Re-enabled Users Unable to Access Mailbox Exchange 2013

ejscn
ejscn used Ask the Experts™
on
Since last week, we have had two users who were disabled in Active Directory need to be re-enabled.  They are able to log onto their computer just fine, but they cannot open their mailbox with either Outlook 2013 or OWA.  When I look at the mailbox in the Exchange Admin Center, the Mailbox Usage tab shows the warning: "The user hasn't logged on to mailbox <name of domain/ou/user ('mailbox ID, I'm guessing')>, so there is no data to return.  After the user logs on, this warning will no longer appear."  This makes it sound like the mailbox was re-created, but I know the mailbox has been used before the account had been disabled. Further, when I click on Mailbox Features, I get this warning: "Cannot open mailbox /o=Organization Name/ou=Exchange Administrative Group (FYDIBOHF23SPDLT)/cn=Configuration/cn=Servers/cn=SERVERNAME/cn=Microsoft System Attendant."  With one of the two affected users, I just re-created the entire account, but I don't want to have to do that with every user we disable.  We haven't had this problem in the past, and I haven't made any changes aside from Windows Updates.  I appreciate any insight you can provide.
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
Scott CSenior Engineer

Commented:
Can anybody (admin) log into the mailbox?

Are you running the latest CU for Exch 2013?

You can run a mailbox repair and see if that fixes the mailbox.

https://technet.microsoft.com/en-us/library/ff625226(v=exchg.160).aspx

Commented:
i be leave that you didn't connected mailboxes to the users who you enabled.. from exchange...

EMC-Recipients configuration- disconnected mailboxes - here you can reconnect existing mail box.

or you can mount mail box using power shell command as well

the first thing is when ever you delete mail box it'll be stays in exchange 30 days by default ( it modified you can check it from EMC- Organisation configuration - retention Tags)

after 30 days the existing disconnected mailboxes will be purged...

all the best
Scott CSenior Engineer

Commented:
I don't believe that a disabled user will cause the mailbox to become disconnected.  I just tested this in my lab.

Is the mailbox showing up as "disconnected"?
Ensure you’re charging the right price for your IT

Do you wonder if your IT business is truly profitable or if you should raise your prices? Learn how to calculate your overhead burden using our free interactive tool and use it to determine the right price for your IT services. Start calculating Now!

ejscnIT

Author

Commented:
Hi ScottCha,

Thank you for testing the disconnected mailbox, and yes I agree that the mailbox is not disconnected.  If I look at the affected mailbox under the Recipients > Mailboxes tab, I click connect a mailbox and the user is not listed as a disconnected mailbox to connect.  I believe this means that the mailbox is indeed connected.

I am trying to open the mailbox as me, but sometimes it can take up to 30 minutes for me to be able to open a mailbox after giving myself full control.  You'll have to forgive me, is that what you meant when you asked if admin could log onto the mailbox?  That's the only way I know how to do it.  I'll report back a little later to let you know if I can get in.

We are running CU8, so I will plan to upgrade to CU10 tomorrow morning.

I tried to run a New-MailboxRepairRequest and got the following:
WARNING: The user hasn't logged on to mailbox '6a0b6335-b766-4c01-a94b-a3cb89302b4a' ('Database01'), so there is no data to return. After the user logs on, this warning will no longer appear.
Scott CSenior Engineer

Commented:
Try sending the affected mailbox an email.  This trick can work for a newly created mailbox that hasn't been logged into.
ejscnIT

Author

Commented:
I tried sending an email to the affected mailbox.  I'm getting the same message when trying to use the New-MailboxRepairRequest command.  I am still not able to access this user's mailbox as me.  I get a message that I don't have permission to open the mailbox, but it also gives this error, if it's any help: X-OWA-Error: SDServerErr;Microsoft.Exchange.Data.Storage.ConnectionFailedTransientException

Thanks again for all your help.
ejscnIT

Author

Commented:
Ok, so now the affected mailbox is appearing in Outlook for me, but when I try to access it, the error message I get is: "The set of folders cannot be opened.  Network problems are preventing connection to Microsoft Exchange."  Still getting the permissions message when trying to access it through OWA.
IT
Commented:
Ok, I have a theory.  We have started restoring users from the Active Directory Recycle Bin if they left the company for a while and came back.  Exchange does have a 30-day limit on keeping deleted mailboxes.  I haven't yet verified that the two affected users were completely restored from the Recycle Bin or if they were just re-enabled.  But is it possible for a user to be in the AD Recycle Bin for, say, 60 days but for their mailbox to be gone (because Exchange only kept it for 30 days)?
ejscnIT

Author

Commented:
Just a theory, but it seems to be accurate.  We haven't had other issues like this.

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial