?
Solved

creating service email account permissons error

Posted on 2014-02-12
4
Medium Priority
?
490 Views
Last Modified: 2014-02-12
hi,

im creating a service account for a Barracuda message archiver using this guide

http://techlib.barracuda.com/display/BMAv31/Creating%2Ban%2BEmail%2BService%2BAccount%2Bfor%2BMicrosoft%2BExchange%2BServer%2B2007%252C%2B2010%252C%2Band%2B2013#

when i try to assign the permissons using this command

Get-MailboxDatabase | Add-ADPermission -User "CUDASVC" -AccessRights ExtendedRight -ExtendedRights Receive-As, ms-Exch-Store-Admin

i get the following error

Active Directory operation failed on xxxxxxxxx. This error is not retriable. Additional information: Access
is denied.
Active directory response: 00000005: SecErr: DSID-031521E1, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0

    + CategoryInfo          : WriteError: (90:Int32) [Add-ADPermission], ADOperationException
    + FullyQualifiedErrorId : [Server=MAIL1,RequestId=b17cd5eb-8aa7-4a9b-b45e-98a715d1201d,TimeStamp=12/02/2014 10:23:
   30] D02A787E,Microsoft.Exchange.Management.RecipientTasks.AddADPermission
    + PSComputerName        : xxxxxxxxxx

we are using exchange 2013 and server 2012

any ideas ?
0
Comment
Question by:kungfunavs
  • 2
  • 2
4 Comments
 
LVL 15

Expert Comment

by:Raj-GT
ID: 39852935
Is the service account, CUDASVC member of any protected groups like Account Admins, Domain Admins etc.?
0
 

Author Comment

by:kungfunavs
ID: 39852978
Hi Raj

no the account isnt a member of any protected groups
0
 
LVL 15

Accepted Solution

by:
Raj-GT earned 2000 total points
ID: 39853014
Few more things to check.

1. Check the Advanced Security Settings page of the user object and see if the "inheritable permissions" is enabled
2. Try running EMS with a Domain Admin or an Exchange Org Admin account
3. Create a new (test) service account and see if you can run the command successfully against it
0
 

Author Comment

by:kungfunavs
ID: 39853178
thanks, i logged in with a exchange org admin account and it completed successfully
0

Featured Post

Concerto Cloud for Software Providers & ISVs

Can Concerto Cloud Services help you focus on evolving your application offerings, while delivering the best cloud experience to your customers? From DevOps to revenue models and customer support, the answer is yes!

Learn how Concerto can help you.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Exchange administrators are always vigilant about Exchange crashes and disasters that are possible any time. It is quite essential to identify the symptoms of a possible Exchange issue and be prepared with a proper recovery plan. There are multiple…
Among the most obnoxious of Exchange errors is error 1216 – Attached Database Mismatch error of the Jet Database Engine. When faced with this error, users may have to suffer from mailbox inaccessibility and in worst situations, permanent data loss.
Exchange organizations may use the Journaling Agent of the Transport Service to archive messages going through Exchange. However, if the Transport Service is integrated with some email content management application (such as an anti-spam), the admin…
Planning to migrate your EDB file(s) to a new or an existing Outlook PST file? This video will guide you how to convert EDB file(s) to PST. Besides this, it also describes, how one can easily search any item(s) from multiple folders or mailboxes…
Suggested Courses

621 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question