Checking full access permission on mailbox

Hi Trevor, that file doesn't exist in my %temp% folder ?

Hi Raj,

Can you navigate to one of the MNE migration servers that is not working. Try going to the Exchange Server settings screen. Make a slight change to the Exchange Administrator username, such as clicking backspace to remove a character, then add it back. Now click on the Office 365 User domain drop-down list. 

Were you able to get the list of domains?

If yes, then try running the Add-MNEMailboxAdminPermission cmdlet from this MNE migration server again.

If these steps do not resolve the issue, then we will need to investigate further via the Service Request you have for this issue.

Regards,

Trevor

Hi Trevor, I removed the character and added it back but still got the list of domains.

Same error when running the command I'm afraid to say.

Raj

so the issue is EXO and not the Quest servers. 
The 'Get-MailboxPermission cmdlet failed with a 401 error. This means the calling account is "Unauthorized" to preform this task. If the account being used is a Global Admin, that means this is an MS issue, and you need to open a support case with MS. I would advise you remove "Quest" from the conversation and focus on the that 'Get-MailboxPermission cmdlet is failing with a 401 error. 

Hi Trevor, I tried an uninstall, delete the C:\Program Files (x86)\Quest, delete the contents of %temp% and re-install, but Quest starts up with all the old details, how can I completely wipe it from the system to perform a clean install again?

Thanks

Raj

Again, this is NOT a Quest Migrator for Notes to Exchange issue. 

OK so tell me why it works on one Quest server but not the other two?

The issue is authentication and authorization in EXO.  Add-MNEMailboxAdminPermission command which is a Quest proprietary command is really just a wrapper for native EXO cmdlets. Think of it as a function in a script. Your error is the key.
Error: Error on proxy command 'Get-MailboxPermission -User:'Notes Migrator Admins
Role Group' -Identity:'CN=user,OU=domain,OU=Microsoft Exchange Hosted
Organizations,DC=NAMPR02A900,DC=PROD,DC=OUTLOOK,DC=COM'' to server SG2PR01MB2870.apcprd01.prod.exchangelabs.com:
Server version 15.20.3391.0000, Proxy method PSWS:
Request return error with following error message:
The remote server returned an error: (401) Unauthorized..

How you executed the connection to EXO is most likely different as we are using Modern Authentication, I suspect you are using basic auth. This why Trevor pointed to this test. "On the two MNE servers that are not working, can you open File Explorer, navigate to %temp% and delete the file called "MNETokenCache.dat", then try running the Add-MNEMailboxAdminPermission again. . This would have removed the cached token and forced it to be recreated.  

The configuration for the consoles are stored in the SQL DB. So you can't really get ride of those as they are shared between all consoles. I would recommend you reconnect with Quest support using your #4769147. Clearly the token is not getting cached on two of your three servers. 

ok, good explanation. Thanks. I'll see if Quest support can help.