Solved

Mailbox creation delay

Posted on 2003-12-10
17
1,903 Views
Last Modified: 2008-02-01
I'm setting up AD user accounts - with exchange mailbox - remotely. On a rare occasion the new account can log in immediately - but mostly there is a delay - this delay varies - 2 to ?? minutes. In exchange system manager, the new mailbox does not show until this 'delay' expires and then new account can log in. I've read that msExchUserAccountControl should be set after mailbox creation and this should take care of the delay, but I haven't had any success.
Any help would be appreciated.
Thanks
win2k advserver - exchange 2000
0
Comment
Question by:dgrafx
  • 8
  • 7
17 Comments
 
LVL 3

Expert Comment

by:ydirie
Comment Utility
The key word you mention here is remotely.
Two key things here
1.When you create an account, make sure you select domain controller that sits the site where exchange is located. Remember your DCs must be replicated before exchange uses RUS to update the new AD objects.  in active directory users and computers, right click the dc and click connect to domain controller and connect DC on that location. That way, you avoid  AD replication latency.
2. Set your exchange RUS update interval to run always. If you want a quick update, check the account you just created the mailbox and once you know all the extra three tabs show up in AD users and computers, go to your exchange esm> RUS> right click and say update now.

try this
0
 
LVL 24

Expert Comment

by:David Wilhoit
Comment Utility
Also, just to add, the new mailbox doesn't show up, period, until the user logs in. the mailbox is created upon login, hence the welcome message that Outlook sends whenever you create a new outlook account. If you have multiple DCs, you may want to force replication in Sites and Services to hurry the process along. But you definitely have to do what ydirie said first, update and rebuild the RUS.

D
0
 
LVL 24

Author Comment

by:dgrafx
Comment Utility
thanks for replying...
in my scenario exchange is on the only DC in this domain (with one DC is replication an issue? if yes, is there a way to tell the DC to not bother replicating?). Also RUS is set to always run. I did the " right click the dc and click connect to domain controller and connect DC on that location" as you said, but with only one DC does it have a choice?
As far as the 'update now' option from RUS, that still does not enable account immediately. also this does need to be done remotely or automatically.
0
 
LVL 24

Author Comment

by:dgrafx
Comment Utility
I need to add a couple things - this is an online application creating new mail accounts from users who sign up. It is not using outlook. And I did try logging in with outlook to test what Kidego said and I get the same result - password incorrect. And to reiterate - given time the new user is able to log in.
0
 
LVL 24

Author Comment

by:dgrafx
Comment Utility
forgot to add that the mailbox IS created - given time - without logging in. The only issue is the time delay.
0
 
LVL 24

Expert Comment

by:David Wilhoit
Comment Utility
the user may have a mailbox, but the resource isn't created until a message is sent to the mailbox. It won't show in the ESM until this happens, just a fact of Exchange. your online app may be doinig this for you. Once again, though, this really is a replication issue with your GCs. Outlook contacts the GC to find its mailbox, so until the GC knows about it, no login happens. Is exchange on a member server, a DC, or a DC/GC?

D
0
 
LVL 24

Author Comment

by:dgrafx
Comment Utility
OK yes, my app is sending an email to new user, I forgot I did this for the purpose you stated, sorry.
Now to the delay... what settings should I look at to get around this?
Exchange is on the only DC in the domain.
0
 
LVL 24

Expert Comment

by:David Wilhoit
Comment Utility
The only DC/GC in the domain? After the update/rebuild of the RUS? Wow, there shoudln't be ANY delay, like only the time it takes for the object to be stamped with a proxy address. Less than 300 users, this takes about 2-3 minutes. If you make the user object and mailbox using the ADUC, instead of your application, do you still have a delay logging in with the new account?> I usually test my new accounts with OWA directly on the server. Works immediately. It's worth a try.
0
Wish Marketing would stop bothering you?

Is your marketing department constantly asking for new email signature updates? Are they requesting a different design for every department? Do they need yet another banner added? Don’t let it get you down! There is an easy way to manage all of these requests...

 
LVL 24

Author Comment

by:dgrafx
Comment Utility
creating an account with ADUC usually gives immediate access. when it doesn't I've noticed that the email address isn't defined - sometimes it's not - don't know why that is either.
thanks. any ideas?
0
 
LVL 24

Expert Comment

by:David Wilhoit
Comment Utility
that's the RUS, stamping the object with a proxy address (SMTP address). If I want it to happen immediately, I always update the RUS, then rebuild after I create the object. If it's less than 500 on 1 DC/GC, it really doesn't take that long. If no email address is defined, the RUS hasn't stamped it yet.

D
0
 
LVL 24

Author Comment

by:dgrafx
Comment Utility
OK - sounds like you're pretty knowledgeable. Is there anything I can do with this? when a person signs up for a hotmail account - you don't need to wait 10 minutes to log in and try it out. If I could get this delay down to 2 or 3 minutes as long as it was always 2 or 3 minutes - I could post a notice that they'd be able to log in in 3 minutes and I guess I could live with that if I can't find a way to do this. But I'm having delays of 15 minutes or more (haven't actually timed it). This will make trial users leave the site and may never come back. They might leave with a 2 minute delay also though.
Any ideas on how to 'refresh' this. keep in mind this will be done from a web page - not at the DC where one can update the RUS or something similar. In the beginning I was hoping there was simply a setting that controlled this. The always run option in the RUS doesn't seem to be exactly it though.
thanks
0
 
LVL 24

Expert Comment

by:David Wilhoit
Comment Utility
http://support.microsoft.com/default.aspx?scid=kb;en-us;823153

Basically, the delay is unavoidable, unless you perform the manual rebuild of the RUS after mailbox creation.Now I'm not a programmer, but I'd bet there's a way to write a call to the RUS and force rebuild after the app creates the mailbox for you. The delay you're experiencing though, isn't because of Exchange (15+ minutes), it's the app if I had to guess. A single DC/GC/Exchange server, with the RUS set to Always Run, shouldn't take that long. Is this an app you wrote, or someone else's packaged app?

D
0
 
LVL 24

Author Comment

by:dgrafx
Comment Utility
I wrote it - but I create the account with an ldif file, this is the only contact with AD other than a user logging in.
0
 
LVL 24

Expert Comment

by:David Wilhoit
Comment Utility
If I find anything else that will help, I'll post back to here. I'm bookmarking this question....

D
0
 
LVL 24

Accepted Solution

by:
dgrafx earned 0 total points
Comment Utility
Hi,
I'm posting an update to what I've found.
After the day we'd posted on this, the mailbox store would refresh and newly created account could log in immediately if another connection to create a mailbox had not occured recently - didn't measure the amount of time. Since I was just adding this functionality to an application I was finishing - It was very frustrating as one of the tests involved creating several accounts one right after the other to test durability. I never did come up with anything that would refresh as desired with accounts being created simultaneously and consecutively.
The solution though I discovered is Exchange 2003 Server. Newly created accounts can be logged into in a second after creation - as many one right after another as I've tested. This is what I needed as this application is for sale.
I thank you very much for the suggestions.
0
 
LVL 24

Expert Comment

by:David Wilhoit
Comment Utility
excellent!

D
0

Featured Post

IT, Stop Being Called Into Every Meeting

Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

Join & Write a Comment

Utilizing an array to gracefully append to a list of EmailAddresses
Find out how to use Active Directory data for email signature management in Microsoft Exchange and Office 365.
In this video we show how to create an email address policy in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.:  First we need to log into the Exchange Admin Center. Navigate to the Mail Flow…
To add imagery to an HTML email signature, you have two options available to you. You can either add a logo/image by embedding it directly into the signature or hosting it externally and linking to it. The vast majority of email clients display l…

762 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

6 Experts available now in Live!

Get 1:1 Help Now