Exchange - admin can't access some users
-
I have the same set of access to two different users (at least what is shown in Manage Full Access Permission dialog box), yet I can attach to one of their accounts using Outlook, but not the other. The second one constantly prompts me for authentication credentials.
Suggestions?
I'm guessing there's a script command that will show me the permissions differences between these two accounts, but I don't know what it is - I will try my google-fu now...
-
Let's check your permissions first. What Exchange groups are you in?
http://technet.microsoft.com/en-us/library/dd638132(v=exchg.150).aspxAfter checking your permissions, lets look at the permissions of the users. The best way to compare them is in powershell
http://technet.microsoft.com/en-us/library/aa998218(v=exchg.150).aspx
(See Example 2) -
Did that help?
-
Not yet.
When I run Get-MailboxPermission -Identity mailbox@domain -User "me"
I get
Which seems to indicate that I should have full access to that users mailbox, but I don't.
-
@Dashrender said:
Not yet.
When I run Get-MailboxPermission -Identity mailbox@domain -User "me"
I get
Which seems to indicate that I should have full access to that users mailbox, but I don't.
Could it be a filtering issue on the AV or firewall side? Maybe?
-
Also, is the user's account locked possibly?
-
@Dashrender said:
Not yet.
When I run Get-MailboxPermission -Identity mailbox@domain -User "me"
I get
Which seems to indicate that I should have full access to that users mailbox, but I don't.
Strange... Have you tried removing permission and re-adding permission?
-
Any luck?
-
I actually have another idea. It sounds really stupid, but I have seen it 4-5 times in Exchange.
Reset the user's password. I know it sounds crazy, but recently (and in the past) I had a user that kept getting prompted for credentials from Exchange. He could log in to Windows fine, but could not access mail. After spending a few hours troubleshooting, I finally decided to reset his password. He was able to access his mail after this. He set a new password and was not able to access mail again, but could continue to log in to Windows. I asked him to change his password completely to something totally different. He was then able to access mail again.
-
How could this be AV or firewall related? From my desktop, my Outlook, I have around 30 profiles setup in the mail control panel applet. This allows me to switch to any of those users when I launch Outlook.
I've granted myself the same permissions on all of those accounts, this is the only one I can't log into so far using my non domain admin account (I'm logged into my local workstation as a non admin user).
-
@IRJ said:
Strange... Have you tried removing permission and re-adding permission?
I thought I had, but I just went ahead and did it again - and well now it works as expected!\
Thanks IRJ
-
@Dashrender said:
How could this be AV or firewall related? From my desktop, my Outlook, I have around 30 profiles setup in the mail control panel applet. This allows me to switch to any of those users when I launch Outlook.
Uh - silly question but why? What would be the reason to switch to one of 30 users? And why not just add them to your account?
I don't see the rational.
-
@g.jacobse I presume he doesn't want their mail in his inbox. I used to have multiple email profiles for a client who had PC's for daytime and nighttime users.
-
@technobabble said:
@g.jacobse I presume he doesn't want their mail in his inbox. I used to have multiple email profiles for a client who had PC's for daytime and nighttime users.
I see that as a personal preference thing. I have all my email accounts in one profile. The inboxes all stay separate anyway in Outlook 2013.
Also, I want to have immediately availability of the mail in those accounts. I cannot have that if they are in different profiles.
But if I wanted to just have things getting mail that was not something i needed to see all the time a separate profile is not a bad idea in and of itself.
-
@JaredBusch LOL...I get ya, but I thought @Dashrender has access to other office users email accounts on his Outlook.
-
I could do what JaredBusch is doing, but unlike him I rarely need to get into those mailboxes so having them all setup inside my profile cluttering things up is undesirable.
I suppose I could simplify my life by creating a secondary profile and adding them all to that one, that's an idea I hadn't considered - but at the same time, when I'm working with users, having them see that I can see inside eveyone's email is kinda creepy, even though it's in our company policy that we can AND DO audit their email use from time to time.
-
As for all of those other accounts my account has access to being in a single profile - maybe it's an Outlook 2013 thing, but they are all there now by default.
I logged into a new computer, setup Outlook 2013 - bam all of those aforementioned accounts show up in the list down the left side.
Perhaps I didn't see them on my desktop because I always have my folder list open and there's enough of them that they push the other users accounts off the bottom...
Thought I would pass that along.
