Exchange Server Forums

Problem with child domain users web access

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [Microsoft Exchange 2003] >> Outlook Web Access >> Problem with child domain users web access

Page: [1]

Message

<< Older Topic Newer Topic >>

Limited time MSExchange.org offer! -- 1.Sep.2008 1:00:00 PM

TechGenix and SolarWinds have partnered to provide free copies of SolarWinds Exchange Monitor to all visitors who join the MSExchange.org Forums. SolarWinds Exchange Monitor is a handy desktop dashboard that continuously monitors Microsoft Exchange to deliver real-time insight into Exchange services, mail queue sizes, and host server health. Learn more about Exchange Monitor and the free offer!

Problem with child domain users web access - 24.Sep.2008 9:42:28 AM

bagrationi

Posts: 20
Joined: 24.Sep.2008
Status: offline

Error

Hi All,

    I have a problem with my exchange 2007 server's web access along some weeks.
I have one forest, two domains in that forest and one child domain. All work fine in my forest except that one child domain which users cannot access their mailboxes when trying to log on outlook web access with their accounts.

    After the action that a child domain users log on to their mailboxes with outlook web access, this problem (down of this message) occur on the next page.

Request
[image]expnd.gif[/image] Show detailsUrl: https://mailserver:443/owa/lang.owa
User host address: x.x.x.x

Exception
Exception type: Microsoft.Exchange.Data.Directory.ADTransientException
Exception message: Could not find any available Domain Controller in domain DC=xx,DC=xxx,DC=x.

Call stack
Microsoft.Exchange.Data.Directory.DSAccessTopologyProvider.GetServerFromDomainDN(String distinguishedName, NetworkCredential credential) Microsoft.Exchange.Data.Directory.ConnectionPoolManager.GetConnection(ConnectionType connectionType, ADObjectId domain, String serverName, Int32 port, NetworkCredential credential) Microsoft.Exchange.Data.Directory.ConnectionPoolManager.GetConnection(ConnectionType connectionType, NetworkCredential networkCredential, ADObjectId domain) Microsoft.Exchange.Data.Directory.ADSession.GetConnection(String preferredServer, Boolean isWriteOperation, Boolean isNotifyOperation, ADObjectId& rootId) Microsoft.Exchange.Data.Directory.ADSession.GetReadConnection(String preferredServer, ADObjectId& rootId) Microsoft.Exchange.Data.Directory.ADSession.Find(ADObjectId rootId, String optionalBaseDN, ADObjectId readId, QueryScope scope, QueryFilter filter, SortBy sortBy, Int32 maxResults, IEnumerable`1 properties, CreateObjectDelegate objectCreator, CreateObjectsDelegate arrayCreator) Microsoft.Exchange.Data.Directory.ADSession.Read(ADObjectId entryId, IEnumerable`1 properties, CreateObjectDelegate objectCtor) Microsoft.Exchange.Data.Directory.Recipient.ADRecipientSession.Read(ADObjectId entryId) Microsoft.Exchange.Data.Storage.ExchangePrincipal.Save() Microsoft.Exchange.Clients.Owa.Core.RequestDispatcher.DispatchLanguagePostLocally(OwaContext owaContext, OwaIdentity logonIdentity, CultureInfo culture, String timeZoneKeyName, Boolean isOptimized) Microsoft.Exchange.Clients.Owa.Core.RequestDispatcher.DispatchLanguagePostRequest(OwaContext owaContext) Microsoft.Exchange.Clients.Owa.Core.RequestDispatcher.PrepareRequestWithoutSession(OwaContext owaContext, UserContextCookie userContextCookie) Microsoft.Exchange.Clients.Owa.Core.RequestDispatcher.InternalDispatchRequest(OwaContext owaContext) Microsoft.Exchange.Clients.Owa.Core.RequestDispatcher.DispatchRequest(OwaContext owaContext) System.Web.HttpApplication.SyncEventExecutionStep.System.Web.HttpApplication.IExecutionStep.Execute() System.Web.HttpApplication.ExecuteStep(IExecutionStep step, Boolean& completedSynchronously

.... and, in the MailServer event application log is writing an error with source: MSExchange ADAccess, with event id: 2130.

Down, there is:

Process w3wp.exe (OWA) (PID=3976). Exchange Active Directory
Provider could not find an available domain controller in domain
DC=xxx,DC=xx,DC=x. This event may be caused by network connectivity
issues or configured incorrectly DNS server. This event may also occur if
you have not configured correctly your multiple Active Directory sites.

For more information, see Help and Support Center
at http://go.microsoft.com/fwlink/events.asp.

Any suggestions.. ?

thanks a lot in advance..

Post #: 1

Featured Links*

RE: Problem with child domain users web access - 24.Sep.2008 1:46:05 PM

jveldh

Posts: 640
Joined: 12.Apr.2008
From: The Netherlands
Status: offline

Hi,

Please check the following:

- can you ping the DC in the child domain ?
- are the dns-settings correct, can you perform a nslookup and do a query for the
DC in the child domain ? Please check the following document

_____________________________

Best regards,

Johan Veldhuis

Visit my website

(in reply to bagrationi)

Post #: 2

RE: Problem with child domain users web access - 25.Sep.2008 5:21:25 PM

bagrationi

Posts: 20
Joined: 24.Sep.2008
Status: offline

I've checked the following:

- I can ping DC in child domain and is pinging.
- When i perform nslookup on my child domain it seems like - "Can't find server name for address x.x.x.x (child domain's own internal ip address) : no response from server.
Default server: Unknown
Address: x.x.x.x

can you tell me, what this means ?

P.S. I'm already used lot of materials about this problem but.....

< Message edited by bagrationi -- 25.Sep.2008 5:23:28 PM >

(in reply to jveldh)

Post #: 3

RE: Problem with child domain users web access - 26.Sep.2008 2:26:25 PM

jveldh

Posts: 640
Joined: 12.Apr.2008
From: The Netherlands
Status: offline

Hi,

It looks like you've got a problem with your DNS:

http://support.microsoft.com/kb/200525

So first resolve this issue and then try if owa works.

_____________________________

Best regards,

Johan Veldhuis

Visit my website

(in reply to bagrationi)

Post #: 4

RE: Problem with child domain users web access - 29.Sep.2008 10:46:01 AM

bagrationi

Posts: 20
Joined: 24.Sep.2008
Status: offline

Hello,

I've try already this one which you suggested me....

I've resolved my nslookup problem. It looks like the problem with DNS reverse lookup zone. I've created and started reverse lookup zone in DNS into my child domain and into my parent domain also.
And now, when i run nslookup command it checks successfully server names and ip address.
So,... this problem solved and thanks a lot for it jveldh

..

But, that big problem with web access from my child domain still persist

and i cannot log on to web by my child domain user.

Still any idea...?

< Message edited by bagrationi -- 29.Sep.2008 10:47:28 AM >

(in reply to jveldh)

Post #: 5

RE: Problem with child domain users web access - 29.Sep.2008 11:00:08 AM

Exchange_Geek

Posts: 1026
Joined: 31.Dec.2006
Status: offline

Well, the DNS part shouldn't have been a problem with those errors - correctly found out Reverse DNS solves that.

Could you please answer the following questions.

1) Can the child domain users access their mailbox using Outlook ? If yes all versions or some - name them?
2) Please run netdiag /v command on your child domain dc.
3) Please run dcdiag /s: FQDN of your child domain
4) Also, check if there are events 2080 on your Exchange box and does it show any of your child domain DC
5) Please promote your child domain DC as a GC if it isn't.

(in reply to bagrationi)

Post #: 6

RE: Problem with child domain users web access - 29.Sep.2008 5:23:57 PM

bagrationi

Posts: 20
Joined: 24.Sep.2008
Status: offline

Hi,

Of course, i can answer some of this questions with pleasure...
So,... first, my child domain users can access own exchange mailboxes from outlook clients and from any versions. Problem is only from Outlook Web Access.
...And, in Exchange server, i see an 2080 event id. This show My child domain server's name also.
....Child domain is a Global Catalog in a long time.

When i start run Netdiag and DCdiag from child, it show me that it is not recognized, thats commands. Can you tell me how to run the "Netdiag" and "DCdiag" commands from the child domain ?

thanks a lot in advance

< Message edited by bagrationi -- 29.Sep.2008 5:25:27 PM >

(in reply to Exchange_Geek)

Post #: 7

RE: Problem with child domain users web access - 1.Oct.2008 1:17:59 PM

bagrationi

Posts: 20
Joined: 24.Sep.2008
Status: offline

No real & useful answers and no suggestions about this problem....

So strong....

(in reply to bagrationi)

Post #: 8

RE: Problem with child domain users web access - 1.Oct.2008 1:22:41 PM

jveldh

Posts: 640
Joined: 12.Apr.2008
From: The Netherlands
Status: offline

Hi,

Netdiag en dcdiag are included in the support tools for Windows 2003, you can download them from the MS site.

_____________________________

Best regards,

Johan Veldhuis

Visit my website

(in reply to bagrationi)

Post #: 9

RE: Problem with child domain users web access - 1.Oct.2008 1:30:46 PM

bagrationi

Posts: 20
Joined: 24.Sep.2008
Status: offline

Ok, thanks

(in reply to jveldh)

Post #: 10

RE: Problem with child domain users web access - 3.Oct.2008 7:01:28 AM

bagrationi

Posts: 20
Joined: 24.Sep.2008
Status: offline

Hi all

So,.. i ran the netdiag and dcdiag commands from my child domain.
After netdiag cmd lets it show me the following results:

Redir and Browser test . . . . . . : Failed
List of NetBt transports currently bound to the Redir
      NetBT_Tcpip_{8A8FE8C8-B3C4-47A1-9D9C-DB321896094C}
The redir is bound to 1 NetBt transport.

List of NetBt transports currently bound to the browser
      NetBT_Tcpip_{8A8FE8C8-B3C4-47A1-9D9C-DB321896094C}
The browser is bound to 1 NetBt transport.
[FATAL] Cannot send mailslot message to '\\DC*\MAILSLOT\NET\NETLOGON' via re
dir. [ERROR_BAD_NETPATH]

and one more result:

DC list test . . . . . . . . . . . : Failed
      Failed to enumerate DCs by using the browser. [ERROR_NO_BROWSER_SERVERS_
FOUND]

After dcdiag cmd lets it show me the following results:

Starting test: NetLogons
   Unable to connect to the NETLOGON share! (\\child domain servername\netlogon)
[child domain servername] An net use or LsaPolicy operation failed with error 1203,
No network provider accepted the given network path......
.............................................child domain servername failed test NetLogons
Starting test: Advertising
                Warning: child domain servername is not advertising as a time server..........................................child domain servername failed test Advertising

and one more:

Starting test: FsmoCheck
   Warning: DcGetDcName(TIME_SERVER) call failed, error 1355
    A time server could not be located.
    The server holding the PDC role is down.
    Warning: DcGetDcName(GOOD_TIME_SERVER_PREFERRED) call failed, error 1355
    A Good Time Server could not be located..................................................................
........................................ Parent domain name (x.com) failed test FsmoCheck

Thats all, what is happened with my child domain after i ran the tools, Netdiag and Dcdiag.

Any suggestions ....?

< Message edited by bagrationi -- 3.Oct.2008 7:04:36 AM >

(in reply to Exchange_Geek)

Post #: 11

RE: Problem with child domain users web access - 3.Oct.2008 7:30:23 AM

Exchange_Geek

Posts: 1026
Joined: 31.Dec.2006
Status: offline

quote:

Starting test: FsmoCheck
   Warning: DcGetDcName(TIME_SERVER) call failed, error 1355
    A time server could not be located.
    The server holding the PDC role is down.
    Warning: DcGetDcName(GOOD_TIME_SERVER_PREFERRED) call failed, error 1355
    A Good Time Server could not be located

Seems PDC Emulator isn't responding.

How many domain controllers do you have in your child domain.
Run netdom query fsmo on your child domain controller.

(in reply to bagrationi)

Post #: 12

RE: Problem with child domain users web access - 3.Oct.2008 7:33:20 AM

Exchange_Geek

Posts: 1026
Joined: 31.Dec.2006
Status: offline

To which server does your child domain controllers point for DNS ?

Please run the port query against parent domain controller over port 389, 3268.

Port Query.
http://www.microsoft.com/downloads/details.aspx?familyid=8355e537-1ea6-4569-aabb-f248f4bd91d0&displaylang=en

(in reply to Exchange_Geek)

Post #: 13

RE: Problem with child domain users web access - 3.Oct.2008 8:25:02 AM

bagrationi

Posts: 20
Joined: 24.Sep.2008
Status: offline

I have only one domain controller in my child domain.
... and, on which server i should run port query.exe file ?

(in reply to Exchange_Geek)

Post #: 14

RE: Problem with child domain users web access - 3.Oct.2008 9:38:03 AM

Exchange_Geek

Posts: 1026
Joined: 31.Dec.2006
Status: offline

Run the port query on the Parent domain against child domain controller and Vice Versa, we are just checking if those ports are open on both ends.

(in reply to bagrationi)

Post #: 15

RE: Problem with child domain users web access - 3.Oct.2008 4:06:53 PM

jveldh

Posts: 640
Joined: 12.Apr.2008
From: The Netherlands
Status: offline

Hi,

Hmmm this doesn't look OK. First check if you can reach the parent domain by performing pings and nslookups. Check that all services are started on the server you performed the test on.

_____________________________

Best regards,

Johan Veldhuis

Visit my website

(in reply to jveldh)

Post #: 16

RE: Problem with child domain users web access - 6.Oct.2008 6:22:07 AM

bagrationi

Posts: 20
Joined: 24.Sep.2008
Status: offline

Hi

I've checked already and from my child domain i can ping the parent domain and nslookup with parent domain from child work normally.... and vice versa of course.
All useful services is working properly.

(in reply to jveldh)

Post #: 17

RE: Problem with child domain users web access - 6.Oct.2008 6:39:07 AM

bagrationi

Posts: 20
Joined: 24.Sep.2008
Status: offline

I've try to run port query from my parent and child domains by using port number: 389 and 3268 as you suggested me, ... it looks like that all passed ok.

(in reply to Exchange_Geek)

Post #: 18