Symptoms
Consider the following scenario:
-
You create an exclusive role assignment in a Microsoft Exchange Server 2010 environment.
-
You assign the Mail Recipients role to a Role Based Access Control (RBAC) role assignee.
-
You define the exclusive scope of the role assignment.
-
The RBAC role assignee tries to manage other user’s mailbox by using Exchange Control Panel (ECP).
In this scenario, ECP crashes. Additionally, following events are logged in the Application log:
Log Name: Application Source: MSExchange Control Panel Date: DateEvent ID: 4 Task Category: General Level: Error Keywords: Classic User: N/A Computer: ComputerDescription: Current user: UserRequest for URL URL of ECP failed with the following error: System.NullReferenceException: Object reference not set to an instance of an object. at Microsoft.Exchange.Configuration.Authorization.ExchangeRunspaceConfiguration.LoadAllExclusiveScopes(ADSystemConfigurationSession session) at Microsoft.Exchange.Configuration.Authorization.ExchangeRunspaceConfiguration.ReadAndCheckAllScopes(ADSystemConfigurationSession session, Dictionary`2 userAllScopes, String tenantOrganizationName) at Microsoft.Exchange.Configuration.Authorization.ExchangeRunspaceConfiguration.LoadRoleCmdletInfo(ADRawEntry user, ADRawEntry userToVerifyInScope, ADSystemConfigurationSession session, String organizationName, IList`1 roleTypeFilter, List`1 sortedRoleEntryFilter, List`1 implicitRoleIds, RoleFilteringMode roleFilteringMode, SerializedAccessToken securityAccessToken, Dictionary`2& userAllScopes, List`1& userAllRoleEntries, ReadOnlyCollection`1& userAllRoleTypes, ReadOnlyCollection`1& userAllRoleAssignments) at Microsoft.Exchange.Configuration.Authorization.ExchangeRunspaceConfiguration.LoadRoleCmdletInfo(String organizationName, IList`1 roleTypeFilter, List`1 sortedRoleEntryFilter, IList`1 logonUserRequiredRoleTypes, List`1 implicitRoleIds) at Microsoft.Exchange.Configuration.Authorization.ExchangeRunspaceConfiguration..ctor(IIdentity logonIdentity, IIdentity impersonatedIdentity, ExchangeRunspaceConfigurationSettings settings, IList`1 roleTypeFilter, List`1 sortedRoleEntryFilter, IList`1 logonUserRequiredRoleTypes, Boolean callerCheckedAccess) at Microsoft.Exchange.Management.ControlPanel.RbacContext.<.ctor>b__5() at Microsoft.Exchange.Data.Storage.LazilyInitialized`1.get_Value() at Microsoft.Exchange.Data.Storage.LazilyInitialized`1.op_Implicit(LazilyInitialized`1 delayInitialized) at Microsoft.Exchange.Management.ControlPanel.RbacSession..ctor(RbacContext context, SessionPerformanceCounters sessionPerfCounters, EsoSessionPerformanceCounters esoSessionPerfCounters) at Microsoft.Exchange.Management.ControlPanel.StandardSession..ctor(RbacContext context) at Microsoft.Exchange.Management.ControlPanel.StandardSession.Factory.CreateNewSession() at Microsoft.Exchange.Management.ControlPanel.RbacSession.Factory.CreateSession() at Microsoft.Exchange.Management.ControlPanel.RbacContext.CreateSession() at Microsoft.Exchange.Management.ControlPanel.RbacSettings.CreateSession() at Microsoft.Exchange.Management.ControlPanel.AuthenticationSettings..ctor(HttpContext context) at Microsoft.Exchange.Management.ControlPanel.RbacModule.Application_PostAuthenticateRequest(Object sender, EventArgs e) at System.Web.HttpApplication.SyncEventExecutionStep.System.Web.HttpApplication.IExecutionStep.Execute() at System.Web.HttpApplication.ExecuteStep(IExecutionStep step, Boolean& completedSynchronously)
Log Name: Application Source: MSExchange Common Date: DateEvent ID: 4999 Task Category: General Level: Error Keywords: Classic User: N/A Computer: ComputerDescription: Watson report about to be sent for process id: process ID, with parameters: E12, Build Type, Version, ECP, M.E.Configuration.ObjectModel, M.E.C.A.ExchangeRunspaceConfiguration.LoadAllExclusiveScopes, System.NullReferenceException, XXXX, Version. ErrorReportingEnabled: False
Cause
This issue occurs because a NULL scope is passed to ECP when it tries to load all exclusive scopes.
Resolution
To resolve this issue, install the following update rollup:
2645995 Description of Update Rollup 1 for Exchange Server 2010 Service Pack 2
Status
Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.
More Information
For more information about exclusive scopes, visit the following Microsoft website:
General information about exclusive scopesFor more information about Exchange Control Panel, visit the following Microsoft website:
General information about Exchange Control PanelFor more information about how to create a regular or an exclusive scope, visit the following Microsoft website:
General information about how to create a regular or an exclusive scopeFor more information about Mail Recipients role, visit the following Microsoft website:
