Impossible to remove SID of non-existing AD object from mailbox permissions (edsaMailboxSecurityDescriptor) (147840)

Return

Feedback submitted.

Was this article helpful?

[Select Rating]

Title

Impossible to remove SID of non-existing AD object from mailbox permissions (edsaMailboxSecurityDescriptor)
Description

After applying patch 3 our mailbox administrator came across the issue that it wasn't possible anymore to remove "unknown" SIDS from the mailbox rights. The following error was received: An error occurred during this operation. For details, see the error description below. Administrative Policy returned an error. Failed to make changes to attribute of object. Attribute: edsaMailboxSecurityDescriptor; Object: CN=,OU=MaYou may have noticed that you may not be able to remove "unknown" SIDS from the mailbox rights, either via the WI or MMC console.
It is necessary to have mailbox rights delegated to the object (eg. user) that has been deleted and tombstone period has expired, when try to delete this entry using ARS MMC or WI the entry will remain untouched. The following error may be also displayed:
An error occurred during this operation. For details, see the error description below.
Administrative Policy returned an error. Failed to make changes to attribute of object. Attribute: edsaMailboxSecurityDescriptor; Object: CN=<mailbox>,OU=Mailbox,DC=<domain>,DC=com.ilbox,DC=,DC=nl. It cannot be changed using the MMC or the web interface.
Cause

This is a product defect (TF00430254).
Resolution

WORKAROUND
None available.
STATUS:
This will be fixed on a future release of the product. If you require this immediately corrected, please contact support for a hotfix referencing the defect ID TF00430254.
Change Request

TF00430254