?
Solved

New Exchagne 2010 server can't see AD users to create new mailbox's

Posted on 2013-12-17
6
Medium Priority
?
398 Views
Last Modified: 2014-01-08
This seems like a very strange issue.  OK, I have Exchange 2010 SP1 on Server 2008. Two DC both Server 2008.  

When I go to add mailbox's via Exchange console, I search for AD users and only the users I created within the past 5 days show up.  I even created a test account prior to this question and it shows up.  However, all of the original users do not show up.  Keep in mind, the test account I created is in the same OU as all of the other accounts.  

I am also getting MSExchange ADAccess warnings on all of the existing users...

Process w3wp.exe () (PID=4364). Recipient object CN=user,OU=Phone Team,OU=Employees,DC=domain,DC=com read from server-Server.domain.com failed validation and will be excluded from the result set.  Set event logging level for Validation category to Expert to get additional events about each failure.

Please assist me with this one.  I am lost!
0
Comment
Question by:sXmont1j6
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
6 Comments
 
LVL 59

Expert Comment

by:Cliff Galiher
ID: 39725382
First guess is that at one time someone went and changed the permissions on one of your AD subtrees and had the permissions propogate to all child objects. Those objects, if the permissions were set wrong, would be unreadable by Exchange. New objects would, of course, get default permissions and work fine.

Compare the permissions on two objects, one that works, and one that doesn't, and find out where they got changed.
0
 

Author Comment

by:sXmont1j6
ID: 39725657
I am sorry, I don't know what you mean, permissions on the user objects?  I am not clear on what you want me to compare.
0
 
LVL 37

Expert Comment

by:Mahesh
ID: 39725952
What Exchange role permissions you have on account used for creating mailboxes?
Check below article for role assignment
http://blog.pluralsight.com/exchange-2010-role-based-access-control
Try creating new user with recipient management \ organization management permissions and check if he is able see all users in AD
Also you need to add above id to local administrators group on exchange server

If above works, then you can compare permissions of old ID with new one.

Mahesh
0
Office 365 Training for Admins - 7 Day Trial

Learn how to provision tenants, synchronize on-premise Active Directory, implement Single Sign-On, customize Office deployment, and protect your organization with eDiscovery and DLP policies.  Only from Platform Scholar.

 
LVL 63

Expert Comment

by:Simon Butler (Sembee)
ID: 39729358
First - Exchange 2010 SP1 is very old and no longer supported. The first thing I would do is upgrade to Exchange 2010 Sp3 and the latest rollup so that you are on a supported platform.

If the users are all in the same OU, then in the properties of the OU reset the inheritance, to include the child objects. As already pointed out, this probably does not include the Exchange system objects. It could also be that inheritance is disabled on those objects and you need to enable it.

Simon.
0
 

Accepted Solution

by:
sXmont1j6 earned 0 total points
ID: 39754266
The problem was that I was on a hosted platform and AD already saw that the accounts had mailboxes.  I had to disable them and then re-add the accounts in Exchange.
0
 

Author Closing Comment

by:sXmont1j6
ID: 39764678
The problem was that I was on a hosted platform and AD already saw that the accounts had mailboxes.  I had to disable them and then re-add the accounts in Exchange.
0

Featured Post

Office 365 Training for Admins - 7 Day Trial

Learn how to provision tenants, synchronize on-premise Active Directory, implement Single Sign-On, customize Office deployment, and protect your organization with eDiscovery and DLP policies.  Only from Platform Scholar.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

After seeing many questions for JRNL_WRAP_ERROR for replication failure, I thought it would be useful to write this article.
Let's recap what we learned from yesterday's Skyport Systems webinar.
Are you ready to implement Active Directory best practices without reading 300+ pages? You're in luck. In this webinar hosted by Skyport Systems, you gain insight into Microsoft's latest comprehensive guide, with tips on the best and easiest way…
This video shows how to use Hyena, from SystemTools Software, to update 100 user accounts from an external text file. View in 1080p for best video quality.
Suggested Courses
Course of the Month15 days, 15 hours left to enroll

741 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question