Avatar of alan2938
alan2938 asked on

Once a week most of my domain gets locked out of OWA for approx 36 hours - "The local security authority cannot be contacted"

I am a new IT administrator and am having trouble getting all the users in my small company to stay connected to our new Exchange 2003 server through OWA. Llike clockwork every Saturday night all my Blackberry users get the message shown in the code snippet...

When I try to validate their accounts again either through the Blackberry web login or directly from their phone they are unable to do so until Monday morning. If I try to log into Outlook Web Access directly using their credentials I get a message stating "The Local Security Authority Cannot Be Contacted". I have read through everything I can find in this forum, Google, and Microsoft and nothing seems to be of assistance. When this happens I am still able to log into webmail myself, as are any user user I put into AD. But most other users, all in separate security groups, cannot log in.  NET Logon is running on the Exchange Server and both my DCs (two running a Windows2003 domain environment). Restarting services or entire machines doesn't help, demoting and promoting DCs doesn't help. Nothing seems to make sense.

There is no scheduled maintenance on the network or Exchange server and nothing in the event logs showing any error or information at the time. Then just as strangely as it happened, everyone is able to get back in OWA Monday morning like nothing ever happened.

Any ideas?
This email account is no longer accessible by your BlackBerry device. This issue is likely caused by a recent change to the password used to access this account.
 
To resume receiving email from this address, login to your BlackBerry Internet Service account and verify the password is correct for this email account.
 
Email Account Information:
Email Account: myuser@mydomain.com
Email: myuser@mydomain.com
UserID: mydomainaccount
 
Sent via BlackBerry from [my user's provider]

Open in new window

Active DirectoryBlackBerryExchange

Avatar of undefined
Last Comment
alan2938

8/22/2022 - Mon
Paka

It sounds like there might be a time of day restriction on one of your service accounts.  Have you checked the IUSR_ and IWAM_ accounts for Logon restrictions?
ASKER
alan2938

Just checked, they are permitted to logon to all computers 24/7.
Paka

Do you have a full backup running on Saturday night?
All of life is about relationships, and EE has made a viirtual community a real community. It lifts everyone's boat
William Peck
ASKER
alan2938

Yes, but our backup runs every night of the week.
Paka

Do you have a full backup running on Saturday night?
Paka

Sorry about the double post.  So you have a full backup running every night of the week.  How about on-line maintenance of the mailbox stores.  That goes every night at 1-5?
Get an unlimited membership to EE for less than $4 a week.
Unlimited question asking, solutions, articles and more.
ASKER
alan2938

Database maintenance is run daily from 1am to 5am, mailbox store maintenance is run daily at midnight, and full text indexing is run daily at 3am.

We only have 35 mailboxes so database maintenance is always completed rather quickly.
ASKER CERTIFIED SOLUTION
alan2938

Log in or sign up to see answer
Become an EE member today7-DAY FREE TRIAL
Members can start a 7-Day Free trial then enjoy unlimited access to the platform
Sign up - Free for 7 days
or
Learn why we charge membership fees
We get it - no one likes a content blocker. Take one extra minute and find out why we block content.
See how we're fighting big data
Not exactly the question you had in mind?
Sign up for an EE membership and get your own personalized solution. With an EE membership, you can ask unlimited troubleshooting, research, or opinion questions.
ask a question