Last month I migrated our email from Exchange 2003 to Exchange 2007. I have about 1300 users. I have the CAS, HT and MB on different servers. All of my servers are patched current. My domain is a Windows 2008 domain. Some of the users can get in to their email using OWA just fine, others can not. Users in the same OU, with the same group memebrship can have problems. Internally, Outlook works fine for all users. I found these instructions but they do not seem to helpOn mail server in EM Shell entered [PS] C:\>Set-Mailboxjuser -ApplyMandatoryProperties In the managent shell I get this message after running the above:WARNING: The command completed successfully but no settings of'mycompany.com/Corporate/East/Unit A/JoeUser' have been modified.In ADS, 1. Open the Active Directory Users and Computers snapin. 2. On the View menu, click Advanced Features. 3. Open the properties of a user who cannot log on to Outlook Web Access. 4. Click the Security tab, and then click Advanced. 5. Select the Allow inheritable permissions check box if it has not already been selected. 6. Repeat steps 3 through 5 for each organizational unit between the user object and the toplevel container. 7. Allow time for replication to occur.I also created analias (cname) in DNSto my Client Access Server (mail1.mycompany.com) called autodiscover.mycompany.comHere are two different error messages I am gettingERROR NUMBER 1 Request Url: https://mail.mycompany.com:443/owa/forms/premium/MessageView.aspx?ae=Folder&t=IPF.Note&a= User host address: 10.70.0.19 User: Denise User EX Address: /o=BIGCO/ou=First Administrative Group/cn=Recipients/cn=duser SMTP Address: duser@mycompany.com OWA version: 8.1.240.5 Mailbox server: mail3.mycompany.com Exception Exception type: Microsoft.Mapi.MapiExceptionCallFailed Exception message: MapiExceptionCallFailed: Unable to query table rows. (hr=0x80004005, ec=1206) Diagnostic context: Lid: 18969 EcDoRpcExt2 called [length=49] Lid: 27161 EcDoRpcExt2 returned [ec=0x0][length=172][latency=0] Lid: 23226 --- ROP Parse Start --- Lid: 27962 ROP: ropQueryRows [21] Lid: 17082 ROP Error: 0x4B6 Lid: 17153 Lid: 21921 StoreEc: 0x4B6 Lid: 27962 ROP: ropExtendedError [250] Lid: 1494 ---- Remote Context Beg ---- Lid: 26426 ROP: ropQueryRows [21] Lid: 25777 StoreEc: 0x4B6 Lid: 8576 StoreEc: 0x4B6 Lid: 10624 StoreEc: 0x4B6 Lid: 8576 StoreEc: 0x4B6 Lid: 8576 StoreEc: 0x4B6 Lid: 8576 StoreEc: 0x4B6 Lid: 12672 StoreEc: 0x4B6 Lid: 5584 StoreEc: 0x4B6 Lid: 19782 Lid: 12965 StoreEc: 0x4B6 Lid: 26348 Lid: 22252 StoreEc: 0x4B6 Lid: 1750 ---- Remote Context End ---- Lid: 26849 Lid: 21817 ROP Failure: 0x4B6 Lid: 28414 Lid: 32510 StoreEc: 0x4B6 Call stack Microsoft.Mapi.MapiExceptionHelper.ThrowIfError(String message, Int32 hresult, Object objLastErrorInfo) Microsoft.Mapi.MapiTable.QueryRows(Int32 crows, QueryRowsFlags flags) Microsoft.Mapi.MapiFolder.GetRules(PropTag[] extraProps) Microsoft.Exchange.InfoWorker.Common.OOF.LegacyUserOofSettings.GetLegacyOofRule(MailboxSession itemStore, MapiStore mapiStore) Microsoft.Exchange.InfoWorker.Common.OOF.LegacyUserOofSettings.GetLegacyUserOofSettings(MailboxSession itemStore) Microsoft.Exchange.InfoWorker.Common.OOF.UserOofSettingsStorage.CreateDefaultUserOofSettings(MailboxSession itemStore) Microsoft.Exchange.InfoWorker.Common.OOF.UserOofSettingsStorage.LoadUserOofSettings(MailboxSession itemStore) Microsoft.Exchange.Clients.Owa.Premium.MessageView.get_UserOofSettings() Microsoft.Exchange.Clients.Owa.Premium.MessageView.ShouldShowOofDialog() ASP.forms_premium_messageview_aspx.__Render__control1(HtmlTextWriter __w, Control parameterContainer) System.Web.UI.Control.RenderChildrenInternal(HtmlTextWriter writer, ICollection children) System.Web.UI.Page.Render(HtmlTextWriter writer) System.Web.UI.Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint) ERROR NUMBER 2RequestUrl: https://mail.mycompany.com:443/owa/forms/premium/MessageView.aspx?ae=Folder&t=IPF.Note&id=LgAAAACESz%2be%2f5eeRKzmVD67USYyAQAZ8ovhuH5WSYjqZZXrH5l9AAALiBmhAAABUser host address: 10.180.3.123User: Joe UserEX Address: /o=BIGCO/ou=First Administrative Group/cn=Recipients/cn=juserSMTP Address: juser@mycompany.comOWA version: 8.1.240.5Mailbox server: mail3.mycompany.com ExceptionException type: Microsoft.Mapi.MapiExceptionCallFailedException message: MapiExceptionCallFailed: Unable to query table rows. (hr=0x80004005, ec=1206) Diagnostic context: Lid: 18969 EcDoRpcExt2 called [length=95] Lid: 27161 EcDoRpcExt2 returned [ec=0x0][length=179][latency=0] Lid: 23226 --- ROP Parse Start --- Lid: 27962 ROP: ropSetColumns [18] Lid: 27962 ROP: ropQueryRows [21] Lid: 17082 ROP Error: 0x4B6 Lid: 17153 Lid: 21921 StoreEc: 0x4B6 Lid: 27962 ROP: ropExtendedError [250] Lid: 1494 ---- Remote Context Beg ---- Lid: 26426 ROP: ropQueryRows [21] Lid: 25777 StoreEc: 0x4B6 Lid: 8576 StoreEc: 0x4B6 Lid: 8576 StoreEc: 0x4B6 Lid: 10624 StoreEc: 0x4B6 Lid: 8576 StoreEc: 0x4B6 Lid: 8576 StoreEc: 0x4B6 Lid: 12672 StoreEc: 0x4B6 Lid: 5584 StoreEc: 0x4B6 Lid: 19782 Lid: 12965 StoreEc: 0x4B6 Lid: 26348 Lid: 22252 StoreEc: 0x4B6 Lid: 1750 ---- Remote Context End ---- Lid: 26849 Lid: 21817 ROP Failure: 0x4B6 Lid: 28414 Lid: 32510 StoreEc: 0x4B6 Call stack Microsoft.Mapi.MapiExceptionHelper.ThrowIfError(String message, Int32 hresult, Object objLastErrorInfo) Microsoft.Mapi.MapiTable.QueryRows(Int32 crows, QueryRowsFlags flags) Microsoft.Mapi.MapiFolder.GetRules(PropTag[] extraProps) Microsoft.Exchange.InfoWorker.Common.OOF.LegacyUserOofSettings.GetLegacyOofRule(MailboxSession itemStore, MapiStore mapiStore) Microsoft.Exchange.InfoWorker.Common.OOF.LegacyUserOofSettings.GetLegacyUserOofSettings(MailboxSession itemStore) Microsoft.Exchange.InfoWorker.Common.OOF.UserOofSettingsStorage.CreateDefaultUserOofSettings(MailboxSession itemStore) Microsoft.Exchange.InfoWorker.Common.OOF.UserOofSettingsStorage.LoadUserOofSettings(MailboxSession itemStore) Microsoft.Exchange.Clients.Owa.Premium.MessageView.get_UserOofSettings() Microsoft.Exchange.Clients.Owa.Premium.MessageView.ShouldShowScheduledOofInfobar() ASP.forms_premium_messageview_aspx.__Render__control1(HtmlTextWriter __w, Control parameterContainer) System.Web.UI.Control.RenderChildrenInternal(HtmlTextWriter writer, ICollection children) System.Web.UI.Page.Render(HtmlTextWriter writer) System.Web.UI.Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint)Any thoughts are appriciated.

Did you compared the permission between the user who able to and the user who is unable to do?Try comparing excdump of those users.c:\>exchdump /user:<dn of user> open the output file in IE or any test editor and compare the group memebership etc.To obtain the ExchDump tool, visit the following Microsoft Web site: http://www.microsoft.com/downloads/details.aspx?FamilyID=d88b807d-964e-4bf8-9344-754892e9f637&DisplayLang=enUsing the Exchange Dump Utility (ExchDump)http://www.msexchange.org/tutorials/Using-Exchange-Dump-Utility-ExchDump.htmlDid you checked if you create new user in AD and mailbox in E2k7 and compare the permission with the old migrated user to E2k7?How about if you disconnect the problematic migrated user and assign it to the newly create AD user and check?, I suspect there is some permission issue with those users or their mailbox or mailbox permission corruption here.Arun Kumar | MCSE - 2K3 + Messaging | ITIL-F V3

No difference in the rights using exchdump. One of the users affected is supposed to call me on Monday so that we can export thier data and then try and diconnect/reconnect their mailbox.