You are currently offline, waiting for your internet to reconnect

A RBAC role assignee can unexpectedly run the "Update-FileDistributionService" command on an Exchange Server 2010 server that is outside the role assignment scope

SYMPTOMS
Consider the following scenario:
  • You create a management role assignment in a Microsoft Exchange Server 2010 environment.
  • You assign the Exchange Virtual Directories role to a role assignee.
  • You define the scope of the role assignment to an organizational unit.
  • The role assignee tries to run the Update-FileDistributionService command on an Exchange Server 2010 server that is outside the role assignment scope.
In this scenario, the role assignee can unexpectedly run the Update-FileDistributionService command on the server.
CAUSE
This issue occurs because there is an incorrect Role Based Access Control (RBAC) scope verification when Exchange Server 2010 runs the Update-FileDistributionService command.
RESOLUTION
To resolve this issue, install the following update rollup:
2579150 Description of Update Rollup 4 for Exchange Server 2010 Service Pack 1
STATUS
Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.
MORE INFORMATION
For more information about Role Based Access Control, visit the following Microsoft website:For more information about management role assignments, visit the following Microsoft website:For more information about the Update-FileDistributionService command, visit the following Microsoft website:For more information about the Exchange Virtual Directories role, visit the following Microsoft website:
Properties

Article ID: 2533451 - Last Review: 07/28/2011 02:48:00 - Revision: 3.0

Microsoft Exchange Server 2010 Service Pack 1

  • kbqfe kbfix kbhotfixrollup kbexpertiseinter kbsurveynew KB2533451
Feedback
div ng-repeat="language in languagesListForLargeScreens track by $index" class="col-sm-6 col-xs-24 ng-scope">
/html>microsoft.com/c.gif?DI=4050&did=1&t="> var varCustomerTracking = 1; var Route = "76500"; var Ctrl = ""; document.write(" ment('meta');m.name='ms.dqp0';m.content='true';document.getElementsByTagName('head')[0].appendChild(m);" onload="var m=document.createElement('meta');m.name='ms.dqp0';m.content='false';document.getElementsByTagName('head')[0].appendChild(m);" src="http://c1.microsoft.com/c.gif?">