Exchange 2013 CU2 You don't have permissions to read the security descriptor on CN=Deleted Objects,CN=Configuration,DC=XXXX,DC=XXXXX

Error:

The following error was generated when "$error.Clear();

initialize-ExchangeConfigurationPermissions -DomainController $RoleDomainController

" was run: "You don't have permissions to read the security descriptor on CN=Deleted Objects,CN=Configuration,DC=XXXXXX,DC=XXX.".

I have tried using ADSIEdit to check the permissions on that object, but the object doesn't show up in the list. When I tried creating it, I get a message that the object already exists.

I have checked that the AD Recycle Bin is enabled, but still no good.

Can anyone help?

Thanks.

Nicholas Cross