When creating a room mailbox from an existing user, or converting a user mailbox to a room mailbox, I am getting a generic "Access is Denied" error from AD. When the user doing the creation / conversion is an Exchange Org Admin, the error occurs. If the user doing the creation / conversion is both a Domain Admin and an Exchange Org Admin, the error does not occur. Exchange Org Admins have Full Control over the OU where the Room Mailbox object is located in AD. The odd thing is that even though I see this error message, the mailbox appear to have successfully been switched to a Room mailbox. - The IsResource property is set to True - The ResourceType property is set to Room - The RecipientTypeDetails properties is set to RoomMailbox - The AddressListMembership property is updated to include membership in the All Rooms address list - The AutomateProcessing property is set to AutoUpdate. If I go into the mailbox via OWA, I can set the resource configurations and the mailbox appears to perform its job. But it still concerns me that I am seeing that error (especially since I don't see the error when logged in as a Domain Admin / Exchange Org Admin). And making Exchange Org Admins also Domain Admins isn't an option here... So does anybody have any idea what gets tweaked in AD when you convert a user to a room that a Domain Admin would have access to but a Exchange Org Admin might not? Many thanks...

Have you used the Effective Permissions opion to double check that the EX Org Admins have Full permissions on the objects in the OU? Also make sure that inheritable permissions are enabled on the objects.ThanksWillWill Shepherd - MCSE/MCITP/MCTS (Windows 2008,Exchange 2007,OCS 2007)

Hi,I have tested on my lab, there is no such issue.Now please run DSACLS "distinguishedName of the OU" >dbacl.txt, then send the information to me at allensyr2003@hotmail.comThanksAllen