OWA and Active Directory 1

[Selspiero]

Morning all

I have a very strange problem for you guys to have a think about... I have an AD domain, with 5 OUs, different users in different OUs etc. If i create a user in OU1 the have OWA access - and all is well. If i create a user in a different OU, i cannot access OWA - it just doesnt accept the username and password. i have checked the event log on the server - and it is a failure audit - giving the reason 'bad user account'

i have checked that there is no GPO attached to any of the OUs, but i am new to the domain structure and OWA - so anything stupid i have missed please let me know!!

Cheers

E

 

[Selspiero]

Further info

I have also created a user in the users OU and it works fine. when use one of the user accounts that doesnt work - if you put the username and password in, it then returns with the prefix server.domain.com/theusername

Not sure if this will help or confuse

Cheers

E

 

[ITPangaeaArchitect]

it returns looking for domain.com/username because it knows its on a domain and expects to have authorized credentials....obviously therein lay the failure...

if you move one of the problem user accounts out of its current OU, are you able to access OWA afterwards?

do/did you use template accounts to build the problem users at all?



-Brandon Wilson
MCSE00/03, MCSA:Messaging, MCSA03, A+
almost got a paragraph there

 

[Selspiero]

Hi mate

it is very strange, if i move a working user to the affected OU - it fails. BUT - what i have just found is that if i attempt it 3 times, i get the unouthorised message. I can then hit F5 - and it lets me in!!??

I have moved the user BACK to a know working OU - and it does still fail.

I have tried copying a user, and creating a user from scratch - both have the same problem

Thanks for your help

E

 

[ITPangaeaArchitect]

interesting...are your websites at default for properties?

-Brandon Wilson
MCSE00/03, MCSA:Messaging, MCSA03, A+
almost got a paragraph there

 

[Selspiero]

yup - i thought it might be something to do with the annonamus access, but we havent changed anything!!

Cheers

E

 

[xmsre]

Check your recipient policies. Are you stamping different smtp addresses for the different OUs?

 

[Selspiero]

yes we are - each OU has a different SMTP address....

 

[xmsre]

Well, that's the problem.

http://support.microsoft.com/default.aspx?scid=kb;en-us;293386

 

[Selspiero]

mate - thank you very much for your help!!