?
Solved

Outlook 2007 - cannot create profile after upgrading to 2008 R2 AD

Posted on 2010-08-24
2
Medium Priority
?
630 Views
Last Modified: 2012-05-10
Upgraded domain from 2003 to 2008 R2 native.
1 Exchange 2003 server

Outlook 2003 clients can create new profiles to exchange 2003 with no problems.

Outlook 2007 clients - existing profiles work fine - if try to create a new profile manually, get to check name stage, and it keeps prompting for password.  It will not accept the credentials, it just keeps prompting.  Tried on several client with several different mailboxes.

Discovered that if during profile creation I click on More Settings, Security tab, and set the authentication to NTLM, and set the option to prompt for username/password everytime - then it will prompt for credentials and accept them.  

Also interesting is the fact that once this new profile is created and opened one time, then I can go back to the security settings and set them back to negotiate authentication and uncheck prompt for password and it will work fine.  This explains why the existing profiles all work (because they all have default security configuration).

I am not 100% sure that this happened immediately after domain upgrade to 2008 R2, but I suspect that it did.  All I know is that it worked recently.  They have only been upgraded for 2 weeks now.

Also, our plan is to migrate them to Exchange 2010.  So I figured this may just be a problem with the Exchange 2003 server.  So I went ahead and installed the Exchange 2010 in coexistence.  I have the same problem with mailboxes on both exchange servers.  Exact same symptoms.  That is why I think it has something to do with AD.

Also, just found out that activesync has an issue now too.  There is one user that uses activesync on his iPhone.  Trying to get clarification of exactly when, but at some point recently it stopped sync'ing.  It keeps prompting him for his password, and tells him it is incorrect.

Sorry for the long description, but hoping someone can point me in the right diretion!

Thanks
0
Comment
Question by:jeehole
2 Comments
 
LVL 8

Expert Comment

by:Mkris9
ID: 33511362
Have you checked this ?

http://support.microsoft.com/kb/956531
0
 
LVL 2

Accepted Solution

by:
jeehole earned 0 total points
ID: 33535957
Thanks for the comment, but that did not apply.

I ended up finding the solution on my own.  Turns out the SPNs in AD were set incorrectly.

This article helped me correct it:

http://support.microsoft.com/kb/927612

Hopefully this will help someone else....
0

Featured Post

Creating Active Directory Users from a Text File

If your organization has a need to mass-create AD user accounts, watch this video to see how its done without the need for scripting or other unnecessary complexities.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This month, Experts Exchange sat down with resident SQL expert, Jim Horn, for an in-depth look into the makings of a successful career in SQL.
Steps to fix “Unable to mount database. (hr=0x80004005, ec=1108)”.
how to add IIS SMTP to handle application/Scanner relays into office 365.
Are you ready to implement Active Directory best practices without reading 300+ pages? You're in luck. In this webinar hosted by Skyport Systems, you gain insight into Microsoft's latest comprehensive guide, with tips on the best and easiest way…
Suggested Courses

830 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question