Can’t assign permission to user in Exchange

Asked By 0 points N/A Posted on -
qa-featured

Hi guys,

We are using Exchange 2010 and Windows 2008 DC. I receive an error while trying to add a user then add permissions to user (e.g. Bob Lin) in EMC. The error is:

Active Directory operation failed on 2008DC1.chicagotech.net. This error is not retriable. Additional information: Access is denied.

Active directory response: 00000005: SecErr: DSID-03152492, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0

The user has insufficient access rights.

Click here for help.  (EXCHG.140).aspx?v=14.1.218.11&t=exchgf1&e=ms.exch.err.Ex6AE46B

Exchange Management Shell command attempted:

Add-ADPermission -Identity 'CN=Bob Lin,CN=Users,DC=chicagobtech,DC=net' -User 'DOMAINbesadmin' -ExtendedRights 'Send-as'

Elapsed Time: 00:00:04

I tried to fix it a lot of times, but still the issue comes out for this user.  I don’t understand the problem.

Please help.

Thanks in advance.

SHARE
Answered By 0 points N/A #96125

Can’t assign permission to user in Exchange

qa-featured

Try to find out the log from the exchange server…

Go to your start menu and run extra.exe

Then you will notice a "welcome to the exchange troubleshooting assistant" page

Click on select a task

Then you will see  "troubleshooting task selection screen" page

Click on trace control

Then click on the next prompt

The prompt will alert you to the possible performance problems that running a trace..

This server does not have the module needed for interpreting traces etc etc

Go to the page  configure trace file configure this options given below

Trace file location "the default location is exchangedebug traces.etl"

Your trace file size should be 100MB and is recommended

Enable sequential logging

Then run traces for zero seconds {stop tracing manually, it wont stop automatically}

Set manual trace tag after completing everything

Then do this :

Trace types (pfd, fatal, error, warning, info,debug, performance, function)

Components that trace for (adrecipientpermission)

Tag the trace (adpermission)

Click start tracing which is located from the bottom of the page.

This will search all the problems. after searching completes click on next

That's all from me. if you still find the similar problem then send me the logs, i will try my best to solve it

Thank you.

Related Questions