[Webinar] Streamline your web hosting managementRegister Today

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1366
  • Last Modified:

Outlook not accepting password (although works in OWA)

This problem has just appeared today, at one small branch office, consisting of 2 users.

the 2 users have their mailboxes on different servers, but they now are both unable to log on. the user/pass prompt comes up after opening outlook, but it will not accept the password, it just keeps prompting (the password is definitely correct - I have tested it in OWA).

Interestingly enough though, it only works in OWA when accessing the site via the external IP of the site (port forwarding allows access).  When you try and access OWA via the inernal server name or IP address, it doesnt accept the password.  

Any ideas?  I'm puzzled!

thanks,
0
EffEffTee
Asked:
EffEffTee
  • 8
  • 5
  • 4
1 Solution
 
MightySWCommented:
Hi,
sounds like for some reason their login credendials are not being passed to the domain controller and authenticating to the exchange store.  Did you change their passwords? If so or if not, then you should reboot the computer, ensure that they are logging into the domain rather than the local computer and then try to access outlook/exchange.

HTH
0
 
speshalystCommented:
recreate their email profiles..  this should help
0
 
EffEffTeeAuthor Commented:
One users password was changed, the others wasn't.  I've tried rebooting, and deleting and recreating their profiles, but when I go to resolve the name, it says Operation Failed.

0
Free tool for managing users' photos in Office 365

Easily upload multiple users’ photos to Office 365. Manage them with an intuitive GUI and use handy built-in cropping and resizing options. Link photos with users based on Azure AD attributes. Free tool!

 
MightySWCommented:
Can you resolve other names on that machine?
0
 
speshalystCommented:
do you seen any possibilities of a corrupted MAPI32.dll ?
you might wanna verify ..
0
 
speshalystCommented:
did you attempt to repair OUTLOOK ?
http://support.microsoft.com/kb/821593/
0
 
EffEffTeeAuthor Commented:
I can resolve names on both machines in question. DNS appears to be working fine.

I didn't attempt to repair outlook, but the possibility of 2 installations of Outlook having the same problem at the same time seem pretty remote.  Will try it though.

I will also check the MAPI32.dll thanks,
0
 
MightySWCommented:
No, you said that when outlook tries to resolve their (USER) name in the profile creation it says....

What I want to know is if you can enter in another name in there and have it resolve...

If you login as you on that computer, can you add your own profile?

0
 
EffEffTeeAuthor Commented:
Ive just noticed this on one of the machines

The kerberos client received a KRB_AP_ERR_MODIFIED error from the server host/server.domain.local.  This indicates that the password used to encrypt the kerberos service ticket is different than that on the target server. Commonly, this is due to identically named  machine accounts in the target realm (DOMAIN.LOCAL), and the client realm.   Please contact your system administrator.

I tried renaming the PC and rebooting, but I'm still getting the same error
0
 
MightySWCommented:
remove the computer from the domain, and delete the computer account.

Rejoin the domain, move the computer account to where you want it.
0
 
speshalystCommented:
do you see the same msg on the other problem machine as well ?
are there any other apps that are acting up ?
 
0
 
EffEffTeeAuthor Commented:
just Outlook playing up, and yes the messages appears on both machines.

can i remove and rejoin the machines from the domain remotely? the 2 computers are located about 2 hours drive from me, so I don't really want to go onsite.

0
 
MightySWCommented:
No, only if you had VNC on them.  You can install that first (as a service).  Set it all up and then rejoin them to the domain.

Make sure that you can login locally instead of the domain before disjoining from the domain.
0
 
MightySWCommented:
0
 
EffEffTeeAuthor Commented:
I was checking other possible problems relating to the site rather than the PC's, and found that the DC there has been tombstoned!  Not sure how someone let this happen, but it has.

REPLICATION-RECEIVED LATENCY WARNING
         MAIN-DC:  Current time is 2009-02-24 10:56:54.
            CN=Schema,CN=Configuration,DC=DOMAIN,DC=local
               Last replication recieved from BRANCH-DC at 2008-12-24 01:27:16.
               WARNING:  This latency is over the Tombstone Lifetime of 60 days!

The server is running, and although it's tombstoned, network connection between it and the rest of the network is now fine.

How do i un-tombstone it?  Is it possible that this caused the problems with Outlook authentication?
0
 
MightySWCommented:
Absolutely,

Have a look at this, and be sure to follow the expert comments:

http://www.experts-exchange.com/Operating_Systems/Windows_Server_2003/Q_21449502.html

0

Featured Post

Easily manage email signatures in Office 365

Managing email signatures in Office 365 can be a challenging task if you don't have the right tool. CodeTwo Email Signatures for Office 365 will help you implement a unified email signature look, no matter what email client is used by users. Test it for free!

  • 8
  • 5
  • 4
Tackle projects and never again get stuck behind a technical roadblock.
Join Now