Avatar of Blaise Fournier
Blaise Fournier
Flag for Switzerland asked on

Need help resolving error when managing mailbox folder rights for users in different subdomains in Exchange 2016

We have trouble adding rights to the calendar folder of one user to another user who is on another subdomain.
We run Exchange 2016 (Version 15.1 (Build 1466.3) and have a main domain we will call domain.local and 5 subdomains. Exchange server is in domain.local.
User1 is in subdomain A.domain.local and has email address user1@customdomain1.com
User2 is in subdomain B.domain.local and has email address user2@customdomain2.com
We ran the following command to add LimitedDetails rights to B.domain.local\user2 on A.Domain.local user2’s calendar:
Add-MailboxFolderPermission -Identity A.domain.local\user1:\calendar -User user2@customdomain2.com -AccessRights LimitedDetails

We get the following error:
The user "FirstName Lastname user2@customdomain2.com" was found in Active Directory but isn't valid to use for permissions. Try an SMTP address instead.
+ CategoryInfo          : NotSpecified: (:) [Add-MailboxFolderPermission], InvalidInternalUserIdException
    + FullyQualifiedErrorId : [Server=XXXXXX,RequestId=XXXXXXX,TimeStamp=01.02.2019 10:31:07] [FailureCategory=Cmdlet-InvalidInternalUserIdException]XXXXXX,Microsoft.Exchange.Management.StoreTask
    + PSComputerName        : exc01.domain.com

Can you please help us solve this problem?
Thanks in advance for your help.
Best regards
ExchangeActive Directory

Avatar of undefined
Last Comment
Blaise Fournier

8/22/2022 - Mon
Roland Lee

Maybe you can try something like this
Get-Mailbox "WhateverMailbox" | Add-MailboxPermission -AccessRights FullAccess, ExternalAccount -User "remote-domain\user"
Ibrahim Benna

Is user2@customdomain2.com the person's SMTP address or is it their UPN with a custom suffix?

Can you try using User2's Alias or even their full DN as in:

Add-MailboxFolderPermission -Identity A.domain.local\user1:\calendar -User "CN=User2,OU=xyz,DC=B,DC=domainDC=local" -AccessRights LimitedDetails
Blaise Fournier

Thanks for the tip Ibrahim Benna, but the error remains the exactly same.
Experts Exchange is like having an extremely knowledgeable team sitting and waiting for your call. Couldn't do my job half as well as I do without it!
James Murphy
Blaise Fournier

Thank you Roland Lee but what I want to achieve is to add a permission to the user's calendar. The command you suggested would try to add permissions to the mailbox. In my case this is not an option.
Blaise Fournier

user2@customdomain2.com is the person's SMTP address. Sorry I forgot to mention this.
Blaise Fournier


We have investigated and found out that the error appears only with users which have been migrated during a cross-forest migration. The command runs normally for users that have been created after the migration. Thank you all for you input. I will post more info as we continue to investigate.
Get an unlimited membership to EE for less than $4 a week.
Unlimited question asking, solutions, articles and more.
Blaise Fournier

The command works again without action on our part ... I guess we'll never know what happened here.
Blaise Fournier

The error appears again. A case has been opened with MS support and will post a solution if one is found.
Best regards
Blaise Fournier

No news so far sorry.
Your help has saved me hundreds of hours of internet surfing.
Blaise Fournier

Log in or sign up to see answer
Become an EE member today7-DAY FREE TRIAL
Members can start a 7-Day Free trial then enjoy unlimited access to the platform
Sign up - Free for 7 days
Learn why we charge membership fees
We get it - no one likes a content blocker. Take one extra minute and find out why we block content.
Not exactly the question you had in mind?
Sign up for an EE membership and get your own personalized solution. With an EE membership, you can ask unlimited troubleshooting, research, or opinion questions.
ask a question