Exchange 2010 Public Folder rights
-
Monday, May 10, 2010 1:00 PM
Hi,
When I try to mail enable a public folder in Exchange 2010 I recieve this error:
Microsoft Exchange Error
--------------------------------------------------------
Action 'Mail Enable' could not be performed on object 'Inkomna'.Inkomna
Failed
Error:
Active Directory operation failed on domain.com. This error is not retriable. Additional information: Access is denied.
Active directory response: 00000005: SecErr: DSID-03151E04, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0
The user has insufficient access rights.
--------------------------------------------------------
OK
--------------------------------------------------------I have made a transition from exchange 2003 to 2010 and all public folders are replicated.
I have all the necessary rights to mail enable PF. My account is in all RBAC roles and I'm a domain admin and exchange admin.
I have checked that my account "Include inheritable permission from this objects parent".I can create a PF in Exchange 2003 and replicate it to Exchange 2010 but I can't mail enable a PF that was created on Exchange 2010.
Do you have any ideas what it could be?
I have been banging my head in the wall the last few days.Regards,
Mikael
All Replies
-
Monday, May 10, 2010 1:17 PM
The error message clearly indicates a problem with permissions.
check to see if you belong to correct Role Group with the help of Get-RoleGroupMember "Public Folder Management"
Milind Naphade | MCTS:M (Exchange 2007 and 2010) | http://www.msexchangegeek.com
-
Wednesday, May 12, 2010 7:48 AMModerator
Please verify if the “Public Folder Management” role is associated with the account that you used
Get-ManagementRoleAssignment -RoleAssignee Account | Ft -Wrap
Please put the account into “Public Folder Management” role group, and see if the issue still appears
James Luo
TechNet Subscriber Support (http://technet.microsoft.com/en-us/subscriptions/ms788697.aspx)
If you have any feedback on our support, please contact tngfb@microsoft.com -
Wednesday, May 12, 2010 8:11 AM
Hi,
Thank you for your answer.
As I stated above, my account is already in the correct role group (Public folder management, Recipient Management and Organization management).I ran the prepareAD switch again and it solved my problem.
Thanks!
/Mikael
- Marked As Answer by Alan.GimModerator Wednesday, May 12, 2010 8:28 AM

