?
Solved

Exchange 2010 - OWA - Rights management operation failed

Posted on 2011-02-21
6
Medium Priority
?
7,896 Views
Last Modified: 2012-08-14
We just implemented a new Small Business Server 2011 over the weekend, now when a user logs into the OWA interface they are prompted with an error that says Rights Management Operation Failed.

Details below:
Request
Url: https://*domain*.org:443/owa/forms/premium/SubPageEventHandler.aspx?ae=Item&a=Preview&t=IPM.Conversation&id=CID.jIn1wxoZZU%2bjrR2iSj2XgA%3d%3d.LgAAAAASs9o68YbcS4%2fbs67BEavYAQDz8JgEoEZ4SrmGTqEj14JyAAAABEMlAAAB.LzcAAAAEQyEAAAAANWkCAAAAAAA%3d&calist=&canary=863b68c5e25b4195a54e53519b93c578&SP=1&pfmk=M46%3a1298313956191&subpage=ReadConversation.ascx
User host address: *ip address*
User: *Name of User*
EX Address: /o=First Organization/ou=Exchange Administrative Group (FYDIBOHF23SPDLT)/cn=Recipients/cn=*User Name*
SMTP Address: *Email Address*
OWA version: 14.1.218.13
Mailbox server: *FQDN*

Exception
Exception type: Microsoft.Exchange.Data.Storage.RightsManagementPermanentException
Exception message: Rights management operation failed.

Call stack

Microsoft.Exchange.Clients.Owa.Core.UserContext.get_IsIrmEnabled() 
Microsoft.Exchange.Clients.Owa.Premium.ConversationUtilities.LoadConversation(UserContext userContext, OwaStoreObjectId owaConversationId, PropertyDefinition[] requestedProperties) 
Microsoft.Exchange.Clients.Owa.Premium.ReadConversation.OnLoad(EventArgs e) 
System.Web.UI.Control.LoadRecursive() 
System.Web.UI.Control.LoadRecursive() 
System.Web.UI.Control.LoadRecursive() 
System.Web.UI.Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint)

Inner Exception
Exception type: Microsoft.Exchange.Security.RightsManagement.RightsManagementException
Exception message: BindValidityTimeViolated

Call stack

Microsoft.Exchange.Security.RightsManagement.Errors.ThrowOnErrorCode(Int32 hr, LocalizedString contextMessage) 
Microsoft.Exchange.Security.RightsManagement.Errors.ThrowOnErrorCode(Int32 hr) 
Microsoft.Exchange.Data.Storage.RightsManagement.RmsClientManager.DrmEnvironment.InitializeEnvironment() 
Microsoft.Exchange.Data.Storage.RightsManagement.RmsClientManager.Initialize() 
Microsoft.Exchange.Data.Storage.RightsManagement.RmsClientManager.InitializeIfNeeded() 
Microsoft.Exchange.Data.Storage.RightsManagement.RmsClientManager.get_IRMConfig() 
Microsoft.Exchange.Clients.Owa.Core.UserContext.get_IsIrmEnabled()

Open in new window

0
Comment
Question by:tomtcs
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
6 Comments
 
LVL 11

Accepted Solution

by:
MichaelVH earned 2000 total points
ID: 34945820
Hi there,

somehow I suspect that IRM is enabled for the virtual directories.

Could you please do the following?

1. Log on to the exchange server and open (as Administrator) the Exchange Management Shell (EMS)
2. Run "Get-OWAVirtualDirectory | FL" and search for IRM; you'll probably see that it's enabled.
3. Run "Set-OWAVirtualDirectory -IRMEnabled $false"

Now reset IIS and try OWA again.
0
 

Author Comment

by:tomtcs
ID: 34945854
[PS] C:\Windows\system32>Set-OWAVirtualDirectory -IRMEnabled $false

cmdlet Set-OwaVirtualDirectory at command pipeline position 1
Supply values for the following parameters:
Identity:

What do i put for identity?
0
 
LVL 11

Expert Comment

by:MichaelVH
ID: 34946085
could you post me the outcome of the Get-OWAVirtualDirectory command please?
0
Are your AD admin tools letting you down?

Managing Active Directory can get complicated.  Often, the native tools for managing AD are just not up to the task.  The largest Active Directory installations in the world have relied on one tool to manage their day-to-day administration tasks: Hyena. Start your trial today.

 

Author Comment

by:tomtcs
ID: 34946178
figured it out based on your comment: owa (Default Web Site)

Performed an IIS reset and working now :)
0
 

Expert Comment

by:sovran
ID: 37280811
This fix worked for me. Same issue. The identity that it is asking fro is listed in the output of the GET command. It my be SERVERNAME\owa (Default Web Site) for you....
0
 
LVL 3

Expert Comment

by:tamaneri
ID: 37341987
this worked for me too. thanks guys.
0

Featured Post

Office 365 Training for Admins - 7 Day Trial

Learn how to provision tenants, synchronize on-premise Active Directory, implement Single Sign-On, customize Office deployment, and protect your organization with eDiscovery and DLP policies.  Only from Platform Scholar.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

How to resolve IMCEAEX NDRs in Exchange or Exchange Online related to invalid X500 addresses.
Unified and professional email signatures help maintain a consistent company brand image to the outside world. This article shows how to create an email signature in Exchange Server 2010 using a transport rule and how to overcome native limitations …
In this video we show how to create a mailbox database in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Servers >> Data…
This video discusses moving either the default database or any database to a new volume.
Suggested Courses

770 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question