If you are receiving the following message: “Access to the address list service on all Exchange 2007 servers has been denied.” when you are creating a new user in Exchange Server 2007 or moving a user from Exchange Server 2003 to an Exchange Server 2007.
You might receive this error message in your event viewer as well:
Could not read the Security Descriptor from the Exchange Server object with guid=4E192984E512D349A973E39108D868AD. As a result the Proxy Address Calculation RPC interface will not be available on the local Exchange Server.
So.. What’s the solution:
To validate what’s is server you can run the get-exchangeserver | select name,guid to see which version is not in the Exchange Servers group. Then, add that server into the Exchange Servers group.
If you are running CCR, just move the servers between the nodes (move-clusteredmailboxserver), if you are using a mailbox server just restart it.
Validate if the service Microsoft System Attendant is running.