Re: access to OWA denied to user

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance



That did the trick, he is in. Why would that fix it?


"Jamestechman" wrote:

You just now checked it or it's been checked? If you just now checked
it give it time for replication.



James Chong (MVP)
MCITP | EMA; MCSE | M+, S+,
Security+, Project+, ITIL
msexchangetips.blogspot.com



On Jul 10, 5:00 pm, Tboz <T...@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote:
Yes, I checked that and it still doesn't work. Also made sure OWA was enabled.



"Jamestechman" wrote:
Make sure permission inheritance is checked on this account. Go to
the
properties of the user in ADUC; go to security tab; advanced. Make
sure check box for allow
inheritable... is checked.

James Chong (MVP)
MCITP | EMA; MCSE | M+, S+,
Security+, Project+, ITIL
msexchangetips.blogspot.com

On Jul 10, 4:36 pm, Tboz <T...@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote:
I have a user who couldn't get into his OWA. Outlook works fine. I killed
his mailbox made him a new one and still he can't get it. It looks to be an
AD error, but I'm not sure how to go about fixing it. Here is the error
message:

Request
Url:https://mail.xxx.org:443/owa/lang.owa
User host address: 172.16.8.50

Exception
Exception type: Microsoft.Exchange.Data.Storage.StoragePermanentException
Exception message: There was a problem accessing Active Directory.

Call stack

Microsoft.Exchange.Data.Storage.ExchangePrincipal.Save()
Microsoft.Exchange.Clients.Owa.Core.RequestDispatcher.DispatchLanguagePostL­­ocally(OwaContext
owaContext, OwaIdentity logonIdentity, CultureInfo culture, String
timeZoneKeyName, Boolean isOptimized)
Microsoft.Exchange.Clients.Owa.Core.RequestDispatcher.DispatchLanguagePostR­­equest(OwaContext owaContext)
Microsoft.Exchange.Clients.Owa.Core.RequestDispatcher.PrepareRequestWithout­­Session(OwaContext owaContext, UserContextCookie userContextCookie)
Microsoft.Exchange.Clients.Owa.Core.RequestDispatcher.InternalDispatchReque­­st(OwaContext owaContext)
Microsoft.Exchange.Clients.Owa.Core.RequestDispatcher.DispatchRequest(OwaCo­­ntext owaContext)
System.Web.HttpApplication.SyncEventExecutionStep.System.Web.HttpApplicatio­­n.IExecutionStep.Execute()
System.Web.HttpApplication.ExecuteStep(IExecutionStep step, Boolean&
completedSynchronously)

Inner Exception
Exception type: Microsoft.Exchange.Data.Directory.ADOperationException
Exception message: Active Directory operation failed on
avh-srvs.aspenhospital.org. This error is not retriable. Additional
information: Insufficient access rights to perform the operation. Active
directory response: 00002098: SecErr: DSID-03150A45, problem 4003
(INSUFF_ACCESS_RIGHTS), data 0

Call stack

Microsoft.Exchange.Data.Directory.ADSession.AnalyzeDirectoryError(PooledLda­­pConnection
connection, DirectoryRequest request, DirectoryException de, Int32
totalRetries, Int32 retriesOnServer)
Microsoft.Exchange.Data.Directory.ADSession.ExecuteModificationRequest(ADRa­­wEntry entry, DirectoryRequest request, ADObjectId originalId)
Microsoft.Exchange.Data.Directory.ADSession.Save(ADObject instanceToSave,
IEnumerable`1 properties)
Microsoft.Exchange.Data.Storage.ExchangePrincipal.Save()

Inner Exception
Exception type: System.DirectoryServices.Protocols.DirectoryOperationException
Exception message: The user has insufficient access rights.

Call stack

System.DirectoryServices.Protocols.LdapConnection.ConstructResponse(Int32
messageId, LdapOperation operation, ResultAll resultType, TimeSpan
requestTimeOut, Boolean exceptionOnTimeOut)
System.DirectoryServices.Protocols.LdapConnection.SendRequest(DirectoryRequ­­est request, TimeSpan requestTimeout)
Microsoft.Exchange.Data.Directory.PooledLdapConnection.SendRequest(Director­­yRequest request, LdapOperation ldapOperation)
Microsoft.Exchange.Data.Directory.ADSession.ExecuteModificationRequest(ADRa­­wEntry entry, DirectoryRequest request, ADObjectId originalId)- Hide quoted text -

- Show quoted text -


.



Relevant Pages

  • Re: OWA 2007
    ... Exception message: There was a problem accessing Active Directory. ... Microsoft.Exchange.Clients.Owa.Core.RequestDispatcher.DispatchLanguagePostRequest(OwaContext owaContext) ... Exception message: Active Directory operation failed on ebidc.ebi.local. ... Microsoft.Exchange.Data.Directory.ADSession.AnalyzeDirectoryError(PooledLdapConnection connection, DirectoryRequest request, DirectoryException de, Int32& retries, Int32 maxRetries) ...
    (microsoft.public.exchange.admin)
  • Re: users cant get in to owa after mailbox is moved from 2003 to 2007
    ... Exception message: There was a problem accessing Active Directory. ... owaContext, OwaIdentity logonIdentity, CultureInfo culture, String ... Exception message: Active Directory operation failed on dc1.cauusa.local. ... connection, DirectoryRequest request, DirectoryException de, Int32 ...
    (microsoft.public.exchange.admin)
  • Mailbox Move Issue - 2003 to 2007
    ... Exception message: There was a problem accessing Active Directory. ... Microsoft.Exchange.Clients.Owa.Core.RequestDispatcher.DispatchLanguagePostRequest(OwaContext owaContext) ... Exception message: Active Directory operation failed on root.rus.roehampton.ac.uk. ... Microsoft.Exchange.Data.Directory.ADSession.AnalyzeDirectoryError(PooledLdapConnection connection, DirectoryRequest request, DirectoryException de, Int32& retries, Int32 maxRetries) ...
    (microsoft.public.exchange.setup)
  • Re: Error Logging into OWA
    ... Exception message: There was a problem accessing Active Directory. ... owaContext, OwaIdentity logonIdentity, CultureInfo culture, String ... connection, DirectoryRequest request, DirectoryException de, Int32 ...
    (microsoft.public.exchange.clients)
  • Error Logging into OWA
    ... Exception message: There was a problem accessing Active Directory. ... Microsoft.Exchange.Clients.Owa.Core.RequestDispatcher.DispatchLanguagePostRequest(OwaContext owaContext) ... Exception message: Active Directory operation failed on servfile.innet.org. ... connection, DirectoryRequest request, DirectoryException de, Int32 ...
    (microsoft.public.exchange.clients)