RE: OWA Exchange 2007 - Client Access

Hi J,

Thanks for posting here.

From the description, I understand the issue is that just one user cannot
access the "room" mailbox via OWA. If I am off base, please don't hesitate
to let me know.

Let us refer to the following steps to troubleshoot the issue:

Before we can go further,please clarify something unclear.

Do you access the "room" mailbox or the problematic user's mailbox itself
when the user keeps getting prompted for logon credencials.

Actually, "From Field" is the feature of "Send As" permission in Exchange,
it is normally used in MAPI client, such as Outlook.

I think we may open the delegated mailbox in OWA and then compose the
message. For your convenience, I would like to show an example:

Assume user A wants to Send As user B, we then can try the following steps
to grant the permission:
- Open Active Directory Users and Computers.
- Click View, click Advanced Features to display more configurations.
- Expand the User container, right click User B account and click
Properties.
- Click Security tab, click Add.
- Add User A account to the list.
- Highlight User A account and assign the Send As and Receive As permission
and then click OK.
- Click Exchange Advanced tab and then click Mailbox Rights.
- Grant User A appropriate permission.
- Then User A can open User B mailbox by OWA using:
http://Exchange_Server_FQDN/exchange/User_B_Account and then send as User B.

Please check the problematic user's security group,you need to move the
user account from the following group since the
permission of the user account that is a member of one of administrative
groups will be reset to match the ACL of the AdminSDHolder thread.

Enterprise Admins
Schema Admins
Domain Admins
Administrators
Domain Controllers
Cert Publishers
Backup Operators
Replicator Server Operators
Account Operators
Print Operators


If a user account is a member of one of these administrative groups because
of its membership with a distribution group, the user account's ACL is
checked when the thread is run and may be reset to match the ACL of the
AdminSDHolder thread.

For more information:

"You do not have sufficient permissions in the Domain" error message occurs
and Exchange Setup does not respond
http://support.microsoft.com/?id=319966

AdminSDHolder Thread Affects Transitive Members of Distribution Groups
http://support.microsoft.com/?id=318180

The send as permission is possible to be reverted back due to the user's
membership of administrative groups.

If issue persists,Please make the users's group the same with another
normal user.


If the issue still occurs, please help me collect the following information
for analysis:

1.you can do a test in outlook for problematic user sending as "room"
mailbox.What's the result?

2.Please capture the screenshot of OWA logon when the user keeps getting
prompted for logon credencials.save as jpg file and send to me at
v-jaluo@xxxxxxxxxxxxx

3.If you logon the problematic user in another computer,run OWA,what's the
result? Does he still keep getting prompted for logon credencials?


Have a nice day!

Best regards,

Jacky Luo (MSFT)
Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security
====================================================
PLEASE NOTE: The partner managed newsgroups are provided to
assist with break/fix issues and simple how to questions.
We also love to hear your product feedback! Let us know what you think by
posting

from the web interface: Partner Feedback
from your newsreader: microsoft.private.directaccess.partnerfeedback.

We look forward to hearing from you!
====================================================
When responding to posts, please "Reply to Group" via your newsreader
so that others may learn and benefit from this issue.
====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
====================================================

.

Relevant Pages

  • RE: OWA Exchange 2007 - Client Access
    ... Do you access the "room" mailbox or the problematic user's mailbox itself ... when the user keeps getting prompted for logon credencials. ... Add User A account to the list. ... Highlight User A account and assign the Send As and Receive As permission ...
    (microsoft.public.exchange.connectivity)
  • User cant access OWA or RWW
    ... New staff member aboard; heading out on a business trip so I'm walking her through the process of accessing her email and desktop remotely. ... Keeps getting the note that either her login or password are bad. ... I then used the Add User wizard in Server Management to create a new account for her. ... User not allowed to logon at this computer ...
    (microsoft.public.windows.server.active_directory)
  • Re: Disable "Allow logon to terminal server"
    ... I need to disable the permission, "Allow logon to ... the member server and domain are all Windows 2000 so I do not have the ... My gut instinct is that there is likely a way to set this account property ...
    (microsoft.public.win2000.security)
  • Re: copying files to a directory using symbolic link in linux
    ... If your user is a member of a group, and that group has traverse ... then he can access using a symbolic link in /tmp. ... have x permission, and there is no x permission to "others", then they ... He has access to the account ...
    (linux.redhat)
  • Re: copying files to a directory using symbolic link in linux
    ... If your user is a member of a group, and that group has traverse ... then he can access using a symbolic link in /tmp. ... have x permission, and there is no x permission to "others", then they ... He has access to the account ...
    (comp.os.linux.misc)