Hi Jacob,
I need your help with this one please.
We updated CloudPanel to 3.2.300.0 version and past the update we are unable to set Out of Office via OWA for another user. We just get the 403, Sorry Access Denied message (see attached screenshot) and an event logs entry on the Exchange server. (See below)
Would you be able to point me to the right direction as to what might have changed during upgrade?
I have actually found a forum post about ECP not being enabled on the Mailbox Plan but we tried the suggested solution with no success.
Many thanks for your help in advance.
Current user: ‘CSHOSTING\Temp2’
Request for URL ‘https://csmk1ex01.cshosting.local:444/ecp/default.aspx?owaparam=modurl=0&p=organize/AutomaticReplies.slab( https://webmail.cs-hosts.com/ecp/N.Baldwin@hedleyandco.co.uk/?owaparam=modurlMicrosoft.Exchange.Configuration.Authorization.CmdletAccessDeniedException: An administrator has explicitly denied permission for “”CSHOSTING\Temp2” on behalf of “N.Baldwin@hedleyandco.co.uk”” to use the Exchange Administration Center.
at Microsoft.Exchange.Management.ControlPanel.RbacContext.<>c__DisplayClass7.<.ctor>b__3()
at Microsoft.Exchange.Data.Storage.LazilyInitialized`1.get_Value()
at Microsoft.Exchange.Management.ControlPanel.RbacSession..ctor(RbacContext context, SessionPerformanceCounters sessionPerfCounters, EsoSessionPerformanceCounters esoSessionPerfCounters)
at Microsoft.Exchange.Management.ControlPanel.LocalSession..ctor(RbacContext context, SessionPerformanceCounters sessionPerfCounters, EsoSessionPerformanceCounters esoSessionPerfCounters)
at Microsoft.Exchange.Management.ControlPanel.StandardSession.Factory.CreateNewSession()
at Microsoft.Exchange.Management.ControlPanel.RbacSession.Factory.CreateSession()
at Microsoft.Exchange.Management.ControlPanel.RbacContext.CreateSession()
at Microsoft.Exchange.Management.ControlPanel.RbacSettings.CreateSession()
at Microsoft.Exchange.Management.ControlPanel.RbacSettings.get_Session()
at Microsoft.Exchange.Management.ControlPanel.AuthenticationSettings..ctor(HttpContext context)
at Microsoft.Exchange.Management.ControlPanel.RbacModule.Application_PostAuthenticateRequest(Object sender, EventArgs e)
at System.Web.HttpApplication.SyncEventExecutionStep.System.Web.HttpApplication.IExecutionStep.Execute()
at System.Web.HttpApplication.ExecuteStepImpl(IExecutionStep step)
at System.Web.HttpApplication.ExecuteStep(IExecutionStep step, Boolean& completedSynchronously)
at Microsoft.Exchange.Management.ControlPanel.RbacContext.<>c__DisplayClass7.<.ctor>b__3()
at Microsoft.Exchange.Data.Storage.LazilyInitialized`1.get_Value()
at Microsoft.Exchange.Management.ControlPanel.RbacSession..ctor(RbacContext context, SessionPerformanceCounters sessionPerfCounters, EsoSessionPerformanceCounters esoSessionPerfCounters)
at Microsoft.Exchange.Management.ControlPanel.LocalSession..ctor(RbacContext context, SessionPerformanceCounters sessionPerfCounters, EsoSessionPerformanceCounters esoSessionPerfCounters)
at Microsoft.Exchange.Management.ControlPanel.StandardSession.Factory.CreateNewSession()
at Microsoft.Exchange.Management.ControlPanel.RbacSession.Factory.CreateSession()
at Microsoft.Exchange.Management.ControlPanel.RbacContext.CreateSession()
at Microsoft.Exchange.Management.ControlPanel.RbacSettings.CreateSession()
at Microsoft.Exchange.Management.ControlPanel.RbacSettings.get_Session()
at Microsoft.Exchange.Management.ControlPanel.AuthenticationSettings..ctor(HttpContext context)
at Microsoft.Exchange.Management.ControlPanel.RbacModule.Application_PostAuthenticateRequest(Object sender, EventArgs e)
at System.Web.HttpApplication.SyncEventExecutionStep.System.Web.HttpApplication.IExecutionStep.Execute()
at System.Web.HttpApplication.ExecuteStepImpl(IExecutionStep step)
at System.Web.HttpApplication.ExecuteStep(IExecutionStep step, Boolean& completedSynchronously)
D0&p=organize/AutomaticReplies.slab)’ failed with the following error:
Microsoft.Exchange.Configuration.Authorization.CmdletAccessDeniedException: An administrator has explicitly denied permission for “”CSHOSTING\Temp2” on behalf of “N.Baldwin@hedleyandco.co.uk”” to use the Exchange Administration Center.
at Microsoft.Exchange.Management.ControlPanel.RbacContext.<>c__DisplayClass7.<.ctor>b__3()
at Microsoft.Exchange.Data.Storage.LazilyInitialized`1.get_Value()
at Microsoft.Exchange.Management.ControlPanel.RbacSession..ctor(RbacContext context, SessionPerformanceCounters sessionPerfCounters, EsoSessionPerformanceCounters esoSessionPerfCounters)
at Microsoft.Exchange.Management.ControlPanel.LocalSession..ctor(RbacContext context, SessionPerformanceCounters sessionPerfCounters, EsoSessionPerformanceCounters esoSessionPerfCounters)
at Microsoft.Exchange.Management.ControlPanel.StandardSession.Factory.CreateNewSession()
at Microsoft.Exchange.Management.ControlPanel.RbacSession.Factory.CreateSession()
at Microsoft.Exchange.Management.ControlPanel.RbacContext.CreateSession()
at Microsoft.Exchange.Management.ControlPanel.RbacSettings.CreateSession()
at Microsoft.Exchange.Management.ControlPanel.RbacSettings.get_Session()
at Microsoft.Exchange.Management.ControlPanel.AuthenticationSettings..ctor(HttpContext context)
at Microsoft.Exchange.Management.ControlPanel.RbacModule.Application_PostAuthenticateRequest(Object sender, EventArgs e)
at System.Web.HttpApplication.SyncEventExecutionStep.System.Web.HttpApplication.IExecutionStep.Execute()
at System.Web.HttpApplication.ExecuteStepImpl(IExecutionStep step)
at System.Web.HttpApplication.ExecuteStep(IExecutionStep step, Boolean& completedSynchronously)
at Microsoft.Exchange.Management.ControlPanel.RbacContext.<>c__DisplayClass7.<.ctor>b__3()
at Microsoft.Exchange.Data.Storage.LazilyInitialized`1.get_Value()
at Microsoft.Exchange.Management.ControlPanel.RbacSession..ctor(RbacContext context, SessionPerformanceCounters sessionPerfCounters, EsoSessionPerformanceCounters esoSessionPerfCounters)
at Microsoft.Exchange.Management.ControlPanel.LocalSession..ctor(RbacContext context, SessionPerformanceCounters sessionPerfCounters, EsoSessionPerformanceCounters esoSessionPerfCounters)
at Microsoft.Exchange.Management.ControlPanel.StandardSession.Factory.CreateNewSession()
at Microsoft.Exchange.Management.ControlPanel.RbacSession.Factory.CreateSession()
at Microsoft.Exchange.Management.ControlPanel.RbacContext.CreateSession()
at Microsoft.Exchange.Management.ControlPanel.RbacSettings.CreateSession()
at Microsoft.Exchange.Management.ControlPanel.RbacSettings.get_Session()
at Microsoft.Exchange.Management.ControlPanel.AuthenticationSettings..ctor(HttpContext context)
at Microsoft.Exchange.Management.ControlPanel.RbacModule.Application_PostAuthenticateRequest(Object sender, EventArgs e)
at System.Web.HttpApplication.SyncEventExecutionStep.System.Web.HttpApplication.IExecutionStep.Execute()
at System.Web.HttpApplication.ExecuteStepImpl(IExecutionStep step)
at System.Web.HttpApplication.ExecuteStep(IExecutionStep step, Boolean& completedSynchronously)
Flight info: Features:[[Global.DistributedKeyManagement, False],[Global.GlobalCriminalCompliance, False],[Global.MultiTenancy, False],[Global.WindowsLiveID, False],[Eac.AllowMailboxArchiveOnlyMigration, True],[Eac.AllowRemoteOnboardingMovesOnly, False],[Eac.BulkPermissionAddRemove, True],[Eac.CmdletLogging, True],[Eac.CrossPremiseMigration, False],[Eac.DevicePolicyMgmtUI, False],[Eac.DiscoveryDocIdHint, False],[Eac.DiscoveryPFSearch, False],[Eac.DiscoverySearchStats, False],[Eac.DlpFingerprint, False],[Eac.EACClientAccessRulesEnabled, False],[Eac.GeminiShell, False],[Eac.ManageMailboxAuditing, False],[Eac.ModernGroups, False],[Eac.Office365DIcon, False],[Eac.OrgIdADSeverSettings, False],[Eac.RemoteDomain, False],[Eac.UCCAuditReports, False],[Eac.UCCPermissions, False],[Eac.UnifiedAuditPolicy, False],[Eac.UnifiedComplianceCenter, False],[Eac.UnifiedPolicy, False],[Eac.UnlistedServices, False],], Flights:[], Constraints:[[MACHINE, CSMK1EX01],[MODE, ENTERPRISE],[PROCESS, W3WP],], IsGlobalSnapshot: True
ECP needs to be enabled and updating the mailbox plan in CloudPanel doesn’t go back to all the users that are assigned to it and change their values (it doesn’t propagate back). You need to go to the users and edit them and re-save them after clicking on Email so the plan will apply again. You can use the bulk edit feature for the users in a company to reassign the mailbox plan which will reassign the values. ECP should probably be enabled on all of your plans.
Many thanks for the quick response. I will give this a go and report back.
I followed your suggestions and it resolved the problem.
Many thanks
