Cannot log on to Exchange because of permissions in Exchange 2010

Category: Troubleshooting & error messages
Date: 05 Aug 2010
Product: Exchange Server Archiver
Versions: 3
Platforms: Exchange 2010
When attempting to view the list of mailboxes in the Admin Console, the following error may appear in the alerts tab:

Cannot open mailbox 'mymailbox@esadomain.local'. Ensure the Archive Service user 'ESAUser@esadomain.local' has permissions to open this mailbox, the Exchange information store is running, and Active Directory is running correctly.

After opening the latest Archive Service log in %allusersprofile%\application data\red gate\logs\esa archive service 3 with a text editor, you will see additional information:

RedGate.ExchangeArchiver.ArchiveService.Interface.ArchiveServiceException: Cannot open mailbox 'mymailbox@esadomain.local'. Ensure the Archive Service user 'ESAUser@esadomain.local' has permissions to open this mailbox, the Exchange information store is running, and Active Directory is running correctly.
---> System.Runtime.InteropServices.COMException (0x8004011D): Exception from HRESULT: 0x8004011D

The ESA installer may not have been able to grant sufficient rights to the ESA Archive Service user, in this case, ESAUSER. It may be necessary to grant permissions to all mailboxes using the following Powershell script, which can be run on the Exchange Server using the Exchange Management Shell. Note that "esadomain.local" corresponds to your domain and "ESAUSER" corresponds to the user running the ESA Archive Service.

foreach ($sg in Get-MailboxDatabase) { if ((Get-ExchangeServer
    $sg.Server).Domain.Equals("esadomain.local")) { get-mailboxdatabase
    -storagegroup $sg.Identity | add-adpermission -user ESAUSER
    -ExtendedRights MS-Exch-Store-Admin; } }

Document ID: KB201008000471 Keywords: Exchange,0x8004011D,permissions

Was this article helpful?

Search support