Share via

On-Prem Error When Editing Cloud Mailboxes

Connor Zagar 0 Reputation points
2025-02-13T20:45:23.9166667+00:00

I am having an issue when attempting to edit/add Email Address Types. When I try to edit them in exchange online, I get this error:

"Error executing request. The operation on mailbox "x" failed because it's out of the current user's write scope. The action 'Set-Mailbox', 'EmailAddresses', can't be performed on the object 'x' because the object is being synchronized from your on-premises organization. This action should be performed on the object in your on-premises organization."

This happens on all mailboxes. I can create mailboxes just fine, but I cannot edit the Addresses.

when the Emails are changed in the AD attribute editor it syncs to my on prem exchange server, but not with the online admin console.

I Updated the Entra AD Sync Connector this morning with no luck. Forcing a complete sync also does not work. Entra is not reporting any issues in diagnostics or the Entra Health Check.

Exchange Online
Exchange Online

A cloud-based service included in Microsoft 365, delivering scalable messaging and collaboration features with simplified management and automatic updates.

Microsoft 365 and Office | Install, redeem, activate | For business | Windows
Exchange | Exchange Server | Management
Exchange | Exchange Server | Management

The administration and maintenance of Microsoft Exchange Server to ensure secure, reliable, and efficient email and collaboration services across an organization.


1 answer

Sort by: Most helpful
  1. Anonymous
    2025-02-14T02:27:44.17+00:00

    Hi @Connor Zagar ,

    Welcome to the Microsoft Q&A platform!

    This is usually a hybrid deployment configuration issue.

    Please check the MRSProxy service. This is required for mailbox movement in a hybrid deployment. You can check and enable MRSProxy using the following PowerShell commands:

    Get-WebServicesVirtualDirectory -Identity “Server\EWS (default Web site)” | fl Server,MRSProxyEnabled,WSSecurityAuthentication
    Set-WebServicesVirtualDirectory -Identity “Server\EWS (default Web site)” -MRSProxyEnabled $true -WSSecurityAuthentication $true
    

    If enabled, check that the migration endpoint is correct.

    For more information on how to deploy, you can refer to:
    https://learn.microsoft.com/en-us/exchange/hybrid-deployment/move-mailboxes#enable-mrsproxy-service

    M365 service delay issue cannot be ruled out, please check the above issues and try again!


    If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

    Was this answer helpful?


Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.