Share via

ECP returns 403 Sorry! Access denied on some servers

Kenny M 1 Reputation point
2022-10-05T12:35:20.683+00:00

We have a 16 server DAG balanced over two data centers that is running the latest Exchange 2019 version on Windows Server 2022.

I wish to be able to access ECP on a single server in both data centers. Both these servers are not available for the public, they are just hosting databases.

Both servers are deployed with the same deployment script, so they should be identical. Both servers have AdminEnabled:$true on the EcpVirtualDirectory settings and the settings are identical on both servers.

On one server, I can access the ECP without any problems, with the servers internal IP from a management server: https://10.10.10.1/ecp/

On the other server, I am NOT able to access ECP, even though it's the exact same user. I just get a:

403
Sorry! Access denied :(
You don't have permission to open this page. If you're a new user or were recently assigned credentials, please wait 15 minutes and try again.
You're still signed in. If you want to sign out, use the link below.

I also have an old Exchange 2016 server in the domain, not hosting any databases or client connections. Here the ECP works fine as well, when connecting to the servers internal IP. I want to make sure that I have more than one server where I can reach ECP before I decommission this 2016 server.

What could cause this and what could a solution be?

Exchange Server Management
Exchange Server Management
Exchange Server: A family of Microsoft client/server messaging and collaboration software.Management: The act or process of organizing, handling, directing or controlling something.
7,503 questions
0 comments

2 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. LilyLi2-MSFT 1,981 Reputation points
    2022-10-06T05:45:54.793+00:00

    Hi @Kenny M ,

    Welcome to our forum.

    Typically, this issue occurs if a computer object is added to a group that is denied the ms-Exch-EPI-Token-Serialization user right.
    To resolve this issue, please remove the computer object from the restricted group.
    For more details, please refer to: error-occur-ems-eac-owa

    If the above suggestions do not work, the following similar threads hope to help you.
    exchange-2013-unable-to-access-ecp-403-sorry-access-denied
    exchange-2016-ecp-error-403-after-login.html

    If an Answer is helpful, please click "Accept Answer" and upvote it.
    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

  2. Amit Singh 4,956 Reputation points
    2022-10-06T10:21:51.277+00:00

    Open exchange management shell with run as administrator
    Run the following command 

    Set-CASMailbox -id USERemail -ECPEnabled $True

    Try to log in again, and it should have been resolved.