Solved

Access Denied sending emails to users in Child Domain

Posted on 2007-03-26
6
214 Views
Last Modified: 2010-03-06
Hello All

I am fairly desperate on this and would appreciate any help.  Here is the setup.  

Parent domain: abc.com
Child domain: xyz.abd.com

Mailserver FQDN in Parent Domain: server1.abc.com
Mailserver FQDN in Child domain: server2.xyz.abc.com

The process used was as follows:

Child DC server setup and DCPrmo'd.  ForestPRep run on DC's in both Parent & Child.  Domainprep ther same.  Exchange installed, Exchange SP2 installed.  Connector configured.

I am able to create new users with email addresses in the child domain, can access information from the parent domain and vice versa.

The problem is that every time I send an email from a user in the parent domain to a user in the child domain, I get the following error:

The following recipient(s) cannot be reached:

      test 1 on 26/03/2007 14:15
            You do not have permission to send to this recipient.  For assistance, contact your system administrator.
            <server1.abc.com #5.7.1 smtp;550 5.7.1 <test1@abc.com>: Relay access denied>
 
Thanks in advance.

Jazz

 
0
Comment
Question by:jazzsahota
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 3
6 Comments
 
LVL 104

Expert Comment

by:Sembee
ID: 18792603
Some version information would be nice. There are currently three major versions of Exchange being used, with one of those versions have two minor revisions. All of them have their own quirks.

Are you using smart hosts anywhere in the configuration?
Are you using routing groups?

Simon.
0
 

Author Comment

by:jazzsahota
ID: 18793465
Apologies,

I am running Windows 2003 with Exchange 2003 Enterprise SP2.
I am using smart hosts within the cvonfiguration and have ensured that both the servers are added using DNS for resolution.

Jazz

0
 
LVL 104

Accepted Solution

by:
Sembee earned 500 total points
ID: 18794087
Where are the smart hosts?
On the SMTP virtual servers or on SMTP Connectors?

If they are on the SMTP virtual servers then you need to remove them and replace them with SMTP Connectors.

Simon.
0
Has Powershell sent you back into the Stone Age?

If managing Active Directory using Windows Powershell® is making you feel like you stepped back in time, you are not alone.  For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why.

 

Author Comment

by:jazzsahota
ID: 18798509
Simon

Thank you.  This worked a treat.

Jazz
0
 

Author Comment

by:jazzsahota
ID: 18799386
Simon

It seems that I was a bit hasty on the it being resolved.  I can currently send/receive emails externally from the child domain, however I am unable to send/receive emails internally within the child domain and the child to parent and vice versa.  Can you please offer any additional help.

Thanks

Jazz
0
 
LVL 104

Expert Comment

by:Sembee
ID: 18800567
Can you telnet to each server on port 25?

telnet ip.add.re.ss 25
telnet servername 25
telnet host.domain.com 25

If any of those fail then that can indicate a connection problem or name resolution problem.

Simon.
0

Featured Post

Are your AD admin tools letting you down?

Managing Active Directory can get complicated.  Often, the native tools for managing AD are just not up to the task.  The largest Active Directory installations in the world have relied on one tool to manage their day-to-day administration tasks: Hyena. Start your trial today.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Lotus Notes – formerly IBM Notes – is an email client application, while IBM Domino (earlier Lotus Domino) is an email server. The client possesses a set of features that are even more advanced as compared to that of Outlook. Likewise, IBM Domino is…
After hours on line I found a solution which pointed to the inherited Active Directory permissions . You have to give/allow permissions to the "Exchange trusted subsystem" for the user in the Active Directory...
In this video we show how to create an Address List in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Organization >> Ad…
To show how to generate a certificate request in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.:  First we need to log into the Exchange Admin Center. Navigate to the Servers >> Certificates…
Suggested Courses
Course of the Month8 days, 13 hours left to enroll

615 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question