Microsoft Outlook - You do not have permission to log on.

Posted on 2006-04-17
Last Modified: 2012-08-13

Hello Experts,

I have a child domain and a parent domain setup on Active directory.  Parent domain is and the child domain is  The exchange servers for the whole enterprise is under the parent domain and everyones email address is

The issue I'm having is I cannot get the users in the child domain to connect on outlook.  Outlook gives a message "You do not have permission to log on", it never gives you an option to put a user name or password with a different domain name.

How do I resolve this?

Question by:XoraIT
    LVL 18

    Expert Comment

    go to a workstation and build a new MAPI profile
    control panel -> mail -> profiles new ...
    can you get check name to work?
    if not something is prohibiting connecting to the server to see the server or the GAL or the OAB
    is DNS in good shape?
    try iisreset on the exchange server
    on exchange server try rebuilding the default offline address book.

    Author Comment

    Check name works fine, no issues there.  But when you launch outlook to get emails, it gives that message.

    Yes, DNS is good shape.

    Should I still rebuild the offline address book?  I dont think its corrupted.

    LVL 1

    Accepted Solution

    It sounds like the user AD accounts in the child domain are not assigned permissions to the AD objects for the users mailboxes in the parent domain.  You may want to check a user account in the parent domain, under Exchange Advanced, Mailbox Rights and verify the child AD domain account shows up in the Group or Usernames and that it has FULL Mailbox Access permissions checked.  


    Author Comment

    You are absolutely correct, that makes sense, very simple.  I cant beleive I didnt think of it from that angle even though it was telling me from that message.

    Thanks Dave.

    LVL 1

    Expert Comment


    You're welcome. I'm glad it worked!


    Featured Post

    Want to promote your upcoming event?

    Are you going to an event? Are you going to be exhibiting at a tradeshow? Talking at a conference? Using a promotional banner in your email signature ensures that your organization’s most important contacts stay in the know and can potentially spread the word about the event.

    Join & Write a Comment

    Get an idea of what you should include in an email disclaimer with these Top 5 email disclaimer tips.
    Easy CSR creation in Exchange 2007,2010 and 2013
    In this video we show how to create an email address policy in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.:  First we need to log into the Exchange Admin Center. Navigate to the Mail Flow…
    To add imagery to an HTML email signature, you have two options available to you. You can either add a logo/image by embedding it directly into the signature or hosting it externally and linking to it. The vast majority of email clients display l…

    734 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    17 Experts available now in Live!

    Get 1:1 Help Now