Hi Jacob,

I need your help with this one please.

We updated CloudPanel to 3.2.300.0 version and past the update we are unable to set Out of Office via OWA for another user. We just get the 403, Sorry Access Denied message (see attached screenshot) and an event logs entry on the Exchange server. (See below)

Would you be able to point me to the right direction as to what might have changed during upgrade?

I have actually found a forum post about ECP not being enabled on the Mailbox Plan but we tried the suggested solution with no success.

Many thanks for your help in advance.

Current user: ‘CSHOSTING\Temp2’
Request for URL ‘https://csmk1ex01.cshosting.local:444/ecp/default.aspx?owaparam=modurl=0&p=organize/AutomaticReplies.slab( https://webmail.cs-hosts.com/ecp/N.Baldwin@hedleyandco.co.uk/?owaparam=modurlMicrosoft.Exchange.Configuration.Authorization.CmdletAccessDeniedException: An administrator has explicitly denied permission for “”CSHOSTING\Temp2” on behalf of “N.Baldwin@hedleyandco.co.uk”” to use the Exchange Administration Center.
at Microsoft.Exchange.Management.ControlPanel.RbacContext.<>c__DisplayClass7.<.ctor>b__3()
at Microsoft.Exchange.Data.Storage.LazilyInitialized`1.get_Value()
at Microsoft.Exchange.Management.ControlPanel.RbacSession..ctor(RbacContext context, SessionPerformanceCounters sessionPerfCounters, EsoSessionPerformanceCounters esoSessionPerfCounters)
at Microsoft.Exchange.Management.ControlPanel.LocalSession..ctor(RbacContext context, SessionPerformanceCounters sessionPerfCounters, EsoSessionPerformanceCounters esoSessionPerfCounters)
at Microsoft.Exchange.Management.ControlPanel.StandardSession.Factory.CreateNewSession()
at Microsoft.Exchange.Management.ControlPanel.RbacSession.Factory.CreateSession()
at Microsoft.Exchange.Management.ControlPanel.RbacContext.CreateSession()
at Microsoft.Exchange.Management.ControlPanel.RbacSettings.CreateSession()
at Microsoft.Exchange.Management.ControlPanel.RbacSettings.get_Session()
at Microsoft.Exchange.Management.ControlPanel.AuthenticationSettings..ctor(HttpContext context)
at Microsoft.Exchange.Management.ControlPanel.RbacModule.Application_PostAuthenticateRequest(Object sender, EventArgs e)
at System.Web.HttpApplication.SyncEventExecutionStep.System.Web.HttpApplication.IExecutionStep.Execute()
at System.Web.HttpApplication.ExecuteStepImpl(IExecutionStep step)
at System.Web.HttpApplication.ExecuteStep(IExecutionStep step, Boolean& completedSynchronously)
at Microsoft.Exchange.Management.ControlPanel.RbacContext.<>c__DisplayClass7.<.ctor>b__3()
at Microsoft.Exchange.Data.Storage.LazilyInitialized`1.get_Value()
at Microsoft.Exchange.Management.ControlPanel.RbacSession..ctor(RbacContext context, SessionPerformanceCounters sessionPerfCounters, EsoSessionPerformanceCounters esoSessionPerfCounters)
at Microsoft.Exchange.Management.ControlPanel.LocalSession..ctor(RbacContext context, SessionPerformanceCounters sessionPerfCounters, EsoSessionPerformanceCounters esoSessionPerfCounters)
at Microsoft.Exchange.Management.ControlPanel.StandardSession.Factory.CreateNewSession()
at Microsoft.Exchange.Management.ControlPanel.RbacSession.Factory.CreateSession()
at Microsoft.Exchange.Management.ControlPanel.RbacContext.CreateSession()
at Microsoft.Exchange.Management.ControlPanel.RbacSettings.CreateSession()
at Microsoft.Exchange.Management.ControlPanel.RbacSettings.get_Session()
at Microsoft.Exchange.Management.ControlPanel.AuthenticationSettings..ctor(HttpContext context)
at Microsoft.Exchange.Management.ControlPanel.RbacModule.Application_PostAuthenticateRequest(Object sender, EventArgs e)
at System.Web.HttpApplication.SyncEventExecutionStep.System.Web.HttpApplication.IExecutionStep.Execute()
at System.Web.HttpApplication.ExecuteStepImpl(IExecutionStep step)
at System.Web.HttpApplication.ExecuteStep(IExecutionStep step, Boolean& completedSynchronously)
D0&p=organize/AutomaticReplies.slab)’ failed with the following error:
Microsoft.Exchange.Configuration.Authorization.CmdletAccessDeniedException: An administrator has explicitly denied permission for “”CSHOSTING\Temp2” on behalf of “N.Baldwin@hedleyandco.co.uk”” to use the Exchange Administration Center.
at Microsoft.Exchange.Management.ControlPanel.RbacContext.<>c__DisplayClass7.<.ctor>b__3()
at Microsoft.Exchange.Data.Storage.LazilyInitialized`1.get_Value()
at Microsoft.Exchange.Management.ControlPanel.RbacSession..ctor(RbacContext context, SessionPerformanceCounters sessionPerfCounters, EsoSessionPerformanceCounters esoSessionPerfCounters)
at Microsoft.Exchange.Management.ControlPanel.LocalSession..ctor(RbacContext context, SessionPerformanceCounters sessionPerfCounters, EsoSessionPerformanceCounters esoSessionPerfCounters)
at Microsoft.Exchange.Management.ControlPanel.StandardSession.Factory.CreateNewSession()
at Microsoft.Exchange.Management.ControlPanel.RbacSession.Factory.CreateSession()
at Microsoft.Exchange.Management.ControlPanel.RbacContext.CreateSession()
at Microsoft.Exchange.Management.ControlPanel.RbacSettings.CreateSession()
at Microsoft.Exchange.Management.ControlPanel.RbacSettings.get_Session()
at Microsoft.Exchange.Management.ControlPanel.AuthenticationSettings..ctor(HttpContext context)
at Microsoft.Exchange.Management.ControlPanel.RbacModule.Application_PostAuthenticateRequest(Object sender, EventArgs e)
at System.Web.HttpApplication.SyncEventExecutionStep.System.Web.HttpApplication.IExecutionStep.Execute()
at System.Web.HttpApplication.ExecuteStepImpl(IExecutionStep step)
at System.Web.HttpApplication.ExecuteStep(IExecutionStep step, Boolean& completedSynchronously)
at Microsoft.Exchange.Management.ControlPanel.RbacContext.<>c__DisplayClass7.<.ctor>b__3()
at Microsoft.Exchange.Data.Storage.LazilyInitialized`1.get_Value()
at Microsoft.Exchange.Management.ControlPanel.RbacSession..ctor(RbacContext context, SessionPerformanceCounters sessionPerfCounters, EsoSessionPerformanceCounters esoSessionPerfCounters)
at Microsoft.Exchange.Management.ControlPanel.LocalSession..ctor(RbacContext context, SessionPerformanceCounters sessionPerfCounters, EsoSessionPerformanceCounters esoSessionPerfCounters)
at Microsoft.Exchange.Management.ControlPanel.StandardSession.Factory.CreateNewSession()
at Microsoft.Exchange.Management.ControlPanel.RbacSession.Factory.CreateSession()
at Microsoft.Exchange.Management.ControlPanel.RbacContext.CreateSession()
at Microsoft.Exchange.Management.ControlPanel.RbacSettings.CreateSession()
at Microsoft.Exchange.Management.ControlPanel.RbacSettings.get_Session()
at Microsoft.Exchange.Management.ControlPanel.AuthenticationSettings..ctor(HttpContext context)
at Microsoft.Exchange.Management.ControlPanel.RbacModule.Application_PostAuthenticateRequest(Object sender, EventArgs e)
at System.Web.HttpApplication.SyncEventExecutionStep.System.Web.HttpApplication.IExecutionStep.Execute()
at System.Web.HttpApplication.ExecuteStepImpl(IExecutionStep step)
at System.Web.HttpApplication.ExecuteStep(IExecutionStep step, Boolean& completedSynchronously)

Flight info: Features:[[Global.DistributedKeyManagement, False],[Global.GlobalCriminalCompliance, False],[Global.MultiTenancy, False],[Global.WindowsLiveID, False],[Eac.AllowMailboxArchiveOnlyMigration, True],[Eac.AllowRemoteOnboardingMovesOnly, False],[Eac.BulkPermissionAddRemove, True],[Eac.CmdletLogging, True],[Eac.CrossPremiseMigration, False],[Eac.DevicePolicyMgmtUI, False],[Eac.DiscoveryDocIdHint, False],[Eac.DiscoveryPFSearch, False],[Eac.DiscoverySearchStats, False],[Eac.DlpFingerprint, False],[Eac.EACClientAccessRulesEnabled, False],[Eac.GeminiShell, False],[Eac.ManageMailboxAuditing, False],[Eac.ModernGroups, False],[Eac.Office365DIcon, False],[Eac.OrgIdADSeverSettings, False],[Eac.RemoteDomain, False],[Eac.UCCAuditReports, False],[Eac.UCCPermissions, False],[Eac.UnifiedAuditPolicy, False],[Eac.UnifiedComplianceCenter, False],[Eac.UnifiedPolicy, False],[Eac.UnlistedServices, False],], Flights:[], Constraints:[[MACHINE, CSMK1EX01],[MODE, ENTERPRISE],[PROCESS, W3WP],], IsGlobalSnapshot: True