Good to hear its working, you and Rob must have been on the right trail with the adminsdholder idea. I will have to play around with that in my test environment to understand it better, but like you said two birds with one stone is hard to complain.
Best wishes to you and wife -troy -----Original Message----- From: Chris Blair [mailto:chris_bl...@identisys.com] Sent: Wednesday, February 11, 2009 7:44 PM To: MS-Exchange Admin Issues Subject: RE: Outlook Login problem I went through the account and found that Inherit from parent permissions was not checked on his account. I checked the box, forced replication, refreshed the screen and checked his account again. The box was unchecked. Next I went with test 1, removed him from the domain admins group, checked the Inherit from parent permissions box, forced replication and checked the security again. This time the Inherit from parent permissions stuck. I logged into mailbox without issue after that. Hopefully we have killed 2 birds with one stone. The mailbox is accessible again and the user can be removed from the domain admin group. Well it looks like our baby will be waiting for another day. Her contractions stopped and she is feeling better. Thanks for all the help. -----Original Message----- From: Troy Meyer [mailto:troy.me...@monacocoach.com] Sent: Wednesday, February 11, 2009 6:09 PM To: MS-Exchange Admin Issues Subject: RE: Outlook Login problem I haven't run into this issue before, and from this article it makes it sound like adminsdholder would apply mainly for inheriting specific AD permissions (not affecting default perms on a mailbox). http://msmvps.com/blogs/ulfbsimonweidner/archive/2005/05/29/49659.aspx AND I agree with Rob that it would affect OWA as well if it were permission based. A couple tests: 1) Temporarily remove user from AD domain admin group, any delegated perms should now apply (proves permission theory) 2) Remove mailbox from account and create new mailbox for account. If Outlook now works its related to content in the mailbox. Unlink the new mailbox and link the old one back, open up OWA clean out all the $#%@ that was delivered in the last two days. BTW we have never seen this issue with several domain admins with mailboxes, including a director that shouldn't...feel your pain. -troy -----Original Message----- From: Campbell, Rob [mailto:rob_campb...@centraltechnology.net] Sent: Wednesday, February 11, 2009 3:31 PM To: MS-Exchange Admin Issues Subject: RE: Outlook Login problem So have I. Mostly they seem to be caused by permission inheritance getting overwritten by adminsdholder, but those problems should show up within 24 hours of making the account an admin. -----Original Message----- From: Davies,Matt [mailto:mdav...@generalatlantic.com] Sent: Wednesday, February 11, 2009 5:26 PM To: MS-Exchange Admin Issues Subject: Re: Outlook Login problem Normally I would agree, but given the account has domain admin rights, I have seen this cause some strange things to happen. ----- Original Message ----- From: Campbell, Rob <rob_campb...@centraltechnology.net> To: MS-Exchange Admin Issues <exchangelist@lyris.sunbelt-software.com> Sent: Wed Feb 11 23:17:39 2009 Subject: RE: Outlook Login problem I'd think if that was the problem originally, it would have affected OWA and Outlook equally...... -----Original Message----- From: Davies,Matt [mailto:mdav...@generalatlantic.com] Sent: Wednesday, February 11, 2009 5:15 PM To: MS-Exchange Admin Issues Subject: Re: Outlook Login problem Check that the inherit permissions in the security tab has not been unchecked for some reason. Good luck with the baby. Matt ----- Original Message ----- From: Chris Blair <chris_bl...@identisys.com> To: MS-Exchange Admin Issues <exchangelist@lyris.sunbelt-software.com> Sent: Wed Feb 11 22:11:42 2009 Subject: RE: Outlook Login problem I managed to discover something interesting relating to this. Our CEO is a member of the Domain Admins group, it is his call and I have argued against it to no avail. I gave the group Domain Admins Full access to his mailbox and all of sudden I can login to his account using Outlook. My guess now is the permissions on his mailbox are fubar. Any suggestions? I am going to continue following this path later tonight. Thanks for all the help. -----Original Message----- From: Chris Blair Sent: Wednesday, February 11, 2009 3:56 PM To: MS-Exchange Admin Issues Subject: RE: Outlook Login problem Thanks. I will try that tonight. Thanks, Chris Blair www.IdentiSys.com chris_bl...@identisys.com 952-294-1200 x270 -----Original Message----- From: Campbell, Rob [mailto:rob_campb...@centraltechnology.net] Sent: Wednesday, February 11, 2009 3:42 PM To: MS-Exchange Admin Issues Subject: RE: Outlook Login problem The easiest way I've found to fix it if it does is move the mailbox to another mail store, and tell it to skip corrupted items. -----Original Message----- From: Troy Meyer [mailto:troy.me...@monacocoach.com] Sent: Wednesday, February 11, 2009 3:36 PM To: MS-Exchange Admin Issues Subject: RE: Outlook Login problem +1 I'll bet there is some sweet corrupt HTML email in Outlook somewhere that doesn't give OWA the least issue. -troy -----Original Message----- From: Campbell, Rob [mailto:rob_campb...@centraltechnology.net] Sent: Wednesday, February 11, 2009 11:35 AM To: MS-Exchange Admin Issues Subject: RE: Outlook Login problem Any chance there's a corrupted email in his Inbox causing this? I've seen more than one case of a corrupted email making Outlook go wobbly but not fazing OWA. ________________________________ From: Chris Blair [mailto:chris_bl...@identisys.com] Sent: Wednesday, February 11, 2009 1:29 PM To: MS-Exchange Admin Issues Subject: RE: Outlook Login problem Sorry, my fault. I feel like I am going a 100mph in circles right now. My wife is due with our baby boy in 3 weeks, but she is calling saying she is having contractions. So far, they are about 10 -15 minutes apart. This all started last night while he was trying to use Outlook anywhere. Today he is in the office and I went through the steps I mentioned below. I have setup a mail profile for him on multiple computers now with the same result, a continuous prompting for username/password. I also tried granting myself 'Full Access' to his mailbox, and then opening his mailbox using Outlook, Open, Other User's folder, while I was logged in. I get the error 'Cannot display folder. The inbox Folder cannot be found'. So at this point, he can login to OWA, but not Outlook. From: Sherry Abercrombie [mailto:saber...@gmail.com] Sent: Wednesday, February 11, 2009 1:10 PM To: MS-Exchange Admin Issues Subject: Re: Outlook Login problem Well, you said in your original post it was Outlook at home..... On Wed, Feb 11, 2009 at 1:07 PM, Chris Blair <chris_bl...@identisys.com> wrote: No VPN. This is happening on the internal network to only this user. Thanks, Chris Blair www.IdentiSys.com chris_bl...@identisys.com 952-294-1200 x270 From: Maglinger, Paul [mailto:pmaglin...@scvl.com] Sent: Wednesday, February 11, 2009 1:04 PM To: MS-Exchange Admin Issues Subject: RE: Outlook Login problem Coming in through VPN? Looks like http is coming through okay, could it be a firewall issue on his home system blocking email? ________________________________ From: Chris Blair [mailto:chris_bl...@identisys.com] Sent: Wednesday, February 11, 2009 12:54 PM To: MS-Exchange Admin Issues Subject: Outlook Login problem Having some problems with an Exchange user. We are running Exchange 2007, with the all updates. The day started out by this user (our CEO of course) not being able to login to Outlook at home using Outlook Anywhere. Next we tried OWA, which gave an error saying it couldn't open the mailbox. I ended up deleting his AD account, creating a new user with the same name and then reconnecting the Exchange mailbox to the new account. This then allowed him to login to OWA, but not Outlook. Outlook continues to prompt for a username and password. I then type in his AD credentials, and after a second the login box pops back up. I have tried different version of Outlook, 2000, XP, 2003, and 2007, all prompt for a username and password. No matter what I enter it always comes back to a login prompt. Thanks! -- Sherry Abercrombie "Any sufficiently advanced technology is indistinguishable from magic." Arthur C. Clarke ************************************************************************************************** Note: The information contained in this message may be privileged and confidential and protected from disclosure. If the reader of this message is not the intended recipient, or an employee or agent responsible for delivering this message to the intended recipient, you are hereby notified that any dissemination, distribution or copying of this communication is strictly prohibited. If you have received this communication in error, please notify us immediately by replying to the message and deleting it from your computer. ************************************************************************************************** ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja ~ ************************************************************************************************** Note: The information contained in this message may be privileged and confidential and protected from disclosure. If the reader of this message is not the intended recipient, or an employee or agent responsible for delivering this message to the intended recipient, you are hereby notified that any dissemination, distribution or copying of this communication is strictly prohibited. If you have received this communication in error, please notify us immediately by replying to the message and deleting it from your computer. ************************************************************************************************** ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja ~ ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja ~ ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja ~ _____________________________________________________________ This e-mail (including all attachments) is confidential and may be privileged. It is for the exclusive use of the addressee only. If you are not the addressee, you are hereby notified that any dissemination of this communication is strictly prohibited. If you have received this communication in error, please erase all copies of the message and its attachments and notify us immediately at h...@generalatlantic.com <mailto:h...@generalatlantic.com>. Thank You. ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja ~ ************************************************************************************************** Note: The information contained in this message may be privileged and confidential and protected from disclosure. If the reader of this message is not the intended recipient, or an employee or agent responsible for delivering this message to the intended recipient, you are hereby notified that any dissemination, distribution or copying of this communication is strictly prohibited. If you have received this communication in error, please notify us immediately by replying to the message and deleting it from your computer. ************************************************************************************************** ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja ~ ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja ~ ************************************************************************************************** Note: The information contained in this message may be privileged and confidential and protected from disclosure. If the reader of this message is not the intended recipient, or an employee or agent responsible for delivering this message to the intended recipient, you are hereby notified that any dissemination, distribution or copying of this communication is strictly prohibited. If you have received this communication in error, please notify us immediately by replying to the message and deleting it from your computer. ************************************************************************************************** ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja ~ ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja ~ ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja ~ ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja ~
