PDA

View Full Version : Techie question (yawn)


Will Taylor
10-06-2003, 14:49
Got a client with two NT4 domains, A and B - user on A wants to access exchange mailbox on B. I've set a domain trust between A and B, and given the user on A permission to the mailbox on B.

The problem is that the user gets a "you do not have permission to log on" when he tries to access the exchange mailbox.

Any ideas chaps?

Cheers,

Will
Dave_S
10-06-2003, 14:49
Is the trust both ways?? have you only set it in one direction?

Dave
Will Taylor
10-06-2003, 14:51
Only one way - B trusts A, and in theory thats all you need isn't it?
Dave_S
10-06-2003, 14:53
As long as you've got the right one trusting the right one yes :D

Does the user have access to the mailbox?? You'll still need to apply the permissions on it directly. Or make the user the owner etc.

Dave
Will Taylor
10-06-2003, 15:03
I do... but I'm dealing with a new problem now... when I go into the mailbox properties it says "no mapping between account names and security IDs was done" and then when the mail box properties come up, the primary user shows as "unknown user". Does this no matter how much I reset it to A\user :cry:

fookin hate NT4...
Scott_Drayton
10-06-2003, 15:05
Dave is right, user will still need to have perms to the mailbox....

Doesnt necessarily need to be the owner, but this would also work as making him/her the owner gives active NT rights to the mailbox its self through the trust that is setup.

I think, of course.....;)
Dave_S
10-06-2003, 15:05
Hmm it sounds like it still doesn't have permission. When did you set it up?? It'll take about 15 minutes to replicate remember :)

Dave
Dave_S
10-06-2003, 15:07
Originally posted by Will Taylor
"no mapping between account names and security IDs was done"

This means that the Exchange server was unable to contact the PDC

Dave
Scott_Drayton
10-06-2003, 15:07
Will thinks - :|
Scott_Drayton
10-06-2003, 15:08
Surely implying that the trust has to be both ways - or they are on different LANs - :D :D
Dave_S
10-06-2003, 15:12
:p there's always one :rolleyes:

Dave
Scott_Drayton
10-06-2003, 15:14
Originally posted by Dave_S
:p there's always one :rolleyes:

Dave

Not sure whether that was targetted at me or Will??

Me - sarcasm, making someone go :rolleyes:
Will - hes actually done that.

:thumbs: :D
Dave_S
10-06-2003, 15:16
Targetted at sarcasm :D

Dave
Will Taylor
10-06-2003, 15:17
hmm... Just spoken to the client - its a two way trust, and hes set up a load of other users to work like this, it's just htis one that's playing up :(

Scott, are you just throwing in random words to make a techie sentence? :p ;) :D

edit to say, sorry scott, youve said quite a bit since I last saw the thread - what I saw before didn't quite make sense!
Dave_S
10-06-2003, 15:28
The account isn't disabled is it? from all the logon attempts?

That error means that the Exchange server was unable to get the SID for the user from the Primary Domain Controller.

Dave
Scott_Drayton
10-06-2003, 15:29
Which bits dont make sense??

Tell me??

You'll have to bear with me, busy writing a VB ap at the mo, hard to go back to my Domain/NT trust knowledge!!!
Will Taylor
10-06-2003, 15:32
Originally posted by scott_drayts200
Surely implying that the trust has to be both ways - or they are on different LANs - :D :D

That combined with me thinking Chris told me you weren't in the IT dept ( which clearly you are) resulted in me taking the piss ;)

Just had a word with the client, and the account is not locked out.
Scott_Drayton
10-06-2003, 15:35
Well, you admitted that the trust had to be both ways, so i was right there and the LAN thing, i WAS taking the piss. :D

What do you mean "clearly are in the IT dept?"

How? What? Eh?
Will Taylor
10-06-2003, 15:38
Last time I checked, the guys who stacked the jeans at Debenhams didn't write VB apps in between serving customers :p
Scott_Drayton
10-06-2003, 15:41
And have access to pretty much any PC/server/vLAN/account in the business.

Yes, i do work in IT.
Will Taylor
10-06-2003, 15:47
Thought so :)

Anyway thanks for the help chaps, but don't worry about it... I think it's all configged correctly, just some annoying bug that I'll have to spend months trawling through technet for :rolleyes:


Cheers,

Will
Dave_S
10-06-2003, 15:48
Sorry I couldnt help mate :(

http://support.microsoft.com always good :thumbs:

Dave
Martin T
10-06-2003, 18:38
About half of the "annoying bugs" that I have discovered in Windows 2k server have turned out to be "features"
You'll probably be kicking yourself when you find out.
Will Taylor
11-06-2003, 09:11
lol, yeah - but this is NT4, back from when men were men and bugs were bugs ;)