Outlook not accepting password (although works in OWA)
This problem has just appeared today, at one small branch office, consisting of 2 users.
the 2 users have their mailboxes on different servers, but they now are both unable to log on. the user/pass prompt comes up after opening outlook, but it will not accept the password, it just keeps prompting (the password is definitely correct - I have tested it in OWA).
Interestingly enough though, it only works in OWA when accessing the site via the external IP of the site (port forwarding allows access). When you try and access OWA via the inernal server name or IP address, it doesnt accept the password.
Any ideas? I'm puzzled!
thanks,
the 2 users have their mailboxes on different servers, but they now are both unable to log on. the user/pass prompt comes up after opening outlook, but it will not accept the password, it just keeps prompting (the password is definitely correct - I have tested it in OWA).
Interestingly enough though, it only works in OWA when accessing the site via the external IP of the site (port forwarding allows access). When you try and access OWA via the inernal server name or IP address, it doesnt accept the password.
Any ideas? I'm puzzled!
thanks,
recreate their email profiles.. this should help
ASKER
One users password was changed, the others wasn't. I've tried rebooting, and deleting and recreating their profiles, but when I go to resolve the name, it says Operation Failed.
Can you resolve other names on that machine?
do you seen any possibilities of a corrupted MAPI32.dll ?
you might wanna verify ..
you might wanna verify ..
ASKER
I can resolve names on both machines in question. DNS appears to be working fine.
I didn't attempt to repair outlook, but the possibility of 2 installations of Outlook having the same problem at the same time seem pretty remote. Will try it though.
I will also check the MAPI32.dll thanks,
I didn't attempt to repair outlook, but the possibility of 2 installations of Outlook having the same problem at the same time seem pretty remote. Will try it though.
I will also check the MAPI32.dll thanks,
No, you said that when outlook tries to resolve their (USER) name in the profile creation it says....
What I want to know is if you can enter in another name in there and have it resolve...
If you login as you on that computer, can you add your own profile?
What I want to know is if you can enter in another name in there and have it resolve...
If you login as you on that computer, can you add your own profile?
ASKER
Ive just noticed this on one of the machines
The kerberos client received a KRB_AP_ERR_MODIFIED error from the server host/server.domain.local. This indicates that the password used to encrypt the kerberos service ticket is different than that on the target server. Commonly, this is due to identically named machine accounts in the target realm (DOMAIN.LOCAL), and the client realm. Please contact your system administrator.
I tried renaming the PC and rebooting, but I'm still getting the same error
The kerberos client received a KRB_AP_ERR_MODIFIED error from the server host/server.domain.local. This indicates that the password used to encrypt the kerberos service ticket is different than that on the target server. Commonly, this is due to identically named machine accounts in the target realm (DOMAIN.LOCAL), and the client realm. Please contact your system administrator.
I tried renaming the PC and rebooting, but I'm still getting the same error
remove the computer from the domain, and delete the computer account.
Rejoin the domain, move the computer account to where you want it.
Rejoin the domain, move the computer account to where you want it.
do you see the same msg on the other problem machine as well ?
are there any other apps that are acting up ?
are there any other apps that are acting up ?
ASKER
just Outlook playing up, and yes the messages appears on both machines.
can i remove and rejoin the machines from the domain remotely? the 2 computers are located about 2 hours drive from me, so I don't really want to go onsite.
can i remove and rejoin the machines from the domain remotely? the 2 computers are located about 2 hours drive from me, so I don't really want to go onsite.
No, only if you had VNC on them. You can install that first (as a service). Set it all up and then rejoin them to the domain.
Make sure that you can login locally instead of the domain before disjoining from the domain.
Make sure that you can login locally instead of the domain before disjoining from the domain.
ASKER
I was checking other possible problems relating to the site rather than the PC's, and found that the DC there has been tombstoned! Not sure how someone let this happen, but it has.
REPLICATION-RECEIVED LATENCY WARNING
MAIN-DC: Current time is 2009-02-24 10:56:54.
CN=Schema,CN=Configuration
Last replication recieved from BRANCH-DC at 2008-12-24 01:27:16.
WARNING: This latency is over the Tombstone Lifetime of 60 days!
The server is running, and although it's tombstoned, network connection between it and the rest of the network is now fine.
How do i un-tombstone it? Is it possible that this caused the problems with Outlook authentication?
REPLICATION-RECEIVED LATENCY WARNING
MAIN-DC: Current time is 2009-02-24 10:56:54.
CN=Schema,CN=Configuration
Last replication recieved from BRANCH-DC at 2008-12-24 01:27:16.
WARNING: This latency is over the Tombstone Lifetime of 60 days!
The server is running, and although it's tombstoned, network connection between it and the rest of the network is now fine.
How do i un-tombstone it? Is it possible that this caused the problems with Outlook authentication?
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
sounds like for some reason their login credendials are not being passed to the domain controller and authenticating to the exchange store. Did you change their passwords? If so or if not, then you should reboot the computer, ensure that they are logging into the domain rather than the local computer and then try to access outlook/exchange.
HTH