Hmm... You have full rights and the target user object doesn't have a mailbox already, correct (or, no lingering attributes from a previous mailbox either)? No inherit permissions problems right? Cleanup agent didn't log any errors?
Realistically, these are attributes that you should be able to write to at will. If it's not allowing the reconnection, there's something else that's likely going on. If the rights are identical on the objects, then checking to see that the target object is not the problem is a likely next course. Did you create the target at this time or ? On 12/19/06, Tom Kern <[EMAIL PROTECTED]> wrote:
Exchange 2k3 sp2 no customization Waiting about 4 days now :) I did 2 tests- 2 users in diff ou's and 2 users in diff domains. The AD guys gave use perms on all exchange attributes in all domains in our forest at the domain level and inherited down. According to the MS docs, we really have more perms than we need. None of the users are protected(AdminSDHolder). Thanks On 12/19/06, Al Mulnick <[EMAIL PROTECTED]> wrote: > Which version of Exchange? > > Are the users you want to connect to in the same OU's? > Any customizations to your Exchange org? > How long in between the operations are you waiting? > > I wouldn't expect Send As rights to make a difference. I would expect > inherited permissions to make a difference. I would also expect that your > administrative tools should be as current as the Exchange servers. > > > > Al > > > > On 12/19/06, Tom Kern <[EMAIL PROTECTED]> wrote: > > I know. I have write/read perms to all those attributes. > > Thats why i'm confused as to why its not working... > > > > > > Thanks > > > > On 12/18/06, Tony Murray <[EMAIL PROTECTED] > wrote: > > > I don't know for sure - I haven't tested it. Even if you don't need > Send As permissions on the object to which you want to reconnect you will > need permissions to write a whole bunch of attribute values on the object > (homeMDB, proxyAddresses, legacyExchangeDN, etc.). > > > > > > Tony > > > ---------- Original Message > ---------------------------------- > > > From: "Tom Kern" <[EMAIL PROTECTED]> > > > Reply-To: ActiveDir@mail.activedir.org > > > Date: Mon, 18 Dec 2006 17:59:16 -0500 > > > > > > I'm almost positive you dont need "Send As" perms to reconnect a > > > mailbox but i may be wrong... > > > > > > Thanks, I'll give it a test. I hate asking the AD guys for more perms... > :( > > > > > > On 12/17/06, Tony Murray <[EMAIL PROTECTED]> wrote: > > > > Does the account you are using to perform the reconnect have Send As > > > > permissions on the user object? See the link below for the correct > > > > application of Send As permissions. > > > > > > > > > http://msexchangeteam.com/archive/2005/01/07/348596.aspx > > > > > > > > Tony > > > > > > > > -----Original Message----- > > > > From: [EMAIL PROTECTED] > > > > [mailto:[EMAIL PROTECTED] On Behalf > Of Tom Kern > > > > Sent: Sunday, 17 December 2006 2:22 p.m. > > > > To: activedirectory > > > > Subject: [ActiveDir] Exchange reconnect(OT) > > > > > > > > I have Exchange delegated full admin rights on the ex2k3 sp2 org and i > have > > > > all the read/write perms to mailbox-enabled user attributes listed > here- > > > > > http://www.microsoft.com/technet/prodtechnol/exchange/Guides/E2k3ADPerm/bdc1 > > > > 19c9-961a-4e78-acf8-97099256f452.mspx ?mfr=true > > > > > > > > However,I'm running into this issue- > > > > I delete a users mailbox, which works fine. When i try to reconnect > this > > > > orphaned mailbox to a different user, i get this error- "you do not > have the > > > > rights required to complete the operation Id no: c1030728" > > > > > > > > Reconnecting back to the old user works fine. > > > > > > > > I have the exact same rights to the exchange attributes on both user > > > > objects. > > > > > > > > Is there more to permissions under the hood when reconnecting a > mailbox to a > > > > diff user than mailbox enabling a user that i'm running into. > > > > I notice there is nothing in the Working with AD permssions white > paper > > > > about reconnecting a mailbox to a diff user but i just thought it was > the > > > > same exact rights needed for mailbox-enabling a user. > > > > > > > > Thanks > > > > List info : http://www.activedir.org/List.aspx > > > > List FAQ : http://www.activedir.org/ListFAQ.aspx > > > > List archive: > http://www.mail-archive.com/activedir@mail.activedir.org/ > > > > > > > > List info : http://www.activedir.org/List.aspx > > > > List FAQ : http://www.activedir.org/ListFAQ.aspx > > > > List archive: > http://www.mail-archive.com/activedir@mail.activedir.org/ > > > > > > > List info : http://www.activedir.org/List.aspx > > > List FAQ : http://www.activedir.org/ListFAQ.aspx > > > List archive: > http://www.mail-archive.com/activedir@mail.activedir.org/ > > > > > > > > > > > > > > > > > > > > > > ________________________________________________________________ > > > Sent via the WebMail system at mail.activedir.org > > > > > > > > > > > > > > > List info : http://www.activedir.org/List.aspx > > > List FAQ : http://www.activedir.org/ListFAQ.aspx > > > List archive: > http://www.mail-archive.com/activedir@mail.activedir.org/ > > > > > List info : http://www.activedir.org/List.aspx > > List FAQ : http://www.activedir.org/ListFAQ.aspx > > List archive: > http://www.mail-archive.com/activedir@mail.activedir.org/ > > > > List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir@mail.activedir.org/
