Microsoft KB Archive Search

Notice: This website is an unofficial Microsoft Knowledge Base (hereinafter KB) archive and is intended to provide a reliable access to deleted content from Microsoft KB. All KB articles are owned by Microsoft Corporation. Read full disclaimer for more details.

  1. Home
  2. Mailbox users who are migrated by using ILM 2007 cannot use the Options menu in OWA in an Exchange Server 2010 environment

Mailbox users who are migrated by using ILM 2007 cannot use the Options menu in OWA in an Exchange Server 2010 environment

Symptoms

Consider the following scenario:
  • You use Microsoft Identity Lifecycle Manager (ILM) 2007 to migrate mailbox users in Active Directory directory service to mailbox users in a Microsoft Exchange Server 2010 environment.

    Note To do this, you run the Update-Recipient cmdlet on the Exchange server. This cmdlet adds attributes for the recipient objects that are created by using the global address list (GAL) Synchronization management agent in ILM 2007.
  • The migrated mailbox user clicks Options in Outlook Web Access (OWA).
In this scenario, the migrated mailbox user receives the following error message:
Sorry! Access denied.

↑ Back to the top

Cause

This issue occurs because the Update-Recipient cmdlet does not stamp the msExchRBACPolicyLink attribute for the recipient objects. Therefore, the Default Role Assignment Policy is not assigned to the recipient.

↑ Back to the top

Resolution

To resolve this issue, install the following update rollup:
2582113 Description of Update Rollup 5 for Exchange Server 2010 Service Pack 1

↑ Back to the top

Status

Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.

↑ Back to the top

More Information

For more information about the Update-Recipient cmdlet, visit the following Microsoft website:
General information about the Update-Recipient cmdlet
For more information about Identity Lifecycle Manager (ILM) 2007, visit the following Microsoft website:
General information about Identity Lifecycle Manager 2007
For more information about permissions in Exchange Server 2010, visit the following Microsoft website:
General information about permissions in Exchange Server 2010
For more information about the Set-Mailbox cmdlet, visit the following Microsoft website:
General information about the Set-Mailbox cmdlet

↑ Back to the top

Keywords: kbqfe, kbfix, kbsurveynew, kbexpertiseinter, kb

↑ Back to the top

Article Info
Article ID : 2536704
Revision : 2
Created on : 9/21/2018
Published on : 9/21/2018
Exists online : False
Views : 269