How to troubleshoot a problem with access rights to rules (error 1301)

Problem:

You experience problems with access rights in CodeTwo software. For example, unauthorized users can access email rules. The program shows a warning (Fig. 1.).

Fig. 1. The notification related to a problem with access rights.

The software's log files contain the following message:

An error (1301) occurred while enumerating the groups. The group's SID could not be resolved. Error checking user permissions. Module: System.DirectoryServices.AccountManagement.dll.

Solution:

This problem is caused by the fact that Microsoft introduced two new security identifiers (SIDs) in Windows Server 2012. Older systems (such as Windows 7, Windows 2008 R2) working in a domain environment controlled by Windows 2012-based machine cannot resolve the SIDs in question. This can result in unauthorized access to the settings of CodeTwo software as the software relies on Windows SIDs to control the access to email rules' configuration.

To solve this issue, you need to make sure that all required updates (including Service Packs) are installed on all servers hosting the Exchange Rules services.