Link to home
Start Free TrialLog in
Avatar of ikeepon
ikeepon

asked on

Exchange asking for User log in

We changed the Master AD over to another server as well as the Master status of Exchange to another server.

That said, users can log-in, but when opening Outlook get prompted for username and password.  Even putting in credentials Exchange won't let them in.

Help
Avatar of ocon827679
ocon827679
Flag of United States of America image

Does the other domain controller host a Global Catalog?  Exchange needs to authenticate against a DC with the global catalog.  Look at AD Sites and Services.  Drill down to the domain controller that now hosts your AD.  Expand and look at the Properties for NTDS Settings (I think).  There is a check box for Global Catalog.  Ensure that it is checked.
Avatar of ikeepon
ikeepon

ASKER

I made the change and will check in the AM.
Avatar of ikeepon

ASKER

Nobody had access to Outlook again shortly after I made that Global Catalog change.
After making that change did you do anything to Exchange? Like restart its services? If not then I would do that.

Simon.
Avatar of rhinoceros
In fact, delayed-replication between Master AD (DC) and Exchange.  Those are placed on differenet sites?
Avatar of ikeepon

ASKER

no, same site...it was like 20 min after changing the GAS that it had happened.  I also notice an Mx record for Exchange was not in DNS, although I don't think that was the problem.  

I'll try again and reboot both servers in the morning.  Very weird.
Avatar of ikeepon

ASKER

Maybe I missed a step, can someone provide me with documentation on how to change a Domain Controller?
What do you mean "change a domain controller" ?
Unless Exchange has been hard coded to a domain controller in the Properties of the server then after restarting the Exchange services Exchange will use the first DC to respond.

Simon.
Avatar of ikeepon

ASKER

So Exchange needs to be restarted?  I have two domain controllers...when I shut off one of them that is when all the problems start.
ASKER CERTIFIED SOLUTION
Avatar of Sembee
Sembee
Flag of United Kingdom of Great Britain and Northern Ireland image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
You can use nltest.exe to see which Global Catalog server Exchange has attached itself to.  The switch with the command is /sc_query.  Look at the help for the command to get the exact syntax.

If the GC server locks up, you can manually reset the Exchange server to use another Global Catalog using the /sc_reset switch with the nltest.exe command.
Avatar of ikeepon

ASKER

It was an AD sync issue...the server the Exchange was on was a domain server, that was not fully operational as a domain controller

http://www.petri.co.il/forums/showthread.php?t=7122