We are encountering a Prepare Error 75% for multiple mailboxes.
All of our user accounts have the same error -
Commit failed. The user has insufficient access rights. at System.DirectoryServices.Protocols.LdapConnection.ConstructResponse(Int32 messageId, LdapOperation operation, ResultAll resultType, TimeSpan requestTimeOut, Boolean exceptionOnTimeOut) at System.DirectoryServices.Protocols.LdapConnection.SendRequest(DirectoryRequest request, TimeSpan requestTimeout) at BinaryTree.DirSync.Exchange.ADConnection.SendRequest(DirectoryRequest request, String objectDN) at BinaryTree.DirSync.Exchange.ADRequest.Commit(ADConnection connection) at BinaryTree.DirSync.Exchange.ADRequests.Commit(ADConnection connection, Action`1 onException) at BinaryTree.DirSync.Exchange.ADEndpoint.CommitWithRollback(ADRequests requests)
Ensure the P365 service accounts has rights in the Target AD OU to modify user objects (Full Access to target mailbox).
Ensure the DirSync agent is able to access the Target DC. It can seem to make any updates on this DC.
Make sure they are able to browse through OU structure and test connection passes.
Make sure the service accounts has appropriate rights and is a domain admin to make updates to these objects.
If the 'Full Access' is applied, it's possible the permission needs to be removed and added again. We have seen this behavior before where we can see the account has Full Access permissions, but it's as if the permission is not granted. Removing and adding the permission back usually resolves the issue. Give the MS servers time to replicate this change before performing the next steps in P365
Use this PowerShell command to remove and add the permissions, if you do not already have a script available.
1. Remove-MailboxPermission -Identity @.com -User BinaryTreePowerShellUser.@.onmicrosoft.com -AccessRights FullAccess -InheritanceType All
2. Add-MailboxPermission -Identity @.com -User BinaryTreePowerShellUser.@.onmicrosoft.com -AccessRights FullAccess
Read our online documentation for more information and discuss with the Administrator to ensure the service account has the correct permissions
https://support.quest.com/technical-documents/binary-tree-power365/current/help-center/3#TOPIC-1564759
https://support.quest.com/technical-documents/binary-tree-power365/current/help-center/power365-application-permission-requirements
https://support.quest.com/technical-documents/binary-tree-power365/current/password-sync-set-up-quick-start-guide#TOPIC-1570500
© ALL RIGHTS RESERVED. Feedback Términos de uso Privacidad Cookie Preference Center