Share via

Can't log in to ECP

  • Article

Question

Friday, May 24, 2019 5:58 PM

I can't log into ecp management site to manage exchange 2016. The error is:

exchange 2016 403 sorry! access denied :(you don't have permission to open this page. if you're a new user or were recently assigned credentials, please wait 15 minutes and try again.

What rights does a user account need to log into it?

Alan

All replies (12)

Saturday, May 25, 2019 6:11 AM

Please check if the user has the following the groups memberships:

1. organization management

2.Schema admin

3.domain admin

4. enterprise admin

Mark if this post is helpful

Best Regards,

Rafiul

Monday, May 27, 2019 6:13 AM

Hi Alan,

As Rafiul said, a normal user doesn't have permission to login ECP, we should make sure this user is contained in those groups before logging ECP:

Regards,

Kyle Xu

Please remember to mark the replies as answers if they helped. If you have feedback for TechNet Subscriber Support, contact [email protected].

Click here to learn more. Visit the dedicated forum to share, explore and talk to experts about Microsoft Teams.

Tuesday, May 28, 2019 6:25 PM

I have a different user who just resigned. He is not a member of Domain Admins, Schema Admins,Organaizaion Admins, & Enterprise Admins. He is able to login to ECP and do the work like create mailbox, distribution groups...

The purpose is not assign too much power to a user while still let him to do some administrative work. So there must be something else going on...

Alan

Thursday, May 30, 2019 8:58 AM

Hi,

For a non-admin user, you can let this users login ECP with RBAC:

1. Create a new permission group, add "User Options" into this group, then add non-admin user to this group:

2.This non-admin user will could login ECP now:

3. If you want to get more permission to this user, you can add more roles to this permission group.

Regards,

Kyle Xu

Please remember to mark the replies as answers if they helped. If you have feedback for TechNet Subscriber Support, contact [email protected].

Click here to learn more. Visit the dedicated forum to share, explore and talk to experts about Microsoft Teams.

Friday, May 31, 2019 8:29 PM

I tried it. But it doesn't work. I got same error.

Alan

Monday, June 3, 2019 7:44 AM

Could you login ECP with administrator account? Please make sure ECP is working first.

If there doesn't exist issue with ECP itself, could you provide screenshots about your testing to us? Such as:

1. Which account do you used to login ECP?

2. Which permission do you assigned to this account?

2. Error page for this issue.

Regards,

Kyle Xu

Please remember to mark the replies as answers if they helped. If you have feedback for TechNet Subscriber Support, contact [email protected].

Click here to learn more. Visit the dedicated forum to share, explore and talk to experts about Microsoft Teams.

Monday, June 3, 2019 4:54 PM

1. Which account do you used to login ECP?

A formal employee who is not a member of Domain Admins ....etc. Just a plane user account.

2. Which permission do you assigned to this account?

Just regular exchange groups

2. Error page for this issue.

exchange 2016 403 sorry! access denied :(you don't have permission to open this page. if you're a new user or were recently assigned credentials, please wait 15 minutes and try again.

Alan

Wednesday, June 5, 2019 8:50 AM

>>A formal employee

Does this user has his mailbox hosted on Exchange server?

>>Just regular exchange groups

Which groups do you add this user to? Are they RBAC permission group?

Regards,

Kyle Xu

Please remember to mark the replies as answers if they helped. If you have feedback for TechNet Subscriber Support, contact [email protected].

Click here to learn more. Visit the dedicated forum to share, explore and talk to experts about Microsoft Teams.

Wednesday, June 5, 2019 4:35 PM

Yes, it is RBAC permission group. Below is the group the account is in.

Create Mail Enabled Security Groups
Help Desk
Mailbox import and export Rights
Recipient Management
Records Management

Alan

Thursday, June 6, 2019 3:58 PM

Does this user has his mailbox hosted on Exchange server?

Yes. I still kept it for this purpose to log into ecp.

Alan

Friday, June 7, 2019 2:37 PM

Yes, it is RBAC permission group. Below is the group the account is in.

Create Mail Enabled Security Groups
Help Desk
Mailbox import and export Rights
Recipient Management
Records Management

Alan

As I said before, I you want a normal user could login ECP, you need assign "User Options" administrator role to it at least.

Regards,

Kyle Xu

Please remember to mark the replies as answers if they helped. If you have feedback for TechNet Subscriber Support, contact [email protected].

Click here to learn more. Visit the dedicated forum to share, explore and talk to experts about Microsoft Teams.

Wednesday, June 12, 2019 5:03 PM

I did exactly as you asked. I created a new group and added user to it. Assign "User Options". But still I got Access Denied.

Alan