Hello everyone, Ihave this problem when creating a new user mailbox. This is the error message the new mailbox wizard gives me: Active directory response: 0000052D: svcerr DSID-031A11E5, problem 5003 (WILL NOT PERFORM), data 0 All i can read/find isabout the password not being long enough. I tried it with a password of over 25 characters and i still get the same error. i tried everything to get a very strong password i would never remember but even then it gives me this error. So i strongly doubt it's about the password, but can't find anything else about it on the web. If anybody can help me with this problem and how to fix it. I would really appreciate it! Thanks in advance

Hi, First please try to disable your Password policy. 1. You can use secpol to check your local policy. 2. Run RSOP.MSC to check GPOs that you have applied. Then you can create a new GPO and give the priority high than default domain policy. 1. Asked customer to disable the Password complexity on the domain 2. Please run dsa.msc from a command prompt. 3. Right click on domain name and select Properties. 4. Navigate to Group Policy tab. 5. Click on New and specify the name for this GPO. 6. Highlight the new created GPO and click Up. 7. Please click Edit for the new GPO. 8. Expand to Computer configuration-Security Settings-Account Policies-Password Policy. 9. Edit the policy. After that please run gpupdate /force. If above steps do not help, then we may need to gather more information. 1. Where did you run New email wizard via EMC installed on Exchange Server or EMC on Vista? 2. How many DCs in your environment? 3. AD is Windows 2003 or Windows 2008? Besides, please try to find the error event from your Exchange Server or DC for further troubleshooting. Some related KB for your reference. XADM: Strong Password Policy Prevents the ADC from Creating Enabled Users http://support.microsoft.com/kb/297191/en-us PRB: Error "Failed to Insert User" When You Add Users to Supplier AD Solution Site http://support.microsoft.com/kb/290124/en-us Hope it helps. Xiu

Hello Xiu, I just noticed thatI can not change anything in the rsop.msc. All options are greyed out. Using dsa.msc, I do not have a group policy's tab in the properties of my domain name Can it be Microsoft Exchange Security Groups? I did not dare to touch anything here before i brake everything. 1. Where did you run New email wizard via EMC installed on Exchange Server or EMC on Vista? Via the EMC Installed on the Exchange Server 2. How many DCs in your environment? I have 2 DC's in my environment (one Fileserver and oneExchange Server and IIS webserver.) 3. AD is Windows 2003 or Windows 2008? AD is windows 2008. I can't see any error logs of exchange and there are a few warning for DC but nothing about this problem. Thx for your help Xiu!

Hi, If you find password settings from RSOP,(RSOP: Resultant Set of Policy, it is a query engine that polls existing policies and planned policies, and then reports the results of those queries.) then we may check it from GPO. Since it is a Windows Server 2008 Domain Controller, then we need to open Group Policy Management from Administrative Tools From that you may try to create a new GPO then link to domain Right-click domain name and then click Create and Link a GPO here. This option is equivalent to clicking New on the Group Policy tab that was available in the Active Directory Users and Computers snap-in, prior to installing GPMC. In the New GPO dialog box, type a name for the new GPO, and then click OK. After that please change the link order to 1. Creating and Working with GPOs http://technet.microsoft.com/en-us/library/cc782678.aspx Managing inheritance of Group Policy http://technet.microsoft.com/en-us/library/cc757050.aspx#BKMK_change Hope it helps. Xiu

We did it! I had to change the remember passwords option to remember 0 passwords. I tried again after that and now i could create a new mailbox! Thanks again Xiu!

Glad to here it works now.