Isn't that permissions/account modification information going to be in the
logs for one of your DC's?

-----Original Message-----
From: Chris H [mailto:[EMAIL PROTECTED] 
Sent: Friday, September 12, 2003 6:23 AM
To: Exchange Discussions
Subject: Re: Users Cannot Log Into Mailboxes


Thanks to everyone who helped! I finally found out the culprit. Something
very stupid to boot. Almost 200 out of 500 mailboxes had their primary NT
account changed to another person's NT account. It appears to be totally
random as well. The first person I had to troubleshoot on had the correct NT
account as a primary as he was already logged in to Outlook when the script
ran. So I didnt pick up on that immedaitely. Then when he logged off and
could not get back in . . . we were clued in.


I suspect a rouge WSH script as the developers have been working on one to
auto create mailboxes via a web interface.

So you know my next question . . . anyone think of a way to track this down?
I see the 200 Informational messages from the DS in the event logs about
account properties being changed, but not by who or what.

Any other suggestions? Obviously someone is hot to know how this happened .
.  .

Thanks!

Chris

PS I know about doing that work on a Dev Domain/Exchange server . . . I
warned them about that but was vetoed! :)


----- Original Message ----- 
From: "Tony Hlabse" <[EMAIL PROTECTED]>
To: "Exchange Discussions" <[EMAIL PROTECTED]>
Sent: Thursday, September 11, 2003 11:17 AM
Subject: Re: Users Cannot Log Into Mailboxes


>
> There has to be something logging when attempting to login to the 
> mailbox. Did you look hard at the logs?
>
>
> From: "Andy David" <[EMAIL PROTECTED]>
> Reply-To: "Exchange Discussions" <[EMAIL PROTECTED]>
> To: "Exchange Discussions" <[EMAIL PROTECTED]>
> Subject: Re: Users Cannot Log Into Mailboxes
> Date: Thu, 11 Sep 2003 10:56:04 -0400
>
> So nothing was changed on the servers?
> Was anything changed on those workstations?
>
> ----- Original Message -----
> From: "Chris H" <[EMAIL PROTECTED]>
> To: "Exchange Discussions" <[EMAIL PROTECTED]>
> Sent: Thursday, September 11, 2003 10:38 AM
> Subject: Re: Users Cannot Log Into Mailboxes
>
>
>  > cannot find inbox for same users via OWA
>  >
>  > ----- Original Message -----
>  > From: "Tony Hlabse" <[EMAIL PROTECTED]>
>  > To: "Exchange Discussions" <[EMAIL PROTECTED]>
>  > Sent: Thursday, September 11, 2003 10:34 AM
>  > Subject: RE: Users Cannot Log Into Mailboxes
>  >
>  >
>  > This may seem too simple but can they resolve the email servers 
> name. Also  > try accessing via OWA is that ok. Everytime this comes 
> up it is either
a
>  > network problem or DNS
>  >
>  > -----Original Message-----
>  > From: [EMAIL PROTECTED]
>  > [mailto:[EMAIL PROTECTED] On Behalf Of Chris H  
> > Sent: Thursday, September 11, 2003 10:25 AM  > To: Exchange 
> Discussions  >
>  > that is the puzzling part . . .
>  >
>  > auth to different dc's
>  > mail on different mail servers
>  > different segments/switches on the network
>  >
>  >
>  > ----- Original Message -----
>  > From: "Andy David" <[EMAIL PROTECTED]>
>  > To: "Exchange Discussions" <[EMAIL PROTECTED]>
>  > Sent: Thursday, September 11, 2003 10:16 AM
>  > Subject: Re: Users Cannot Log Into Mailboxes
>  >
>  >
>  > > Any commonality that you can see among those 60 users?
>  > >
>  > > ----- Original Message -----
>  > > From: "Chris H" <[EMAIL PROTECTED]>
>  > > To: "Exchange Discussions" <[EMAIL PROTECTED]>
>  > > Sent: Thursday, September 11, 2003 9:45 AM
>  > > Subject: Users Cannot Log Into Mailboxes
>  > >
>  > >
>  > > > all of a sudden this morning about 60 out of 400 cannot log into
the
>  > > > exchange servers via Outlook.
>  > > >
>  > > > The set of folders could not be opened. You do not have 
> permission
to
>  > log
>  > > > on.
>  > > >
>  > > > NT 4 domain
>  > > > Windows 2000 sp 3
>  > > > Exchange 5.5 sp4
>  > > >
>  > > > all servers have operated fine for over 2 years no probs  > > > 
> this started this morning  > > > have tried:
>  > > >
>  > > > new profile
>  > > > rebooting all dc's
>  > > > turning off nt auth in mail profile
>  > > > mapping the ipc$ to a mail server (says it doesnt exist but it is
> there)
>  > > > I dont see a named pipes binding as some articles suggest
>  > > >
>  > > > any other ideas????
>  > > >
>  > > > Thanks!
>  > > >
>  > > > Chris
>  > > >
>  > > >
>  > > > _________________________________________________________________
>  > > > List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
>  > > > Web Interface:
>  > >
>  >
>
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang
>  > =english
>  > > > To unsubscribe:         mailto:[EMAIL PROTECTED]
>  > > > Exchange List admin:    [EMAIL PROTECTED]
>  > > >
>  > >
>  > >
>  > > _________________________________________________________________
>  > > List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
>  > > Web Interface:
>  >
>
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang
>  > =english
>  > > To unsubscribe:         mailto:[EMAIL PROTECTED]
>  > > Exchange List admin:    [EMAIL PROTECTED]
>  >
>  >
>  > _________________________________________________________________
>  > List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
>  > Web Interface:
>  >
>
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang
>  > =english
>  > To unsubscribe:         mailto:[EMAIL PROTECTED]
>  > Exchange List admin:    [EMAIL PROTECTED]
>  >
>  > _________________________________________________________________
>  > List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
>  > Web Interface:
>  >
>
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang
=english
>  > To unsubscribe:         mailto:[EMAIL PROTECTED]
>  > Exchange List admin:    [EMAIL PROTECTED]
>  >
>  >
>  > _________________________________________________________________
>  > List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
>  > Web Interface:
>
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang
=english
>  > To unsubscribe:         mailto:[EMAIL PROTECTED]
>  > Exchange List admin:    [EMAIL PROTECTED]
>  >
>
>
> _________________________________________________________________
> List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
> Web Interface:
>
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang
=english
> To unsubscribe:         mailto:[EMAIL PROTECTED]
> Exchange List admin:    [EMAIL PROTECTED]
>
> _________________________________________________________________
> Send and receive larger attachments with Hotmail Extra Storage. 
> http://join.msn.com/?PAGE=features/es
>
>
> _________________________________________________________________
> List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
> Web Interface:
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang
=english
> To unsubscribe:         mailto:[EMAIL PROTECTED]
> Exchange List admin:    [EMAIL PROTECTED]


_________________________________________________________________
List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
Web Interface:
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang
=english
To unsubscribe:         mailto:[EMAIL PROTECTED]
Exchange List admin:    [EMAIL PROTECTED]

_________________________________________________________________
List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
Web Interface: 
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang=english
To unsubscribe:         mailto:[EMAIL PROTECTED]
Exchange List admin:    [EMAIL PROTECTED]

Reply via email to