Posts

Active Directory operation failed on "domain.local". You cannot retry this operation: "Insufficient access rights to perform the operation

Image
Hi Folks, Error:- Active Directory operation failed on "ORLDC01.DRMAIN.local". You cannot retry this operation: "Insufficient access rights to perform the operation 00002098: SecErr: DSID-03150E49, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0 ".You do not have the appropriate permissions to perform this operation in Active Directory. One possible cause is that the Lync Server Control Panel and Remote Windows PowerShell cannot modify users who belong to protected security groups (for example, the Domain Admins group). To manage users in the Domain Admins group, use the Lync Server Management Shell and log on using a Domain Admins account. There are other possible causes. For details, see Lync Server 2010 Help. ** When user account belongs to the administrator group or domain admin group so you cannot modify the properties in special modifying external access policy getting above error. In this case, you can perform changes from the active directory as w

Exchange 2013 - Disabled mailbox is not showing in disconnected

Exchange 2013 - Disabled mailbox is not showing in disconnected In Exchange 2013 disabled mailbox is not showing in disconnected as well not clean-mailboxdatabase command is not recognize in exchange management shell. However, in Exchange 2013 this cmdlet no longer exists disconnected/Disabled mailboxes are not visible immediately after being removed. In exchange 2013 Update-StoreMailboxState command let replace to clean-MailboxDatabase. Which allow or force the mailbox state in the exchange store to be sync with AD. Its syntax is as follows: Use update command with database and Identity GUID Update-StoreMailboxState -Database LEVEL01 -Identity {Mailbx_GUID} The mailbox state for all mailboxes on the mailbox database LEVEL01 Get-MailboxStatistics -Database LEVEL01 | ForEach { Update-StoreMailboxState -Database $_.Database -Identity $_.MailboxGuid -Confirm:$false } the mailbox state for all disconnected mailboxes on

Lync 2013 - You do not have the appropriate permissions to perform this operation in Active Directory. One possible cause is that the Lync Server Control Panel and Remote Windows PowerShell cannot modify users who belong to protected security groups (for example, the Domain Admins group)

Image
Hi Folks, I got an below error while enabling user and update federation policy for local admin group users. Error - You do not have the appropriate permissions to perform this operation in Active Directory. One possible cause is that the Lync Server Control Panel and Remote Windows PowerShell cannot modify users who belong to protected security groups (for example, the Domain Admins group) Solution- This is mostly happen when Lync user is member of domain admin group members so there are multiple solution to fix this type of issue.  I have followed below one and fixed it. You can update security setting of that users and enable user. Open Active User and Computers {Change to Advance mode from View Menu} Find User which you want to modify. Right click and User properties, Select Security Tab Then click Advance and then click on Enable Inheritance. Wait for replication and check  after 10 min

Installation Prerequisite of SharePoint 2013 on Windows server 2012 R2

Hi Folks, It's wearied but it's took 3 days to fix this issue. While working on SharePoint 2013 prerequisite installation and was getting multiple error few are as follows, Application Server Role, Web Server (IIS) Role: configuration error Microsoft SQL Server 2008 R2 SP1 Native Client:Installation skipped Windows Server AppFabric: Installation skipped Not able to skip this error and continue setup it was huge check of my life. Wasted 3 days for prerequisite installation but thanks to error gives to me to thinks with different ways and apply this solution and finally finalized this issue as follows, Installed below component by sequence . Need to install IIS component along with few features. I just adopted this command from internet and used on windows server 2012 R2 worked without any issue. 1. Login to windows server and Open PowerShell with administrator privileges, paste below single line command and restart system. Note: - In this comm

Pre-stage the cluster name object for a database availability group Exchange server

Image
In environments where computer account creation is restricted, or where computer accounts are created in a container other than the default computers container, you can pre-stage the cluster name object (CNO) and then provision the CNO by assigning permissions to it. Some times we gets error while adding server into DAG. Error -   An Active Manager operation failed. Error An error occurred while attempting a cluster operation. Error: Cluster API '"OpenCluster failed with 0x424. Error: The specified service does not exist as an installed service"' failed Logs generate same error in location - C:\ExchangeSetupLogs\DagTasks\dagtask_2017-08-23_05-34-45.755_add-databaseavailabiltygroupserver.log In this scenario some we need to pre-stage Cluster name object. Steps as follows for creation of  cluster name object (CNO). Open Active Directory Users and Computers. Expand the forest node. Create the new account, select  New , and then select  Computer .  Ne

Setup Wizard for Update Rollup 7 for Exchange 2010 Service Pack 3 (KB2961522) ended prematurely

Image
Hi Guys, Today I got error while updating RU7 on Exchange 2010 SP3. "Setup Wizard for Update Rollup 7 for Exchange 2010 Service Pack 3 (KB2961522) ended prematurely" Found event Logs - " Log Name:      Application Source:        MsiInstaller Date:          6/6/2015 11:59:17 AM Event ID:      1024 Task Category: None Level:         Error Keywords:      Classic User:          XXXX Computer:      XXX.XXX.XXX Description: Product: Microsoft Exchange Server - Update 'Update Rollup 7 for Exchange Server 2010 Service Pack 3 (KB2961522) 14.3.210.2' could not be installed. Error code 1603. Windows Installer can create logs to help troubleshoot issues with installing software packages. " Workaround :- Restarted Exchange server. Started Installation again with : - Use to Run CMD as Administrator Permission. msiexec /update Exchange2010-KB2917508-x64-en.msp Finally I completed update with suc

The WS-Management service cannot process the request. The system load quota of 1000 requests per 2 seconds has been exceeded.

Image
Hi Folks, while opening exchange 2010 EMC and EMS getting error such as,     Restart IIS service.