 mudcow007 World Chat Champion

Joined: 01 Feb 2012 Karma :   
|
|
 mudcow007 World Chat Champion

Joined: 01 Feb 2012 Karma :   
|
|
 B0ndy Spanner Monkey

Joined: 25 May 2015 Karma :     
|
 Posted: 14:33 - 04 Jun 2015 Post subject: Re: any exchange 2013 peeps in the hizz-ouse? |
 |
|
| mudcow007 wrote: | Just installed Exchange 2013 on a spanking new 12r2 box
domain is 08r2 functional level
Exchange installed, setup sending connector, installed SSL cert, setup policies (email etc)
now when im adding users i get a permissions error
| Quote: | Active Directory operation failed on DC2.hrx.ds this error is not retriable. Additional information: Insufficient access rights to perform the operation. Active directory response: 00002098:SecErr: DSID-0315BB9, problem 4003
(INSUFF_ACCESS_RIGHTS), data 0 |
this is logging into Exchange as Admin
stumped.... |
Are you using the EAC or PowerShell?
If you're using EAC try creating the accounts using the latest and greatest PowerShell cmdlet. I've always found when using the webapp for managing Office365 troublesome and mainly stuck to using PowerShell since that's what Microsoft seem to want us to do anyway!
It's been a while since I managed Exchange in house (I used to manage Office365 in my last workplace, lucky me lol) but am I right in remembering you create the user in AD first then mail enable the account? or has it all changed since 2010.
Also just double checking you're using the domain admin account for creating accounts and not the servers local admin account. I suspect Exchange needs to create a AD account and using the local admin account for the server won't of course suffice.
As I say - it's been a while since I've had to manage Exhange in house but hope that helps  ____________________ CBF 125 -> CB400SF -> GSX600F -> ZX6R (G1) -> GSXR1000 K4 -> ZX6R (B1H Stunt bike) -> VFR800 -> R1 5PW -> Sprint 1050 -> Fireblade 929 -> ZX10R C2H -> GSXR1000 K3 |
|
 mudcow007 World Chat Champion

Joined: 01 Feb 2012 Karma :   
|
 Posted: 07:44 - 05 Jun 2015 Post subject: |
 |
|
turns out permissions were not being "inherited" from the parent OU in AD
weirdly, some have other hadn't.....most users are within the same OU but ones effected where from both OUs
very odd
thanks though  |
|