The Act As Account May Not Have Permission to Delete Items in this Folder


Topic Last Modified: 2012-05-23

The Microsoft Exchange Analyzer Tool sends a DeleteItem Operation XML/HTTP request to the Exchange Web Services service using the Exchange Web Services API to delete a test item in a mailbox or public folder. When an access denied error status message is present in the response, the Exchange Remote Connectivity Analyzer generates the following error.

"ErrorCannotDeleteObject, the Act As account may not have permission to delete items in this folder."

The Exchange Remote Connectivity Analyzer uses the DeleteItem Operation of Exchange Web Services to delete a test mail message in a mailbox or public folder to test whether the account specified has permissions to write to the specified folder.

The Act As Account is the account used by Exchange to authorize the execution of Exchange Web Services commands. In most cases, this is the account issuing the Exchange Web Services requests. However, if ExchangeImpersonation (also known as Server-to-Server Authorization) is being used, then the account being impersonated is the Act As Account.

For More Information

To resolve this issue, the Act As account must have permission to create items in the specified folder. To make sure the Act As account has the appropriate permissions, do the following:

  1. Grant the Act As account full mailbox permissions to the folder’s mailbox via the Add-MailboxPermission command. Or, see How to Allow Mailbox Access.

  2. Grant the Act As account permission to delete items in the public folder via the Add-PublicFolderClientPermission command. Also, see Configuring Public Folder Permissions.

  3. Grant the Act As account permission to delete items in the specific mailbox or public folder in Microsoft Office Outlook. For more information, see Outlook folder permissions.

The Exchange Remote Connectivity Analyzer is a new tool that has limited documentation at this time. In an effort to improve the documentation for each of the errors you might receive, we would like to solicit additional information from the community. Please use the Community Content section below to post additional reasons why you failed at this point.  If you need technical assistance, please create a post in the appropriate Exchange TechNet forum or contact support.