Link to home
Start Free TrialLog in
Avatar of krabago
krabagoFlag for United States of America

asked on

RBAC authorization returns Access Denied for user on Exchange 2010

I'm getting this error message:

RBAC authorization returns Access Denied for user ourdomain.local/Domain Controllers/servername. Reason: No role assignments associated with the specified user were found on Domain Controller servername.ourdomain.local

Event ID: 17, Source: MSExchange RBAC

I saw a similar posting for this type of error message but this one seems to reference some kind of system user account. So I don't think its any person trying to do something they do not have permissions for. This is a from Exchange Server 2010 running on Small Business Server 2011.
ASKER CERTIFIED SOLUTION
Avatar of abhijitmdp
abhijitmdp
Flag of India image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of krabago

ASKER

I'm curious - the user that the error message is complaining about is the server itself. Is the server itself trying to run a cmdlet? If so, then why didn't Exchange configure itself to give permissions to the server to do what it needs to do?

I just added the server to the Organization Management group in the Exchange Security Groups container. Waiting to see if the error message continue to appear or not.
Avatar of krabago

ASKER

The solution fixed the problem though no one is trying to run an exchange cmdlet. Some system account was attempting to run something that it had no permissions for.
In my case, the error is pointing directly to the user account which handles the Vipre Email Security Plugin Manager. It seems not quite right to add that account to the "Organization Management" group, but is that what I am to understand?
This event generating for every 15 minutes there was no time delay it seems to reference some kind of system user account. So I don't think it’s any person trying to manage the Exchange console and Shell.
Let me know anybody can help me.?
Check whether you have a Symantec backup which is running on background.  The Backup Exec logon account being used to access the Exchange server does not have the required permissions that's the reason you getting this error. Kindly follow this below link to fix the issue.

http://www.symantec.com/business/support/index?page=content&id=TECH126587

Regards
Umar Khathab