-
标题
Switching a mailbox fails with " The action 'Set-Mailbox', 'EmailAddresses', can't be performed on the object" -
说明
An error of the following form may be logged when attempting to switch or unswitch a mailbox to Office 365 after MS Dirsync:
2015-03-20 07:37:00.2110 PxE9C TxB A- C- M- Error System.Exception: The operation on mailbox "<mailbox>" failed because it's out of the current user's write scope. The action 'Set-Mailbox', 'EmailAddresses', can't be performed on the object '<mailbox>' because the object is being synchronized from your on-premises organization. This action should be performed on the object in your on-premises organization.at DirectoryMigration.IDMObjectPair.Switch()at Dell.MigrationManagerForExchange.Shared.Switching.O365SwitcherAndMatcher.Switch(Guid sourceGuid)at Quest.MigrationManager.Exchange.O365ProvisioningWebService.O365ProvisioningProxy.<>c__DisplayClass7.<Switch>b__6()at Quest.MigrationManager.Exchange.O365ProvisioningWebService.O365ProvisioningProxy.InvokeTryCatchAction(Action act) at Quest.MigrationManager.Exchange.O365UserProvisioning.O365UserProvisioning.CheckAndThrow(Func`1 exceptionFunc)at Quest.MigrationManager.Exchange.O365UserProvisioning.O365UserProvisioning.Switch(Int32 mailboxId, Int32 collectionId, Boolean rollbackSwitchOnFail) -
原因
Cause 1:
Missing X500 address value in the office 365 user.
Cause 2:
The coexistence domain configured in the Office 365 Dirsync component was an accepted domain in office 365.
Cause 3:
Wrong or invalid e-mail address is specified for connection to Office365 in Directory Migration Agent console.
Cause 4:
Wrong or invalid mail domain is selected as a mail redirection domain for the domain pair.
-
解决办法
Resolution 1:
The legacyExchangeDN of the source AD object should be manually added as an X500 address to the source object:proxyAddresses:
X500:<LEDN>The changes will apply during the next scheduled sync or can be made manually by running the cmdlet "Start-OnlineCoexistenceSync" from the DirSyncConfigShell. Once the X500 proxy address has been confirmed to have been synchronized to target, the subsequent attempt to switch should succeed.Resolution 2:
Ensure that the coexistence domain configured in the Office 365 Dirsync (AD Connect) component is not part of the Accepted Domain in the Microsoft Office 365.Resolution 3:
Open Directory Migration Agent console and specify a valid onmicrosoft.com address as an Office 365 connection address.
Resolution 4:
In the DMA console application select the domain pair in the tree and click on the Edit mail redirection domain command on the right-hand menu. From the list of domains in the Mail Redirection Domain dialog select a mail redirection domain for the migration pair. When choosing mail redirection domain, take the following into account:
• This domain must be accepted in on-premises domain only
• The domain must not be accepted in Microsoft Office 365.
For details, please refer to the User Matching section at