I am in a new environment and they are running Exchange Server 2003 in one domain, mail.com. There is a second domain that all users and computers are currently logging into, user.com. Users from the user.com domain have email accounts in the mail.com domain. Everything was working fine until we had an issue with corrupt AD data in the user.com domain. Sometime during the process of resolving that corruptionthe 2-way trust between these domains was lost. Now that the trust has been re-established, users have lost access to shared calendars and public folders. This access is granted using the GAL and the security is still in place, meaning I can look and see that a user is assigned access to my calendar yet when they try to access it, it says they do not have sufficient permission to perform this operation. As well,I can go intoExchange System Manager and view client permissions for public folders and the correct users are listed with the access needed, yet when they try to open the public folder they get the error message saying they do not have sufficient permission to perform this operation. I have found that if I use OWA to access my mailbox, I have access toPublic Folders.Any suggestions for things to check would be appreciated.

Do you see the users permission on Public Folder/Calendar as User's SID? or proper user's name? also i would suggest you to remove any one users account from PF/Calendar and re-add the same just to make sure that it is not messing around with SID's Vinod |CCNA|MCSE 2003 +Messaging|MCTS|ITIL V3|

I see the users permissions in Public Folder/Calendar as the proper user's name, not a SID. I have removed the user name in the permissionsand re-added it and I still have the same issue.

i would opt for running /domainprep on mail.com domain to see if it can fix anything related with Permission. I would also run EXBPA on exchange server Vinod |CCNA|MCSE 2003 +Messaging|MCTS|ITIL V3|

Is there any harm in running domainprep during production hours on a production environment? After reading some info regarding domainprep, should it be run on both domains?

Hi, Would you please let me know if you use the PFDavAdmin tool to check the permission of the shared calendar folder? Whether the user.com\user or the mail.com\user is listed to have permission to access the calendar? You can also export the calendar permission and compare the exported SID with the User.com\User object and the mail.com\user object. I would like to explain if the mail.com\user is configured instead of User.com\User, the permission issue will be encountered. Mike Shen TechNet Subscriber Support in forum If you have any feedback on our support, please contact tngfb@microsoft.com

Mike,Using PFDavAdmin, the only users I see having permission are from the mail.com domain. When I try to add a user, the user.com domain is not even available to search. What am I missing, shouldn't a user be able to have access from a single account?