{"id":153614,"date":"2023-11-07T06:02:56","date_gmt":"2023-11-07T06:02:56","guid":{"rendered":"https:\/\/www.stellarinfo.com\/blog\/?p=153614"},"modified":"2023-12-04T06:33:17","modified_gmt":"2023-12-04T06:33:17","slug":"fix-active-directory-homemdb-property-not-writable-recipient-error","status":"publish","type":"post","link":"https:\/\/www.stellarinfo.com\/blog\/fix-active-directory-homemdb-property-not-writable-recipient-error\/","title":{"rendered":"How to Fix “Active Directory Property \u200e’homeMDB\u200e’ isn’t Writable on Recipient” Error?"},"content":{"rendered":"

During migration of data from an Exchange Server to another server, you may experience a situation where the move request fails, with the message saying that the property homeMDB<\/strong> is not writeable. The complete message will be similar to the below:<\/p>

Error: MigrationPermanentException: Active Directory property 'homeMDB' is not writeable on recipient '<username>'. --> Active Directory property 'homeMDB' is not writeable on recipient '<username>'.<\/code><\/p>

From the error message, it looks the issue is related to permissions. So, first check the Event Viewer to see for any warning or error event that could help in identifying the issue. This will probably point to the right direction in finding the right solution.<\/p>

In most cases, the issue is related to the Exchange Trusted Subsystem<\/strong> group, which could be missing in the ACL of the user object. The user, organizational unit, or root could have the inheritance disabled and some of the permissions for the Exchange Trusted Subsystem<\/strong> can be missing. Although this is a common issue, you need to resolve it if you want to continue the mailbox moves.<\/p>

Possible Solutions to Fix the Active Directory Property ‎’homeMDB‎’ isn’t Writable Error<\/h2>

First, check if the problem is only with a single or set of mailboxes, or all mailboxes. This will help in the investigation.<\/p>

Then, check that both Exchange Servers are updated to the latest Cumulative Updates. Also, ensure that the Active Directory is in working order and the replication with other domain controllers is successful. You can use the repladmin<\/strong> and dcdiag<\/strong> commands (as given below) to identify problems in the Active Directory.<\/p>

Repadmin \/replsummary<\/code><\/p>

\"use<\/figure>

The above command will give information about replication between the Active Directory servers<\/a>.<\/p>

You can run the below command to know the status and check for any issues in the Active Directory configuration and operational status.<\/p>

dcdiag<\/code><\/p>

\"run<\/figure>

If there are no issues, you can open the Active Directory Users & Computers<\/strong> to see the permissions. To continue, you must make sure that the Advanced Features <\/strong>option is enabled. Once you open the Active Directory Users & Computers<\/strong>, click on View<\/strong> and Advanced<\/strong> Features<\/strong>.<\/p>

\"Active<\/figure>

When this is complete, you need to find the affected user which you are unable to migrate. When found, open the user properties and click on the Security<\/strong> tab.<\/p>

\"open<\/figure>

In the Security tab, click on the Advanced<\/strong> button. Here, you will see all the permissions of the user. You need to make sure that the Disable inheritance <\/strong>option is selected. This means that the inheritance is enabled and any permissions from the parent organizational unit (OU) are also applied on the object.<\/p>

\"Disable<\/figure>

After this has been done, you need to confirm that the Exchange Trusted Subsystem<\/strong> group is listed in the permissions.<\/p>

\"confirm<\/figure>

Now, you can try the move request. It should work as the Exchange Trusted Subsystem<\/strong> group has enough permissions to update the schema and the object.<\/p>

The inheritance permissions may have been changed by a previous administrator or disabled for testing purposes but never re-enabled. There could be cases that the permission is imposed on the user, when the user is part of one of the below administrative groups:<\/p>