I recently disjoined and rebuilt my last Windows Server 2003 domain controller, upgrading the OS to 2008 R2. My domain functional level remains 2003.I have approximately 10/1000 users in my domain who cannot open their mailbox via Outlook 2003 from a standalone PC while connected via VPN; unless added to the domain admins group. I have granted them full rights to their mailbox via Exchange Management Shell by using:
add-adpermission -user "user" -accessrights genericall
add-mailboxpermission -user "user" -accessrights fullaccess -inheritancetype all
I have rebuilt the outlook profile multiple times, deleted:
Extend.dat – Located in C:\Documents and Settings\<username>\Local Settings\Application Data\Microsoft\Outlook\.
Frmcache.dat – Located in C:\Documents and Settings\<username>\Application Data\Microsoft\Forms\.
Views.dat – Located in C:\Documents and Settings\<username>\Application Data\Microsoft\Outlook\.
Outcmd.dat – Located in C:\Documents and Settings\<username>\Application Data\Microsoft\Outlook\.
I can open their mailbox when connected via a LAN system joined to the domain and also when granting myself full rights to their mailbox and logging in on the other side of the VPN (I am operating as a domain admin).
Nothing seems to work unless I add them to the Domain Admins group, Please help!