Upgraded my Domain Controllers from 2003 to Windows Server 2008 R2. Running Exchange 2003 Enterprise on Windows Std. Server 2003 SP2 Issues: 1) OWA: When a user accesses OWA they are prompted for credentials as expected. When they click a link in a message they are again prompted for login credentials. It seems the second credential prompt is different depending on the OS and/or the Internet Explorer version. Also users are saying their spell checking has stopped working. This was all after the upgrade of the Domain controller. Other notes: I tested on a Windows 7 machine with IE8 at home and had no issue but then from my office Win XP system with IE 8 got the documeted issue. Another user indicated got the second authentication screen and it indicated domain local account with no ability to change to corporate domain. I checked permissions on Exchange Systems Manager/Exchange Virtual Server and on IIS on the Exchweb/Bin account and all security settings are identical. 2) When adding a new account on the new 2008 R2 domain controller does not give me option to add an Exchange E-mail account. I still had AD users/Computer plugin installed on my old Domain Controller computer and from there was able to perform an Exchange task and add an e-mail account. Note the old DC is dcpromo off the domain and is now a member server. It is a Windows Server 2003 SP2 member server. Question is can I add the Exchange 2003 ESM tool on the 2008 R2 domain controller (X64) to be able to perform add Exchange Mailbox when creating user accounts? Or is ESM 2003 not supported on the 2008 R2 domain controller? 3) Non Exchange question but maybe someone knows answer. I noticed when I went into a user account on the 08 R2 DC and went under account tab that it indicated UNLOCK ACCOUNT. When had 2003 DC's it would show account is locked out and it would be greyed out if not locked out and checked if account was locked out. Now on 08 R2 Unlock account is not greyed out so really can't tell if locked or unlocked unless I try to login. Is this normal?

Found answer to number 3 it will change text descriptor when account is locked out.

Hi, How many Domain Controllers in the network? Please verify if the issue occur to internal users or external users. Besides, I'd like to know the following information about Exchange. 1. Do you have front-end/back-end exchange server? 2. Have you publish OWA to the internet via ISA? 3. What is the authentication on /Exchange virtural directory from IIS and ESM? 4. Please try to use DCdiag from your Exchange Server to see if any error would be logged there. 5. Please try to download ExBPA from http://www.microsoft.com/downloads/details.aspx?FamilyID=DBAB201F-4BEE-4943-AC22-E2DDBD258DF3&displaylang=en and then have a health scan for the Exchange Server. Regards, Xiu

Issue #1 resolved via tech article http://support.microsoft.com/default.aspx/kb/883380?p=1 Issue #2 still outstanding and looking for reply 2) When adding a new account on the new 2008 R2 domain controller does not give me option to add an Exchange E-mail account. I still had AD users/Computer plugin installed on my old Domain Controller computer and from there was able to perform an Exchange task and add an e-mail account. Note the old DC is dcpromo off the domain and is now a member server. It is a Windows Server 2003 SP2 member server. Question is can I add the Exchange 2003 ESM tool on the 2008 R2 domain controller (X64) to be able to perform add Exchange Mailbox when creating user accounts? Or is ESM 2003 not supported on the 2008 R2 domain controller? Thanks,

To get the "Exchange" tabs in the aduc, you have to install the exchange management tools on the server where you want them to appear. they don't just magically appear because you have exchange in the environment. tbh i'm not sure the e2k3 tools will install on win2k8r2, but you can always give it a try. fyi e2k3 is the last version of exchange where it's even possible to get these tabs in aduc. in a native e2k7 or e2010 environment there are no such tabs.

Kris - I'm well aware need to install Exchange Mgt. Tools on the server for E2K3. What I'm asking is it an officially supported install or has someone installed it on the 2K8R2 AD server successfully and had resulting full functionality? What I was not aware of as I have not migrated to E2K7 or E2010 was that there was no such tabs. Does this also mean when migrated to E2010 when you add a new user it does not, in the wizard, prompt you to add an Exchange Mailbox?

" Does this also mean when migrated to E2010 when you add a new user it does not, in the wizard, prompt you to add an Exchange Mailbox?" Correct. You can go through the Exchange gui with 2007/2010, and it will actually prompt you to create the user acct when creating the mailbox. you're basically doing things in reverse order than you did with e2k3. the other option is script acct/mbox creation with ps. as for the e2k3 tools, i'm honestly not sure if they will load/work right. give it try and let us know :D. i would try it but am not near my lab atm.

Hi, Please look at tha article below: Exchange Server Supportability Matrix http://technet.microsoft.com/en-us/library/ee338574(EXCHG.80).aspx There it says that Windows server 2008 R2 is not the support OS that we can install Exchange 2003 management tools. Regards, Xiu

Zhang, its interesting that you say "There it says that Windows server 2008 R2 is not the support OS that we can install Exchange 2003 management tools." as I wasn't able to find this exact statement. Under AD supported Windows Server 2008 R2 AD supports Exchange 2003 SP 2. Never-the-less, I'm hearing this from all my research and will consider it the correct statement. Thanks for all the help.