Exchange Management Console Permissions Gone

How to correct error “you don't have sufficient permissions to view this data” from the Exchange Management Console Organisation Configuration

I just had this problem, so in the hope that this helps someone else…

If you have Exchange 2010 running on Windows Server 2008 R2, and you’ve been foolish enough to install and configure an email account in Outlook on the same machine, and you go to use the Exchange Management Console (EMC) and receive an error “you don't have sufficient permissions to view this data”, or find that you no longer have access to CMDlets that you know you should have access to in the Exchange Management Shell, then delete the Outlook logon credentials from the Credential Manager on the server, and try again…

To do this:

  1. Type “Credential Manager” in the Search box in the start menu, and select and run the Credential Manager.
  2. Remove the credentials for anything that looks like your Outlook account.

To check if other credentials, such as Outlook, are causing the problem:

  1. Open Windows PowerShell (not the Exchange Management Shell). You should get the PowerShell window with the blue background and a prompt. There should be no Exchange scripts running. Then do the following:
    $UserCredential = Get-Credential
    
    $Session = New-PSSession -ConfigurationName Microsoft.Exchange -ConnectionUri http://<Exchange 2010 server name>/PowerShell/ -Authentication Kerberos -Credential $UserCredential
    
    Import-PSSession $Session
    When entering your credentials, use the domain\username of the administrator account. Specify the full FQDN of your Exchange 2010 server.

    Once you're connected, see if you can run Get-ManagementRoleAssignment. If you can run that cmdlet, then you likely have your permissions. You can run Get-ExCommand again to verify.

    If that works, then you have conflicting credentials stored in your profile. Try removing the conflicting credentials from the credential manager in your Windows Profile and try opening the shell and EMC again.

A few other things to check for:

  1. Open Active Directory Users and Computers, select “Advanced Features” from the “View” menu, then navigate to “Microsoft Exchange Security Groups” and ensure that the Administrator user is added to (is a member of) the Organisation Management Group.
  2. Read the forum threads linked below.

More Information

Information gathered from the following forum threads:

 

Updated about 1 yr, 4 mths ago (September 10, 2010). Know a better answer? Let us know!

Related categories [coloured].

User submitted comments:

Chakotey, about 1 yr, 6 mths ago
Monday July 12, 2010 3:16 PM

Thank you very much for this tip. This helped me......

Exchange Tester, about 1 yr, 2 mths ago
Monday December 6, 2010 1:48 PM

Thanks for this fine solution! It helped me a lot!

Roman, about 1 yr, 18 days ago
Tuesday January 18, 2011 3:12 PM

Thanks a lot! Problem is not obvious and it would take quite a time to resolve it by myself!

vijay, about 7 mths, 10 days ago
Wednesday June 29, 2011 10:58 AM

Thank you very much

chris, about 5 mths, 18 days ago
Sunday August 21, 2011 7:33 AM

life saver thank you!

Saif, about 2 mths, 20 days ago
Friday November 18, 2011 12:56 PM

Thank you so much

Comment on this article (no HTML, max 1200 characters):