OWA don't work for domain admins
Owa is working for all domain users except for domain admins. How can we solve this problem?
We user Exchange 2003 and we get the error ;
You could not be logged on to Outlook Web Access. Make
sure your domain\user name and password are correct, and then try again.
Username and password are good ofcourse :-)
May 31st, 2012 8:04am
Something is probably pretty seriously messed up with your permissions. Though, actually, I would consider this a "feature" since your administrators should probably not have mailboxes in the first place. :-)
Can these folks access Exchange through Outlook? If so, it may be the that the permissions on the \Exchweb folder has got a deny in place for Administrators or Domain Admins.Jim McBee - Blog - http://mostlyexchange.blogspot.com
Free Windows Admin Tool Kit Click here and download it now
June 1st, 2012 12:08am
I'am the administrator and have a mailbox. I've checked the permissions on the exchweb but it looks good.
June 1st, 2012 2:29am
Hi,
Please try to create user and then add the user to domain admins group to test the issue.
Do you have split Domain permission model configured?
Working with Active Directory Permissions in Exchange Server
http://technet.microsoft.com/en-us/library/bb124223(v=exchg.65)
Besides, Liza is a free tool for Active Directory environments which allows you to display and analyze object rights in the directory hierarchy. You can have a try.
http://social.technet.microsoft.com/wiki/contents/articles/6477.how-to-view-or-delete-active-directory-delegated-permissions-en-us.aspx
http://www.ldapexplorer.com/en/liza.htm
Xiu Zhang
TechNet Community Support
Free Windows Admin Tool Kit Click here and download it now
June 1st, 2012 5:09am
On Fri, 1 Jun 2012 06:22:05 +0000, J.A. van der Feest wrote:
>
>
>I'am the administrator and have a mailbox. I've checked the permissions on the exchweb but it looks good.
Jim's referring to the fact that accounts that are members of
"priviledged" groups (like Domain Admins) have permission inheritenc
blocked on their user accounts. That prevents Exchange from receiving
the permissions necessary to deal with the mailbox properly.
The reason why user accounts with elevated permissions shouldn't have
a mailbox will become evident the first time they open a message with
an worm/virus/rootkit link in it. Those are bad enough when it's just
a "normal" user but, oops! you just gave away the userid and password
to the whole forest!
---
Rich Matheisen
MCSE+I, Exchange MVP
--- Rich Matheisen MCSE+I, Exchange MVP
June 1st, 2012 10:06pm