ECP crashes when a RBAC role assignee tries to manage another user’s mailbox by using ECP in an Exchange Server 2010 environment

Article ID: 2604713 - View products that this article applies to.
Expand all | Collapse all

SYMPTOMS

Consider the following scenario:
  • You create an exclusive role assignment in a Microsoft Exchange Server 2010 environment.
  • You assign the Mail Recipients role to a Role Based Access Control (RBAC) role assignee.
  • You define the exclusive scope of the role assignment.
  • The RBAC role assignee tries to manage other user’s mailbox by using Exchange Control Panel (ECP).
In this scenario, ECP crashes. Additionally, following events are logged in the Application log:
Log Name: Application
Source: MSExchange Control Panel
Date: Date
Event ID: 4
Task Category: General
Level: Error
Keywords: Classic
User: N/A
Computer: Computer
Description:
Current user: User
Request for URL URL of ECP failed with the following error:
System.NullReferenceException: Object reference not set to an instance of an object.
at Microsoft.Exchange.Configuration.Authorization.ExchangeRunspaceConfiguration.LoadAllExclusiveScopes(ADSystemConfigurationSession session)
at Microsoft.Exchange.Configuration.Authorization.ExchangeRunspaceConfiguration.ReadAndCheckAllScopes(ADSystemConfigurationSession session, Dictionary`2 userAllScopes, String tenantOrganizationName)
at Microsoft.Exchange.Configuration.Authorization.ExchangeRunspaceConfiguration.LoadRoleCmdletInfo(ADRawEntry user, ADRawEntry userToVerifyInScope, ADSystemConfigurationSession session, String organizationName, IList`1 roleTypeFilter, List`1 sortedRoleEntryFilter, List`1 implicitRoleIds, RoleFilteringMode roleFilteringMode, SerializedAccessToken securityAccessToken, Dictionary`2& userAllScopes, List`1& userAllRoleEntries, ReadOnlyCollection`1& userAllRoleTypes, ReadOnlyCollection`1& userAllRoleAssignments)
at Microsoft.Exchange.Configuration.Authorization.ExchangeRunspaceConfiguration.LoadRoleCmdletInfo(String organizationName, IList`1 roleTypeFilter, List`1 sortedRoleEntryFilter, IList`1 logonUserRequiredRoleTypes, List`1 implicitRoleIds)
at Microsoft.Exchange.Configuration.Authorization.ExchangeRunspaceConfiguration..ctor(IIdentity logonIdentity, IIdentity impersonatedIdentity, ExchangeRunspaceConfigurationSettings settings, IList`1 roleTypeFilter, List`1 sortedRoleEntryFilter, IList`1 logonUserRequiredRoleTypes, Boolean callerCheckedAccess)
at Microsoft.Exchange.Management.ControlPanel.RbacContext.<.ctor>b__5()
at Microsoft.Exchange.Data.Storage.LazilyInitialized`1.get_Value()
at Microsoft.Exchange.Data.Storage.LazilyInitialized`1.op_Implicit(LazilyInitialized`1 delayInitialized)
at Microsoft.Exchange.Management.ControlPanel.RbacSession..ctor(RbacContext context, SessionPerformanceCounters sessionPerfCounters, EsoSessionPerformanceCounters esoSessionPerfCounters)
at Microsoft.Exchange.Management.ControlPanel.StandardSession..ctor(RbacContext context)
at Microsoft.Exchange.Management.ControlPanel.StandardSession.Factory.CreateNewSession()
at Microsoft.Exchange.Management.ControlPanel.RbacSession.Factory.CreateSession()
at Microsoft.Exchange.Management.ControlPanel.RbacContext.CreateSession()
at Microsoft.Exchange.Management.ControlPanel.RbacSettings.CreateSession()
at Microsoft.Exchange.Management.ControlPanel.AuthenticationSettings..ctor(HttpContext context)
at Microsoft.Exchange.Management.ControlPanel.RbacModule.Application_PostAuthenticateRequest(Object sender, EventArgs e)
at System.Web.HttpApplication.SyncEventExecutionStep.System.Web.HttpApplication.IExecutionStep.Execute()
at System.Web.HttpApplication.ExecuteStep(IExecutionStep step, Boolean& completedSynchronously)


Log Name: Application
Source: MSExchange Common
Date: Date
Event ID: 4999
Task Category: General
Level: Error
Keywords: Classic
User: N/A
Computer: Computer
Description:
Watson report about to be sent for process id: process ID, with parameters: E12, Build Type, Version, ECP, M.E.Configuration.ObjectModel, M.E.C.A.ExchangeRunspaceConfiguration.LoadAllExclusiveScopes, System.NullReferenceException, XXXX, Version. ErrorReportingEnabled: False

CAUSE

This issue occurs because a NULL scope is passed to ECP when it tries to load all exclusive scopes.

RESOLUTION

To resolve this issue, install the following update rollup:
2645995 Description of Update Rollup 1 for Exchange Server 2010 Service Pack 2

STATUS

Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.

MORE INFORMATION

For more information about exclusive scopes, visit the following Microsoft website:
General information about exclusive scopes
For more information about Exchange Control Panel, visit the following Microsoft website:
General information about Exchange Control Panel
For more information about how to create a regular or an exclusive scope, visit the following Microsoft website:
General information about how to create a regular or an exclusive scope
For more information about Mail Recipients role, visit the following Microsoft website:
General information about Mail Recipients role

Properties

Article ID: 2604713 - Last Review: February 13, 2012 - Revision: 1.0
APPLIES TO
  • Microsoft Exchange Server 2010 Service Pack 2, when used with:
    • Microsoft Exchange Server 2010 Enterprise
    • Microsoft Exchange Server 2010 Standard
Keywords: 
kbqfe kbfix kbsurveynew kbexpertiseinter KB2604713

Give Feedback

 

Contact us for more help

Contact us for more help
Connect with Answer Desk for expert help.
Get more support from smallbusiness.support.microsoft.com