Link to home
Start Free TrialLog in
Avatar of stadarnet
stadarnetFlag for Iceland

asked on

Granting full access to mailboxes fails

After applying RU6 for Exchange 2010 SP1, my administrators can't grant mailbox rights, but get this error:

The operation on mailbox "Domain.local/Microsoft Exchange Hosted Organizations/VI/mailbox@domain.is" failed because it's out of the curre
nt user's write scope. The object 'Domain.local/Microsoft Exchange Hosted Organizations/VI/mailbox@domain.is' must be within the read sco
pe before and after it's modified. Can't perform the save operation.
    + CategoryInfo          : NotSpecified: (KL4.local/Micro...ilbox@domain.is:ADObjectId) [Add-MailboxPermission], TaskInvalidOperati
   onException
    + FullyQualifiedErrorId : 929D6867,Microsoft.Exchange.Management.RecipientTasks.AddMailboxPermission.

I can't seem to find anything out there to help me resolve this issue.  As you see this is a hosted Exchange 2010 SP1.
ASKER CERTIFIED SOLUTION
Avatar of Rajkumar Duraisamy
Rajkumar Duraisamy
Flag of India image
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of stadarnet
stadarnet
Flag of Iceland image

ASKER

I tried:

Set-AdServerSettings -ViewEntireForest $True  (This is Exchange 2010)

But I get the same error.
Avatar of stadarnet
stadarnet
Flag of Iceland image

ASKER

This could also be helpful in troubleshooting this:

[PS] C:\Windows\system32>Get-ADServerSettings | Format-List


RunspaceId                                 : 086a1d70-73ff-4ca6-a82d-1bd4ef5994ec
DefaultGlobalCatalog                       : XXXMSAD02.KL4.local
PreferredDomainControllerForDomain         : {}
DefaultConfigurationDomainController       : XXXMSAD01.DOMAIN.local
DefaultPreferredDomainControllers          : {XXXMSAD02.DOMAIN.local}
UserPreferredGlobalCatalog                 :
UserPreferredConfigurationDomainController :
UserPreferredDomainControllers             : {}
RecipientViewRoot                          :
ViewEntireForest                           : True
WriteOriginatingChangeTimestamp            : False
WriteShadowProperties                      : False
Identity                                   :
IsValid                                    : True