Insufficient mailbox rights permissions to backup one or more mailboxes

Error code	Product	Applies to
BA1770	BackupAssist	BackupAssist v3 and later

Description

In order to export mailboxes, the backup user needs Full mailbox access rights on each user's mailbox.

BackupAssist will automatically assign Allow rights so that the mailboxes can be accessed. For the overwhelming majority of installations, this will transparently allow the backup to run successfully.

However, a minority of servers encounter issues, for one of two reasons:

1. Your backup user does not have administrative privileges on your Exchange server
2. There are explicit "Deny" permissions already assign to the users, which prevent the "Allow" permission from working.

Note: "Deny" permissions will override "Allow" permissions.

Resolution

Please check the following:

1. Assign administrative privileges to your backup user by following the instructions here:
2. Ensure there are no "Deny" permissions on your users. See the following screenshot as an example:

To remove "Deny" permissions on your users, follow this procedure:

1. Run Active Directory Users and Computers (or, if you are running SBS, try the Server Management > Users console)
2. Locate your user whose mailbox cannot be backed up. Right click, and click "Properties"
3. Select the "Exchange Advanced" tab, and click on the "Mailbox Rights" button
4. Click on "Advanced". This should give you a window like that shown in the screenshot above.
5. Locate any "Deny" entries, of permission "Full mailbox access" with the Inherited From property of "". If these entries apply to your backup user, remove these entries.
6. Click repeatedly OK to save your changes.

Also make sure that you have full mailbox administrator rights. The blog located here shows how to do this.

Last updated	Created	Further assistance
28th Sep 2009	16th Mar 2007	BackupAssist Support page