Microsoft Outlook - You do not have permission to log on.


Hello Experts,

I have a child domain and a parent domain setup on Active directory.  Parent domain is xyz.com and the child domain is abc.xyz.com.  The exchange servers for the whole enterprise is under the parent domain and everyones email address is blahblah@xyz.com.

The issue I'm having is I cannot get the users in the child domain to connect on outlook.  Outlook gives a message "You do not have permission to log on", it never gives you an option to put a user name or password with a different domain name.

How do I resolve this?

Thanks.
XoraITAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

carl_legereCommented:
go to a workstation and build a new MAPI profile
control panel -> mail -> profiles new ...
can you get check name to work?
if not something is prohibiting connecting to the server to see the server or the GAL or the OAB
is DNS in good shape?
try iisreset on the exchange server
on exchange server try rebuilding the default offline address book.
XoraITAuthor Commented:
Check name works fine, no issues there.  But when you launch outlook to get emails, it gives that message.

Yes, DNS is good shape.

Should I still rebuild the offline address book?  I dont think its corrupted.

kmunik8Commented:
It sounds like the user AD accounts in the child domain are not assigned permissions to the AD objects for the users mailboxes in the parent domain.  You may want to check a user account in the parent domain, under Exchange Advanced, Mailbox Rights and verify the child AD domain account shows up in the Group or Usernames and that it has FULL Mailbox Access permissions checked.  

dave

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
XoraITAuthor Commented:
You are absolutely correct, that makes sense, very simple.  I cant beleive I didnt think of it from that angle even though it was telling me from that message.

Thanks Dave.

kmunik8Commented:
XoraIT,

You're welcome. I'm glad it worked!

dave
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Exchange

From novice to tech pro — start learning today.