Just Another 2000 to 2003 OWA Access Denied Question

I upgraded Exchange 2000 to 200

Exchange 2003 is working. OWA work for the admin account and new users but not for previously created windows 2000 users

I check the permisssions. Ran throught the support articles and configuration steps related to Access Denied errors on th
exchange support page.

Checked all folder / file permisssion, policies looking for authorization and differences between the new and previous user accounts.

The only things noteworth are the old account names don't match mailbox names
ie.
Previous 2000 Account Names ie Jeff Mich does not match email account mich@mydomain.co
New Account Name Test2 matches Test2@mydomain.co

In the web virtual directory under exchange if click on any of the effected previously created Exchange 2000 users I get Access Denied for that folder in the virtual directory. For the new users and the administator the folder list is accessed. This is my bset clue does any one know what this means when the folders under the virtual directory can not be accesssed

Regards
Mich

"When mom asks what I do, I tell her a modern day Scavengers! Sad but True!"

Nagendra
Tue Mar 02 23:36:09 CST 2004

Hi MIch

Have you seen this:

http://support.microsoft.com/default.aspx?scid=kb;en-us;329292

Regards
--
Nagendra Sitharamaiah
MCSE, CCNA, MCT, CISSP
Microsoft

Use of included script samples are subject to the terms specified at
http://www.microsoft.com/info/cpyright.htm
This posting is provided "AS IS" with no warranties, and confers no rights.
Please do not send email to this address, post a reply to this newsgroup.

"mich" <mich@app-lab.com> wrote in message
news:B70943C4-9E84-41AD-B491-AE0CE17CD1F0@microsoft.com...
> I upgraded Exchange 2000 to 2003
>
> Exchange 2003 is working. OWA work for the admin account and new users
but not for previously created windows 2000 users.
>
> I check the permisssions. Ran throught the support articles and
configuration steps related to Access Denied errors on the
> exchange support page.
>
> Checked all folder / file permisssion, policies looking for authorization
and differences between the new and previous user accounts.
>
> The only things noteworth are the old account names don't match mailbox
names:
> ie.
> Previous 2000 Account Names ie Jeff Mich does not match email account
mich@mydomain.com
> New Account Name Test2 matches Test2@mydomain.com
>
> In the web virtual directory under exchange if click on any of the
effected previously created Exchange 2000 users I get Access Denied for that
folder in the virtual directory. For the new users and the administator
the folder list is accessed. This is my bset clue does any one know what
this means when the folders under the virtual directory can not be
accesssed?
>
> Regards,
> Mich
>
> "When mom asks what I do, I tell her a modern day Scavengers! Sad but
True!"

anonymous
Fri Mar 05 18:01:07 CST 2004

OK, we figured out what the problem was for anyone out there interested.

Again the problem was from Exchange 2000 to Exchange 2003.
Existing Exchange 2000 users experieinced an Access Denied and could not login.
Also remote users experienced dificulties logging on through Outlook or Outlook Express.

In the active directoy we had only 2 entries for the email addresses for the user accounts.
We noticed new users and the administrative account used to migrate Exchange 2000 to Exchange 2003 had 2 entries.

Neither of the 2 email entries referenced the primary domain controller because the domain controller resided on the same server. My best guess is in Exchange 2003 this is not sufficient it must be explicitly defined, where in Exchange 2000 it was OK????

Looking at the user accounts in the Active Directory
selecting the user properties|email addresses tab

I now have
SMTP myuser@mydomain.co
smtp myuser@mydomaincontroller.mydomain.com <---- added this entry to the email addresses
X.400 c=us; a= ;p=myechange server..

So I now have 3 email entries for each user and OWA now recognizes the authorization and login

2 days, 10 hours where do I send the bill?!

Regard
Mich

Nagendra
Fri Mar 05 21:25:53 CST 2004

Mich

That is interesting. I am not sure I have an explanation at this point,
though.

Regards
--
Nagendra Sitharamaiah
MCSE, CCNA, MCT, CISSP
Microsoft

Use of included script samples are subject to the terms specified at
http://www.microsoft.com/info/cpyright.htm
This posting is provided "AS IS" with no warranties, and confers no rights.
Please do not send email to this address, post a reply to this newsgroup.

"mich" <anonymous@discussions.microsoft.com> wrote in message
news:0AC22E8D-3354-4C06-A826-C597E204F603@microsoft.com...
> OK, we figured out what the problem was for anyone out there interested.
>
> Again the problem was from Exchange 2000 to Exchange 2003.
> Existing Exchange 2000 users experieinced an Access Denied and could not
login.
> Also remote users experienced dificulties logging on through Outlook or
Outlook Express.
>
> In the active directoy we had only 2 entries for the email addresses for
the user accounts.
> We noticed new users and the administrative account used to migrate
Exchange 2000 to Exchange 2003 had 2 entries.
>
> Neither of the 2 email entries referenced the primary domain controller
because the domain controller resided on the same server. My best guess is
in Exchange 2003 this is not sufficient it must be explicitly defined, where
in Exchange 2000 it was OK????
>
> Looking at the user accounts in the Active Directory
> selecting the user properties|email addresses tab
>
> I now have:
> SMTP myuser@mydomain.com
> smtp myuser@mydomaincontroller.mydomain.com <---- added this
entry to the email addresses
> X.400 c=us; a= ;p=myechange server...
>
> So I now have 3 email entries for each user and OWA now recognizes the
authorization and login.
>
> 2 days, 10 hours where do I send the bill?!
>
> Regards
> Mich