Insufficient Access Rights when trying to modify send as permissions on a public folder

Where I work, we have 2 mailbox database servers and 2 cas servers on Exchange 2010, upgraded from Exchange 2003. We are finding that when trying to grant a user send as rights to a publlic folder we are getting an Insufficient Access Rights error. The
bizzare thing is for one particluar folder we can amend the send as rights with no issue on one of the cas servers but not the other cas or either db servers.
You would have thought if it was a user permissions issue i.e the adminsitrator not having sufficent rights it would fail on every server and likewise if it was a problem with the folder itself, why is it working on one of the cas servers? Also on
the one server this particluar folder does allow us to amend the rights, when we try to amend others we get the same error
If anyone has come accross this before and knows a fix please share it.
Thanks

Hi,
Please check the ownership of the affected public folder to make sure it points to the right server.
Here is a similar thread which may help you, please following the suggests in this thread to check result.
https://social.technet.microsoft.com/Forums/office/en-US/0960b944-82b2-42f1-b438-a7d57b7ab783/insuffaccessrights?forum=exchangesvrgenerallegacy
Best regards,
Belinda Ma
TechNet Community Support

Similar Messages

Keep Receiving: Error is: 'Insufficient access rights to perform the operation' When running script

Hello. I have a powershell script I run in our domain to disable AD accounts. Part of that also removes the users from all AD groups. That part of my script however keeps throwing up this Error is: 'Insufficient access rights to perform the operation'
error.
Now from our Exchange server if I run this script with powershell, things work fine. But running it on the domain controller is when I get this error. Thoughts?

Thanks Anna!
I was able to add this code below in to the script where it kept erroring out and it then worked. I had to point it to a different DC then it was running on.
–Server comp1.test.server.com
Thanks again!

Orcladmin: "Insufficient access right to perform action" using oidadmin

After sucessfully installing OID from 8.1.7 CD on Sun Solaris 8
(SPARC) I can start the monitor and the oidldap. After
sucessfully connecting with orcladmin using oidadmin I always get
the same error (either using oidadmin on windows or solaris) when
accessing "entry management", "schema management" or "audit log
management":
Insufficient access right to perform action.
but the default ACP allows everyone (browse add delete)
anyone else had the same problem?
I tried to create the name server with OID with netca which
obviously does not work either.

Hi Christian:
You say that you conencted to OID as "oidadmin". Since OID does
not have any user account called "oidadmin" you were probably
conencted as an anonymous user. If you are trying to connect as
the administrator of OID the correct user account name is
"orcladmin" with a default password of welcome. Try this and let
me know if you sitll have troubles.
Thanks,
Jay Tomlinson

Public folder migration 2010 to 2013 insufficient access rights

Hi,
I'm having a frustrating time with trying to migrate public folders. I've migrated all the mailboxes with no problems but when trying to migrate public folders with the same account it fails with this message;
Active directory response: 00002098: SecErr: DSID-03150BB9, problem 4003
(INSUFF_ACCESS_RIGHTS), data 0
--> The user has insufficient access rights.
The account is in the organisation management and recipient management group.
I've tried ticking the inherit permission box in AD security.
I've tried creating a brand new account with the same permissions.
Nothing works. I'm tempted just to export to pst and import it to the public folder mailbox.
Any help would be much appreciated.
Thanks

Hi Nick,
ensure that the new admin account has the allow inheritance permission included
Also ensure that the account has full rights to all the public folders in Ex2010
Go to the application log and there would be an event triggered for the same with some description. YOu can find that it might be failing permission on a particular public folder if so grant them access.
And also check if the permission failed public folder is mail enabled. If so please disable the mail enable on that PF cancel the migration request and start a new migration request with the below cmd
New-publicfoldermigrationrequest -sourcedatabase (Get-publicfolderdatabase -server servername -csvdata (get-content c:\contents.csv -encoding byte) -BadItemLimit 5000 -AcceptLargeDataLoss
Please mark as helpful if you find my contribution useful or as an answer if it does answer your question.That will encourage me - and others - to take time out to help you.
Regards,
Sathish

Set-aduser : Insufficient access rights to perform the operation

I am a domain admin, enterprise admin, exchange admin, domain user, and others.
While running a PS on a DC as the administrator, The commands I'm running are ...
$expdate = get-date -date '01/01/2014'
set-aduser -identity testmail5 -accountexpirationdate $expdate
I get the following error ...
set-aduser : Insufficient access rights to perform the operation
At line:1 char:1
+ set-aduser -identity testmail5 -accountexpirationdate $expdate
    + CategoryInfo          : NotSpecified: (testmail5:ADUser) [Set-ADUser], ADException
    + FullyQualifiedErrorId : Insufficient access rights to perform the operation,Microsoft.ActiveDirectory.Management.Comm
   ands.SetADUser
I then switch to a different DC, the command 'might' work once, but will never run again in the same window.
Then I tried this ...
start-process powershell -verb runas
That gave me an additional PS window, and I then tried running the commands again.
Same error message.
So I tried the following command ...
$expdate = get-date -date '01/01/2014'
set-aduser -server XXDC03 -identity testmail5 -accountexpirationdate $expdate
Same error message.
Is there any way that I can get around this problem?
Please help.

Keep in mind that the account used to open the PowerShell session must be the same account you're using to open ADUC. The error message means that Set-ADUser is trying to set the attribute for the account, but it's failing. Make sure to test with multiple
different accounts, in case the access control list of the object you're trying to modify is the cause of the problem.
Your PowerShell syntax is valid, so this isn't really a scripting question but a security/directory services question.
-- Bill Stewart [Bill_Stewart]

Photoshop cs4 access denied when trying to install from disc in Windows 7 64bit.

Photoshop cs4 access denied when trying to install from disc in Windows 7 64bit. I tried it in
safe mode and it starts to install but get an error there as well.
What do I do?

So when you put the disk in it won't run correctly? When the disk is inserted you should have a window pop up with 2 options. 1 to install and the other to see what is on the disk. Choose to explore or open the disk. Go to the CS4 folder where the photoshop .exe file is (that will run the setup), right click on the .exe file and choose run as Admin and it should start. See if it will install. If not then read below.
I am not sure how far you got in the install before so chances are you will have to run the CS4 cleanup utility. 2 levels to run at but don't use 1 or 2 just type in the number 3.
http://www.adobe.com/support/contact/cs4clean.html
You may need to run the windows installer cleanup utility too
http://support.microsoft.com/kb/290301
Before you try to reinstall the software ensure that adobe reader is not installed. If it is remove it. It has caused issues in the past with vista and CS4 installs.
Also turn off windows Defender and any anti-virus software. You can keep UAC on in Windows 7.
During the CS4 install at 90 percent it will almost stop and may take 5 to 10 mins to finish. This is normal. What a pain huh......
After install is finished, reboot
After reboot, go to the CS4 64 bit or 32 bit icon (depends on 32 or 64 bit Windows 7) in start area, right click on CS4 64 bit (if you have windows 7 64 bit) and choose properties, compatibility tab and then check run as Admin at the bottom area. Hit apply, ok to close out.
Now start CS4 and run the updater.

Error while configuring SSL in OID 11g - LDAP 50 Insufficient Access rights

HI,
I am trying to configure SSL in OID 11g.As per the doc http://download.oracle.com/docs/cd/E12839_01/oid.1111/e10029/ssl.htm#CBHGBGAF ,i tried creating a Self-Signed Wallte using Fusion Middleware control,But i am getting an error LDAP 50: Insufficient access rights".I logged into Fusion Middle Ware control as Weblogic user.Is anybody faced this issue?.Thanks in advance.

I am not sure how you tried, but I would recommend to do the following...
1. Add the 'user1' to "OU=Franchisees,ou=People,dc=company,dc=com"
2. Delete the 'user1' from 'OU=Internal,ou=People,dc=company,dc=com'

Dp* commands failed w/ SMSLdapObject: insufficient access rights to access

My dpadmin list/modify fails to execute. The amSMS log is below. What aci I lost? Any help is appreciated.
Regards
11/20/2005 03:17:15:659 AM MST: Thread[main,5,main]
SMSEntry: cache enabled: true
11/20/2005 03:17:16:023 AM MST: Thread[main,5,main]
SMSLdapObject: LDAP Initialized successfully
11/20/2005 03:17:16:349 AM MST: Thread[main,5,main]
Initialized LDAPEvent listner
11/20/2005 03:17:16:412 AM MST: Thread[main,5,main]
CachedSubEntries::getInstance DN: ou=DAI,ou=services,dc=sun,dc=com
11/20/2005 03:17:16:432 AM MST: Thread[main,5,main]
CachedSMSEntry::getInstance: ou=DAI,ou=services,dc=sun,dc=com
11/20/2005 03:17:16:441 AM MST: Thread[main,5,main]
SMSLdapObject.read() retry: 0
11/20/2005 03:17:16:451 AM MST: Thread[main,5,main]
WARNING: SMSLdapObject: insufficient access rights to access DN=ou=DAI,ou=services,dc=sun,dc=com
11/20/2005 03:17:16:461 AM MST: Thread[main,5,main]
ERROR: CachedSubEntries: unable to register for notifications:
Message:The user does not have permission to perform the operation.
at com.sun.identity.sm.ldap.SMSLdapObject.read(SMSLdapObject.java:231)
at com.sun.identity.sm.SMSEntry.read(SMSEntry.java:334)
at com.sun.identity.sm.SMSEntry.read(SMSEntry.java:326)
at com.sun.identity.sm.SMSEntry.<init>(SMSEntry.java:162)
at com.sun.identity.sm.CachedSMSEntry.getInstance(CachedSMSEntry.java:307)
at com.sun.identity.sm.CachedSubEntries.<init>(CachedSubEntries.java:72)
at com.sun.identity.sm.CachedSubEntries.getInstance(CachedSubEntries.java:204)
at com.sun.identity.sm.ServiceManager.getVersions(ServiceManager.java:409)
at com.sun.identity.sm.ServiceManager.serviceDefaultVersion(ServiceManager.java:427)
at com.sun.identity.sm.ServiceConfigManager.<init>(ServiceConfigManager.java:94)
at com.iplanet.am.sdk.AMCommonUtils.populateManagedObjects(AMCommonUtils.java:497)
at com.iplanet.am.sdk.AMCommonUtils.<clinit>(AMCommonUtils.java:113)
at com.iplanet.am.sdk.AMStoreConnection.<clinit>(AMStoreConnection.java:141)
at com.sun.portal.desktop.context.DSAMEConnection.<init>(DSAMEConnection.java:89)
at com.sun.portal.desktop.context.DSAMEAdminDPContext.init(DSAMEAdminDPContext.java:110)

- what's the complete command ?
- which user is used ?
/ulf

New error when trying to modify workflow in Firefox

We are suddenly getting an error in Firefox when trying to modify workflows or attribute access control (so may be java related). For years we've had no issues but now when attempting to modify a workflow a popup error box is displayed stating "Access denied. Please reload your browser and contact your administrator for more information." The same action using Internet Explorer works fine. Has anyone else encountered this and found the issue?

I have experienced this problem as well and have a solution that worked for us.
I started experiencing the same error message ""Access Denied. Please reload your browser and contact your administrator for more information." when attempting to edit a workflow. This problem started after I had edited the following three files:
ad_exclude_attrs.xml
exclude_attrs_config.xml
exclude_attrs-ad.xml
these files are located in:
%OAM directory%/identity/oblix/data/common
I had edited these files in an attempt to gain access to some other attributes in AD via OAM. Once I had removed some entries in these files related to the attributes I was interested in, the error message began to appear.
I was using Internet Explorer 8.
Restoring the above three files to their originals and restarting the Identity server resolved the issue.
I hope this helps,
Ian

SMSLdapObject: insufficient access rights to access

The dpadmin command failed w/ SMSLdapObject: insufficient access rights to access. The amSMS log is below. What aci did I lose? Any help is appreciated.
Regards
11/20/2005 03:17:15:659 AM MST: Thread[main,5,main]
SMSEntry: cache enabled: true
11/20/2005 03:17:16:023 AM MST: Thread[main,5,main]
SMSLdapObject: LDAP Initialized successfully
11/20/2005 03:17:16:349 AM MST: Thread[main,5,main]
Initialized LDAPEvent listner
11/20/2005 03:17:16:412 AM MST: Thread[main,5,main]
CachedSubEntries::getInstance DN: ou=DAI,ou=services,dc=sun,dc=com
11/20/2005 03:17:16:432 AM MST: Thread[main,5,main]
CachedSMSEntry::getInstance: ou=DAI,ou=services,dc=sun,dc=com
11/20/2005 03:17:16:441 AM MST: Thread[main,5,main]
SMSLdapObject.read() retry: 0
11/20/2005 03:17:16:451 AM MST: Thread[main,5,main]
WARNING: SMSLdapObject: insufficient access rights to access DN=ou=DAI,ou=services,dc=sun,dc=com
11/20/2005 03:17:16:461 AM MST: Thread[main,5,main]
ERROR: CachedSubEntries: unable to register for notifications:
Message:The user does not have permission to perform the operation.
at com.sun.identity.sm.ldap.SMSLdapObject.read(SMSLdapObject.java:231)
at com.sun.identity.sm.SMSEntry.read(SMSEntry.java:334)
at com.sun.identity.sm.SMSEntry.read(SMSEntry.java:326)
at com.sun.identity.sm.SMSEntry.<init>(SMSEntry.java:162)
at com.sun.identity.sm.CachedSMSEntry.getInstance(CachedSMSEntry.java:307)
at com.sun.identity.sm.CachedSubEntries.<init>(CachedSubEntries.java:72)
at com.sun.identity.sm.CachedSubEntries.getInstance(CachedSubEntries.java:204)
at com.sun.identity.sm.ServiceManager.getVersions(ServiceManager.java:409)
at com.sun.identity.sm.ServiceManager.serviceDefaultVersion(ServiceManager.java:42 7)
at com.sun.identity.sm.ServiceConfigManager.<init>(ServiceConfigManager.java :94)
at com.iplanet.am.sdk.AMCommonUtils.populateManagedObjects(AMCommonUtils.java:497)
at com.iplanet.am.sdk.AMCommonUtils.<clinit>(AMCommonUtils.java:113)
at com.iplanet.am.sdk.AMStoreConnection.<clinit>(AMStoreConnection.java:141)
at com.sun.portal.desktop.context.DSAMEConnection.<init>(DSAMEConnection.jav a:89)
at com.sun.portal.desktop.context.DSAMEAdminDPContext.init(DSAMEAdminDPContext.jav a:110)

- what's the complete command ?
- which user is used ?
/ulf

Insufficient access rights registering Oracle Directory Integration Server

Hi all!
following steps IÂ´ve done to use the Oracle Directory Integration Server.(IÂ´ve installed Oracle 10g infrastructure - OID is running - IÂ´m also able to apply successful with ODM and orcladmin account)
- oidctl connect=mydb1 server=odisrv instance=1 stop
- odisrvreg -h localhost -p 389 -D cn=orcladmin,cn=Users,dc=localhost;dc=com -w ,pass
where pass is the password of orcladmin.
-> now I get the following error:
registering..
Error javax.naming.NoPermissionException [LDAP:error code 50: Insufficient Access Rights]; remaining name 'cn=odisrv+orclhostname=maschine,cn=odi,cn=oracle internet directory' !
Any idea ??
Thanks for all help & comments.

I have gone through the documentation for creating the script. But there is one thing which I am not able to understand i.e. Subscription Parameters.
Can anyone tell me the use of subscription parameters? What is the role of subscription parameters in Oracle Lite and External Authentication.
Regards
Kapil

Users getting access denied when trying to create a security group

Hello,
I created an MPR for granting right through an approval workflow for joining security group, but getting the following error. Any thoughts what could be going wrong?
Error processing your request: The operation was rejected because of access control policies.
Reason: The operation failed as a result of insufficient access rights.
Attributes: ExplicitMember
Correlation Id: edc226e9-ecb9-42c2-ab20-4fa8b5643056
Request Id:
Details: No policy grants the Requestor permission to complete all changes.
This is what I see in the even log:
Requestor: urn:uuid:9373552a-c063-4fb9-abcd-3501d151a061
Correlation Identifier: edc226e9-ecb9-42c2-ab20-4fa8b5643056
Microsoft.ResourceManagement.Service: Microsoft.ResourceManagement.WebServices.Exceptions.PermissionDeniedException: ManagementPolicyRule ---> System.Data.SqlClient.SqlException: Reraised Error 50000, Level 16, State 1, Procedure DoEvaluateRequestInner,
Line 1319, Message: Permission denied: <ai><Name>ExplicitMember</Name></ai>
   at System.Data.SqlClient.SqlConnection.OnError(SqlException exception, Boolean breakConnection)
   at System.Data.SqlClient.TdsParser.ThrowExceptionAndWarning(TdsParserStateObject stateObj)
   at System.Data.SqlClient.TdsParser.Run(RunBehavior runBehavior, SqlCommand cmdHandler, SqlDataReader dataStream, BulkCopySimpleResultSet bulkCopyHandler, TdsParserStateObject stateObj)
   at System.Data.SqlClient.SqlDataReader.ConsumeMetaData()
   at System.Data.SqlClient.SqlDataReader.get_MetaData()
   at System.Data.SqlClient.SqlCommand.FinishExecuteReader(SqlDataReader ds, RunBehavior runBehavior, String resetOptionsString)
   at System.Data.SqlClient.SqlCommand.RunExecuteReaderTds(CommandBehavior cmdBehavior, RunBehavior runBehavior, Boolean returnStream, Boolean async)
   at System.Data.SqlClient.SqlCommand.RunExecuteReader(CommandBehavior cmdBehavior, RunBehavior runBehavior, Boolean returnStream, String method, DbAsyncResult result)
   at System.Data.SqlClient.SqlCommand.RunExecuteReader(CommandBehavior cmdBehavior, RunBehavior runBehavior, Boolean returnStream, String method)
   at System.Data.SqlClient.SqlCommand.ExecuteReader(CommandBehavior behavior, String method)
   at System.Data.SqlClient.SqlCommand.ExecuteReader()
   at Microsoft.ResourceManagement.Data.DataAccess.DoRequestCreation(RequestType request, Guid cause, Guid requestMarker, Boolean doEvaluation, Int16 serviceId, Int16 servicePartitionId)
   --- End of inner exception stack trace ---
   at Microsoft.ResourceManagement.WebServices.RequestDispatcher.CreateRequest(UniqueIdentifier requestor, UniqueIdentifier targetIdentifier, OperationType operation, String businessJustification, List`1 requestParameters, CultureInfo locale, Boolean
isChildRequest, Guid cause, Boolean doEvaluation, Nullable`1 serviceId, Nullable`1 servicePartitionId, UniqueId messageIdentifier, UniqueIdentifier requestContextIdentifier, Boolean maintenanceMode)
   at Microsoft.ResourceManagement.WebServices.ResourceManagementService.Put(Message request)
Thanks,
John

Hi,
You probably missing another MPR to give the right (checkbox "Grants permission") to Add and Remove value for attribute "Explicit member". Set an authorization workflow is not enough!
Regards,
Sylvain

I receive "Database access denied" when trying to add component 4543BD

I receive "Database access denied" when trying to add component 4543BD to my schematic. This component was added from a previous version. I'm using Multisim version 12.0.0 Student edition.
Solved!
Go to Solution.

Hi Diarra,
I checked my database and the 4543 is not in the Student Edition. If you opened a schematic that was created in a higher version such as the Educaiton Edition and copied the part to your database, when you place this part you will get the access denied message.
Attached is a schematic with the part, you can open it and build you circuit around it.
Tien P.
National Instruments
Attachments:
4543.ms12 ‏62 KB

When trying to open a pdf from a shared network folder I get an error

hello,
When trying to open a pdf from a shared network folder I get the error: 'there was an error opening this document the document cannot be found'. The share is on a Windows 7 machine and sharing to a OS X 10.7 Machine. Permisson has been given on the share for 'Everyone' read and Write, and is mapped to the 10.7 machine through the 'Connect to Server' in finder with login credentials.
Can you help please?
Kind regards,
Chris

This is in Internet Explorer 6 (yes, horrible, I know), but we use a standardized image where I work, with pretty intense GPO's.
Don't know what happens if you right-click the link; but from any other machine (with the same image) the same link will open with all three options "Open", "Save", and "Cancel". These are not freshly imaged machines, so some setting must of been changed along the way to make this happen on this user's computer.
Repaired Acrobat, but this resolved nothing.
Also checked in IE to make sure that Adobe was enabled under the Programs tab.
Also, the option to view a pdf within the browser is not turned on.
Any other ideas?

Access Denied When Trying To Install Printer - Windows 7

Good Day
I have a serious problem on a client's computer. All I need to do is connect the laptop to a network printer, but I am having a lot of difficulty in doing so.
First the details of the laptop: Windows 7 Professional 64-bit connected to network using ETH cable. Avira Professional antivirus running, firewall disabled on pc, user is member of administrators group only.
Details of the printer: Xerox Workcentre 3220, connect to network using ETH cable, but also shared on pc also running Windows 7 64-bit Professional.
I am able to ping the printer and have connected all the other pcs on the network to the printer without any troubles whatsoever. Printing, scanning - everything is working fine for the other pcs. I am also able to connect to shares from the laptop to any
other pc.
So here is my issue with this specific laptop:
Firstly, when using the "Add Printer" wizard, the "Add a local printer" option is greyed out.
So I tried connecting to the printer using the"Add a network, wireless or Bluetooth printer" option, which seemed to be working, but during installation it gives an Access Denied error and undoes the installation.
Then I tried connecting to the share of the printer on one of the other pcs, which had the exact same result.
I then tried to modify an other printer, by firstly trying to add a new Local Port, but the I recieve the following error: "Specified port cannot be added. Access is denied."
I tried then adding the driver using the Windows Print Server, but the buttons were unavailable.
After reading on many forums, I accessed the Print Management console (Control Panel -> Administrative Tools -> Print Management)m and tried adding the printer and ports there, but recieved an "Access Denied" error every time.
Basically whatever I tried, I recieved "Access Denied" errors. I created a new user, which is only a member of the Administrators group. Logged in with new user, without any success in connecting to the printer. I then tried adding security permisssions
for "everyone" to the folder C:\Windows\System32\spool\PRINTERS, as I read on another forum. I tried modifying the group policy using gpedit.msc and also using the Local Security Policy, although I could have missed some things in these two places,
but basically with a quick glance, everything seemed fine. I am sure there are no virusses, etc on this laptop and as I have said all the other pcs connected to the printer very easily.
How can it be that I cant install a printer on this laptop, while I was able to do so a year or so back?
I have gotten a few suggestions that it will in the end just save me time by formatting the pc and reloading all the data and programs, but this isn't an option I really want to take. And then I have previously had issues with the "Add a local printer"
option greyed out and unable to add printers, etc, but then I was able to solve the problem by creating a new user and then switching to that user - which indicated a possible user profile corruption. But in this case even that did not work.

Hi,
please check your below configuration:
1.Start the policy editor (Control Panel -> Administrative tools -> Local security policy)
2.Select “Local policy” item
3.Find the item “Devices: Prevent Users from Installing Printer Drivers” in the section Security Settings -> Security Options and change it to Enabled
4.Go to “Security Settings -> User Rights Assignment” section and check, that “Load & Unalod Drivers” option contains the active user group. It important, that even if it has “All Staff” already, it still could miss “Administrators” group, so it’s necessary
to add it manually.
In addition, this thread could be referred:
http://social.technet.microsoft.com/Forums/en-US/8c3c3d97-9d85-4ab0-9fc8-4b7aba202fb2/windows-cannot-connect-to-the-printer-access-is-denied-please-help?forum=itprovistaprinting
Karen Hu
TechNet Community Support

Insufficient Access Rights when trying to modify send as permissions on a public folder

Similar Messages

Maybe you are looking for