Microsoft KB Archive/836756

= You receive an LDAP error message in Outlook 2001 for Mac when you try to access an Exchange 2000 Server Active Directory =

Article ID: 836756

Article Last Modified on 3/14/2004

-

APPLIES TO


 * Microsoft Outlook 2001 for Mac
 * Microsoft Outlook Express 5.06 for Macintosh
 * Microsoft Entourage 2001 for Mac Special Edition

-



SYMPTOMS
When you use Microsoft Outlook 2001 for Mac to search for objects in an Active Directory directory service, you may receive a Lightweight Directory Access Protocol (LDAP) error message that is similar to the following:

LDAP server error.

The directory service denied access. Verify the authentication settings for this directory service.

You also experience this symptom if you use Microsoft Outlook Express 5.0x for Macintosh or Microsoft Entourage 2001 for Mac to search for objects in the Active Directory.



CAUSE
This problem occurs because the LDAP clients that are listed in the &quot;Applies To&quot; section of this article do not support Integrated Windows authentication (formerly named NTLM or Windows NT Challenge/Response authentication). This problem may occur after you upgrade from Microsoft Exchange Server 5.5 to Microsoft Exchange 2000 Server. In Exchange Server 5.5, clear text authentication is supported. In Exchange 2000 Server, you have to use Integrated Windows authentication if you want to access Active Directory using LDAP.



WORKAROUND
To work around this problem, create or modify a user account in the Active Directory service configuration that can be used to connect to the Microsoft Exchange 2000 Server. To create a new user on a Microsoft Windows 2000 Server domain controller that does not contain any data in the Last name box, do the following:  Start Active Directory Users and Computers. Expand the domain that you want. Right-click Users, point to New, and then click User. In the First name box, type the name that you want. In the Initials box, type the initials that you want. Leave the Last name box blank. In the Full name box, type the name that you want.</li> In the User logon name box, type the user logon name that you want, and then click Next.</li> Type the password that you want, confirm the password, and then click to select one of the following check boxes: <ol style="list-style-type: lower-alpha;"> Users must change password at next logon (recommended for most users)</li> User cannot change password</li> Password never expires</li> Account is disabled</li></ol> </li> Click Next, and then click Finish.</li> To create additional users, repeat steps 3 through 11 for each user account that you want to create.</li> Quit Active Directory Users and Computers console.</li></ol>

Keywords: kbprb KB836756

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.