RE: Re-enabled accounts cannot log on to Exchange server.

From: "Paul Lemonidis \(Hotmail\)" <paul_lemonidis@xxxxxxxxxxx>
To: "[ExchangeList]" <exchangelist@xxxxxxxxxxxxx>
Date: Tue, 28 Jun 2005 10:10:59 +0100

Hi All

This is a known issue in both Exchange 2000 and 2003. To stop it do the following. To prevent it you must do the follwoing for each disabled account prior to disabling it, ideally. Go to the mailbox rights entry on the Exchange Advanced tab in the System Manager and ensure that Self object has the associated external account ticked for allow. After that you should be fine. Having said that, on extreme occasions I have had to delete the AD user account and then recreate without a mailbox and reconnect the affected mailbox to the newly created AD account in System Manager to resolve this.

This happens because when an account is disabled the association between the mailbox and the its active directory account is lost. If you look in your event logs you should see entries about a missing SID entry for the users concerned. Also in the System Manager program the last logon will show as a SID number instead of a valid user.

In addition to the symptom you have seen you will also find all messages sent to the mailbox are rejected. Hence have a look at the link below. Hope it helps?

Regards,

Paul Lemonidis.

http://support.microsoft.com/default.aspx?scid=kb;en-us;319047

----- Original Message ----- From: "Carl Houseman" <c.houseman@xxxxxxxxx> To: "[ExchangeList]" <exchangelist@xxxxxxxxxxxxx> Sent: Tuesday, June 28, 2005 3:39 AM Subject: [exchangelist] RE: Re-enabled accounts cannot log on to Exchange server.

http://www.MSExchange.org/

The only gotcha is that you will increase CPU and/or disk loading by setting shorter times.

If your server is moderately loaded or worse, make modest adjustments and
monitor performance before making further changes.

Given that Microsoft "recommends" setting Reread Logon Quotas Interval to 20 minutes, I'd have no qualms over that one whatsoever.

-----Original Message-----
From: Maglinger, Paul [mailto:PMAGLINGER@xxxxxxxx]
Sent: Monday, June 27, 2005 12:51 PM
To: [ExchangeList]
Subject: [exchangelist] RE: Re-enabled accounts cannot log on to Exchange
server.

http://www.MSExchange.org/

Strange how this has never come up before. I guess we were just lucky.
Are there any "gotchas" to changing the cache time to be more frequent?

-----Original Message-----
From: Carl Houseman [mailto:c.houseman@xxxxxxxxx]
Sent: Monday, June 27, 2005 11:19
To: [ExchangeList]
Subject: [exchangelist] RE: Re-enabled accounts cannot log on to
Exchange server.

http://www.MSExchange.org/

Permissions, enabling/re-enabling, quota changes can take up to 2 hours
to
be effective.  Stop and restart the store to hurry it up, or edit the
registry to change the cache times.

http://support.microsoft.com/?kbid=327378

-----Original Message-----
From: Maglinger, Paul [mailto:PMAGLINGER@xxxxxxxx]
Sent: Monday, June 27, 2005 10:26 AM
To: [ExchangeList]
Subject: [exchangelist] Re-enabled accounts cannot log on to Exchange
server.

http://www.MSExchange.org/

Exchange 2003 on W2K domain, native mode.
We disabled 3 accounts this morning and then re-enabled them less than
an hour later.  When they try to open Outlook, they get a message that
the attempt to log on to the Microsoft Exchange server has failed.
Everyone else is able to get in to their mailboxes fine.  The account
shows enabled in AD.  The mailbox doesn't have an X in it.  I recreated
the RUS and that didn't correct the problem.  It's been an hour and a
half, so I'm not waiting for replication.  Thoughts anyone?

Paul Maglinger, A+, CA, CCA, CET, MCSE

Systems Administrator
Shoe Carnival Inc.
(812)867-4674
pmaglinger@xxxxxxxx


------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp
Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com
Leading Network Software Directory: http://www.serverfiles.com
No.1 ISA Server Resource Site: http://www.isaserver.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this MSEXchange.org Discussion List as:
pmaglinger@xxxxxxxx
To unsubscribe visit
http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
Report abuse to listadmin@xxxxxxxxxxxxxx

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp
Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com
Leading Network Software Directory: http://www.serverfiles.com
No.1 ISA Server Resource Site: http://www.isaserver.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this MSEXchange.org Discussion List as:
webelists-exchangelist@xxxxxxxxxxxxxxxxx
To unsubscribe visit
http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
Report abuse to listadmin@xxxxxxxxxxxxxx

------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: World of Windows Networking: http://www.windowsnetworking.com Leading Network Software Directory: http://www.serverfiles.com No.1 ISA Server Resource Site: http://www.isaserver.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this MSEXchange.org Discussion List as: paul_lemonidis@xxxxxxxxxxx To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=exchangelist Report abuse to listadmin@xxxxxxxxxxxxxx

RE: Re-enabled accounts cannot log on to Exchange server.

Other related posts: