Microsoft KB Archive Search

Notice: This website is an unofficial Microsoft Knowledge Base (hereinafter KB) archive and is intended to provide a reliable access to deleted content from Microsoft KB. All KB articles are owned by Microsoft Corporation. Read full disclaimer for more details.

  1. Home
  2. Add-ADPermission cmdlet together with a DomainController parameter fails in an Exchange Server 2010 environment

Add-ADPermission cmdlet together with a DomainController parameter fails in an Exchange Server 2010 environment

View products that this article applies to.

Symptoms

Consider the following scenario:
  • You have two domains (domain A and domain B) in a Microsoft Exchange Server 2010 environment.
  • You deploy an Exchange Server 2010 Mailbox server in domain A, and then you create a user account in domain B.
  • You try to grant the user permissions to a mailbox in domain A. To do this, you run the Add-ADPermission cmdlet and specify a global catalog server that is in domain B as the domain controller.
In this scenario, the cmdlet fails, and you receive the following error message:
User wasn't found. Please make sure you've typed it correctly.
+ CategoryInfo : InvalidArgument: (:) [Add-ADPermission], ManagementObjectNotFoundException
+ FullyQualifiedErrorId : Error ID,Microsoft.Exchange.Management.RecipientTasks.AddADPermission

↑ Back to the top

Cause

This issue occurs because the Exchange server does not use the specified global catalog server when an Active Directory session is created after the role-based access control (RBAC) scope verification process is complete.

↑ Back to the top

Resolution

To resolve this issue, install the following update rollup:
2706690 Description of Update Rollup 4 for Exchange Server 2010 Service Pack 2

↑ Back to the top

Status

Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.

↑ Back to the top

More Information

For more information about the Enable-Mailbox cmdlet, go to the following Microsoft website:
General information about the Enable-Mailbox cmdlet
For more information about the Add-ADPermission cmdlet, go to the following Microsoft website:
General information about the Add-ADPermission cmdlet

↑ Back to the top

Keywords: kbqfe, kbfix, kbsurveynew, kbexpertiseinter, kb

↑ Back to the top

Article Info
Article ID : 2698899
Revision : 1
Created on : 1/7/2017
Published on : 8/16/2012
Exists online : False
Views : 375