accessing exchange mailbox from external account

Colin Bondi · Joined: 06 Aug 2007 Posts: 2

We are running an exchange 2000 server and we have users in a different
active directory forest that need to have mailboxes on this exchange server.
We have a two way trust relationship setup between the domain that contains
the exchange server and the domain that contains the users. That works fine.
In order to give the external users access we created user accounts and
mailboxes for them on the exchange server and then added their external
domain accounts to the mailboxes giving them full mailbox access
permissions. The problem is when one of the external users tries to login
they get an error message from Outlook saying it cannot open the folders. We
have tried giving the external accounts all the permissions under mailbox
access and we still get this error. Anyone have any ideas?
thanks
Colin Bondi

Archived from group: microsoft>public>exchange2000>clients

Lynn Fan · Joined: 05 Aug 2007 Posts: 4

Hi Colin,

Would you please let me know the steps to create the mailboxes for user
accounts which are located in another forest? Even we build trust between
forests, the same Exchange organization cannot across different forest.

Best regards,

Lynn Fan

Colin Bondi · Joined: 06 Aug 2007 Posts: 2

we using the method described in the following Q article but it does not
work:
http://support.microsoft.com/default.aspx?scid=kb;en-us;296573

""Lynn Fan"" wrote in message@cpmsftngxa06.phx.gbl...
> Hi Colin,
>
> Would you please let me know the steps to create the mailboxes for user
> accounts which are located in another forest? Even we build trust between
> forests, the same Exchange organization cannot across different forest.
>
> Best regards,
>
> Lynn Fan
>

Lynn Fan · Joined: 05 Aug 2007 Posts: 4

Hi Colin,

According to the KB article, we need to use another user account which is
located in the Exchange server domain in the Outlook profile. In addition,
please select "None" for the "Logon network security" setting in the
Exchange account and input the destination domain's user account credential
when logging on to the mailbox.

Thanks and regards,

Lynn Fan

Hao Fu [MSFT] · Joined: 05 Aug 2007 Posts: 2

Hi Colin,

Thanks for your post!

Regarding the issue, do you give the permission on the "Exchange
Advance"->"Mailbox Right"->"Full Mailbox access" in the ADCU? If not,
please let me know. Thanks!

Best regards,
Hao Fu
Microsoft Online Support Engineer

Get Secure! - www.microsoft.com/security

=====================================================
When responding to posts, please "Reply to Group" via
your newsreader so that others may learn and benefit
from your issue.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

Colin Bondi · Joined: 06 Aug 2007 Posts: 3

yes we did

"Hao Fu [MSFT]" wrote in message@cpmsftngxa06.phx.gbl...
> Hi Colin,
>
> Thanks for your post!
>
> Regarding the issue, do you give the permission on the "Exchange
> Advance"->"Mailbox Right"->"Full Mailbox access" in the ADCU? If not,
> please let me know. Thanks!
>
> Best regards,
> Hao Fu
> Microsoft Online Support Engineer
>
> Get Secure! - www.microsoft.com/security
>
> =====================================================
> When responding to posts, please "Reply to Group" via
> your newsreader so that others may learn and benefit
> from your issue.
> =====================================================
> This posting is provided "AS IS" with no warranties, and confers no
rights.
>
>

Hao Fu [MSFT] · Joined: 05 Aug 2007 Posts: 2

Hi Colin,

Can you create the Outlook profile and pass the name check? And you should
check whether you have give the read permission in ESM of the Orginization
object to the users in the trusted domain.

Regards,
Hao Fu

Jerry Wang(MSFT) · Joined: 05 Aug 2007 Posts: 1

Hi Colin,

Thank you for your post.

1 when you create a new profile for external user account, how about check
name?
2 What error message outlook reported?
3 Can you uses "net use \\server\IPC$ /USER:domain\user password" to
connect from external domain client to exchange server?
4 maybe you had better check security of your exchange install directory
(e.g. c:\program files\exchsrvr), give everyone full controll access

Best Regards,

Jerry Wang
Microsoft Online Support Engineer

Get Secure! - www.microsoft.com/security

Microsoft Security Announcement: Have you installed the patch for Microsoft
Security Bulletin MS03-026?? If not Microsoft strongly advises you to
review the information at the following link regarding Microsoft Security
Bulletin MS03-026
http://www.microsoft.com/security/security_bulletins/ms03-026.asp and/or to
visit Windows Update at http://windowsupdate.microsoft.com to install the
patch. Running the SCAN program from the Windows Update site will help to
insure you are current with all security patches, not just MS03-026.

=====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

Kenny He [MS] · Joined: 05 Aug 2007 Posts: 2

Hi Colin,

This is probably because the Outlook Exchange profile is configured to use
NT integrated authentication. Please change "Login network security" from
"Password Authentication" to "None" (Outlook 2002) on the "Advanced" tab of
"Microsoft Exchange Server" in Outlook profile. Then, when the client opens
Outlook, he will be prompted for the user name, domain name and password.
Please type in your internal domain's, not external domain's,
authentication information to log on.

Thanks.

Best Regards,

Kenny He
Microsoft Online Support Professional

Get Secure! - www.microsoft.com/security

==================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
==================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

Colin Bondi · Joined: 06 Aug 2007 Posts: 3

Ok we can do that but I was just under the impression that if we had a trust
relationship and I gave peoples external accounts full mailbox access
permissions to the internal mailbox, they would be able to authenticate with
their existing username and password.

"Kenny He [MS]" wrote in message%23c3lH4dDHA.612@cpmsftngxa06.phx.gbl...
> Hi Colin,
>
> This is probably because the Outlook Exchange profile is configured to use
> NT integrated authentication. Please change "Login network security" from
> "Password Authentication" to "None" (Outlook 2002) on the "Advanced" tab
of
> "Microsoft Exchange Server" in Outlook profile. Then, when the client
opens
> Outlook, he will be prompted for the user name, domain name and password.
> Please type in your internal domain's, not external domain's,
> authentication information to log on.
>
> Thanks.
>
> Best Regards,
>
> Kenny He
> Microsoft Online Support Professional
>
> Get Secure! - www.microsoft.com/security
>
> ==================================================
> When responding to posts, please "Reply to Group" via your newsreader so
> that others may learn and benefit from your issue.
> ==================================================
> This posting is provided "AS IS" with no warranties, and confers no
rights.
>
>

Kenny He [MS] · Joined: 05 Aug 2007 Posts: 2

Hi Colin,

I am afraid that we cannot open other users' mailboxes directly even if the
account have full access to their mailboxes. This behavior is by design.

Thank you and have a nice day.

Best Regards,

Kenny He
Microsoft Online Support Professional

Get Secure! - www.microsoft.com/security

==================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
==================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

Colin Bondi · Joined: 06 Aug 2007 Posts: 3

Ok but the only reason I believed that I could was that I saw a Kbase
article that seemed to indicate it was possible:
http://support.microsoft.com/default.aspx?scid=kb;en-us;296573

"Kenny He [MS]" wrote in message@cpmsftngxa06.phx.gbl...
> Hi Colin,
>
> I am afraid that we cannot open other users' mailboxes directly even if
the
> account have full access to their mailboxes. This behavior is by design.
>
> Thank you and have a nice day.
>
> Best Regards,
>
> Kenny He
> Microsoft Online Support Professional
>
> Get Secure! - www.microsoft.com/security
>
> ==================================================
> When responding to posts, please "Reply to Group" via your newsreader so
> that others may learn and benefit from your issue.
> ==================================================
> This posting is provided "AS IS" with no warranties, and confers no
rights.
>
>
>
>

Richard Chen[MSFT] · Joined: 05 Aug 2007 Posts: 3

Hi Colin,

If you use user B's account to logon on user A's computer, can you access
user B's computer?

In addition, if the permission is given to a user in the same domain, can
you access the other's mailbox?

Thanks & Regards,

Richard Chen,
Microsoft Online Support Professional

Get Secure! - www.microsoft.com/security

=====================================================
When responding to posts, please "Reply to Group" via
your newsreader so that others may learn and benefit
from your issue.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

cant send to external addresses from outlook ok i have 200 outlook clients on an exchange 2k standard system SP3 running on windows server 2k SP4 all works fine except one user cant send external mail from her outlook works ok if i use her profile on another pc same config she can recieve ok she can

How to add an additional mailbox when the mailbox is hidden Hello all, I am using Outlook 2003 English with Exchange Server 2003. I know that it is possible to add a mailbox to the additional mailboxes in outlook, even when the mailbox is hidden. However, can someone tell me the syntax of the mailboxname then, to

one 2 many : Pesonal folder AND mailbox Exchange server 2003 and outlook 2002 Mail comes into the mailbox created when I set up Outlook to use the ES, and then migrates to what I beleive was the original "outlook today -[personal folder]" This is all in a test bed prior to moving the ES to a c

Public Folder access from 5.5 Mailbox Hi I have a public folder on an Exchange 2003 server. I can access this public folder from an Outlook 2003 client if the user mailbox is also on an exchange 2003 server. But if the user mailbox resides on an Exchange 5.5 this user cannot access the publi

extra e-mail address created when mailbox is created One day I noticed that on the e-mail tab of all my user's property applet, there was another e-mail address with a domain not of our own (I know the domain, its one of our suppliers). I manually deleted this e-mail address from all affected users. I also