none
Can't log in to ECP RRS feed

  • Question

  • I can't log into ecp management site to manage exchange 2016. The error is:

    exchange 2016 403 sorry! access denied :(you don't have permission to open this page. if you're a new user or were recently assigned credentials, please wait 15 minutes and try again.

    What rights does a user account need to log into it?


    Alan

    Friday, May 24, 2019 5:58 PM

All replies

  • Please check if the user has the following the groups memberships:

    1. organization management

    2.Schema admin

    3.domain admin

    4. enterprise admin

    Mark if this post is helpful

    Best Regards,

    Rafiul

    Saturday, May 25, 2019 6:11 AM
  • Hi Alan,

    As Rafiul said, a normal user doesn't have permission to login ECP, we should make sure this user is contained in those groups before logging ECP:

    Regards,

    Kyle Xu


    Please remember to mark the replies as answers if they helped. If you have feedback for TechNet Subscriber Support, contact tnsf@microsoft.com.

    Click here to learn more. Visit the dedicated forum to share, explore and talk to experts about Microsoft Teams.

    Monday, May 27, 2019 6:13 AM
    Moderator
  • I have a different user who just resigned. He is not a member of Domain Admins, Schema Admins,Organaizaion Admins, & Enterprise Admins. He is able to login to ECP and do the work like create mailbox, distribution groups...

    The purpose is not assign too much power to a user while still let him to do some administrative work. So there must be something else going on...


    Alan

    Tuesday, May 28, 2019 6:25 PM
  • Hi,

    For a non-admin user, you can let this users login ECP with RBAC:

    1. Create a new permission group, add "User Options" into this group, then add non-admin user to this group:

    2.This non-admin user will could login ECP now:

    3. If you want to get more permission to this user, you can add more roles to this permission group.

    Regards,

    Kyle Xu


    Please remember to mark the replies as answers if they helped. If you have feedback for TechNet Subscriber Support, contact tnsf@microsoft.com.

    Click here to learn more. Visit the dedicated forum to share, explore and talk to experts about Microsoft Teams.

    Thursday, May 30, 2019 8:58 AM
    Moderator
  • I tried it. But it doesn't work. I got same error.

    Alan

    Friday, May 31, 2019 8:29 PM
  • Could you login ECP with administrator account? Please make sure ECP is working first.

    If there doesn't exist issue with ECP itself, could you provide screenshots about your testing to us? Such as:

    1. Which account do you used to login ECP?

    2. Which permission do you assigned to this account?

    2. Error page for this issue.

    Regards,

    Kyle Xu


    Please remember to mark the replies as answers if they helped. If you have feedback for TechNet Subscriber Support, contact tnsf@microsoft.com.

    Click here to learn more. Visit the dedicated forum to share, explore and talk to experts about Microsoft Teams.

    Monday, June 3, 2019 7:44 AM
    Moderator
  • 1. Which account do you used to login ECP?

    A formal employee who is not a member of Domain Admins ....etc. Just a plane user account.

    2. Which permission do you assigned to this account?

    Just regular exchange groups

    2. Error page for this issue.

    exchange 2016 403 sorry! access denied :(you don't have permission to open this page. if you're a new user or were recently assigned credentials, please wait 15 minutes and try again.


    Alan

    Monday, June 3, 2019 4:54 PM
  • >>A formal employee

    Does this user has his mailbox hosted on Exchange server?

    >>Just regular exchange groups

    Which groups do you add this user to? Are they RBAC permission group?

    Regards,

    Kyle Xu


    Please remember to mark the replies as answers if they helped. If you have feedback for TechNet Subscriber Support, contact tnsf@microsoft.com.

    Click here to learn more. Visit the dedicated forum to share, explore and talk to experts about Microsoft Teams.

    Wednesday, June 5, 2019 8:50 AM
    Moderator
  • Yes, it is RBAC permission group. Below is the group the account is in.

    Create Mail Enabled Security Groups
    Help Desk
    Mailbox import and export Rights
    Recipient Management
    Records Management


    Alan

    Wednesday, June 5, 2019 4:35 PM
  • Does this user has his mailbox hosted on Exchange server?

    Yes. I still kept it for this purpose to log into ecp.


    Alan

    Thursday, June 6, 2019 3:58 PM
  • Yes, it is RBAC permission group. Below is the group the account is in.

    Create Mail Enabled Security Groups
    Help Desk
    Mailbox import and export Rights
    Recipient Management
    Records Management


    Alan

    As I said before, I you want a normal user could login ECP, you need assign "User Options" administrator role to it at least.

    Regards,

    Kyle Xu


    Please remember to mark the replies as answers if they helped. If you have feedback for TechNet Subscriber Support, contact tnsf@microsoft.com.

    Click here to learn more. Visit the dedicated forum to share, explore and talk to experts about Microsoft Teams.

    Friday, June 7, 2019 2:37 PM
    Moderator
  • I did exactly as you asked. I created a new group and added user to it. Assign "User Options". But still I got Access Denied.

    Alan

    Wednesday, June 12, 2019 5:03 PM