Authorisation issues for EMS commands

Alexandre Takacs
Alexandre Takacs used Ask the Experts™
on
Hello

I'm having some issues doing a mailbox export:

Unable to open PST file '\\172.16.200.253\Backup\Exchange\something.pst'. Error details: Access to the path
'\\172.16.200.253\Backup\Exchange\something.pst' is denied.
    + CategoryInfo          : NotSpecified: (:) [New-MailboxExportRequest], RemotePermanentException
    + FullyQualifiedErrorId : [Server=EX-SX-01,RequestId=65a2fb01-ab0d-4897-a021-56eddb92b1bd,TimeStamp=12/12/2019 8:4
   1:01 AM] [FailureCategory=Cmdlet-RemotePermanentException] 367B53CE,Microsoft.Exchange.Management.Migration.Mailbo
  xReplication.MailboxExportRequest.NewMailboxExportRequest
    + PSComputerName        : ex-sx-01.domain.local

Open in new window


clearly some authorisation issue... In what "context" does the interactive PowerShell execute? The "launching" user is definitely able to access the \\172.16.200.253\Backup\Exchange UNC path so I guess the command does not run within that context ?
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
AmitIT Architect
Distinguished Expert 2017

Commented:
Which account you are using to access UNC path. Just goto run and type \172.16.200.253\Backup\

Tell me, the result.

Author

Commented:
I am logged in as exchangeadmin (which is an AD user having exchange admin rights).
I can access the UNC without issue from the explorer - create files etc

explorer
AmitIT Architect
Distinguished Expert 2017

Commented:
Did you set powershell into unrestricted mode on remote server. If not set it and then try again.
Angular Fundamentals

Learn the fundamentals of Angular 2, a JavaScript framework for developing dynamic single page applications.

Author

Commented:
Sorry not following you - what remote server ? I am running this locally on the Exchange machine. There is no remote component involved to the best of my knowledge.
IT Architect
Distinguished Expert 2017
Commented:
Ok my bad, i advise you to check below KB: Check if this help:
https://www.stellarinfo.com/blog/new-mailboxexportrequest-access-to-path-is-denied/

Author

Commented:
Excellent - that was my problem.

The AD group "Exchange Trusted Subsystem group" needs to have write rights to the share !

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial