Hello everyone! I am trying to collect organization health data from the Microsoft Exchange On-Premises page and I am getting the error as listed below. This server was installed using the /m:RecoverServer /InstallWindowsComponents switch as the earlier server crashed. What could be the problem? Please assist! Thanks! I run Exchange 2010. Summary: 3 item(s). 2 succeeded, 1 failed. Elapsed time: 00:00:31 Read file Completed Exchange Management Shell command completed: Read binary stream from the file 'C:\Program Files\Microsoft\Exchange Server\V14\bin\ExBPA.StayingInformed.Config.xml'. Elapsed Time: 00:00:00 Collect Organizational Health Data Completed Exchange Management Shell command completed: Test-SystemHealth -ConfigurationData '<Binary Data>' -OutData Elapsed Time: 00:00:27 Save Organizational Health Data Failed Error: Active Directory operation failed on <mydomain>. This error is not retriable. Additional information: Insufficient access rights to perform the operation. Active directory response: 00002098: SecErr: DSID-03150BB9, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0 The user has insufficient access rights. Click here for help... http://technet.microsoft.com/en-US/library/ms.exch.err.default(EXCHG.141).aspx?v=14.1.218.11&t=exchgf1&e=ms.exch.err.Ex6AE46B Exchange Management Shell command attempted: Set-OrganizationConfig -OrganizationSummary 'TotalExchangeServers,1,False','TotalMailboxServers,1,False','TotalUMServers,0,False','TotalClientAccessServers,1,False','TotalTransportServers,1,False','TotalCALMailboxes,1,False','EnterpriseCALs,0,False','StandardCALs,1,False','TotalJounalingUser,0,False','TotalDatabases,1,False','TotalDatabasesCopy,1,False','TotalDatabasesCopyUnhealthy,0,False','Total2009ExchangeServers,1,False','Total2007ExchangeServers,0,False','Total2003ExchangeServers,0,False','TotalUnlicensedExchangeServers,1,False','TotalRecipients,2,False','TotalMailboxes,1,False','TotalDistributionGroups,0,False','TotalDynamicDistributionGroups,0,False','TotalMailContacts,0,False','TotalMailUsers,0,False','TotalLegacyMailbox,0,False','TotalMessagingRecordManagementUser,0,False','TotalUnifiedMessagingUser,0,False','TotalOWAUser,2,False','TotalActiveSyncUser,2,False','TotalMAPIUser,2,False','TotalPOP3User,2,False','TotalIMAP4User,2,False' Elapsed Time: 00:00:03

Ryan, Looks like a permissions problem with the account you are using. Are you running the command in an elevated command shell? Make sure you are using an account with the appropriate permissions: Domain Admins, Enterprise Admins, Schema Admins Thanks, Jorge Jorge R. Diaz PMP, CCNA, MCSE, MCSA Sr. Microsoft Consultant Planet Technologies, Inc.

Hi, Resetting the permissions on the user object in AD as mentioned below: Active Directory Users and Computers snap-in. Select the Properties of the user account and go to the Security tab. If you don’t see the Security tab, choose View / Advanced Features. On the Security tab, click the Advanced button. I assume that the problem is the check box Allow inheritable permissions… is not selected. Re-select this check-box and close the property pages of the user account Regards from www.windowsadmin.info

hm.. it would not be a permissions issue is guess becouse exchange 2010 works on RBAC.. and exchange managemnt console GERYS OUT areas that user does not have access to insted of trrowing errors after executing a command UNlike earlier versions and per the error detail above it has already read the org information.. it is intersting to find out what is it trying to do with AD again you might want to check if the server is added to the "exchange server" security group and server has access to the "exchange" folder in the installation directory Dhruv

Hi ryanSWJ, Any updates on your issue? Can you do other management? Please check whether the Exchange server name is a member of Exchange Trusted Subsytem group (domain.com->Microsoft Exchange Security Groups). Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

Hi ryanSWJ, Any updates on your issue?Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

Hi ryanSWJ, Any updates?Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.