Today a customer complained about the SBS console not completely working. The administrator’s account received an error no “rights for exchange”.
Although the user was a member of all the correct groups, the solution was simple. The domain admin account’s primary group membership was domain admins and should be domain users. Now everything is working fine!