Avatar of stadarnet
Flag for Iceland asked on

Granting full access to mailboxes fails

After applying RU6 for Exchange 2010 SP1, my administrators can't grant mailbox rights, but get this error:

The operation on mailbox "Domain.local/Microsoft Exchange Hosted Organizations/VI/mailbox@domain.is" failed because it's out of the curre
nt user's write scope. The object 'Domain.local/Microsoft Exchange Hosted Organizations/VI/mailbox@domain.is' must be within the read sco
pe before and after it's modified. Can't perform the save operation.
    + CategoryInfo          : NotSpecified: (KL4.local/Micro...ilbox@domain.is:ADObjectId) [Add-MailboxPermission], TaskInvalidOperati
    + FullyQualifiedErrorId : 929D6867,Microsoft.Exchange.Management.RecipientTasks.AddMailboxPermission.

I can't seem to find anything out there to help me resolve this issue.  As you see this is a hosted Exchange 2010 SP1.

Avatar of undefined
Last Comment

8/22/2022 - Mon
Rajkumar Duraisamy

Log in or sign up to see answer
Become an EE member today7-DAY FREE TRIAL
Members can start a 7-Day Free trial then enjoy unlimited access to the platform
Sign up - Free for 7 days
Learn why we charge membership fees
We get it - no one likes a content blocker. Take one extra minute and find out why we block content.
Not exactly the question you had in mind?
Sign up for an EE membership and get your own personalized solution. With an EE membership, you can ask unlimited troubleshooting, research, or opinion questions.
ask a question

I tried:

Set-AdServerSettings -ViewEntireForest $True  (This is Exchange 2010)

But I get the same error.

This could also be helpful in troubleshooting this:

[PS] C:\Windows\system32>Get-ADServerSettings | Format-List

RunspaceId                                 : 086a1d70-73ff-4ca6-a82d-1bd4ef5994ec
DefaultGlobalCatalog                       : XXXMSAD02.KL4.local
PreferredDomainControllerForDomain         : {}
DefaultConfigurationDomainController       : XXXMSAD01.DOMAIN.local
DefaultPreferredDomainControllers          : {XXXMSAD02.DOMAIN.local}
UserPreferredGlobalCatalog                 :
UserPreferredConfigurationDomainController :
UserPreferredDomainControllers             : {}
RecipientViewRoot                          :
ViewEntireForest                           : True
WriteOriginatingChangeTimestamp            : False
WriteShadowProperties                      : False
Identity                                   :
IsValid                                    : True
All of life is about relationships, and EE has made a viirtual community a real community. It lifts everyone's boat
William Peck