In on-premises Microsoft Exchange Server, you might need to export a mailbox and its contents to a .PST file for several reasons. For example, you may need to archive data, generate a backup, or export the mailbox data of off boarded employees before deleting their accounts.
To proceed with the exportprocess in these instances, you will have to initiate the PowerShell New-MailboxExportRequest cmdlet in the Exchange Management Shell. You will expect the request to complete without flaws. However, there is the chance of receiving the “New-MailboxExportRequest Access Denied” error.
In this content, we will discuss in detail the reason for this error, followed by its resolution. We will also talk about the role of EDB to PST converter in resolving this error.
Reasons behind “New-Mail box Export Request Access Denied” Error
The New-Mailbox Export Request cmdlet exports the mailbox data to PST. Nevertheless, because of insufficient Read/Write permissions for the Exchange Trusted Subsystem group on the targeted folder, you get the following error:
New-Mailbox Export Request: Access to Path is denied.
Here is the complete message
[PS] C :\> New-MailboxExportRequest “useradmin1” -FilePath “\\MYSERVER\PST\ useradmin1.pst” Unable to open PST file ‘\\MYEXSERVER\PST\ useradmin1.pst’. Error details: Access to the path ‘\\MYEXSERVER\PST\ useradmin1.pst’ is denied.
Here are some key reasons behind this error:
1. Missing Group Roles and Insufficient Permissions
For security reasons, the Exchange server does not assign read/write permission by default. If you do not create the role and fail to seek appropriate read/write permissions on the target folder for the Exchange Trusted Subsystem group, it could lead to the ‘access denied’ error.
2. Required Mailbox Import/Export Role Not Assigned
The account user must have the Mailbox Import Export role assigned to continue the export. This Role-Based Access Control (RBAC)permission is different from that of the folder’s file system. No permission will make the folder inaccessible.
3. Incorrect UNC path
Entering the wrong UNC (Universal Naming Convention) path can cause the error. UNC path is a network address that points to a shared folder for storing mailbox content or backups. The format is as follows:
\\servername\sharename\folder
Ensure to mention the address in the correct format to avoid errors and double-check it before executing the command.
4. Encryption Destination Folder
Imagine you are visiting a friend and the door is locked. You will have no choice but to return. To avoid this during mailbox export, ensure that the destination folder is not encrypted. Otherwise, you will be denied access.
5. Firewall
An antivirus or a firewall may block access to the share to cause the error. When executing the New-MailboxExportRequest, on the same server, disable the antivirus temporarily for successful export. In case of a remote Exchange server, disable the firewall, export to the local Exchange server, and then copy the PST file to the remote server.
Methods to Fix “New-MailboxExportRequest Access Denied” Error
The solutions to fix the access denied error are as follows:
1. Assign Read and Write Permissions
To use the New-MailboxExportRequest cmdlet successfully, the user must assign the Mailbox Import Export role to a role group and be a member of that group. This will assign read/write permission to the Exchange Trusted Subsystem group, allowing it to run the PowerShell request. To do this, you need to check the “Read & Execute” box. Nevertheless, PowerShell commands may not be able to resolve the error every time. Moreover, you cannot use them for Exchange 2007 and lower versions.
2. Remove the ManagementRoleAssignments
Another method to resolve this error is to remove the Management Role Assignments by using the below PowerShell cmdlet.
Remove-Management Role Assignment -Identity “Mailbox Import Export-exchangeadmin-1”
Remove-Management Role Assignment -Identity “Mailbox Import Export-exchangeadmin”
Next, create a new Role Group by following the commands below:
New-RoleGroup -Name “Exchange Mailbox Import Export” -Roles “Mailbox Import Export”
-Members“Domain\exchangeadmin”-Display Name” Exchange Mailbox Import Export”
This command will do the following:
- Create “Exchange Mailbox Import Export” – A new Exchange Role Group
- Assign the role of “Mailbox Import Export” to the newly created group
- Add a user Domain\exchangeadmin as a member of the group
- Set the role group’s display name as Exchange Mailbox Import Export
What are the drawbacks of manual methods?
If your profession demands working with PowerShell commands on a routine basis, you are best equipped to answer this question. You would surely identify with these points:
- Waiting for a complex Exchange PowerShell command to execute properly is an uphill task.
- At times, these commands intensify the issue further instead of resolving it.
- Only a few hold the technical acumen to execute complex commands with 100% success result
- You can not preview the items or save the specific mailbox items
- The command is not compatible with several previous Exchange Server versions
As you can infer, the manual solutions are not enough to prevent the error. You may still encounter the “New-MailboxExportRequest Access Denied” error after trying all the solutions. Perhaps using EDB to PST converter can remedy this situation. Let’s learn more about it.
Fix the Error with theEDB to PST converter
PowerShell New-MailboxExportRequest cmdlet is a recommended option to export mailbox data to PST, but it is a complicated process. The command consumes considerable time, and there is no guarantee of its success either. A better and proven method to resolve this situation is to use Stellar Converter for EDB, professional and highly demanded EDB to PST converter. It sets the users free from going through cumbersome and time-consuming processes. Moreover, you don’t need to assign permissions, roles, or use a command-line tool for mailbox export.
How is Stellar Converter for EDB Better than Manual Methods?
The automated third-party EDB to PST converterhelps you get away with the shortcomings of manual methods to fix server errors. It enables you to export multiple mailboxes to PST at once, ensuring swift and improved results. The steps are easy and quick.
- Install Stellar Converter for EDB on your system
- Launch the software
- Choose the EDB file and scan it
- Preview and save mailboxes as a PST file
- Alternatively, export them directly to a live Exchange server
Download the EDB to PST converter free or visit the dedicated webpage for Stellar Converter for EDB to buy it today. You can choose from Corporate, Technician, and Toolkit versions.
Conclusion
Admins use the New-MailboxExportRequest cmdlet to export the mailbox data to a PST file in a folder on the same or different server. This practice is common due to various reasons, such as creating an Exchange database backup, archiving data, or exporting the mailbox items of the employees who have left the company. While performing the task for any of these reasons, you are likely to get the “New-MailboxExportRequest Access Denied” error.
This happens mainly because of missing permissions, absence of RBAC role, wrong UNC path, file encryption, or a firewall installed in the server. To resolve this error, you can assign read and write permissions to the Exchange Trusted Subsystem group. Alternatively, you may also try the Remove-Management Role Assignment cmdlet to remove the role group and then create a new one. These manual methods are error-prone, take excessive time, can harm data, and have less chance of success. This necessitates the need for an EDB to PST converter that can perform the export in a breeze without damaging the data. Experts recommend Stellar Converter for EDB to serve this purpose. You can buy this software from the official website of Stellar Info.