RBAC authorization returns Access Denied for user on Exchange 2010

I'm getting this error message:

RBAC authorization returns Access Denied for user ourdomain.local/Domain Controllers/servername. Reason: No role assignments associated with the specified user were found on Domain Controller servername.ourdomain.local

Event ID: 17, Source: MSExchange RBAC

I saw a similar posting for this type of error message but this one seems to reference some kind of system user account. So I don't think its any person trying to do something they do not have permissions for. This is a from Exchange Server 2010 running on Small Business Server 2011.
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

I think You are attempting to run an exchange cmdlet that does not have permissions to run that cmdlet.

In Active Directory Users and Computers you will find a new container called Microsoft exchange Security Groups. If you locate the group called Exchange Organisation Administrators and add your user in to this group it should resolve it.

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
krabagoAuthor Commented:
I'm curious - the user that the error message is complaining about is the server itself. Is the server itself trying to run a cmdlet? If so, then why didn't Exchange configure itself to give permissions to the server to do what it needs to do?

I just added the server to the Organization Management group in the Exchange Security Groups container. Waiting to see if the error message continue to appear or not.
krabagoAuthor Commented:
The solution fixed the problem though no one is trying to run an exchange cmdlet. Some system account was attempting to run something that it had no permissions for.
Big Business Goals? Which KPIs Will Help You

The most successful MSPs rely on metrics – known as key performance indicators (KPIs) – for making informed decisions that help their businesses thrive, rather than just survive. This eBook provides an overview of the most important KPIs used by top MSPs.

In my case, the error is pointing directly to the user account which handles the Vipre Email Security Plugin Manager. It seems not quite right to add that account to the "Organization Management" group, but is that what I am to understand?
SriHarsha KTechnical Services SpecialistCommented:
This event generating for every 15 minutes there was no time delay it seems to reference some kind of system user account. So I don't think it’s any person trying to manage the Exchange console and Shell.
Let me know anybody can help me.?
SriHarsha KTechnical Services SpecialistCommented:
Check whether you have a Symantec backup which is running on background.  The Backup Exec logon account being used to access the Exchange server does not have the required permissions that's the reason you getting this error. Kindly follow this below link to fix the issue.


Umar Khathab
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today

From novice to tech pro — start learning today.