Microsoft KB Archive/322183

= XCCC: Outlook Web Access Generates a 401 Error Message If You Use an Account from Another Forest =

PSS ID Number: 322183

Article Last Modified on 10/21/2003

-

The information in this article applies to:


 * Microsoft Exchange 2000 Server SP3

-



This article was previously published under Q322183





SYMPTOMS
When a mailbox owner tries to log on to the Exchange 2000 version of Microsoft Outlook Web Access (OWA), the mailbox owner may receive the following error message:

Http://1.1 401 Unauthorized



CAUSE
This problem may occur if you have a topology that contains multiple forests, and the Exchange 2000 mailbox is in one forest and the user's account is in another forest.

For example, Forest A contains the Exchange 2000 mailbox server that the user's mailbox is located on, and Forest B contains the user's Active Directory account. There is a disabled Active Directory account in Forest A that is associated with the mailbox.

If the msExchMasterAccountSid property for the disabled account is set to SELF, that user receives the error message in the &quot;Symptoms&quot; section of this article when that user tries to use OWA to log on to the mailbox.



WORKAROUND
To work around this problem:
 * 1) Start Active Directory Users and Computers, and then locate the forest that contains the Exchange mailbox and disabled account (in the example in the &quot;Cause&quot; section of this article, Forest A).
 * 2) Click View, and then click Advanced Features.
 * 3) Double-click the disabled user's account.
 * 4) Click the Exchange Advanced tab.
 * 5) Click Mailbox Rights.
 * 6) Look through the names and make sure that the only account with the Associated external account permission selected is the user's matching account in the other forest (in the example in the &quot;Cause&quot; section of this article, Forest B).

If that account is not listed, add it to the list and give it Associated external account, Read, and Full mailbox access permissions.



STATUS
Microsoft has confirmed that this is a problem in Microsoft Exchange 2000 Server Service Pack 3 (SP3).

Additional query words: exch2kp2w AD

Keywords: kbbug kberrmsg kbnofix KB322183

Technology: kbExchange2000Search kbExchange2000ServSearch kbExchange2000ServSP3 kbExchangeSearch

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© 2004 Microsoft Corporation. All rights reserved.