Problem with MailboxRgihts property of IExchangeMailbox interface

This is a repost, since I posted in the wrong newsgroup:

I'm using the DirectoryEntry object to retrieve users from AD. This works
very well. Then I type cast the object to IExchangeMailbox interface, which
also succeeds. But when trying to retrieve the MailboxRights property, the
call fails with "The server is not operational". I've tried various
approaches. Most has to do with how I build the LDAP path to the
DirectoryEntry constructor:

1) DirectoryEntry de = new
DirectoryEntry("LDAP://serverDNS/ou=users,dc=domain,dc=com";, userName,
passWord, AuthenticationTypes.Secure | AuthenticationTypes.Delegation);

This fails with "The server is not operational".

2) DirectoryEntry de = new
DirectoryEntry("LDAP://serverDNS/ou=users,dc=domain,dc=com";, userName,
passWord, AuthenticationTypes.Secure);

This fails with "Access denied" from Interop.CDOEXM.

3) DirectoryEntry de = new
DirectoryEntry("LDAP://ou=users,dc=domain,dc=com";, userName, passWord,
AuthenticationTypes.Secure | AuthenticationTypes.Delegation);

This fails with "A referral was returned from the server".

4) DirectoryEntry de = new DirectoryEntry("GC://ou=users,dc=domain,dc=com",
userName, passWord, AuthenticationTypes.Secure |
AuthenticationTypes.Delegation);

This fails with "Unknown username or password". Combinations similar to 1)
and 2) (with GC instead of LDAP) gives the same results as 1) and 2).



The user is a domain admin so access should not be a problem. When I'm not
using AuthenticationTypes.Delegation, I guess the security context is lost
for successiv calls on the DirectoryEntry object (not really sure what this
flag means).

The problem might have something to do with the network infrastructure. The
code is running on a server in Domain1 (Server1). The server DNS I'm
connecting to in AD points to a server in Domain2 (Server2). The Exchange
2000 server however is on a different server in Domain2 (Server3). But since
Server2 to is a Global Catalog and a Domain Controller this shouldn't be a
problem. Or? We cannot access the Exchange 2000 server directly. Is this
required for the CDOEXM to work?

.

Relevant Pages