Problems accessing exchange mailbox

[mquinn0908]

I have a user that can not access their exchange mailbox on their pc. We are on exchange 2000 and I can set up this persons profile on any other computer and they are able to access their mailbox with no problems. When they try to access it on their machine they get the following error message:

Unable to open your default e-mail folders. The attempt to long onto the Microsoft Exchange Server computer has failed.

I have also tried adding the exchange account to a profile that is set up for POP mail and when I try to open the mailbox from there I get the following error:

Unable to display the folder. Microsoft Outlook could not access the specified folder location. The attempt to log onto the Microsoft Exchange server computer has failed.

I have deleted the user from the exchange machine and recreated it and I have checked the permissions and I don't know what needs to be corrected.

Like I said before I can access this users mailbox from any other machine, just not theirs.

 

[mquinn0908]

One more thing the event viewer application log on the exchange server is filling up with the following events everytime the user accesses their mailbox on another machine:

Event Type: Error
Event Source: MSExchangeIS
Event Category: General
Event ID: 9562
Date: 3/24/2003
Time: 10:46:26 AM
User: N/A
Computer: ----------
Description:
Failed to read attribute msExchUserAccountControl from Active Directory for /o=domain/ou=First Administrative Group/cn=Recipients/cn=user.

and also this event:

Event Type: Error
Event Source: MSExchangeIS Mailbox Store
Event Category: Logons
Event ID: 1022
Date: 3/24/2003
Time: 10:46:26 AM
User: N/A
Computer: ---------
Description:
Logon Failure on database "First Storage Group\Mailbox Store (SERVER)" - Windows 2000 account domain\user; mailbox /o=domain/ou=First Administrative Group/cn=Recipients/cn=Administrator20613151.
Error: -2147467259

 

[robbyb]

Can anyone else log onto that PC and gain access to their own mailbox? Can you ping the Exchange Server by name? Can you browse to the Exchange Server using Windows Explorer?

 

[mquinn0908]

I can ping the exchange server by name and I can browse to it using Windows Explorer.

When I log onto the same machine and try to access their mailbox I am able to do so.

Also when another user logs onto this machine and I set up the users mailbox that I am having trouble with I can also access it.

It is only when this mailbox is set up and they are logged on as themselves that I run into problems.

 

[mquinn0908]

I think I made the last post a little confusing so let me sum it up.

When the user logs on as themself and tries to access their mailbox - they can not.

When another user logs on as themself and tries to access their mailbox - they can.

When another user logs on as themself and I set up the problem users mailbox and try to access it - I can.

When I set up the problem users mailbox on another machine and try to access it - I can.

I can ping the server by name and browse for it as well on the problem users PC.

 

[robbyb]

Sounds like a profile problem. If you had roaming profiles, then possibly this problem would follow the user where ever they login.

So it looks like it is just the profile on their PC.

Try two things:
1. See if you can (whilst logged on as yourself) find the user's USER.DAT and rename or delete it. If you have got roaming profiles setup, you'll need to find the user.dat on your profile server and delete that too. Logon as the user and you'll need to create a new mail profile as you start Outlook.

2. Completely Delete the user's profile on the PC and, if you've got roaming profiles, on the server.

Good Luck,


RobbyB

 

[maguca]

Have you checked to ensure the user has Full Mailbox Access to their own account... We had this problem once, and for some reason the user account did not have access to there own mailbox. Admittedly it happened after our Exchange 5.5 upgrade to Exchange 2000, and a domain name change... the user account may not have been included in the domain prep, or had it's mailbox associated with an external account... worth a look though.

mc

 

[mquinn0908]

I tried to rename and delete the user.dat file but no matter who I am logged on as it says the following:

Cannot delete ntuser: it is being used by another person or program. Close any programs that might be using the file and try again.

 

[robbyb]

Deleting the right ntuser.dat?

Sounds like you are trying to delete the one that you are using.

Login as administrator (with local Admin rights to the PC). Do a search for ntuser.dat and this should come up with as many as people that have logged on to that PC. Locate the suspect user's ntuser.dat and delete that.

RobbyB

 

[jasonhand]

Other users shouldn't be able to access that person's mail. It sounds like rights are not set up correctly all around.
-Jason
Romans 12:1-2

 

[mquinn0908]

Some of our users are able to access others mail for various reasons.

I was able to log onto the local machine as an administrator and rename the user.dat file and then I rebooted, recreated the outlook profile and the same result-the user can not access their mailbox. I looked at the permissions for this person and they have full access to their mailbox.

 

[robbyb]

OK. Given that this person can logon at other PCs and get their mailbox, I still think that it might be a local profile problem on the problem PC.

We should eliminate this possiblility if we can.

Profile info (and especially Outlook info) is stored in other parts of the profile apart from ntuser.dat. Could you try deleting the user's directory? This would be under c:\Documents and Settings on a Windows 2000\XP machine...

Good Luck..

 

[mquinn0908]

No the user can not log on as themself on another PC and get their mailbox.

The only way I have been able to get access to their mailbox is to log on as another user who has access to their mailbox such as the administrator.

It is like this user doesn't have permission to access the exchange server at all. The users mailbox has them with full access permission to their own mailbox...what else could I be missing?

 

[mquinn0908]

One more thing. When a mailbox is created for a new user it is automatically pulling in the everyone group with full access to the permissions. Where can I change this so it doesn't do this. When I try to remove it it says that it is inheriting permissions from it's parent. What object is considered the parent?

 

[robbyb]

1000 apologies. I misinterpreted that. It won't be a profile problem and I'm sorry for leading down this path.

For the entries in your Application Log, a MS article suggests that you should rebuild the Recipient Update Service.

The article might not describe exactly what's happened to your system, but the fix is safe and definitely worth a try.

http://support.microsoft.com/default.aspx?scid=kb;en-us;273448

Good Luck.

RobbyB

 

[mquinn0908]

Well after digging around I found out where the problem was. We have two domains and the user log on from one of our domains is tied to the mailbox in the other domain. In other words I give permission to a user in the first domain to access a mailbox in the exchange domain. I deleted that user from the first domain and recreated it and then tied it to the mailbox and everything works as it should.

Thanks everyone for your help.