Exchange 201O certificate error

Dear experts,

I have an error when I run "get-exchangecertificate".
error:
The operation on server "mycas" failed because it's not within your authorized scope. Use get-managementRoleAssignment to verify your scope or contact your exchange administrator. "Mycas" isn't within your current write scope. Can't perform save operation. it was running the command get-exchangecertificate -server mycas.

I'm running with domain admin account and all Exchange servers have "trusted exchange ..." in their local admin group. I have the error on all our exchange servers.

how can we solve this issue?
kind rgs,
DigitBoyAsked:
Who is Participating?
 
Sushil SonawaneConnect With a Mentor Commented:
Please check the user have the permission to access get command or certificate ralted command in Role Based Access Control.

Run the following commands:

Set-Mailbox "your admin account" -RoleAssignmentPolicy "default role assignment policy"

then check.

For more details RBAC please refer below link.

(http://technet.microsoft.com/en-us/library/dd298183.aspx)

(http://www.sysadminlab.net/exchange/rbac-and-exchange-2010-permission-model-explained-for-new-sysadmins)

(http://www.mikepfeiffer.net/2010/11/7-useful-one-liners-when-managing-rbac-in-exchange-2010/)
0
 
DigitBoyAuthor Commented:
thanks for your response, but our admin account doesn't have mailbox.
0
 
Sushil SonawaneCommented:
Create a mailbox then try it
0
Making Bulk Changes to Active Directory

Watch this video to see how easy it is to make mass changes to Active Directory from an external text file without using complicated scripts.

 
DigitBoyAuthor Commented:
due to internal policy we cannot create for our domain admin accounts. Do you have another possible idea please?

How can i list if our domain accounts have the necessary permissions please?
0
 
Sushil SonawaneCommented:
whoami /group you will get only AD permission.
0
 
DigitBoyAuthor Commented:
.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.