RE: Argh.... login denied.... - post mortem

2003-03-11 Thread Ali Wilkes (IT)
Didn't I say I was going to want to kick myself in the head?

One of my co-workers added a new server into the org.  This reset the
permissions at the org level and gave domain admins and enterprise
admins explicit deny for read as/send as at the org level.

Reasons this was so confusing: not all accounts were inaccessible.
exservice was still able to log into some accounts.  Additional account
created (member of domain admins, enterprise admins) was able to log
into accounts.  
Ok... try this again.  DA, EA, explicit deny at org level, inherited all
the way down.  But the testexch account, member of DA, EA, was ABLE to
log into user accounts?!?!.

My co-worker came back into the office and we removed the explicit deny
and things are back to normal.  Anyone who wants to speculate on why the
test account *worked*.. have fun.

-Original Message-
From: Ali Wilkes (IT) 
Posted At: Thursday, March 06, 2003 12:37 PM
Posted To: List - Exchange Server List
Conversation: Argh login denied
Subject: Argh login denied


I'm looking this up as we speak my service account (exchange god
account) is not able to open mailboxes (Unable to open your default
e-mail folders...). As far as I can tell, it just started recently (last
couple days) so I'm sure something changed... 

Exchange 2000 sp3.  I checked, and it has full control on the mailboxes.


It's a member of:
domain admins
domain users
enterprise admins
exchange domain servers
exchange services
schema admins

Argh... I'm looking but in the meantime... anyone know what simple
little thing I'm missing?

TIA

_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Archives:   http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]

_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Archives:   http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]


RE: Argh.... login denied....

2003-03-06 Thread Tom Meunier
http://support.microsoft.com/?kbid=262054

-Original Message-
From: Ali Wilkes (IT) [mailto:[EMAIL PROTECTED]
Posted At: Thursday, March 06, 2003 11:37 AM
Posted To: MSExchange Mailing List
Conversation: Argh login denied
Subject: Argh login denied


I'm looking this up as we speak my service account (exchange god
account) is not able to open mailboxes (Unable to open your default
e-mail folders...). As far as I can tell, it just started recently (last
couple days) so I'm sure something changed... 

Exchange 2000 sp3.  I checked, and it has full control on the mailboxes.


It's a member of:
domain admins
domain users
enterprise admins
exchange domain servers
exchange services
schema admins

Argh... I'm looking but in the meantime... anyone know what simple
little thing I'm missing?

TIA

_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Archives:   http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]

_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Archives:   http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]


RE: Argh.... login denied....

2003-03-06 Thread Ali Wilkes (IT)
ok yeah in the techinal sense there's no service account.  But we made
one.  And I believe we used option 3.

If I look at the advanced permissions for a mailbox, exservice (it's our
creative account name...), Exchange Domain Servers and Exchange Services
all have Full Mailbox access to the account (actually, they have
everything but assoc. external).  However, exservice is now (in the past
couple days...) getting unable to open...

Last week I was able to just fine...

I'm still looking to see if I can find what some #$%% changed while I
wasn't looking... then I'm going to kill them and make sure no one else
can change it. 

-Original Message-
From: Tom Meunier [mailto:[EMAIL PROTECTED] 
Posted At: Thursday, March 06, 2003 12:42 PM
Posted To: List - Exchange Server List
Conversation: Argh login denied
Subject: RE: Argh login denied


http://support.microsoft.com/?kbid=262054

-Original Message-
From: Ali Wilkes (IT) [mailto:[EMAIL PROTECTED]
Posted At: Thursday, March 06, 2003 11:37 AM
Posted To: MSExchange Mailing List
Conversation: Argh login denied
Subject: Argh login denied


I'm looking this up as we speak my service account (exchange god
account) is not able to open mailboxes (Unable to open your default
e-mail folders...). As far as I can tell, it just started recently (last
couple days) so I'm sure something changed... 

Exchange 2000 sp3.  I checked, and it has full control on the mailboxes.


It's a member of:
domain admins
domain users
enterprise admins
exchange domain servers
exchange services
schema admins

Argh... I'm looking but in the meantime... anyone know what simple
little thing I'm missing?

TIA

_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Archives:   http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]

_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Archives:   http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]

_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Archives:   http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]