"Office 365 Mailbox" missing for users that are member of Ricipent Management role

Hi,
I have a hybrid setup with Office 365 and one exchange 2013 standard server on-premises.
I currently have an issue with that I have a button after pressing the + under recipient to create a Office 365 mailbox from the ECP, but users that are members of the Recipient Management role don't have that button visible.
What extra permissions are required to be able to create an Office 365 mailbox from the on-premises Exchange?

Hi SeidKrv,
Thanks for your update.
Following article introuduces the permissions that need to assigned before running "New-Mailbox" command.
Please focus on "Recipient Provisioning Permissions" session.
Recipients Permissions
http://technet.microsoft.com/en-us/library/dd638132(v=exchg.150).aspx
Based on the article, it seems both Recipient Management role and Organization Management role are required.
More detailed information on both management role as below:
1. Administrators who are members of the Recipient Management role group have administrative access to
create or modify Exchange 2013 recipients within the Exchange 2013 organization.
2. Administrators that are members of the Organization Management role group have administrative access to the entire Exchange 2013 organization and
can perform almost any task against any Exchange 2013 object, with some exceptions. By default, members of this role group can't perform mailbox searches and management of unscoped top-level management
roles.
Thanks
Mavis Huang
TechNet Community Support

Similar Messages

  • Listing users that are member of special role

    hello
    if i have a role that called role1 then how i can list users that are member of this role?
    thanks

    Try Pete Finnigans who_has_role.sql
    http://www.petefinnigan.com/tools.htm

  • IAC 3.1.1 users who are member of more than one OrgUnit are not able to order services?

    Hi,
    Power Down, Power Cycle, Take Snapshot and Decommission services are not working for users who are member of more than one organization!!
    Error Message:
    The service form could not be submitted because of following error: [newscale][SQLServer JDBC Driver][SQLServer]Conversion failed when converting the nvarchar value '1,2' to data type int.
    Thanks,
    Maz

    Hi,
    Power Down, Power Cycle, Take Snapshot and Decommission services are not working for users who are member of more than one organization!!
    Error Message:
    The service form could not be submitted because of following error: [newscale][SQLServer JDBC Driver][SQLServer]Conversion failed when converting the nvarchar value '1,2' to data type int.
    Thanks,
    Maz

  • Office 2013 - Excel 2013 - "This action is only valid for products that are currently installed."

    I had Office 2010 starter and Outlook 2010 installed.  I recently purchased the Office 2013 click to run version (paid monthly subscription) and installed Office 2013.  After installing 2013 I noticed that when I opened up Excel files they would
    still open in Office 2010.  I uninstalled Office Starter 2010 and uninstalled Outlook 2010.
    I then manually fixed the file associations for Word, PowerPoint, Publisher and such, however I could not manually fix the Excel file association. 
    Excel documents show the correct icon however when I double click on them the following error appears "This action is only valid for products that are currently installed."
    I have used the Office 2013 repair process, I have uninstalled and reinstalled Office 2013, I have manually uninstalled office 2013 using KB 2739501 (
    http://support.microsoft.com/kb/2739501/en-us ) and I still can not open Excel documents. 
    Recently I found that I can not do mail merges either using Excel documents as the data source and I believe the two items are related.
    Any suggestions?

    Hi,
    Please try to turn off compatibility mode and then check the issue again. To do this, please follow:
    1. Open this folder location:
    For Windows 32-bit: C:\Program Files\Microsoft Office\Office15
    For Windows 64-bit: C:\Program Files (x86)\Microsoft Office\Office15
    2. Find Excel.exe, right-click it, and choose Properties.
    3. Click on the Compatibility tab and ensure that all of the boxes are
    un-checked.
    For more information, please refer to this:
    http://support.microsoft.com/kb/2674519/en-us
    Thanks,
    Steve Fan
    TechNet Community Support

  • I paid for songs that are missing from my list where are they?

    i paid for songs that are missing from my list where are they?

    Correct.
    Audiobooks have never been available for redownlaod and have never been listed among the content that can be redownloaded.
    As always, it is your responsibility to back up your content.

  • TS4006 Last known fix for Find my iPad? How is this not an included option for devices that are currently turned off.  Absolute no brainer.  Thief steals the iPad and turns it offline, or user loses it while it has low battery, lost forever.  Brilliant.

    Last known fix for Find my iPad? How is this not an included option for devices that are currently turned off.  Absolute no brainer.  Thief steals the iPad and turns it offline, or user loses it while it has low battery, lost forever.  Brilliant.

    If the iPad was running iOS 7, the thief/finder will not ever be able to use it.
    iCloud: Find My iPhone Activation Lock in iOS 7
    http://support.apple.com/kb/HT5818
    Apple (and no one else) can not assist (with serial number or iCloud) in finding a lost or stolen iPad.
    Report to police along with serial number. Change all your passwords.
    These links may be helpful.
    How to Track and Report Stolen iPad
    http://www.ipadastic.com/tutorials/how-to-track-and-report-stolen-ipad
    Reporting a lost or stolen Apple product
    http://support.apple.com/kb/ht2526
    What to do if your iOS device is lost or stolen
    http://support.apple.com/kb/HT5668
    iCloud: Locate your device on a map
    http://support.apple.com/kb/PH2698
    iCloud: Lost Mode - Lock and Trace
    http://support.apple.com/kb/PH2700
    iCloud: Remotely Erase your device
    http://support.apple.com/kb/PH2701
    Report Stolen iPad Tips and iPad Theft Prevention
    http://www.stolen-property.com/report-stolen-ipad.php
    General steps to follow for a Stolen iPad
    http://stolen-ipad.com/
    How to recover a lost or stolen iPad
    http://ipadhelp.com/ipad-help/how-to-recover-a-lost-or-stolen-ipad/
    How to Find a Stolen iPad
    http://www.ehow.com/how_7586429_stolen-ipad.html
    What NOT to do if your iPhone or iPad is lost or stolen
    http://www.tomahaiku.com/what-not-to-do-if-your-iphone-or-ipad-lost-or-stolen/
    Apple Product Lost or Stolen
    http://sites.google.com/site/appleclubfhs/support/advice-and-articles/lost-or-st Len
    Oops! iForgot My New iPad On the Plane; Now What?
    http://online.wsj.com/article/SB10001424052702303459004577362194012634000.html
    If you don't know your lost/stolen iPad's serial number, use the instructions below. The S/N is also on the iPad's box.
    How to Find Your iPad Serial Number
    http://www.ipadastic.com/tutorials/how-to-find-your-ipad-serial-number
    iOS: How to find the serial number, IMEI, MEID, CDN, and ICCID number
    http://support.apple.com/kb/HT4061
     Cheers, Tom

  • Exchange Connector / Office 365 Not matching affected user to AD user

    We use Office 365 to host our email services.   AD is not synchronized to office 365.  We're bringing Exchange on premises soon so there isn't a lot we want to invest in that existing infrastructure.  I'm using Service Manager 2012 R2.
    I have the ADConnector configured, bringing in Active Directory users/groups/computers.
    I've gotten the Exchange Connector running in order to retrieve emails from an "IT Services" Office 365 mailbox and automatically create tickets.  Notifications back to the users are working fine.
    The problem I'm having is the affected user is not being set properly when a user emails the mailbox and an incident is created.  It is setting the Affected User to that user's name, but when I double click the Affected user, it brings up the "User
    - <UserName>" screen.    All of the information that would be coming in from AD is blank.  So that association between my office 365 email address and the AD user account is not being made.   Even though it says my name with
    correct (username) on the incident as the affected user.  And even though my email address is stored inside of AD in the e-mail field.
    What am I missing in this process?
    Thank you,
    Mark

    I ended up messing around and added a UPN to AD Domains and Trusts matching the domain of our email accounts through Office 365.  I found this because similar preparation is required for AD sync to Office 365, so a proper match can be made.
    So for example, if our internal domain is Contoso.Local, and our email addresses are [email protected]
    I added a UPN for contosolimited.com in Active Directory Domains & Trusts.  Then I changed my UPN in Active Directory Users and Computers (Account tab), to @contosolimited.com.
    Now when the AD Connector ran, it set my user CI UPN (in the Extensions tab) to [email protected]  I then sent an email to [email protected] and it matched my email correctly to my user CI created by the AD Connector.   
    Now I just have to run a script against AD to update all user UPNs to @contosolimited.com from @Contoso.local.

  • Outlook 2010 - SSO to Office 365 Mailbox

    Dear,
    Is it possible to do sso from an outlook 2010 client to an office 365 mailbox ?  Now my customer is always prompted for a password.  I'm just wondering if full sso is possible.  Should be the easiest solution ;-).  ADFS is configured
    and working for webmail or lync, but not for the outlook client.
    As a Citrix admin, I was asked to roam the outlook credentials.  The customer uses Citrix profile mgmt and the profile is deleted from the server after logoff.  Appdata (roaming) is redirected.  What do we need to roam the credentials ?  It's
    not working out of the box.  Looks like credentials are not stored in the roaming part of the profile.
    I understood from http://social.technet.microsoft.com/Forums/office/en-US/2fc84b45-61a4-4ef8-9906-25632a4a74d3/outlook-2010-doesnt-save-password-exchange?forum=exchangesvrclientslegacy that the credentials are stored in C:\Users\<username>\AppData\Local\Microsoft\Credentials,
    but strange enough, I only see a file in appdata\roaming\microsoft\credentials...
    Best regards / thanks in advance,
    Wim

    Hi,
    Thank you for your question.
    I am trying to involve someone familiar with this topic to further look at this issue.
    Melon Chen
    TechNet Community Support
    It's recommended to download and install
    Configuration Analyzer Tool (OffCAT), which is developed by Microsoft Support teams. Once the tool is installed, you can run it at any time to scan for hundreds of known issues in Office
    programs.

  • PST Capture Tool does not populate my Office 365 mailboxes

    Hi all,
    -I have installed PST capture on a win 7 64 bit machine with 64 bit office 2010 sp1.
    -I can successfully sign in  to the online connection.
    -I have made sure that the account I am using to sign in is assigned organization management role.
    -dot net 3.5 sp1 is is installed. and outlook is configured with the office 365 admin's account open in the  background.
    The Problem is that I am still not able to see the Office 365 mailboxes when I try and select "set mailbox" On reading various other posts on the internet lot of them mention to leave it for a while and the mailboxes will populate. Its now around 3 to 4
    hours but I cannot see any mailboxes.
    Kind Regards
    Rana Banerjee
    Rana

    Hi Rana,
    Just for your reference, The user account you specify on the Online Connection Settings tab of the PST Capture settings must be assigned the Organization Management role.
    Refer to:
    http://technet.microsoft.com/en-us/library/hh781036.aspx
    http://technet.microsoft.com/en-us/library/hh781035.aspx
    http://technet.microsoft.com/en-us/library/hh781032.aspx
    Hope it is helpful.
    If the issue continues, please feel free to post the question in Office 365 forum since it is Exchange server forum. Your understanding would be appreciated.
    Fiona Liao
    TechNet Community Support

  • Do I need to purchase Office 365 A3 plan for faculty to get free Office 365 ProPlus for students in Office 365?

    Hi there
    Our school has A2 plan for both students and faculty. We recently contacted our reseller and placed an order for free  Office 365 ProPlus A for our students. We received an acknowledgement from Microsoft regarding this order saying that it was successfull
    and I can see the license added when I log into the VLSC website. Problem is, I can't see this licence listed when I log into Office 365 admin. It is not listed under subscriptions or licenses. Apologize for my ignorance, but I don't know how can I get this
    license added in Office 365 so that our students can start using editable versions of office apps on their IPADs. Do we need to purchase Office 365 A3 plan for our staff to get this student's license enabled in Office 365? Can somebody please help?

    I have similar questions concerning getting started with the Student Advantage program offering.
    I've read the blog posts and made as many as 5 calls to Office 365 and still do not understand how to get this going.
    We have a subscription to Education A2 for both faculty and students that we started in January 2014.  We receive this at no charge.  So I'm starting with a subscription at no cost.  I do not have an Education Reseller because we started our
    subscription through the website with a trial and had that converted to the no cost A2 plan.
    When I am in the portal and look under 'Purchase Services' I can see the option to add Office ProPlus for Faculty at $2.00/user/month and for Office ProPlus for Students at $1.50/user/month.  My understanding of Student Advantage is that if I license
    all my faculty/staff accounts for Office ProPlus I would then get the Student access at no charge.  So I've licensed the Office ProPlus for Faculty for all of our faculty accounts yet I cannot get a clear answer about how to get the Student accounts added
    at no cost.
    I most recently was told by Office 365 support that I needed to speak to a reseller, which I did today.  He told me that I would need to do one of two things.
    1. Upgrade my no cost A2 faculty accounts to A3.  Which for me and what I see in the portal would take them from $0 to $4.50/user/month.  With that A3 for faculty I would get the Office ProPlus for the Students accounts on A2 at no charge.  
    2. I would need an Open Value license covering all school FTEs for Office at a cost of about $29/user/year.
    Both of these options are higher than licensing all Faculty accounts for Office ProPlus via the portal at $2/user/month which I have already done.
    So I don't understand why that doesn't qualify us for Student Advantage and now have to license all FTE, most of whom don't even touch a computer, for Office.

  • Office 365 Outlook prompts for password whenever outlook is restarted.

    Hello Folks,
    We have recently deployed Office 365 (We had Kerio email system previously, But we did not do a migration).
    The problem is 
    Office 365 Outlook prompts for password whenever outlook is restarted
    Tried the following workarounds, 
    1) Logon network security under More
    Settings on the Microsoft Exchange Security tab
    is set to a value other than Anonymous Authentication
    2) Tried removing the Generic Credentials from Credential manager.
    The is issue is only for some users (Majority). 
    (OS Platform: Windows 7/Windows 8).
    Thanks in Advance
    Murugupandian Pandi

    The first thing I would recommend to do is to make sure that your install missing Outlook updates and try again.
    I would also recommend asking them in this forum: https://social.technet.microsoft.com/Forums/en-US/home?forum=outlook
    This posting is provided AS IS with no warranties or guarantees , and confers no rights.
    Ahmed MALEK
    My Website Link
    My Linkedin Profile
    My MVP Profile

  • Email Forwarding on an on-prem mailbox to Office 365 mailbox

    Hi All,
    I need to put forwarding in place on a user's mailbox which is now on our on-prem Exchange 2013 server (we have hybrid deployment). I need to deliver to mailbox and forward to another user's mailbox of which is in Office 365. (The user has left and we move
    mailboxes back to our on-prem Exchange when users leave).
    I used to be able to do this when we had Exchange 2010 on prem via EMC, but don't seem to be able to do this via EAC on Exchange 2013. If I go to mailbox features on the mailbox I want to put the forwarding on, and then mail flow, and then browse to select
    the receipient - it doesn't show me recipients in Office 365.
    Any help on how to correctly put forwarding on an on-prem mailbox to a mailbox in Office 365, would be much appreciated.
    Thanks,
    Chris

    Hi
    Just use the management shell as described here Configure
    email forwarding for a mailbox
    Set-Mailbox -Identity "OnPrem mailbox" -ForwardingSMTPAddress "Office 365 mailbox"
    That works for forwardings from onprem to Office 365
    Hope that helps.
    Regards
    Pano
    Pano Boschung, PageUp AG

  • Brand/ Remove Office 365 Login Page for SharePoint Online

    Hi  there,
    HAPPY NEW YEAR!
    Thank you very much for setting up this great forum. I have learned a lot of good tips from here.
    We have a challenge which we would like to find a solution to.
    We are using Project Online with SharePoint Online with Office 365.
    We are trying to find a solution to brand/ (if branding is not possible) get rid of the Office 365 log in page.
    What we are trying to achieve is:
    1. Users click on a link, say:
    https://abc.sharepoint.com/project1/
    2. Instead of seeing Office 365 login page, we would like them to be able to see the login page with our own brand or a login box to enter username and password.
    Thank you very much in advance for the time you set aside to share your knowledge with us.
    Sincerely, we really appreciate your kind help.
    Charlotte Tang
    Charlotte Tang

    Hi Charlotte,
    According to your post, my understanding is that you want to customize the Office 365 login page for SharePoint Online.
    We can implement ADFS for the Office 365 subscription, then customize the ADFS forms based on login page.
    Per my knowledge, If no ADFS you will need to use the Microsoft login page.
    Here are two similar threads for you to take a look at:
    http://community.office365.com/en-us/forums/148/t/194202.aspx
    http://community.spiceworks.com/topic/380634-o365-custom-login-page
    Best Regards
    Dennis Guo
    TechNet Community Support

  • "this computer is no longer authorized for applications that are installed

    "this computer is no longer authorized for applications that are installed on the ipad "name of ipad" Would you like to autoriize for items purchased from the itunes store?
    if you do not autorize ....
    Why am I getting this message I only have 1 computer the ipad connects to, it hasnt changed so why do I suddenly have to autorize it again????

    I've gotten the same issue now on my ipad.
    My mac mini is authorized. I only have ONE itunes account. I sync my original ipad today and I get this message. So i say sure authorize, even tho it is. Enter login and password, comes back with this computer is already authorized. I knew that but ok. hit ok. Up pops message that this computer is no longer authorized, blah blah blah. Ok ill try again. Authorize credentials entered. Get message that computer is already authorized. Itunes is most recent 10.2.1. Ipad is updated to 4.3.1.
    I deauthorized computer and reauthorized it. Still get loop.
    google for solutions, find lots of problems, no answers outside of reinstall itunes and it "might" work, but not for everyone. Not gonna do that yet.
    Figure Ill call, I mean its not that an old a device and its surely a bug in the software, I havent changed a single thing since I last synced and only tried got the sync message when i plugged it in to update the OS.
    /rant on Go through a gazillion voice prompts and question, finally get operator and he'll help me if i spend 80 or 30 bucks depending on the service program I want. Yah know thats just total #$%@.
    How about some customer service eh? How about posting a solution to the forums. If you dont have one, at least tell people that.
    I get the same bit of attitude when I walk in the apple store. Love the products, have been an apple user since the IIe, but I just want the products I bought from you, the software that I get from you, the music that I buy from you, the apps that I buy from you, etc etc to WORK with each other.
    /rant off
    has anyone seen a solution for this.

  • Script to find users that are a member of more than one of a list of specific groups

    Hi,
    I need to generate a list of users that are members in more than one group, out of a list of specific security groups.  Here's the situation:
    1) We have about 1100 users, all nested under a specific OU called CompanyUsers.  There are sub-OUs under CompanyUsers that users may actually be in.
    2) We have about 75 groups, all directly under a specific OU called AppGroups.  These groups correspond to a user's role within an internal line of business application.  All these groups start with a specific character prefix "xyz", so the group
    name is actually "xyz-approle".
    I want to write a script that tells me if a user from point 1) is a member in more than one group in point 2).  So far, I've come up with a way to enumerate the users to an array:
    $userlist = get-qaduser -searchroot 'dq.ad/dqusers/doral/remote' | select samaccountname |Format-Table -HideTableHeaders
    I also have a way to enumerate all the groups that start with xyz that the user is a member of:
    get-QADMemberOf -identity <username> -name xyz* -Indirect
    I figure I can use the first code line to start a foreach loop that uses the 2nd code line, outputting to CSV format for easy to see manual verification.  But I'm having two problems:
    1) How to get the output to a CSV file in the format <username>,groupa,groupb,etc.
    2) Is there any easier way to do this, say just outputting the users in more than one group?
    Any help/ideas are welcome.
    Thanks in advance!
    John

    Here is a PowerShell script solution. I can't think of way to make this more efficient. You could search for all groups in the specfied OU that start with "xyz", then filter on all users that are members of at least one of these groups. However, I suspect
    that most (if not all) users in the OU are members of at least one such group, and there is no way to filter on users that are members of more than one. This solution returns all users and their direct group memberships, then checks each membership to
    see if it meets the conditions. It outputs the DN of any user that is a member of more than one specfied group:
    # Search CompanyUsers OU.
    strUsersOU = "ou=CompanyUsers,ou=West,dc=MyDomain,dc=com"
    $UsersOU = New-Object System.DirectoryServices.DirectoryEntry $strUsersOU
    # Use the DirectorySearcher class.
    $Searcher = New-Object System.DirectoryServices.DirectorySearcher
    $Searcher.SearchRoot = $UsersOU
    $Searcher.PageSize = 200
    $Searcher.SearchScope = "subtree"
    $Searcher.PropertiesToLoad.Add("distinguishedName") > $Null
    $Searcher.PropertiesToLoad.Add("memberOf") > $Null
    # Filter on all users in the base.
    $Searcher.Filter = "(&(objectCategory=person)(objectClass=user))"
    $Results = $Searcher.FindAll()
    # Enumerate users.
    "Users that are members of more than one specified group:"
    ForEach ($User In $Results)
        $UserDN = $User.properties.Item("distinguishedName")
        $Groups = $User.properties.Item("memberOf")
        # Consider users that are members of at least 2 groups.
        If ($Groups.Count -gt 1)
            # Count number of group memberships.
            $Count = 0
            ForEach ($Group In $Groups)
                # Check if group Common Name starts with the string "xyz".
                If ($Group.StartsWith("cn=xyz"))
                    # Make sure group is in specified OU.
                    If ($Group.Contains(",ou=AppsGroup,"))
                        $Count = $Count +1
                        If ($Count -gt 1)
                            # Output users that are members of more than one specified group.
                            $DN
                            # Break out of the ForEach loop.
                            Break
    Richard Mueller - MVP Directory Services

Maybe you are looking for