Solved

Outlook prompting creds from 1 user, username resolves incorrectly\inconsistently

Posted on 2014-02-27
7
315 Views
Last Modified: 2014-03-06
Got a weird one for you fine folks.  I have a single user who has recently started getting prompted for credentials when launching Outlook.  He is on Outlook 2013 but I can reproduce the problem on a different workstation with Outlook 2007.  The correct login format is domain\username, but when Outlook launches it's trying to use fullemailaddress@domain.com to authenticate.  Once he's supplied the correct credentials Outlook is happy for the remainder of the session until he reboots.  

I first cleared his credential store and created a new profile from the Mail snap-in.  I noticed that when entering his username and selecting 'check name', it resolves to fullemailaddress@domain.com.  This does not happen for any other user.  Where it gets weird is if I enter gibberish into the username field, it obviously fails....but when I enter his username again in the prompt which comes up following the 'name cannot be matched to a name in the address list' notice and then 'check name' it correctly resolves to his underlined domain username.  Afterward, using that profile, he's good until the following restart when Outlook again assumes the fullemailaddress@domain.com for authentication.

I've checked out the attribute editor and compared him against another staff member and haven't seen any obvious discrepancies.  Autodiscover tests are all successful and no other user has this problem.  This feels like a value got flipped and I'll have to use ADSIedit to correct it, but I don't know what to look for.  Suggestions?  Thanks!

Outlook 2013 (reproduced problem on Outlook 2007), Exchange 2007, Server 2008 (not R2) domain.
0
Comment
Question by:GS-Help
  • 3
  • 3
7 Comments
 
LVL 63

Accepted Solution

by:
Simon Butler (Sembee) earned 400 total points
ID: 39892446
Single user issues are rarely worth doing much with other than creating a new account.
The fact that Outlook pops up with the email address for authentication would suggest that Autodiscover is failing. As it is just one user and follows the user to another machine points at the account.

You could try moving the user to another database, or if you have multiple servers then another server would be even better. That could have the affect of cleaning up/resetting the account attributes.

However if that doesn't work, new account, forward the old one to the new one.

Simon.
0
 

Author Comment

by:GS-Help
ID: 39892482
Thanks for the followup.  I didn't mention that it's the owner (of course) and redoing everything would be a significant timesink.  Single server, single database. Autodiscover looks just fine and tests successfully after he authenticates and as noted, no other users, old or newly created, have any problems whatsoever.  I'd rather fix the glitch.
0
 
LVL 63

Expert Comment

by:Simon Butler (Sembee)
ID: 39892548
Doesn't really matter who it is, the fix is the same, because you could spend hours looking for a problem. It usually is a director/VP of some description with the problem, but my answer is always the same. I gave up thinking about the person's role in the business a long time ago and it allows me to resolve issues a lot quicker.

On Exchange 2007 and higher you can have multiple databases, so if you don't have another one, create it and move the user about.

Simon.
0
Threat Intelligence Starter Resources

Integrating threat intelligence can be challenging, and not all companies are ready. These resources can help you build awareness and prepare for defense.

 

Author Comment

by:GS-Help
ID: 39892852
Not really a fix so much as a workaround, I don't want a single user hanging out in their own database just because.  I'll try creating a new database, moving the mailbox to that database, then back and report results.  I dislike bandaids.
0
 
LVL 11

Assisted Solution

by:hecgomrec
hecgomrec earned 100 total points
ID: 39895315
Could you please try to make sure this machine is able to ping the desire server using DNS and IP.

Try checking if the DNS are set properly at client level (PC) and make sure you flush and re-register dns.

Also, check that in the accounts settings, more settings, security tab, the option "Always prompt for logon credentials" is not selected.
0
 
LVL 63

Expert Comment

by:Simon Butler (Sembee)
ID: 39895707
That was pretty much what I was expecting.
Although it is best practise to have multiple databases, as it makes restores from backups much quicker. If a client has more than 30 users they get additional databases on my designs.

Simon.
0
 

Author Comment

by:GS-Help
ID: 39909892
They have fewer than 30 users fwiw.  Mailbox move didn't change a thing and the client has declined to have any more time spent on the issue and will just live with it.  Thanks for trying.

@hecgomrec:

The DNS settings are all fine, server and workstations are reachable from each other.  The key point here is that I can set up his account on other machines and get the same results, but if I do other users in the same location they have no problem.  It's definitely something specific to his account.  The prompting for credentials setting is not set but would also not be relevant as the problem is that Outlook insists on using the wrong credentials.  Some points all around for effort, thanks.
0

Featured Post

Get up to 2TB FREE CLOUD per backup license!

An exclusive Black Friday offer just for Expert Exchange audience! Buy any of our top-rated backup solutions & get up to 2TB free cloud per system! Perform local & cloud backup in the same step, and restore instantly—anytime, anywhere. Grab this deal now before it disappears!

Join & Write a Comment

If you don't know how to downgrade, my instructions below should be helpful.
Possible fixes for Windows 7 and Windows Server 2008 updating problem. Solutions mentioned are from Microsoft themselves. I started a case with them from our Microsoft Silver Partner option to open a case and get direct support from Microsoft. If s…
This tutorial will walk an individual through the steps necessary to enable the VMware\Hyper-V licensed feature of Backup Exec 2012. In addition, how to add a VMware server and configure a backup job. The first step is to acquire the necessary licen…
To add imagery to an HTML email signature, you have two options available to you. You can either add a logo/image by embedding it directly into the signature or hosting it externally and linking to it. The vast majority of email clients display l…

746 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

14 Experts available now in Live!

Get 1:1 Help Now