none
Insufficient permission to view Organization Configuration (Exchange 2010) RRS feed

  • Question

  • I have come down to the last (hopefully) errors in re-installing an Exchange Server 2010. There is a separate AD which is a production machine, hence my many problems since the original Exchange was not properly excised. It says (although I am in all the AD Exchange Security Groups and am an Enterprise Admin) that I do not have sufficient permission to view the Organization Configuration (yet am the one who both set up the original and the redo). I do not have outlook on the server machine. I did try to wrest my way in through the Windows (not Exchange) Power Shell, but receive the following error after setting up my credential:

    PS C:\Windows\system32> Import-PSSession $Session -AllowClobber
    Import-Module : There were errors in loading the format data file:
    Microsoft.Exchange.Management.PowerShell.Setup, C:\Program Files\Microsoft\Exchange Server\V14\bin\Exchange.format.
    ps1xml  : File skipped because it was already present from "Microsoft.Exchange.Management.PowerShell.E2010".
    At line:3 char:30
    +                 Import-Module <<<<  -Name $name -Alias * -Function * -Prefix $prefix -DisableNameChecking
     -PassThru -ArgumentList @($session)
        + CategoryInfo          : InvalidOperation: (:) [Import-Module], RuntimeException
        + FullyQualifiedErrorId : FormatXmlUpateException,Microsoft.PowerShell.Commands.ImportModuleCommand

    I have been trying to resolve this (and all the other errors) for over two weeks. If this cannot be resolved today, I believe I will quit and wipe the server machine clean, set it up in its own domain and institute a two way trust between my domain and it - that will at least work (I hope).

    Wednesday, September 19, 2012 4:42 PM

Answers

  • Larry,

    It appears like the RBAC is tampered for the User who is not able to open the EMC.

    1. Is the user accessing EMC member of Organization Management. if not, Make sure it is a member of Organization Management.

    2. Create another user like TestEMC and make it a member of Organization Management, Enterprise admins, Domain Admins, Schema Admins, Built-in Administrators, Group policy Creator Owners and run the command below on the powershell: Set-User -RemotePowershellEnabled:$True

    3. Log of and login with TestEMC and check if we still get the same error when accessing the organization configuration on the EMC.

    4. if it works for TestEMC then it could be something to do with Profile corruption for the user who is not able to acess EMC.

    BTW, we can also try this: Open Powershell as Administrator and the commands one after the other:

    Add-Pssnapin *Setup
    
    Install-CannedRBACRoleAssignments -InvocationMode Install
    
    Install-CannedRBACRoles
    
    Install-CannedRBACRoleAssignmentsRAP
    
    Install-CannedAddressLists

    # The above will try to repropagate RBAC for the user with which we have logged on to the machine.

    Let me know if this works!

    ______________________________________________________

    Pavan ~ ( Exchange Support | 2003/2007/2010) ~Mark this if Useful

    • Marked as answer by larrymthompson Monday, September 24, 2012 3:45 AM
    Saturday, September 22, 2012 2:00 AM

All replies

  • I have come down to the last (hopefully) errors in re-installing an Exchange Server 2010... It says (although I am in all the AD Exchange Security Groups and am an Enterprise Admin) that I do not have sufficient permission to view the Organization Configuration (yet am the one who both set up the original and the redo).

    Hi larry,

    Please post the full error message here when you try to reinstall the Exchange server.

    Why you want to re-install the Exchange server?

    It is better to tell how many Exchange server do you have.


    Frank Wang

    TechNet Community Support

    Friday, September 21, 2012 6:19 AM
  • I have one Exchange Server 2010 on a Windows 2008 R2 server. The active directory is located on another (production) 2008 R2 server. There was a fault in the original installation server and it was wiped clean in an effort to reinstall the Exchange Server. After a long and arduous path I have the Exchange Server reinstalled and partially running. When I go to do simple things I cannot use the EMC because of the permission problem.

    I have labored (and with the help of this forum) have gotten this far. However my boss would like the problem resolved very quickly at this point or find a different way of implementation. To summarize, I have no installation (reported) errors. Just a permissions error and I do not know how to correct it as I am in every Exchange Security Group in Active Directory, am an Enterprise Admin (Domain admin, etc).

    Any help is appreciated, but by the end of today (9-21-2010) I have to either resolve or try another path.

    Larry Thompson

    Friday, September 21, 2012 2:11 PM
  • Larry,

    It appears like the RBAC is tampered for the User who is not able to open the EMC.

    1. Is the user accessing EMC member of Organization Management. if not, Make sure it is a member of Organization Management.

    2. Create another user like TestEMC and make it a member of Organization Management, Enterprise admins, Domain Admins, Schema Admins, Built-in Administrators, Group policy Creator Owners and run the command below on the powershell: Set-User -RemotePowershellEnabled:$True

    3. Log of and login with TestEMC and check if we still get the same error when accessing the organization configuration on the EMC.

    4. if it works for TestEMC then it could be something to do with Profile corruption for the user who is not able to acess EMC.

    BTW, we can also try this: Open Powershell as Administrator and the commands one after the other:

    Add-Pssnapin *Setup
    
    Install-CannedRBACRoleAssignments -InvocationMode Install
    
    Install-CannedRBACRoles
    
    Install-CannedRBACRoleAssignmentsRAP
    
    Install-CannedAddressLists

    # The above will try to repropagate RBAC for the user with which we have logged on to the machine.

    Let me know if this works!

    ______________________________________________________

    Pavan ~ ( Exchange Support | 2003/2007/2010) ~Mark this if Useful

    • Marked as answer by larrymthompson Monday, September 24, 2012 3:45 AM
    Saturday, September 22, 2012 2:00 AM