Solved

Outlook prompting creds from 1 user, username resolves incorrectly\inconsistently

Posted on 2014-02-27
7
319 Views
Last Modified: 2014-03-06
Got a weird one for you fine folks.  I have a single user who has recently started getting prompted for credentials when launching Outlook.  He is on Outlook 2013 but I can reproduce the problem on a different workstation with Outlook 2007.  The correct login format is domain\username, but when Outlook launches it's trying to use fullemailaddress@domain.com to authenticate.  Once he's supplied the correct credentials Outlook is happy for the remainder of the session until he reboots.  

I first cleared his credential store and created a new profile from the Mail snap-in.  I noticed that when entering his username and selecting 'check name', it resolves to fullemailaddress@domain.com.  This does not happen for any other user.  Where it gets weird is if I enter gibberish into the username field, it obviously fails....but when I enter his username again in the prompt which comes up following the 'name cannot be matched to a name in the address list' notice and then 'check name' it correctly resolves to his underlined domain username.  Afterward, using that profile, he's good until the following restart when Outlook again assumes the fullemailaddress@domain.com for authentication.

I've checked out the attribute editor and compared him against another staff member and haven't seen any obvious discrepancies.  Autodiscover tests are all successful and no other user has this problem.  This feels like a value got flipped and I'll have to use ADSIedit to correct it, but I don't know what to look for.  Suggestions?  Thanks!

Outlook 2013 (reproduced problem on Outlook 2007), Exchange 2007, Server 2008 (not R2) domain.
0
Comment
Question by:GS-Help
  • 3
  • 3
7 Comments
 
LVL 63

Accepted Solution

by:
Simon Butler (Sembee) earned 400 total points
ID: 39892446
Single user issues are rarely worth doing much with other than creating a new account.
The fact that Outlook pops up with the email address for authentication would suggest that Autodiscover is failing. As it is just one user and follows the user to another machine points at the account.

You could try moving the user to another database, or if you have multiple servers then another server would be even better. That could have the affect of cleaning up/resetting the account attributes.

However if that doesn't work, new account, forward the old one to the new one.

Simon.
0
 

Author Comment

by:GS-Help
ID: 39892482
Thanks for the followup.  I didn't mention that it's the owner (of course) and redoing everything would be a significant timesink.  Single server, single database. Autodiscover looks just fine and tests successfully after he authenticates and as noted, no other users, old or newly created, have any problems whatsoever.  I'd rather fix the glitch.
0
 
LVL 63

Expert Comment

by:Simon Butler (Sembee)
ID: 39892548
Doesn't really matter who it is, the fix is the same, because you could spend hours looking for a problem. It usually is a director/VP of some description with the problem, but my answer is always the same. I gave up thinking about the person's role in the business a long time ago and it allows me to resolve issues a lot quicker.

On Exchange 2007 and higher you can have multiple databases, so if you don't have another one, create it and move the user about.

Simon.
0
VMware Disaster Recovery and Data Protection

In this expert guide, you’ll learn about the components of a Modern Data Center. You will use cases for the value-added capabilities of Veeam®, including combining backup and replication for VMware disaster recovery and using replication for data center migration.

 

Author Comment

by:GS-Help
ID: 39892852
Not really a fix so much as a workaround, I don't want a single user hanging out in their own database just because.  I'll try creating a new database, moving the mailbox to that database, then back and report results.  I dislike bandaids.
0
 
LVL 11

Assisted Solution

by:hecgomrec
hecgomrec earned 100 total points
ID: 39895315
Could you please try to make sure this machine is able to ping the desire server using DNS and IP.

Try checking if the DNS are set properly at client level (PC) and make sure you flush and re-register dns.

Also, check that in the accounts settings, more settings, security tab, the option "Always prompt for logon credentials" is not selected.
0
 
LVL 63

Expert Comment

by:Simon Butler (Sembee)
ID: 39895707
That was pretty much what I was expecting.
Although it is best practise to have multiple databases, as it makes restores from backups much quicker. If a client has more than 30 users they get additional databases on my designs.

Simon.
0
 

Author Comment

by:GS-Help
ID: 39909892
They have fewer than 30 users fwiw.  Mailbox move didn't change a thing and the client has declined to have any more time spent on the issue and will just live with it.  Thanks for trying.

@hecgomrec:

The DNS settings are all fine, server and workstations are reachable from each other.  The key point here is that I can set up his account on other machines and get the same results, but if I do other users in the same location they have no problem.  It's definitely something specific to his account.  The prompting for credentials setting is not set but would also not be relevant as the problem is that Outlook insists on using the wrong credentials.  Some points all around for effort, thanks.
0

Featured Post

Three Reasons Why Backup is Strategic

Backup is strategic to your business because your data is strategic to your business. Without backup, your business will fail. This white paper explains why it is vital for you to design and immediately execute a backup strategy to protect 100 percent of your data.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Background Information Recently I have fixed file server permission issues for one of my client. The client has 1800 users and one Windows Server 2008 R2 domain joined file server with 12 TB of data, 250+ shared folders and the folder structure i…
A list of top three free exchange EDB viewers that helps the user to extract a mailbox from an unmounted .edb file and get a clear preview of all emails & other items with just a single click on mailboxes.
The video tutorial explains the basics of the Exchange server Database Availability groups. The components of this video include: 1. Automatic Failover 2. Failover Clustering 3. Active Manager
This video shows how to remove a single email address from the Outlook 2010 Auto Suggestion memory. NOTE: For Outlook 2016 and 2013 perform the exact same steps. Open a new email: Click the New email button in Outlook. Start typing the address: …

821 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question