Hello! I have deployed exchange (http://technet.microsoft.com/en-us/library/aa998031.aspx) and lync (http://technet.microsoft.com/en-us/library/gg670911.aspx): Resource forest B with Exchange 2010 and Lync 2010 and account forest A with user accounts. Issue: I create linked mailbox for user and enable lync for him. If try to disable mailbox for user console EMC report me error -------------------------------------------------------- Microsoft Exchange Error -------------------------------------------------------- Action 'Disable' could not be performed on object 'User 1'. User 1 Failed Error: Active Directory operation failed on dc01.resourcedomain.loc. This error is not retriable. Additional information: Access is denied. Active directory response: 00002098: SecErr: DSID-03150BB9, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0 The user has insufficient access rights. --------------------------------------------------------------------------- I know that is possible if object do not have inheritance from parent object. But inheritance is enable. Than I disable lync for user1 I can correctly disable mailbox for user1. Is it normal for resource forest scenario or not? Truly, Valery Tyurin

It's look like here http://social.technet.microsoft.com/Forums/en-US/exchange2010/thread/6331f602-4a21-43cb-af71-b5b1c4fcb140 http://social.technet.microsoft.com/Forums/en-GB/exchange2010/thread/18f25b40-b0bd-4ae1-9b08-5b954161dbb8 but I checked inheritance - it is enable and rights for "Exchange Trusted Subsystem" group - it have right on mailbox. I have two identical configuration - result is the same. Cannot disable linked mailbox then lync is enable. Truly, Valery Tyurin

Does anybody have resource forest configuration with Exchange+Lync and can check disabling mailbox for linked mailbox?Truly, Valery Tyurin

Does anybody have resource forest configuration with Exchange+Lync and can check disabling mailbox for linked mailbox?Truly, Valery Tyurin

Than I disable lync for user1 I can correctly disable mailbox for user1. Do you mean that you can disable the mailbox after you disable lync? If you disable one mailbox (without enable lync), will you get this error? In my test lab (only Exchange Server), I can disable the linked mailbox without any error. so I need to confirm this not lync server not allow you to disable the mailbox. Thanks, EvanEvan Liu TechNet Community Support

Than I disable lync for user1 I can correctly disable mailbox for user1. Do you mean that you can disable the mailbox after you disable lync? If you disable one mailbox (without enable lync), will you get this error? In my test lab (only Exchange Server), I can disable the linked mailbox without any error. so I need to confirm this not lync server not allow you to disable the mailbox. Thanks, EvanEvan Liu TechNet Community Support

Valery, please update us on your details so that we can help you Jonas Andersson | Microsoft Community Contributor Award 2011 | MCITP: EMA 2007/2010 | Blog: http://www.testlabs.se/blog | Follow me on twitter: jonand82

Valery, please update us on your details so that we can help you Jonas Andersson | Microsoft Community Contributor Award 2011 | MCITP: EMA 2007/2010 | Blog: http://www.testlabs.se/blog | Follow me on twitter: jonand82

Does anybody have resource forest configuration with Exchange+Lync and can check disabling mailbox for linked mailbox?Truly, Valery Tyurin

Than I disable lync for user1 I can correctly disable mailbox for user1. Do you mean that you can disable the mailbox after you disable lync? If you disable one mailbox (without enable lync), will you get this error? In my test lab (only Exchange Server), I can disable the linked mailbox without any error. so I need to confirm this not lync server not allow you to disable the mailbox. Thanks, EvanEvan Liu TechNet Community Support

Valery, please update us on your details so that we can help you Jonas Andersson | Microsoft Community Contributor Award 2011 | MCITP: EMA 2007/2010 | Blog: http://www.testlabs.se/blog | Follow me on twitter: jonand82

Hello, Evan! If user have only linked mailbox without lync enable I can disable mailbox without any error. We add user to our resource forest according next step: 1. Create new disabled user account in resource forest B. 2. Create new normail (not disabled) uset in account forest A. 3. Create linked mailbox with EMC. 4. Copy value from msExchMasterAccountSid to msRTCSIP-Originatorsid in resource forest with attribute editor. 5. Copy from proxyAddress attirbute in resource forest B value sip:user1@corp.net to proxyAddress attribute in account forest A. 6. Enable Lync for user1. 7. Try to disable mailbox for user1 and get error. Evan, if possible can you check with Lync in your test lab? We have two identical configuration and error the same on both configuration. Truly, Valery Tyurin (remarks: 1. later will write ps cmdlet on each step; 2. Turn on logging on secure events on domain controller and exchange server in resource forest). Q: May be then I try to disable linked mailbox EMC try to delete some attributies in account forest?

Sorry, I don't have Lync in my test lab, so I cannot test this for you. From your description, I think this is because Lync not allow your to disable the mailbox (that you can disable the mailbox with disable the Lync), go to disable Lync feature on mailboxes before you disable the mailboxes. Thanks, EvanEvan Liu TechNet Community Support

Sorry, I don't have Lync in my test lab, so I cannot test this for you. From your description, I think this is because Lync not allow your to disable the mailbox (that you can disable the mailbox with disable the Lync), go to disable Lync feature on mailboxes before you disable the mailboxes. Thanks, EvanEvan Liu TechNet Community Support

Sorry, I don't have Lync in my test lab, so I cannot test this for you. From your description, I think this is because Lync not allow your to disable the mailbox (that you can disable the mailbox with disable the Lync), go to disable Lync feature on mailboxes before you disable the mailboxes. Thanks, EvanEvan Liu TechNet Community Support

Thank you, Evan, for help! But I need to understand why Lync prevents disable only linked mailbox not general mailbox. I do not find any mention about such behavior exchange in technet library. And this error do not inform about properties which prevent me to disable linked mailbox. May be this is by microsoft design resource forest topology?Truly, Valery Tyurin

Thank you, Evan, for help! But I need to understand why Lync prevents disable only linked mailbox not general mailbox. I do not find any mention about such behavior exchange in technet library. And this error do not inform about properties which prevent me to disable linked mailbox. May be this is by microsoft design resource forest topology?Truly, Valery Tyurin

Thank you, Evan, for help! But I need to understand why Lync prevents disable only linked mailbox not general mailbox. I do not find any mention about such behavior exchange in technet library. And this error do not inform about properties which prevent me to disable linked mailbox. May be this is by microsoft design resource forest topology?Truly, Valery Tyurin

Hello, My colleage help me to test in his lab (Exchange 2010 and Lync 2010), he didn't have issue to disable linked mailbox (which has Lync enabled). These are steps he used to do the test: <1> Create two-trusts between the forests. <2> Create new user account in Account forest <2> Create one linked mailbox in EMC (this will create new disabled user account in resource forest B and linked it to the account in linked forest) <3> Enable Lync for the linked mailbox <4> He can disable the mailbox without any error. So I suggest you follow his steps to test for the issue, if you also can disable mailbox without any issue. Go to clean the value for msRTCSIP-Originatorsid , then check whether you can disable the problem mailboxes (which you cannot disable before). Thanks, EvanEvan Liu TechNet Community Support

Yes, test with two-way trust. Thanks, EvanEvan Liu TechNet Community Support

Yes, test with two-way trust. Thanks, EvanEvan Liu TechNet Community Support

<1> Create two-trusts between the forests. Hello, In my scenario we can create only one-way outgoing trust when recource forest trust account forest according MS recomendation http://technet.microsoft.com/en-us/library/aa998031.aspx http://technet.microsoft.com/en-us/library/cc779840.aspx Did you create two outgoing trusts: first (account forest trust resource forest) and second (resource forest trust account forest)? Truly, Valery Tyurin

Yes, test with two-way trust. Thanks, EvanEvan Liu TechNet Community Support

Hello, My colleage help me to test in his lab (Exchange 2010 and Lync 2010), he didn't have issue to disable linked mailbox (which has Lync enabled). These are steps he used to do the test: <1> Create two-trusts between the forests. <2> Create new user account in Account forest <2> Create one linked mailbox in EMC (this will create new disabled user account in resource forest B and linked it to the account in linked forest) <3> Enable Lync for the linked mailbox <4> He can disable the mailbox without any error. So I suggest you follow his steps to test for the issue, if you also can disable mailbox without any issue. Go to clean the value for msRTCSIP-Originatorsid , then check whether you can disable the problem mailboxes (which you cannot disable before). Thanks, EvanEvan Liu TechNet Community Support

Any updates? Thanks, EvanEvan Liu TechNet Community Support

Any updates? Thanks, EvanEvan Liu TechNet Community Support

Any updates? Thanks, EvanEvan Liu TechNet Community Support

Hello, Evan! Cannot check on this week. Will try monday or tuesday on next week. And I need to conform outgoing trust with administrator account forest. Truly, Valery Tyurin

How about the issue, any updates? Thanks, EvanEvan Liu TechNet Community Support

How about the issue, any updates? Thanks, EvanEvan Liu TechNet Community Support

How about the issue, any updates? Thanks, EvanEvan Liu TechNet Community Support

Hello, Evan! I was on business trip. Now I create new virtual machine. Try to promote to DC and create two-way trust with our Lync+Exchange resource forest.Truly, Valery Tyurin

Hello, Evan! I was on business trip. Now I create new virtual machine. Try to promote to DC and create two-way trust with our Lync+Exchange resource forest.Truly, Valery Tyurin

Hello, Evan! I was on business trip. Now I create new virtual machine. Try to promote to DC and create two-way trust with our Lync+Exchange resource forest.Truly, Valery Tyurin

Any updates? Have your issue fixed? Thanks, EvanEvan Liu TechNet Community Support

Any updates? Have your issue fixed? Thanks, EvanEvan Liu TechNet Community Support

Any updates? Have your issue fixed? Thanks, EvanEvan Liu TechNet Community Support

Evan, hello! I cannot check it now. I suggest mark you replay "Tuesday, March 13, 2012 6:19 AM" as answer and close thread. On next week I will try it on my workshop and reopen thread if need. Ok?Truly, Valery Tyurin

Evan, hello! I cannot check it now. I suggest mark you replay "Tuesday, March 13, 2012 6:19 AM" as answer and close thread. On next week I will try it on my workshop and reopen thread if need. Ok?Truly, Valery Tyurin

Evan, hello! I cannot check it now. I suggest mark you replay "Tuesday, March 13, 2012 6:19 AM" as answer and close thread. On next week I will try it on my workshop and reopen thread if need. Ok?Truly, Valery Tyurin

Thanks for your reply. I will wait for your updates. Best Regards, EvanEvan Liu TechNet Community Support

Thanks for your reply. I will wait for your updates. Best Regards, EvanEvan Liu TechNet Community Support

Thanks for your reply. I will wait for your updates. Best Regards, EvanEvan Liu TechNet Community Support