouldn't be any non-canonical ACL issues

↧

Managed Folder to a specific AD Group of users

April 22, 2014, 4:00 am

≫ Next: Give access to the helpdesk creating and sharing mailboxes

≪ Previous: "Active Directory operation failed on " when assigning Send As permissions on a distribution group

Hi folks,

Our legal department want a specific email folder created under Inbox for all users whom are members of a specific AD group. Then, apply a specific retention policy to all users who have this folder that never deletes any emails from this folder.

The idea is that these users will see this folder in Outlook and drag and drop specific email content into this folder. By doing so, the retention policy that is automatically applied to this folder will never delete any emails within that folder.

I have no idea where to start with this so any help would be greatly appreciated indeed. We are using Exchange 2010 SP3 RU5 and I understand this can only be done through the EMS in this version. Any ideas on the PS script that can set-this all up for us please?

Thank you

Danny

↧

Give access to the helpdesk creating and sharing mailboxes

April 22, 2014, 9:16 am

≫ Next: Can't get transport rule regex to match XML

≪ Previous: Managed Folder to a specific AD Group of users

Hello,

Exchange 2010 latest Rolloup.

I would like to be able to give the help desk the right to create and share mailboxes. Also the help desk should have the right to assign the send as, sent on behalf of, and full mailbox permission.

How do I go about doing this on Exchange 2010?

Thanks,

Alexis

↧

Can't get transport rule regex to match XML

April 14, 2014, 6:47 am

≫ Next: CAS array internal DNS IP address best practice

≪ Previous: Give access to the helpdesk creating and sharing mailboxes

I'm trying to write a transport rule using regex to match a string which appears in XML in incoming mail, and it just won't work. I have tried using:

<Infringement(/S|/s)*xsi:schemaLocation="http://www.acns.net

<Infringement/S*/s*xsi:schemaLocation="http://www.acns.net

Basically, the string begins with <Infringement and ends with xsi:schemaLocation="http://www.acns.net -- but there may or may not be additional characters in between those two.

Thoughts?

↧

CAS array internal DNS IP address best practice

April 22, 2014, 10:31 am

≫ Next: Unable to run PrepareSchema or PrepareLegacyExchangePermissions for Exchange 2010 installation

≪ Previous: Can't get transport rule regex to match XML

Hi, Just a question about a best practice approach for DNS and CAS arrays.

I have an Exchange 2010 Org. I have two CAS/HUB servers and two MBX servers. My external DNS (mail.mycompany.biz) host record points to a public IP address which is NAT'd to the internal IP address of my NLB CAS cluster. I maintain a split brain DNS. Should the internal DNS entry for mail.mycompany.biz also point to the public IP address or should it point to the internal IP address of the NLB cluster?

↧

Unable to run PrepareSchema or PrepareLegacyExchangePermissions for Exchange 2010 installation

April 5, 2014, 9:09 am

≫ Next: Exchange server 2010

≪ Previous: CAS array internal DNS IP address best practice

Hi,

For the past 3 days, I've been trying to carry out an Exchange 2010 migration from Exchange 2003 (client doesn't want 2013 and has downgrade rights and so on).

I've been running into the same error for the past 3 days now, and I've scoured the net for answers and tried everything, but haven't gotten anywhere.

It's now down to a domain with Server 2008 R2 as a single DC (there used to be a Win2k3 R2 server, but I've demoted that for now).

The following errors are what I get. Firstly, the PowerShell/cmd error:

Error: Object reference not set to an instance of an object.
The Exchange Server setup operation didn't complete. More details can be found in ExchangeSetup.log located in the <Sys
temDrive>:\ExchangeSetupLogs folder.

Unhandled Exception: System.NullReferenceException: Object reference not set to an instance of an object.
   at Microsoft.Exchange.Setup.Common.SetupContext.InitializeAD(Boolean& adInitPassed, LocalizedException& adError, String& dc, String& gc, Boolean& isE12Schema, Boolean& schemaUpdateRequired, Boolean& orgConfigUpdateRequired, Boolean& domainConfigUpdateRequired, PropertyBag parsedArguments)
   at Microsoft.Exchange.Setup.Common.SetupContext.GetSetupContext(PropertyBag parsedArguments)
   at Microsoft.Exchange.Setup.Common.RootDataHandler.OnReadData()
   at Microsoft.Exchange.Management.SystemManager.WinForms.SingleTaskDataHandler.OnReadData(CommandInteractionHandler interactionHandler, String pageName)
   at Microsoft.Exchange.Management.SystemManager.WinForms.DataHandler.Read(CommandInteractionHandler interactionHandler, String pageName)
   at Microsoft.Exchange.Setup.Common.LauncherBase.Run(String[] args)
   at Microsoft.Exchange.Setup.Common.LauncherBase.MainCore[T](String[] args)
   at Microsoft.Exchange.Setup.ExSetup.ExSetup.Main(String[] args)

Exchange Server setup encountered an error.

The ExchangeSetup.log gives the following error:

[04/05/2014 15:52:50.0174] [0] **********************************************
[04/05/2014 15:52:50.0175] [0] Starting Microsoft Exchange Server 2010 Setup
[04/05/2014 15:52:50.0175] [0] **********************************************
[04/05/2014 15:52:50.0176] [0] Local Time Zone: (UTC) Dublin, Edinburgh, Lisbon, London.
[04/05/2014 15:52:50.0177] [0] Operating System version: Microsoft Windows NT 6.1.7601 Service Pack 1.
[04/05/2014 15:52:50.0180] [0] Setup version: 14.1.218.15.
[04/05/2014 15:52:50.0182] [0] Logged on user: DOMAIN\Administrator.
[04/05/2014 15:52:52.0203] [0] Command Line Parameter Name='nologo', Value=''.
[04/05/2014 15:52:52.0203] [0] Command Line Parameter Name='preparead', Value=''.
[04/05/2014 15:52:52.0203] [0] Command Line Parameter Name='sourcedir', Value='D:\'.
[04/05/2014 15:52:52.0203] [0] Command Line Parameter Name='fromsetup', Value=''.
[04/05/2014 15:52:52.0213] [0] ExSetup was started with the following command: '/NoLogo /p /sourcedir:D:\ /FromSetup'.
[04/05/2014 15:52:52.0532] [0] Setup is choosing the domain controller to use
[04/05/2014 15:52:52.0732] [0] Setup is choosing a local domain controller...
[04/05/2014 15:52:53.0901] [0] Setup has chosen the local domain controller pdc.domain.local for initial queries
[04/05/2014 15:52:54.0040] [0] PrepareAD has either not been run or has not replicated to the domain controller used by Setup. Setup will attempt to use the Schema Master domain controller pdc.domain.local
[04/05/2014 15:52:54.0041] [0] The schema master domain controller is available
[04/05/2014 15:52:54.0230] [0] [ERROR] Object reference not set to an instance of an object.
[04/05/2014 15:52:54.0241] [0] End of Setup
[04/05/2014 15:52:54.0241] [0] **********************************************

Any of the domain preparation tasks gives the exact same error.

Any help would be greatly appreciated.

↧

Exchange server 2010

April 22, 2014, 7:01 am

≫ Next: SP3 & Discovery Search Mailbox question

≪ Previous: Unable to run PrepareSchema or PrepareLegacyExchangePermissions for Exchange 2010 installation

Hello everybody,

I created a domain named apex.local, afterwards i installed exchange server 2010 and i created users' mailboxes. Each user has its mail address made up of his name & apex.local (example:john@apex.local). But there is an issue i want to fix, i want to make a change so that"john@apex.local" becomes "john@apex.org" without reinstalling exchange server 2010. How can i proceed to solve this problem??

↧

SP3 & Discovery Search Mailbox question

April 22, 2014, 8:41 am

≫ Next: Intercept Incoming E-mail, Massage Subject and Contents, Forward Original Message, Send Messaged Message to Another Inbox (SugarCRM)

≪ Previous: Exchange server 2010

I just upgraded Exchange 2010 SP1 to SP3. After the upgrade I have two questions:

1. On the back end servers, when I go to server configuration, my Edge severs are stilling showing 14.1. However, when I log onto the Edge servers, its displaying 14.3. Should I need to worry about anything?

2. Exchange wouldn't let me upgrade the Mailbox servers to SP3. It spit out some error about Discovery Search Mailbox. I had to delete the Discovery Search Mailbox in order to upgrade to SP2. After the upgrade I rand "setup /p" and it looked to recreate the Discovery Search Mailbox. When I run "get-mailbox -arbitration" I see that the Discovery Search Mailbox is displayed. However, when I go to the EMC, recipient configuration, then mailbox....I don't see the Discovery Search Mailbox listed.

↧

Intercept Incoming E-mail, Massage Subject and Contents, Forward Original Message, Send Messaged Message to Another Inbox (SugarCRM)

April 22, 2014, 10:41 am

≫ Next: Exchange 2010 SP3 with Active Directory 2012 R2

≪ Previous: SP3 & Discovery Search Mailbox question

Messages arrive from "XXX@YYY.Com", sent to "ME@ZZZ.Com", containing "Distinct Subject Line"

When a message comes in, and it matches the above criteria, I need to:

1) Create a new e-mail based on the original, changing the new e-mail's layout (Change Subject Line, Clean Up Body).

2) Send message created above to another user on the Exchange 2010 box (My SugarCRM automatic case creator e-mail).

3) Send the original e-mail, unchanged, to the original user (Me).

Rather than creating an Outlook Rule, and having to leave my PC running all the time, I'd like to do this one the server, so it runs 24/7.

Charles

↧

Exchange 2010 SP3 with Active Directory 2012 R2

April 25, 2014, 2:58 am

≫ Next: Cannot create outlook subfolder

≪ Previous: Intercept Incoming E-mail, Massage Subject and Contents, Forward Original Message, Send Messaged Message to Another Inbox (SugarCRM)

I have recently upgraded my Active Directory environment from Server 2008 R2 to Server 2012 R2. And it was working fine.But now I need to upgrade the Exchange Server 2010 SP2 to SP3 and it is not allowing me to do so. I would like to know whether there is a possible path to do so. Appreciate your help on this.

↧

Cannot create outlook subfolder

April 25, 2014, 5:43 am

≫ Next: Exchange 2010 SP1 and SP2 are no longer supported.

≪ Previous: Exchange 2010 SP3 with Active Directory 2012 R2

Our Environment:

Exchange 2010 SP2, Outlook 2010 online mode, no IMAP or POP

Some users are unable to create subfolders in their own mailboxes, they get the error "Unable to create the folder". When using OWA we get the same behavior but different message "Unable to complete the operation". Trying an account that has full access to the problematic mailbox we get the same behavior. Any thoughts?

↧

Exchange 2010 SP1 and SP2 are no longer supported.

April 25, 2014, 2:33 pm

≫ Next: Change of ISP - need to deploy new IP address or DNS name to Active Sync phones

≪ Previous: Cannot create outlook subfolder

Exchange 2010 SP3 is the minimal version that should be installed on your Exchange Servers and just may contain the fixes you need to solve your issue.

Support for 2010 SP1 and SP2 has ended.

Before posting a question, please ensure you are running at least 2010 SP3.

For more details:

http://blogs.technet.com/b/rmilne/archive/2014/04/09/end-of-exchange-2010-sp2-support.aspx

Twitter!: Please Note: My Posts are provided “AS IS” without warranty of any kind, either expressed or implied.

↧

Change of ISP - need to deploy new IP address or DNS name to Active Sync phones

April 24, 2014, 5:31 pm

≫ Next: RAM size change

≪ Previous: Exchange 2010 SP1 and SP2 are no longer supported.

Greetings! We are changing ISP's tomorrow and we JUST finished deploying a bunch of new Galaxy S4's. Before, we were using Blackberrys and the thought never occurred to set up a DNS name for ActiveSync, we were just using the straight IP address. So it just hit me that, when we switch over tomorrow evening, all the ActiveSync devices will cease to connect. NOT a good thing! Is there a way to push out a DNS name (to replace the IP address), to all the Active Sync clients via a policy update, script or other mechanism? Otherwise we will have to contact each user and get them to manually update their accounts by entering the new DNS name. If anyone knows a method by which we can do this, please advise and thanks in advance!

Mike

Mike Vain

↧

RAM size change

April 24, 2014, 10:24 pm

≫ Next: Contact Group list expands when email is sent

≪ Previous: Change of ISP - need to deploy new IP address or DNS name to Active Sync phones

hello ,

Why is my exchange server saying that

The amount of installed RAM on xx.servers has changed from 9858 MBytes to 9936 MBytes, although its allocated with only 8GB RAM Size. Please explain what is the cause for this?

Sumanth.S Exchange Admin

↧

Contact Group list expands when email is sent

April 18, 2014, 8:18 am

≫ Next: Exchange DataBase is in Dirty ShutDown State

≪ Previous: RAM size change

We have an associate that when she sends an email to a contact group, the group name is not in the sent mail, but rather all the contacts in that group list are shown. For example - she sends an email to the contacts group "Store 2702", when the email is sent it no longer says "Store 2702" and instead shows all the individual emails that are a part of that contact group. She saves some emails by store location and has to search by recipients which store they belong to since it no longer says "Store 2702"

When I send an email to a group, the group name stays as it was sent. Example - Send an email to "Information Technology", I refer to my sent folder and it says "Information Technology", not all the recipients.

Hope this makes sense, I have not found a similar issue anywhere on the web.

↧

Exchange DataBase is in Dirty ShutDown State

July 25, 2011, 9:37 pm

≫ Next: users mail auto delete complain

≪ Previous: Contact Group list expands when email is sent

Hi ALL,

I am not able to mount the Data Base in Exchange Server 2010, I have run “Eseutil /mh” and confirm that Data base is in Dirty shutdown state.

Now, can any buddy tell me the step by step procedure to make it in Clean shutdown state.

Subs

↧

users mail auto delete complain

April 25, 2014, 4:12 am

≫ Next: Upgrade the Active Directory schema to contain the Exchange Server 2010 extensions

≪ Previous: Exchange DataBase is in Dirty ShutDown State

sir,

one user complaining that his mails are delete automatic.also not found in recover delete items.is there any way to monitor ?

or any command that we check mails are delete in real?

i have exchange server 2010 sp2

pls help me

SUNIL PATEL SYSTEM ADMINISTRATOR

↧

Upgrade the Active Directory schema to contain the Exchange Server 2010 extensions

April 24, 2014, 7:01 am

≫ Next: What does the ServerName property of a mailbox do?

≪ Previous: users mail auto delete complain

Good Day ,

I m in the second step for migration exchange2003 to exchange 2010 , if I do the upgrade the Active Directory schema to contain the Exchange Server 2010 extensions will be safe for my exchange 2003 ?

-Setup.com /PrepareLegacyExchangePermissions

-Setup.com /PrepareSchema

-Setup.com /PrepareAD

-Setup.com /PrepareDomain

Many Thanks

Regards

↧

What does the ServerName property of a mailbox do?

April 25, 2014, 2:53 pm

≫ Next: Get-MailboxStatistics -database total GB not individual MB size

≪ Previous: Upgrade the Active Directory schema to contain the Exchange Server 2010 extensions

This field doesn't seem to be related to anything. I have mailboxes on a single database with the ServerName field containing the name of different mailbox servers. Is this the mailbox server on which they were originally created? Is this field used for anything?

e.g. Get-Mailbox -Database DB001 will return a list including these two mailboxes: