Symptoms
Consider the following scenario:
-
You create an exclusive role assignment in a Microsoft Exchange Server 2010 environment.
-
You assign the Mail Recipients role to a Role Based Access Control (RBAC) role assignee.
-
You define the exclusive scope of the role assignment.
-
The RBAC role assignee tries to manage other user’s mailbox by using Exchange Control Panel (ECP).
In this scenario, ECP crashes. Additionally, following events are logged in the Application log:
Log Name: Application
Source: MSExchange Control Panel
Date: Date
Event ID: 4
Task Category: General
Level: Error
Keywords: Classic
User: N/A
Computer: Computer
Description:
Current user: User
Request for URL URL of ECP failed with the following error:
System.NullReferenceException: Object reference not set to an instance of an object.
at Microsoft.Exchange.Configuration.Authorization.ExchangeRunspaceConfiguration.LoadAllExclusiveScopes(ADSystemConfigurationSession session)
at Microsoft.Exchange.Configuration.Authorization.ExchangeRunspaceConfiguration.ReadAndCheckAllScopes(ADSystemConfigurationSession session, Dictionary`2 userAllScopes, String tenantOrganizationName)
at Microsoft.Exchange.Configuration.Authorization.ExchangeRunspaceConfiguration.LoadRoleCmdletInfo(ADRawEntry user, ADRawEntry userToVerifyInScope, ADSystemConfigurationSession session, String organizationName, IList`1 roleTypeFilter, List`1 sortedRoleEntryFilter, List`1 implicitRoleIds, RoleFilteringMode roleFilteringMode, SerializedAccessToken securityAccessToken, Dictionary`2& userAllScopes, List`1& userAllRoleEntries, ReadOnlyCollection`1& userAllRoleTypes, ReadOnlyCollection`1& userAllRoleAssignments)
at Microsoft.Exchange.Configuration.Authorization.ExchangeRunspaceConfiguration.LoadRoleCmdletInfo(String organizationName, IList`1 roleTypeFilter, List`1 sortedRoleEntryFilter, IList`1 logonUserRequiredRoleTypes, List`1 implicitRoleIds)
at Microsoft.Exchange.Configuration.Authorization.ExchangeRunspaceConfiguration..ctor(IIdentity logonIdentity, IIdentity impersonatedIdentity, ExchangeRunspaceConfigurationSettings settings, IList`1 roleTypeFilter, List`1 sortedRoleEntryFilter, IList`1 logonUserRequiredRoleTypes, Boolean callerCheckedAccess)
at Microsoft.Exchange.Management.ControlPanel.RbacContext.<.ctor>b__5()
at Microsoft.Exchange.Data.Storage.LazilyInitialized`1.get_Value()
at Microsoft.Exchange.Data.Storage.LazilyInitialized`1.op_Implicit(LazilyInitialized`1 delayInitialized)
at Microsoft.Exchange.Management.ControlPanel.RbacSession..ctor(RbacContext context, SessionPerformanceCounters sessionPerfCounters, EsoSessionPerformanceCounters esoSessionPerfCounters)
at Microsoft.Exchange.Management.ControlPanel.StandardSession..ctor(RbacContext context)
at Microsoft.Exchange.Management.ControlPanel.StandardSession.Factory.CreateNewSession()
at Microsoft.Exchange.Management.ControlPanel.RbacSession.Factory.CreateSession()
at Microsoft.Exchange.Management.ControlPanel.RbacContext.CreateSession()
at Microsoft.Exchange.Management.ControlPanel.RbacSettings.CreateSession()
at Microsoft.Exchange.Management.ControlPanel.AuthenticationSettings..ctor(HttpContext context)
at Microsoft.Exchange.Management.ControlPanel.RbacModule.Application_PostAuthenticateRequest(Object sender, EventArgs e)
at System.Web.HttpApplication.SyncEventExecutionStep.System.Web.HttpApplication.IExecutionStep.Execute()
at System.Web.HttpApplication.ExecuteStep(IExecutionStep step, Boolean& completedSynchronously)
Log Name: Application
Source: MSExchange Common
Date: Date
Event ID: 4999
Task Category: General
Level: Error
Keywords: Classic
User: N/A
Computer: Computer
Description:
Watson report about to be sent for process id: process ID, with parameters: E12, Build Type, Version, ECP, M.E.Configuration.ObjectModel, M.E.C.A.ExchangeRunspaceConfiguration.LoadAllExclusiveScopes, System.NullReferenceException, XXXX, Version. ErrorReportingEnabled: False
Cause
This issue occurs because a NULL scope is passed to ECP when it tries to load all exclusive scopes.
Resolution
To resolve this issue, install the following update rollup:
2645995 Description of Update Rollup 1 for Exchange Server 2010 Service Pack 2
Status
Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.
More Information
For more information about exclusive scopes, visit the following Microsoft website:
General information about exclusive scopesFor more information about Exchange Control Panel, visit the following Microsoft website:
General information about Exchange Control PanelFor more information about how to create a regular or an exclusive scope, visit the following Microsoft website:
General information about how to create a regular or an exclusive scopeFor more information about Mail Recipients role, visit the following Microsoft website:
