Failed to set Mailbox permissions

Question

Hi,

I have a question in regard to https://www.adaxes.com/questions/13241/mail-enabled-security-group-not-found-in-o365

My rule is creating shared mailbox and security group fine. Also email address is assigned and group synced to O365:

Trying to set Send as and Mailbox rights is failing:

I also waited 15 minutes and did an manual dir-sync

Is this still an known error in Adaxes?

Can I check if a group is online mail enabled? Like I can do it for mailboxes (https://www.adaxes.com/script-repository/check-whether-user-has-mailbox-in-exchange-online-s303.htm)?

Comments

Hello,

For troubleshooting purposes, please, specify the version of Adaxes you are currently using. For information on how to check it, see https://www.adaxes.com/help/CheckServiceVersion.

Also, please, enable tracing of requests sent to Exchange servers, reproduce the issue and send us (support@adaxes.com) the log file. For information on how to enable the tracing, have a look at the following help article: https://www.adaxes.com/help/EnableExchangeRequestLogging.

---

Hi,

running on version 3.16.21408.0

Just checked the log agains and on some point it was sucessfully ...

However Mailbox A was only full access set, no send as Mailbox B was set both correctly.

Will do some more tests later and enable tracing as well

---

I'm on version 3.14.19312.0 and have the same issue. Adaxes can no longer display the full access permission (group) on an Office 365 shared mailbox. It will display the Guid for Send-as (same group as used for full access), and nothing for Full access, when you try to add the group under full access you get an error saying that the group cannot be found in M365.

Here are the Exchange trace logs:

[07/20/2023 10:35:25] Selecting an Exchange server for the organization 'Org'. [07/20/2023 10:35:27] Connected to XXXXXXXXXXX. MaxRunspacesCount: 10 [07/20/2023 10:35:25] Get-RemoteMailbox -Identity "CN=SharedMailbox,OU=Shared,OU=Resources,OU=Exchange,OU=Services,OU=Resource Management,DC=ORG,DC=nz" -DomainController "XXXXXXXXXX" [07/20/2023 10:35:27] Succeed [07/20/2023 10:35:27] Get-CASMailbox -Identity "ca49e2c5-022c-4268-8993-cbc84719c687" [07/20/2023 10:35:27] Succeed [07/20/2023 10:35:32] Get-MailboxPermission -Identity "ca49e2c5-022c-4268-8993-cbc84719c687" -Owner "True" [07/20/2023 10:35:32] Succeed [07/20/2023 10:35:32] Get-MailboxPermission -Identity "ca49e2c5-022c-4268-8993-cbc84719c687" [07/20/2023 10:35:32] Succeed [07/20/2023 10:35:32] Get-User -Filter "Name -eq 'SMBX_SharedGroup_FA'" [07/20/2023 10:35:33] Succeed [07/20/2023 10:35:33] Get-Group -Filter "Name -eq 'SMBX_SharedGroup_FA'" [07/20/2023 10:35:33] Succeed [07/20/2023 10:36:34] Get-MailboxPermission -Identity "ca49e2c5-022c-4268-8993-cbc84719c687" -Owner "True" [07/20/2023 10:36:35] Succeed [07/20/2023 10:36:35] Get-MailboxPermission -Identity "ca49e2c5-022c-4268-8993-cbc84719c687" [07/20/2023 10:36:35] Succeed [07/20/2023 10:36:35] Get-User -Filter "Name -eq 'SMBX_SharedGroup_FA'" [07/20/2023 10:36:35] Succeed [07/20/2023 10:36:35] Get-Group -Filter "Name -eq 'SMBX_SharedGroup_FA'" [07/20/2023 10:36:36] Succeed [07/20/2023 10:36:36] Get-Group -Filter "Name -like 'SMBX_SharedGroup_FA*'" [07/20/2023 10:36:36] Succeed

---

Hello,

First of all, please, make sure that the group is included into the scope of your Microsoft 365 tenant registered in Adaxes. For information on how to check that, see https://www.adaxes.com/help/LookupTenantForUser.

You are using an old build of Adaxes 2021.1. After it was released, Microsoft made some changes in naming conventions. This can also result in a behavior like the one you are facing. As such, we recommend you to upgrade at least to the last build (3.14.21404) of Adaxes 2021.1.

What’s New

Upgrade Instructions

---

Hello,

updated yesterday to latest version and tried again. Same issue and log file is not very helpful from my perspective

Operation

Logfile

Settings

---

Hello,

Please, make sure that the group is included into the associated scope of your Microsoft 365 tenant registered in Adaxes. The following article should be helpful: https://www.adaxes.com/help/LookupTenantForUser.

---

Looks fine

---

Hello,

Thank you for specifying. Are you able to manually update Exchange properties of the group in Adaxes after it is mail-enabled?

Also, please, describe the workflow you have in all the possible details with screenshots. If you cannot post full screenshots here, please, send them to us at support@adaxes.com.