?
Solved

Can't access Outlook Web Access email for an account that has been disabled and enabled.

Posted on 2007-12-07
13
Medium Priority
?
1,743 Views
Last Modified: 2010-04-21
I disabled an employee's SBS2003 account when they left the company. We now need to check their old email for some attachments.

I did not delete the account, I simply disabled it so it wouldn't receive further mail and that the ex-employee would not have access to it.

I enabled it today and all the account settings are the same as any other user on the network however it is the only account that can't log on to OWA, just says the username or password is wrong. I reset the password and I am definitely typing the username correctly as other users can log on fine.

Do I have to update or refresh something after enabling the account again so that the OWA works? I can log onto the domain from an XP client machine as this user OK, it is just the OWA that isn't logging on as if the account is still disabled.

I also tried logging on from a client machine using Outlook 2003 and when configuring it for exchange it looks up the name fine and then wants to log on but it does not accept the password.

The password is definitely correct and I even reset the password to make sure it hadn't been changed.

Please tell me the mailbox hasn't been deleted when the account was disabled.

Anyone know what's gone wrong here.

I can't reboot the server for another 8 hours as too many people are replying on it, could a reboot solve this issue?

Thanks
0
Comment
Question by:jdunnill
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 5
  • 2
  • 2
  • +1
13 Comments
 
LVL 35

Accepted Solution

by:
rakeshmiglani earned 1000 total points
ID: 20426375
how much time did you wait after the account was enabled?
it could be due to cached information
have you tried accessing the mailbox via outlook?
0
 
LVL 1

Expert Comment

by:FRaccie
ID: 20426382
In my opinion there is an easier way to gain access to that users Mailbox.

On your AD Server go:
* Active Directory Users And Computers -> Select appropriate account -> Properties

On the "Exchange Advanced" Tab goto Mailbox Rights.
Here you can add your own account or the one whom must manage/look into the selected account.
Don't forget to give the appropriate rights.

In outlook you can then do "File -> Open -> Other Users Folder" (Could be other sentence as I'm on a Dutch XP)

Hope this can help you further.

Regards,
FRaccie
0
 
LVL 104

Assisted Solution

by:Sembee
Sembee earned 1000 total points
ID: 20426416
As already hinted above - if you disable an account and then re-enable it again, it can be some time before you have access, due to the way that Exchange caches permissions. I don't disable accounts for this very reason - hide them, change the password and other security settings, but not disable them.

Simon.
0
Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

 

Author Comment

by:jdunnill
ID: 20426433
I have tried using the full blown Outlook 2003 client software on a client machine. The account logs onto the domain ok but Outlook won't log onto the account. Like I said, it recognises the mailbox name as it underlines it when I set up the outlook profile but it won't log on with the correct password.

I enabled the account about 45 minutes ago. How long should it take to become active again?

I thought that disabling an account would only suspend it and then enabling it again would bring all the features back to life.

I can understand if there is a delay but would it take this long? Also should a server restart fix it? Like I said in the first post, I can't do one till the end of the day.

Disabling the account definitely won't have deleted the mailbox will it?

FRaccie: I have tried what you said and gave myself Read rights but when I try to open the inbox it said "Cannot display the folder. Microsoft Exchange is not available. Either there are network problems or the Exchange computer is down for maintenance".

This is incorrect as exchange is working fine for everyone today.

I could nto give myself any extra permissions to the user's mailbox as I got an error messages saying it couldn't set the permissions because I am in the same forest.

Thanks for your suggestions guys, do you have anymore ideas?
0
 

Author Comment

by:jdunnill
ID: 20426442
Sembee: So it could take many hours to work again?

I have just sent a test email to the account and it bounced back so obvious the email account is not active yet but the windows domain log on account is.

I was just in a panic that it had deleted the mailbox.

I will be sure to hide accounts in future!
0
 
LVL 35

Assisted Solution

by:rakeshmiglani
rakeshmiglani earned 1000 total points
ID: 20426453
disabling a mailbox does not delete the mailbox
0
 
LVL 104

Assisted Solution

by:Sembee
Sembee earned 1000 total points
ID: 20426463
Exchange caches permissions for around two hours. While you can change that time window, it is not recommended and will not help you with this because the change requires the Exchange services to be restarted.

Simon.
0
 

Author Comment

by:jdunnill
ID: 20426592
It's back online! Thanks for your help guys. Do you mind if I divide the points up between you all as you all helped me steady the ship and I learned a few new things. Or do you feel someone should get full points?

I was just going to divide them up.
0
 
LVL 1

Expert Comment

by:FRaccie
ID: 20427479
First post EVER, so points would be appreciated :p

Greetz FRaccie
0
 

Author Comment

by:jdunnill
ID: 20484146
Sembee

What do you suggest I do to clean up this post? I felt all answered did help to a certain extent. I am not a regular use of EE and I have made mistakes in the past when closing questions so I am a little apprehensive when dishing out the points.
0
 

Author Closing Comment

by:jdunnill
ID: 31413362
The account became active fully within a few hours. Thanks for the heads up! I have distributed the points between the two of you who answered the question and my sub questions. Thanks.
0

Featured Post

Office 365 Training for Admins - 7 Day Trial

Learn how to provision tenants, synchronize on-premise Active Directory, implement Single Sign-On, customize Office deployment, and protect your organization with eDiscovery and DLP policies.  Only from Platform Scholar.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

After hours on line I found a solution which pointed to the inherited Active Directory permissions . You have to give/allow permissions to the "Exchange trusted subsystem" for the user in the Active Directory...
There are times when we need to generate a report on the inbox rules, where users have set up forwarding externally in their mailbox. In this article, I will be sharing a script I wrote to generate the report in CSV format.
This video discusses moving either the default database or any database to a new volume.
Many of my clients call in with monstrous Gmail overloading issues with Outlook. A quick tip is to turn off the All Mail and Important folders from synching. Here is a quick video I made to show you how to turn off these and other folders in Gmail s…
Suggested Courses

801 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question