Solved

Exchange asking for User log in

Posted on 2007-11-28
14
275 Views
Last Modified: 2010-04-20
We changed the Master AD over to another server as well as the Master status of Exchange to another server.

That said, users can log-in, but when opening Outlook get prompted for username and password.  Even putting in credentials Exchange won't let them in.

Help
0
Comment
Question by:ikeepon
  • 6
  • 3
  • 2
  • +1
14 Comments
 
LVL 13

Expert Comment

by:ocon827679
Comment Utility
Does the other domain controller host a Global Catalog?  Exchange needs to authenticate against a DC with the global catalog.  Look at AD Sites and Services.  Drill down to the domain controller that now hosts your AD.  Expand and look at the Properties for NTDS Settings (I think).  There is a check box for Global Catalog.  Ensure that it is checked.
0
 

Author Comment

by:ikeepon
Comment Utility
I made the change and will check in the AM.
0
 

Author Comment

by:ikeepon
Comment Utility
Nobody had access to Outlook again shortly after I made that Global Catalog change.
0
 
LVL 104

Expert Comment

by:Sembee
Comment Utility
After making that change did you do anything to Exchange? Like restart its services? If not then I would do that.

Simon.
0
 
LVL 13

Expert Comment

by:rhinoceros
Comment Utility
In fact, delayed-replication between Master AD (DC) and Exchange.  Those are placed on differenet sites?
0
 

Author Comment

by:ikeepon
Comment Utility
no, same site...it was like 20 min after changing the GAS that it had happened.  I also notice an Mx record for Exchange was not in DNS, although I don't think that was the problem.  

I'll try again and reboot both servers in the morning.  Very weird.
0
Do email signature updates give you a headache?

Do you feel like you are constantly making changes to email signatures? Are the images not formatting how you want them to? Want high-quality HTML signatures on all devices, including on mobiles and Macs? Then, let Exclaimer solve all your email signature problems today.

 

Author Comment

by:ikeepon
Comment Utility
Maybe I missed a step, can someone provide me with documentation on how to change a Domain Controller?
0
 
LVL 104

Expert Comment

by:Sembee
Comment Utility
What do you mean "change a domain controller" ?
Unless Exchange has been hard coded to a domain controller in the Properties of the server then after restarting the Exchange services Exchange will use the first DC to respond.

Simon.
0
 

Author Comment

by:ikeepon
Comment Utility
So Exchange needs to be restarted?  I have two domain controllers...when I shut off one of them that is when all the problems start.
0
 
LVL 104

Accepted Solution

by:
Sembee earned 125 total points
Comment Utility
Exchange hooks on to a specific domain controller. If that domain controller is then shutdown Exchange will not look for another DC for 35 - 40 minutes. During that time Exchange is basically dead in the water until that time. The best way is to restart the Exchange services which forces Exchange to go looking for another DC.

Simon.
0
 
LVL 13

Expert Comment

by:ocon827679
Comment Utility
You can use nltest.exe to see which Global Catalog server Exchange has attached itself to.  The switch with the command is /sc_query.  Look at the help for the command to get the exact syntax.

If the GC server locks up, you can manually reset the Exchange server to use another Global Catalog using the /sc_reset switch with the nltest.exe command.
0
 

Author Comment

by:ikeepon
Comment Utility
It was an AD sync issue...the server the Exchange was on was a domain server, that was not fully operational as a domain controller

http://www.petri.co.il/forums/showthread.php?t=7122
0

Featured Post

How your wiki can always stay up-to-date

Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
- Increase transparency
- Onboard new hires faster
- Access from mobile/offline

Join & Write a Comment

Disabling the Directory Sync Service Account in Office 365 will stop directory synchronization from working.
Synchronize a new Active Directory domain with an existing Office 365 tenant
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …
The basic steps you have just learned will be implemented in this video. The basic steps are shown to configure an Exchange DAG in a live working Exchange Server Environment and manage the same (Exchange Server 2010 Software is used in a Windows Ser…

762 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

6 Experts available now in Live!

Get 1:1 Help Now