I've setup our new exchange 2007 server and am trying to transition from exchange 2003. The install seemed to go well.After moving a mailbox from 2003 to 2007, I can send message from 2007 to 2003, but messages sent from mailboxes on the 2003 server never reach users on the 2007 server. The message sit in the queue called "Message with an unreachable destination".I'm also having an issue with using OWA. When I try to log into the user on the 2007 box I get an error "A problem occurred while trying to use your mailbox. Please contact tech. support." The error details are:Please note, when I moved my personal mailbox, and logged into OWA I had not errors. The only difference is my account is a Domain Admin. When I make the test user a domain admin, it still fails.RequestUrl: https://www.domain.com:443/owa/lang.owaUser host address: 192.168.10.240ExceptionException type: Microsoft.Exchange.Data.Storage.StoragePermanentExceptionException message: There was a problem accessing Active Directory.Call stackMicrosoft.Exchange.Data.Storage.ExchangePrincipal.Save() Microsoft.Exchange.Clients.Owa.Core.RequestDispatcher.DispatchLanguagePostLocally(OwaContext owaContext, OwaIdentity logonIdentity, CultureInfo culture, String timeZoneKeyName, Boolean isOptimized) Microsoft.Exchange.Clients.Owa.Core.RequestDispatcher.DispatchLanguagePostRequest(OwaContext owaContext) Microsoft.Exchange.Clients.Owa.Core.RequestDispatcher.PrepareRequestWithoutSession(OwaContext owaContext, UserContextCookie userContextCookie) Microsoft.Exchange.Clients.Owa.Core.RequestDispatcher.InternalDispatchRequest(OwaContext owaContext) Microsoft.Exchange.Clients.Owa.Core.RequestDispatcher.DispatchRequest(OwaContext owaContext) System.Web.HttpApplication.SyncEventExecutionStep.System.Web.HttpApplication.IExecutionStep.Execute() System.Web.HttpApplication.ExecuteStep(IExecutionStep step, Boolean& completedSynchronously)Inner ExceptionException type: Microsoft.Exchange.Data.Directory.ADOperationExceptionException message: Active Directory operation failed on DC.domain..local. This error is not retriable. Additional information: Insufficient access rights to perform the operation. Active directory response: 00002098: SecErr: DSID-03150A45, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0 Call stackMicrosoft.Exchange.Data.Directory.ADSession.AnalyzeDirectoryError(PooledLdapConnection connection, DirectoryRequest request, DirectoryException de, Int32& retries, Int32 maxRetries) Microsoft.Exchange.Data.Directory.ADSession.ExecuteModificationRequest(ADRawEntry entry, DirectoryRequest request, ADObjectId originalId) Microsoft.Exchange.Data.Directory.ADSession.Save(ADObject instanceToSave, IEnumerable`1 properties) Microsoft.Exchange.Data.Storage.ExchangePrincipal.Save()Inner ExceptionException type: System.DirectoryServices.Protocols.DirectoryOperationExceptionException message: The user has insufficient access rights.Call stackSystem.DirectoryServices.Protocols.LdapConnection.ConstructResponse(Int32 messageId, LdapOperation operation, ResultAll resultType, TimeSpan requestTimeOut, Boolean exceptionOnTimeOut) System.DirectoryServices.Protocols.LdapConnection.SendRequest(DirectoryRequest request, TimeSpan requestTimeout) Microsoft.Exchange.Data.Directory.PooledLdapConnection.SendRequest(DirectoryRequest request, LdapOperation ldapOperation) Microsoft.Exchange.Data.Directory.ADSession.ExecuteModificationRequest(ADRawEntry entry, DirectoryRequest request, ADObjectId originalId)Thanks in Advance,Andrew

Ok I figured out the error with OWA...If you're having a similar problem please refer to:http://www.pointbridge.com/pdfs/Migrated%20mailbox%20from%20Exchange%202003%20to%20Exchange%202007.pdf

What was your fix to OWA? I'm having the same issue. Joe

As my second e-mail stated, read the PDF I linked too. Here is the link again:http://www.pointbridge.com/pdfs/Migrated%20mailbox%20from%20Exchange%202003%20to%20Exchange%202007.pdfAndrew

I am having the same problem with one user and the link that was posted is no longer available. Thanks

I just tried the link, it works fine. Anyway... the issue is the in AD once a user is made an Administrator that account stops inherriting permissions that are push down; not a problem for Domain Admins. However if the user's admin privs are taken away this flag isn't set back. Go into the AD properties of the account and tell the account in inheriatepermissions again. Andrew

The link didnt work for me either, but if you go to www.pointbridge.com and do a search for Migrated mailbox, its there. https://blogs.pointbridge.com/Blogs/PointBridge/Lists/Posts/Post.aspx?List=e751c31d%2D47f3%2D4946%2Dab9f%2Deb84183a5814&ID=44&Source=https%3A%2F%2Fblogs%2Epointbridge%2Ecom%2Fblogs%2Fpointbridge%2Flists%2Fposts%2Farchive%2Easpx%3FView%3D%7B1FEAEF40%2DC328%2D460E%2DB957%2D03E651CF354C%7D%26FilterField1%3DLinkTitleNoMenu%26FilterValue1%3DMigrated%2520mailbox%2520from%2520Exchange%25202003%2520to%2520Exchange%25202007%2520prevents%2520user%2520from%2520logon%2520to%2520OWA%2520%2528Outlook%2520Web%2520Access%25202007%2529%2520post%2520mailbox%2520move was what ended up in my address bar Sadly, the fix itself doesnt work for me, Im getting the same error, but the users were already inheriting permissions in AD

BUT...... this one does In our case I found the answer at http://support.microsoft.com/kb/938444/en-us Giving the Authenticated users group Read access to the OWA user accounts solved the problem