A user who has a linked mailbox cannot use a new profile to access another linked mailbox in an Exchange Server 2010 environment

Article ID: 2563245 - View products that this article applies to.
Expand all | Collapse all

SYMPTOMS

Consider the following scenario:
  • You create a linked mailbox (MB1) on a Microsoft Exchange Server 2010 mailbox server in an Active Directory forest (forest A).
  • MB1 is associated with a disabled account user A in the forest A.
  • MB1 is linked to a linked master account user B in the trust forest B.
  • User A is a member of the domain local group.
  • You assign Full Access permission for another linked mailbox (MB2) in forest A to user B. 
  • User B tries to access MB2 by using Microsoft Office Outlook.
In this scenario, user B can access MB2 as an additional mailbox. However, user B cannot use a new profile to access MB2 as a primary mailbox. Additionally, the credential window pops up when user B types in credentials.

Back to the top | Give Feedback

CAUSE

This issue occurs because the Authz API that the Client Access server uses performs an access check on the domain local group account in an incorrect way.


Back to the top | Give Feedback

RESOLUTION

To resolve this issue, install the following update rollup:
2645995
(http://support.microsoft.com/kb/2645995/ )
Description of Update Rollup 1 for Exchange Server 2010 Service Pack 2

Back to the top | Give Feedback

STATUS

Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.
Back to the top | Give Feedback

MORE INFORMATION

For more information about how to create a linked mailbox, visit the following Microsoft website:
General information about how to create a linked mailbox
(http://technet.microsoft.com/en-us/library/bb123524.aspx)
For more information about domain local group, visit the following Microsoft website:
General information about domain local group
(http://technet.microsoft.com/en-us/library/cc755692(WS.10).aspx)
For more information about how to create a new email message profile, visit the following Microsoft website:
General information about how to create a new email message profile
(http://office.microsoft.com/en-us/outlook-help/create-a-new-e-mail-profile-HA010192328.aspx)
For more information about how to use Authz API, visit the following Microsoft website:
General information about how to use Authz API
(http://msdn.microsoft.com/en-us/library/ff394773(VS.85).aspx)
For more information about how to deploy Exchange Server 2010 in an Exchange resource forest topology, visit the following Microsoft website:
General information about how to deploy Exchange Server 2010 in an Exchange resource forest topology
(http://technet.microsoft.com/en-us/library/aa998031.aspx )

Back to the top | Give Feedback

Properties

Article ID: 2563245 - Last Review: February 13, 2012 - Revision: 1.0
APPLIES TO
  • Microsoft Exchange Server 2010 Service Pack 2, when used with:
    • Microsoft Exchange Server 2010 Enterprise
    • Microsoft Exchange Server 2010 Standard
Keywords: 
kbqfe kbfix kbexpertiseinter kbsurveynew KB2563245
Back to the top | Give Feedback

Give Feedback

 
Back to the topBack to the top