Exchange 2007 permissions problem
We recently disabled a trust that was used to migrate users from a 2003 environment to a 2007. The users' are occasionally being prompted to enter their credentails, which doesn't work. Also, users with cached mode on are often disconnected from their mailbox completely. When I look at the Full permissions for a user in the Exchange I see the following: Blackberry Service Account Migration Service Account NT Authority\Self User account - The icon for this is the typical man, but has a question mark Any ideas?
June 23rd, 2010 6:34pm

Hi, a trust is needed to move - copy users from one AD-Forest to another (or give them permissions in the other forest). What exactly did you within this trust and does your problem happen to new users too?Viele Gre Walter Steinsdorfer MVP Exchange Server http://msmvps.org/blogs/wstein
Free Windows Admin Tool Kit Click here and download it now
June 24th, 2010 2:26am

The question mark user account is probably the SID of the old account on the other side of the broken trust. But that shouldn't cause the problems you're seeing. Have you tried deleting and recreating the Outlook profile? Have you completely removed the Exchange 2003 servers from your environment and did you do it the correct way? -- Ed Crowley MVP "There are seldom good technological solutions to behavioral problems." . "BluAaron" wrote in message news:6fa15875-ffda-4908-8534-829089249b3d... We recently disabled a trust that was used to migrate users from a 2003 environment to a 2007. The users' are occasionally being prompted to enter their credentails, which doesn't work. Also, users with cached mode on are often disconnected from their mailbox completely. When I look at the Full permissions for a user in the Exchange I see the following: Blackberry Service Account Migration Service Account NT Authority\Self User account - The icon for this is the typical man, but has a question mark Any ideas? Ed Crowley MVP "There are seldom good technological solutions to behavioral problems."
June 24th, 2010 2:32am

Recreating the profile works for some users. but not others. I've attempted to remove the 'question mark accounts' and just leave the NT Authority/Self permission, but that doesn't work either. I've then added them back explicitly, but then after successfully adding them they have the question mark again.
Free Windows Admin Tool Kit Click here and download it now
June 25th, 2010 1:01am

Are these "question mark" accounts in a different forest? -- Ed Crowley MVP "There are seldom good technological solutions to behavioral problems." . "BluAaron" wrote in message news:39d7a97f-b226-434c-9eb5-7cf60e52696e... Recreating the profile works for some users. but not others. I've attempted to remove the 'question mark accounts' and just leave the NT Authority/Self permission, but that doesn't work either. I've then added them back explicitly, but then after successfully adding them they have the question mark again. Ed Crowley MVP "There are seldom good technological solutions to behavioral problems."
June 25th, 2010 5:22pm

hi BluAaron, Per your description, I want to verify something regarding to your issue. Did you do the migration from exchange 2003 to exchange 2007? Did you do the migration through forest to forest? If so, did you follow below DOC: http://technet.microsoft.com/en-us/library/aa996926(EXCHG.80).aspx Note: 1. PLease confirm you have migrated all the user accounts and email box to the new forest. 2. What version clients do your users using? If some of them use outlook2003 or earlier version, you must let them log on once before you remove the trust relation between the two forest. Because the client would use the legacy forest to get the new exchange server. 3. And then, did you remove the legacy exchange 2003 organization, did all the client join into the new domain forest? It is better to leave the legacy exchange 2003 forest and the trust relation for more than one month during you do the migration. Regards! gavin
Free Windows Admin Tool Kit Click here and download it now
June 28th, 2010 10:10am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics