I have a user who couldn't get into his OWA. Outlook works fine. I killed his mailbox made him a new one and still he can't get it. It looks to be an AD error, but I'm not sure how to go about fixing it. Here is the error message:
Request
Url:
https://mail.xxx.org:443/owa/lang.owaUser host address: 172.16.8.50
Exception
Exception type: Microsoft.Exchange.Data.St
orage.Stor
agePermane
ntExceptio
n
Exception message: There was a problem accessing Active Directory.
Call stack
Microsoft.Exchange.Data.St
orage.Exch
angePrinci
pal.Save()
Microsoft.Exchange.Clients
.Owa.Core.
RequestDis
patcher.Di
spatchLang
uagePostLo
cally(OwaC
ontext owaContext, OwaIdentity logonIdentity, CultureInfo culture, String timeZoneKeyName, Boolean isOptimized)
Microsoft.Exchange.Clients
.Owa.Core.
RequestDis
patcher.Di
spatchLang
uagePostRe
quest(OwaC
ontext owaContext)
Microsoft.Exchange.Clients
.Owa.Core.
RequestDis
patcher.Pr
epareReque
stWithoutS
ession(Owa
Context owaContext, UserContextCookie userContextCookie)
Microsoft.Exchange.Clients
.Owa.Core.
RequestDis
patcher.In
ternalDisp
atchReques
t(OwaConte
xt owaContext)
Microsoft.Exchange.Clients
.Owa.Core.
RequestDis
patcher.Di
spatchRequ
est(OwaCon
text owaContext)
System.Web.HttpApplication
.SyncEvent
ExecutionS
tep.System
.Web.HttpA
pplication
.IExecutio
nStep.Exec
ute()
System.Web.HttpApplication
.ExecuteSt
ep(IExecut
ionStep step, Boolean& completedSynchronously)
Inner Exception
Exception type: Microsoft.Exchange.Data.Di
rectory.AD
OperationE
xception
Exception message: Active Directory operation failed on avh-srvs.aspenhospital.org
. This error is not retriable. Additional information: Insufficient access rights to perform the operation. Active directory response: 00002098: SecErr: DSID-03150A45, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0
Call stack
Microsoft.Exchange.Data.Di
rectory.AD
Session.An
alyzeDirec
toryError(
PooledLdap
Connection
connection, DirectoryRequest request, DirectoryException de, Int32 totalRetries, Int32 retriesOnServer)
Microsoft.Exchange.Data.Di
rectory.AD
Session.Ex
ecuteModif
icationReq
uest(ADRaw
Entry entry, DirectoryRequest request, ADObjectId originalId)
Microsoft.Exchange.Data.Di
rectory.AD
Session.Sa
ve(ADObjec
t instanceToSave, IEnumerable`1 properties)
Microsoft.Exchange.Data.St
orage.Exch
angePrinci
pal.Save()
Inner Exception
Exception type: System.DirectoryServices.P
rotocols.D
irectoryOp
erationExc
eption
Exception message: The user has insufficient access rights.
Call stack
System.DirectoryServices.P
rotocols.L
dapConnect
ion.Constr
uctRespons
e(Int32 messageId, LdapOperation operation, ResultAll resultType, TimeSpan requestTimeOut, Boolean exceptionOnTimeOut)
System.DirectoryServices.P
rotocols.L
dapConnect
ion.SendRe
quest(Dire
ctoryReque
st request, TimeSpan requestTimeout)
Microsoft.Exchange.Data.Di
rectory.Po
oledLdapCo
nnection.S
endRequest
(Directory
Request request, LdapOperation ldapOperation)
Microsoft.Exchange.Data.Di
rectory.AD
Session.Ex
ecuteModif
icationReq
uest(ADRaw
Entry entry, DirectoryRequest request, ADObjectId originalId)