Error: 'Could not Connect to Mailbox' (4253407)

When attempting to open in Recovery Manager for Exchange (RME) a mailbox hosted in a registered storage the following error may be displayed:

"Could not connect to mailbox <Mailbox Name>.
Details: Microsoft Exchange is not Available. Ether there are network problems or the Exchange server is down for maintenance."

OR

"Could not connect to mailbox <Mailbox Name>.
Details: Attempted to read or write protected memory. This is often an indication that other memory is corrupt."
 

Check the following:

• Ensure that the account specified in Recovery Manager for Exchange to open the mailbox has Send As and Receive As access to the mailbox (for more details regarding assigning permissions see below in the Additional Information section)
• This account should not be a member of any other domain groups (such as Domain Administrators, Exchange Enterprise Administrators, etc) as these have deny rights and will be unable to open the mailbox.
• Check that it is possible to connect to the same mailbox using the same user account with Outlook from the RME machine.
• If the account used to connect is not the owner of the mailbox, check if it is possible to connect using the account that is the owner.
• Check that non-cached-mode profiles are not disabled on Exchange (for Exchange 2010 this can be done using the cmdlet Set-CASMailbox -Identity <mailbox> -MAPIBlockOutlookNonCachedMode:$false)
• Ensure one of the supported versions of Outlook is used:

                - Microsoft Outlook 2013 (32-bit edition only)

                - Microsoft Outlook 2010 (32-bit edition only)

                - Microsoft Outlook 2007 SP2 or later (any edition)

                - Microsoft Outlook 2003 (any edition)

Microsoft Outlook 2003 does not support Office 365. If you plan to use Recovery Manager for working with data in Office 365, install Microsoft Outlook 2007 or later.

Additional Information:

Depending on the version of Exchange to which RME connects the following steps can be taken to allocate necessary permissions

Exchange 2003

To grant Full Mailbox Access to a mailbox using ADUC

1. Open the ADUC MMC snap-in (console).
2. Open the User or Group Properties for the Active Directory Object associated with the mailbox from which you want to gather.
3. Select the Exchange Advanced tab and click Mailbox Rights.
4. In the Permissions dialog box, click Advanced.
5. Add Full Mailbox Access for the account used for the Content and Attachment gathering.

To grant Full Mailbox Access to all mailboxes using ESM

1. Open the properties for an Exchange server using Exchange System Manager.
2. Select the Security Tab.
3. Grant Send As and Receive As permissions to the account.

Exchange 2007

Use the following steps to grant Full Mailbox Access to mailboxes on Exchange 2007 servers using PowerShell cmdlets.

To grant Full Mailbox Access to a specific mailbox in Exchange 2007

1. Open the Exchange 2007 Management Shell.
2. Run the Add-MailboxPermission command in Windows PowerShell.
3. For example, if the mailbox is called mailboxName and the account is called userName, the command would be:

Add-MailboxPermission -id:mailboxName -User:userName -AccessRights FullAccess

To grant Full Mailbox Access to all mailboxes in Exchange 2007

1. Open the Exchange 2007 Management Shell.
2. Use the Add-ADPermission command in Windows PowerShell to grant the Send-As and Receive-As permissions.
3. For example, if the server is called MyServer and the account is called UserA, the commands are as follows:

Get-MailboxServer MyServer | Add-ADPermission -User:UserA -ExtendedRights Send-As
Get-MailboxServer MyServer | Add-ADPermission -User:UserA -ExtendedRights Receive-As

In Exchange 2010, when permissions are assigned to the server object, the permissions cannot be propagated down to the mailbox databases since the databases are not located under the server object in AD. Use the following steps to grant Full Mailbox Access to mailboxes on Exchange 2010 servers using
PowerShell cmdlets.

To grant Full Mailbox Access to a specific mailbox in Exchange 2010
1. Open the Exchange 2010 Management Shell.
2. Run the Add-MailboxPermission command in Windows PowerShell.
3. For example, if the mailbox is called mailboxName and the account is called userName, the command would be:

Add-MailboxPermission -id:mailboxName -User:userName -AccessRights FullAccess

To grant Full Mailbox Access to a specific mailbox database in Exchange 2010

1. Open the Exchange 2010 Management Shell.
2. Run the Add-MailboxPermission command in Windows PowerShell.
3. For example, if the mailbox database is called DatabaseName and the account is called userName, the command would be:

Get-MailboxDatabase Databasename | Add-ADPermission -User "userName" -ExtendedRights Send-As, Receive-As

To grant Full Mailbox Access to the entire server in Exchange 2010

1. Open the Exchange 2010 Management Shell.
2. Use the Add-ADPermission command in Windows PowerShell to grant the Send-As and Receive-As permissions.
3. For example, if the server is called MyServer and the account is called UserA, the commands are as follows:

Get-MailboxServer Myserver | Get-MailboxDatabase | Add-ADPermission -User "UserA" -ExtendedRights Send-As, Receive-As