Cannot set the security descriptor of mailbox – Exchange PowerShell error when assigning permissions in Exchange 2010/2016 co-existence

You may come across this error especially if you have not fully migrated all user mailboxes to your new exchange 2016 servers, or you have a co-existence 2010/2013 or 2010/2016, and you still have to resolve help desk calls for those users not yet migrated or those who just got migrated.

Screenshot_1

“Cannot set the security descriptor of mailbox…….. in exchange mailbox database ……..”

Below command was executed to grant full access permission to userB on userA mailbox:-

Add-MailboxPermission -Identity “userA” -User “userB” -AccessRights FullAccess -InheritanceType All

And we got the error described above.

Cause:-

Powershell is throwing this error because the mailbox that you are trying to add the permission is hosted in a higher version of exchange than the server you are running the powershell command from.

That means you should be running the command in Exchange 2016 where the mailbox of userA is now hosted after it was migrated from Exchange 2010.

Solution:-

  1. Check which database the mailbox is currently on, and which version of Exchange server.

Get-Mailbox -Identity UserA | fl database,exchangeversion

2. Use powershell on a higher version of  exchange where the mailbox resides. In my case it is exchange 2016 powershell, it depends on your Exchange version result which you will get by running the command above.

You can always refer to this Microsoft technet link to know your versions of Exchange 🙂 https://technet.microsoft.com/en-us/library/hh135098(v=exchg.150).aspx

4 thoughts on “Cannot set the security descriptor of mailbox – Exchange PowerShell error when assigning permissions in Exchange 2010/2016 co-existence

    1. Did you get the exchange version of that mailbox database? If the mailbox is stored on a 2016 exchange server database you will need to use exchange management PowerShell in exchange server 2016 to modify the object.

      Like

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out /  Change )

Google+ photo

You are commenting using your Google+ account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s