Question : Users can't access e-mail, but domain admins can

I am running a Win2K network with an Exchange 2003 mail server.  As of yesterday, users can't access their e-mail via Outlook 2000.  An error pops up as described below:

"Unable to open your default e-mail folders.  The attempt to log on to the Microsoft Exchange  Server computer has failed."

Even though this happens, anyone that has Domain Admin rights can access their e-mail just fine.  Plus, I have OWA set up and if a user tries to log in, a "Page cannot be displayed" error appears, but again, those with Domain Admin rights are just fine.

There are three odd errors in the event view (they appear multiple times):

*****1*****
Event Type:      Warning
Event Source:      W3SVC
Event Category:      None
Event ID:      100
Date:            2/24/2004
Time:            9:15:00 AM
User:            N/A
Computer:      PMAAMAIL
Description:
The server was unable to logon the Windows NT account 'IUSR_PMAAMAIL' due to the following error: Logon failure: the user has not been granted the requested logon type at this computer.  The data is the error code.
For additional information specific to this message please visit the Microsoft Online Support site located at: http://www.microsoft.com/contentredirect.asp.
Data:
0000: 69 05 00 00               i...    
*****1*****

*****2*****
Event Type:      Error
Event Source:      DCOM
Event Category:      None
Event ID:      10004
Date:            2/24/2004
Time:            9:21:09 AM
User:            N/A
Computer:      PMAAMAIL
Description:
DCOM got error "Overlapped I/O operation is in progress. " and was unable to logon .\IWAM_PMAAMAIL in order to run the server:
{3D14228D-FBE1-11D0-995D-00C04FD919C1}
*****2*****

*****3*****
Event Type:      Warning
Event Source:      W3SVC
Event Category:      None
Event ID:      36
Date:            2/24/2004
Time:            9:21:09 AM
User:            N/A
Computer:      PMAAMAIL
Description:
The server failed to load application '/LM/W3SVC/1/root/ExchWeb/bin'.  The error was 'The server process could not be started because the configured identity is incorrect.  Check the username and password.
'.
For additional information specific to this message please visit the Microsoft Online Support site located at: http://www.microsoft.com/contentredirect.asp.
*****3*****

I tried to run Synciwam.vbs to clear up the last error (#3).  But it doesn't work and have tried the MS article found here:
http://support.microsoft.com/default.aspx?scid=KB;EN-US;Q269367
but nothing happens, I still get the error when tring to run the script.

I also checked several other things, the one that most posts hit at is the domain policy settings.  I believe that everything is okay, but I am accepting any help here.

Thanks.

Answer : Users can't access e-mail, but domain admins can

On the PMAAMAIL go to administrative tools->local security policy

open local policies\user rights assignment->doubleclick allow on locally->add domain\IUSR_MAIL, domain\IUSR_Exchange and PMAAMAIL\IUSR if they are not already there.....

The basic authentication must be set directly on the Exchange folder under default website in the IIS on PMAAMAIL.

Are you running 2000 or 2003?

/guldbamse
Random Solutions  
 
programming4us programming4us