We have started getting more and more questions (as well as some support cases) around Address List Segregation with Exchange 2010. Some of our customers have also assumed that the existing Exchang...
Published Jan 07, 2010
Version 1.0
Blog Post
Well this is timely... We have had address list segregation in place since 2003... It was a mess when moving to 2007 and we worked with PSS to get things all sorted again. Luckily our 2010 migration did not squawk at all and everything has been working fine - HOWEVER! I just tried to create a new address list for the first time since moving to 2010, and I get: Active Directory operation failed on dc2.tvo.local. This error is not retriable. Additional information: Access is deni
ed.
Active directory response: 00000005: SecErr: DSID-031521D0, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0
+ CategoryInfo : NotSpecified: (0:Int32) [New-AddressList], ADOperationException
+ FullyQualifiedErrorId : D9F75077,Microsoft.Exchange.Management.SystemConfigurationTasks.NewAddressList
I am guessing this is due to custom ACLs. A 2010 document carefully and explicitly outlining what permissions need to be where will be much appreciated.
thanks,
Wes
ed.
Active directory response: 00000005: SecErr: DSID-031521D0, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0
+ CategoryInfo : NotSpecified: (0:Int32) [New-AddressList], ADOperationException
+ FullyQualifiedErrorId : D9F75077,Microsoft.Exchange.Management.SystemConfigurationTasks.NewAddressList
I am guessing this is due to custom ACLs. A 2010 document carefully and explicitly outlining what permissions need to be where will be much appreciated.
thanks,
Wes