Link to home
Start Free TrialLog in
Avatar of Balack
Balack

asked on

user can't access exch 2010 owa, why?

This is a new ms exch 2010 server, with w2k8 ad domain. All 40+ users can use owa without problem, except this user - usera. Whenever he accessing, he would be denied with the following error:

 The Active Directory resource couldn't be accessed. This may be because the Active Directory object doesn't exist or the object has become corrupted, or because you don't have the correct permissions.

Deleting account and mailbox doesn't help. why?
Avatar of Tony J
Tony J
Flag of United Kingdom of Great Britain and Northern Ireland image

Has it ever worked? Is it a migrated account from an earlier version?

Try this command for the user:

Test-Mailflow Mailbox1 -TargetEmailAddress test@contoso.com (Mailbox1 is your server and test@contoso.com is your test user's email address)

Then post the results.
Verify that the user has a valid X400 address in their list of email addresses.

Check to make sure there's no logon restrictions for the user in AD. AD Users and Computers -> User Properties -> Account -> Log on To....make sure it's all computers or if it's controlled that the user is allowed to login to the Exchange Server.
Avatar of Balack
Balack

ASKER

The result for the test-mailflow. Where can I find x.400 settings?

RunspaceId         : 72acf13b-0f9b-40cd-8c98-a536c61603fe
TestMailflowResult : Success
MessageLatencyTime : 00:00:01.7901070
IsRemoteTest       : True
Identity           :
IsValid            : True

The X400 would be in the list of Email address under the user's account properties in the Exchange Management Console. If a user doesn't have that they will not be able to log in to OWA.
Or, if they don't have a local email address for that matter...say your server has a domain.local address associated with the users that's just an internal address. If the user doesn't have the internal address they will not be able to login to OWA.
->When your in the the AD snap-in, right click their account name and go to props. Do they have the exchange mailbox tabs?

->do they have an account in your servers ESM (exchange system manager)?
ASKER CERTIFIED SOLUTION
Avatar of Tony J
Tony J
Flag of United Kingdom of Great Britain and Northern Ireland image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of Balack

ASKER

good