Return
-
Title
Impossible to remove SID of non-existing AD object from mailbox permissions (edsaMailboxSecurityDescriptor) -
Description
After applying patch 3 our mailbox administrator came across the issue that it wasn't possible anymore to remove "unknown" SIDS from the mailbox rights. The following error was received: An error occurred during this operation. For details, see the error description below. Administrative Policy returned an error. Failed to make changes to attribute of object. Attribute: edsaMailboxSecurityDescriptor; Object: CN=,OU=MaYou may have noticed that you may not be able to remove "unknown" SIDS from the mailbox rights, either via the WI or MMC console. It is necessary to have mailbox rights delegated to the object (eg. user) that has been deleted and tombstone period has expired, when try to delete this entry using ARS MMC or WI the entry will remain untouched. The following error may be also displayed:
An error occurred during this operation. For details, see the error description below.
Administrative Policy returned an error. Failed to make changes to attribute of object. Attribute: edsaMailboxSecurityDescriptor; Object: CN=<mailbox>,OU=Mailbox,DC=<domain>,DC=com.ilbox,DC=,DC=nl. It cannot be changed using the MMC or the web interface. -
Cause
This is a product defect (TF00430254).
-
Resolution
WORKAROUND
None available.
STATUS:
This will be fixed on a future release of the product. If you require this immediately corrected, please contact support for a hotfix referencing the defect ID TF00430254.
-
Change Request
TF00430254