none
Impersonation failure: Das Abonnement kann nicht abgeschlossen werden. Überprüfen Sie die Berechtigungen

    Question

  • Situation: Exchange 2007 SP2

    Following Impersonation was tried:

    Get-ExchangeServer | where {$_.IsClientAccessServer -eq $TRUE} |
    ForEach-Object {Add-ADPermission -Identity $_.distinguishedname
    -User (Get-User -Identity usertest | select-object).identity
    -extendedRight ms-Exch-EPI-Impersonation}

    Tried with following rights in AD for the usertest account like:

    Only Domain User
    or
    Domain User and Domain Admin

    Still same failure when trying subscribe to the users mailboxes. Same failure also happens with the pubilcUser (to subscribe to the public folders)

    Later then I tried with following additional impersonation:

    GetMailboxDatabase | ForEachObject {AddADPermission Identity $_.DistinguishedName User usertest ExtendedRights msExchEPIMayImpersonate}

    Unfortunately, i got still the same failure.

    Please help, I don't have any idea why.

    Error in Log:

    06.06.13 09:25:33:000   5 EXCEPTION: Failed to start notification for alias [abc@test.ch] [Das Abonnement kann nicht abgeschlossen werden. Überprüfen Sie die Berechtigungen.]
       bei Microsoft.Exchange.WebServices.Data.ServiceResponse.InternalThrowIfNecessary()
       bei Microsoft.Exchange.WebServices.Data.MultiResponseServiceRequest`1.Execute()
       bei Microsoft.Exchange.WebServices.Data.ExchangeService.SubscribeToPullNotifications(IEnumerable`1 folderIds, Int32 timeout, String watermark, EventType[] eventTypes)
       bei Aastra.Oip.MSExchangeDriverEws.ExchUser.StartNotification()
    06.06.13 09:25:33:000   5     ********** User [abc@test.ch] added to monitoring list. Total = 1 **********
    06.06.13 09:25:33:000   5 Connecting to Exchange Server for alias [abc1@test.ch]
    06.06.13 09:25:33:031   5 >   ExchUser.StartNotification() for alias [abc1@test.ch]
    06.06.13 09:25:33:093   5 EXCEPTION: Failed to start notification for alias [abc1@test.ch] [Das Abonnement kann nicht abgeschlossen werden. Überprüfen Sie die Berechtigungen.]
       bei Microsoft.Exchange.WebServices.Data.ServiceResponse.InternalThrowIfNecessary()
       bei Microsoft.Exchange.WebServices.Data.MultiResponseServiceRequest`1.Execute()
       bei Microsoft.Exchange.WebServices.Data.ExchangeService.SubscribeToPullNotifications(IEnumerable`1 folderIds, Int32 timeout, String watermark, EventType[] eventTypes)
       bei Aastra.Oip.MSExchangeDriverEws.ExchUser.StartNotification()
    06.06.13 09:25:33:093   5     ********** User [abc1@test.ch] added to monitoring list. Total = 2 **********

    Tuesday, July 30, 2013 1:37 PM