Administrator No Longer has access to all Mailboxes

[age]

Hi, over the weekend the domain Administrator account has lost the ability to open other users mailboxes. It worked previously. Nothing has been manually changed.

The setup is 3 Exchange 2003 Enterprise Servers, all Version 6.5 (build 7226.6: Service Pack 1). It's a Windows 2003 Server Active Directory.

1 Server is a Front-end server serving OWA pages to the outside world. The other 2 are back-end mailbox stores.

If you type in to a browser

http://any-server/exchange

and type in Administrator and the password you get the Admin mailbox in OWA. If you then change the URL to

http://any-server/exchange/username/

you get 3 attempts to log in (using the admin account) and then:

HTTP/1.1 401 Unauthorized

If you log in to full Outlook as the administrator and then try to open another users mailbox you also get access denied.

The administrator has full admin rights to the whole exchange organisation in Exchange System Manager (I have previously unticked the Deny Receive As and Deny Send As that are ticked as default....).

If you look at a users mailbox permissions in AD Users and Computers, the Admin account has Full Mailbox Rights to each one.

I have compared IIS permissions/directory security to another companys working setup and it all looks correct.

Any ideas gratefully received!

Adrian.

 

[age]

More information:

If I run netdiag on the exchange servers on one of them I get the following error:

DNS test . . . . . . . . . . . . . : Passed
[WARNING] Cannot find a primary authoritative DNS server for the name
'servername.domain.local.'. [ERROR_TIMEOUT]
The name 'servername.domain.local.' may not be registered in DNS.

It is in all the DNS servers. I have done an ipconfig /registerdns on it and waited and tried again but it didn't make any difference.

ALSO, if I look in AD Sites and Services at that particular server, and right-click properties on it, in the Computer section at the bottom of the General tab, the Computer: and Domain: boxes are empty!! Obviously on each of the other servers these are corectly filled in with Server names and the domain name.

Hope this all helps!