A RBAC role assignee can unexpectedly run the "Update-FileDistributionService" command on an Exchange Server 2010 server that is outside the role assignment scope

Article translations Article translations
Article ID: 2533451 - View products that this article applies to.
Expand all | Collapse all

SYMPTOMS

Consider the following scenario:
  • You create a management role assignment in a Microsoft Exchange Server 2010 environment.
  • You assign the Exchange Virtual Directories role to a role assignee.
  • You define the scope of the role assignment to an organizational unit.
  • The role assignee tries to run the Update-FileDistributionService command on an Exchange Server 2010 server that is outside the role assignment scope.
In this scenario, the role assignee can unexpectedly run the Update-FileDistributionService command on the server.

CAUSE

This issue occurs because there is an incorrect Role Based Access Control (RBAC) scope verification when Exchange Server 2010 runs the Update-FileDistributionService command.

RESOLUTION

To resolve this issue, install the following update rollup:
2579150 Description of Update Rollup 4 for Exchange Server 2010 Service Pack 1

STATUS

Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.

MORE INFORMATION

For more information about Role Based Access Control, visit the following Microsoft website:
General information about Role Based Access Control
For more information about management role assignments, visit the following Microsoft website:
General information about management role assignments
For more information about the Update-FileDistributionService command, visit the following Microsoft website:
General information about the Update-FileDistributionService command
For more information about the Exchange Virtual Directories role, visit the following Microsoft website:
General information about the Exchange Virtual Directories role

Properties

Article ID: 2533451 - Last Review: July 28, 2011 - Revision: 3.0
APPLIES TO
  • Microsoft Exchange Server 2010 Service Pack 1, when used with:
    • Microsoft Exchange Server 2010 Standard
    • Microsoft Exchange Server 2010 Enterprise
Keywords: 
kbqfe kbfix kbhotfixrollup kbexpertiseinter kbsurveynew KB2533451

Give Feedback

 

Contact us for more help

Contact us for more help
Connect with Answer Desk for expert help.
Get more support from smallbusiness.support.microsoft.com