OIM11gR2 - Exchange 2003 provisioning

Hi All,
I am getting teh following Error while doing accesspolicy base provisioning the exchange 2003.
But it is working when i am provisionig manually.
OIM version : 11gR2 Ps1
Websphere : 7
AD : 9.1.1.4
exchange 2003 : 9.1.1.4.0
<14-Jan-2014 16:11:33 o'clock GMT> <Error> <oracle.iam.provisioning.spi> <BEA-000000> <An error occurred in oracle.iam.provisioning.spi.DOBProvisioningUtil while populating account data and the cause of error is For input string: "".>
<14-Jan-2014 16:11:33 o'clock GMT> <Error> <oracle.iam.provisioning.util> <BEA-000000> <An error occurred in oracle.iam.provisioning.spi.DOBProvisioningMechanism/getAccountsProvisionedToUser while getting accounts provisioned to user with key 2091 and the cause of error is oracle.iam.provisioning.exception.GenericProvisioningException: An error occurred in oracle.iam.provisioning.spi.DOBProvisioningUtil while populating account data and the cause of error is For input string: ""..>
<14-Jan-2014 16:11:33 o'clock GMT> <Error> <oracle.iam> <BEA-000000> <Exception : oracle.iam.provisioning.exception.GenericProvisioningException: An error occurred in oracle.iam.provisioning.spi.DOBProvisioningMechanism/getAccountsProvisionedToUser while getting accounts provisioned to user with key 2091 and the cause of error is oracle.iam.provisioning.exception.GenericProvisioningException: An error occurred in oracle.iam.provisioning.spi.DOBProvisioningUtil while populating account data and the cause of error is For input string: ""..>
<14-Jan-2014 16:11:33 o'clock GMT> <Warning> <oracle.adf.controller.faces.lifecycle.Utils> <BEA-000000> <ADF: Adding the following JSF error message: IAM-4065016 : An error occurred in oracle.iam.provisioning.spi.DOBProvisioningMechanism/getAccountsProvisionedToUser while getting accounts provisioned to user with key 2091 and the cause of error is oracle.iam.provisioning.exception.GenericProvisioningException: An error occurred in oracle.iam.provisioning.spi.DOBProvisioningUtil while populating account data and the cause of error is For input string: ""..
oracle.iam.ui.platform.exception.OIMRuntimeException: IAM-4065016 : An error occurred in oracle.iam.provisioning.spi.DOBProvisioningMechanism/getAccountsProvisionedToUser while getting accounts provisioned to user with key 2091 and the cause of error is oracle.iam.provisioning.exception.GenericProvisioningException: An error occurred in oracle.iam.provisioning.spi.DOBProvisioningUtil while populating account data and the cause of error is For input string: ""..
        at oracle.iam.ui.platform.exception.OIMErrorHandler.reportServiceException(OIMErrorHandler.java:172)
        at oracle.iam.ui.platform.exception.OIMErrorHandler.reportException(OIMErrorHandler.java:66)
        at oracle.adf.model.binding.DCDataControl.reportException(DCDataControl.java:411)
        at oracle.adf.model.binding.DCBindingContainer.reportException(DCBindingContainer.java:416)
        at oracle.adf.model.binding.DCBindingContainer.reportException(DCBindingContainer.java:471)
        at oracle.adf.model.binding.DCIteratorBinding.reportException(DCIteratorBinding.java:403)
        at oracle.adf.model.binding.DCIteratorBinding.executeQuery(DCIteratorBinding.java:2144)
        at oracle.iam.ui.authenticated.myaccess.bean.MyAccessAccountsBean.refreshMyAccessAccountsList(MyAccessAccountsBean.java:680)
        at oracle.iam.ui.authenticated.myaccess.bean.MyAccessAccountsBean.refreshMyAccountsList(MyAccessAccountsBean.java:718)
        at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
        at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
        at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
        at java.lang.reflect.Method.invoke(Method.java:597)
        at com.sun.el.parser.AstValue.invoke(AstValue.java:187)
        at com.sun.el.MethodExpressionImpl.invoke(MethodExpressionImpl.java:297)
        at org.apache.myfaces.trinidadinternal.taglib.util.MethodExpressionMethodBinding.invoke(MethodExpressionMethodBinding.java:53)
        at org.apache.myfaces.trinidad.component.UIXComponentBase.broadcastToMethodBinding(UIXComponentBase.java:1256)
        at org.apache.myfaces.trinidad.component.UIXCommand.broadcast(UIXCommand.java:183)
        at oracle.adf.view.rich.component.fragment.UIXRegion.broadcast(UIXRegion.java:148)
        at oracle.adf.view.rich.component.fragment.UIXRegion.broadcast(UIXRegion.java:148)
        at oracle.adf.view.rich.component.fragment.UIXInclude.broadcast(UIXInclude.java:102)
        at oracle.adf.view.rich.component.fragment.ContextSwitchingComponent$1.run(ContextSwitchingComponent.java:92)
        at oracle.adf.view.rich.component.fragment.ContextSwitchingComponent._processPhase(ContextSwitchingComponent.java:361)
        at oracle.adf.view.rich.component.fragment.ContextSwitchingComponent.broadcast(ContextSwitchingComponent.java:96)
        at oracle.adf.view.rich.component.fragment.UIXInclude.broadcast(UIXInclude.java:96)
        at oracle.adfinternal.view.faces.lifecycle.LifecycleImpl.broadcastEvents(LifecycleImpl.java:1018)
        at oracle.adfinternal.view.faces.lifecycle.LifecycleImpl._executePhase(LifecycleImpl.java:386)
        at oracle.adfinternal.view.faces.lifecycle.LifecycleImpl.execute(LifecycleImpl.java:194)
        at javax.faces.webapp.FacesServlet.service(FacesServlet.java:265)
        at weblogic.servlet.internal.StubSecurityHelper$ServletServiceAction.run(StubSecurityHelper.java:227)
        at weblogic.servlet.internal.StubSecurityHelper.invokeServlet(StubSecurityHelper.java:125)
        at weblogic.servlet.internal.ServletStubImpl.execute(ServletStubImpl.java:301)
        at weblogic.servlet.internal.TailFilter.doFilter(TailFilter.java:26)
        at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)
        at oracle.adf.model.servlet.ADFBindingFilter.doFilter(ADFBindingFilter.java:205)
        at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)
        at oracle.adf.view.page.editor.webapp.WebCenterComposerFilter.doFilter(WebCenterComposerFilter.java:117)
        at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)
        at oracle.adfinternal.view.faces.webapp.rich.RegistrationFilter.doFilter(RegistrationFilter.java:106)
        at org.apache.myfaces.trinidadinternal.webapp.TrinidadFilterImpl$FilterListChain.doFilter(TrinidadFilterImpl.java:446)
        at oracle.adfinternal.view.faces.activedata.AdsFilter.doFilter(AdsFilter.java:60)
        at org.apache.myfaces.trinidadinternal.webapp.TrinidadFilterImpl$FilterListChain.doFilter(TrinidadFilterImpl.java:446)
        at org.apache.myfaces.trinidadinternal.webapp.TrinidadFilterImpl._doFilterImpl(TrinidadFilterImpl.java:271)
        at org.apache.myfaces.trinidadinternal.webapp.TrinidadFilterImpl.doFilter(TrinidadFilterImpl.java:177)
        at org.apache.myfaces.trinidad.webapp.TrinidadFilter.doFilter(TrinidadFilter.java:92)
        at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)
        at oracle.help.web.rich.OHWFilter.doFilter(Unknown Source)
        at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)
        at oracle.iam.ui.platform.servletfilter.IdentityContextFilter.doFilter(IdentityContextFilter.java:50)
        at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)
        at oracle.iam.platform.servletfilter.PwdMgmtNavigationFilter.doFilter(PwdMgmtNavigationFilter.java:164)
        at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)
        at oracle.bpel.services.workflow.client.worklist.util.WorkflowFilter.doFilter(WorkflowFilter.java:248)
        at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)
        at oracle.bpel.services.workflow.client.worklist.util.DisableUrlSessionFilter.doFilter(DisableUrlSessionFilter.java:70)
        at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)
        at oracle.adf.library.webapp.LibraryFilter.doFilter(LibraryFilter.java:179)
        at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)
        at oracle.security.jps.ee.http.JpsAbsFilter$1.run(JpsAbsFilter.java:119)
        at java.security.AccessController.doPrivileged(Native Method)
        at oracle.security.jps.util.JpsSubject.doAsPrivileged(JpsSubject.java:315)
        at oracle.security.jps.ee.util.JpsPlatformUtil.runJaasMode(JpsPlatformUtil.java:442)
        at oracle.security.jps.ee.http.JpsAbsFilter.runJaasMode(JpsAbsFilter.java:103)
        at oracle.security.jps.ee.http.JpsAbsFilter.doFilter(JpsAbsFilter.java:171)
        at oracle.security.jps.ee.http.JpsFilter.doFilter(JpsFilter.java:71)
        at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)
        at oracle.dms.servlet.DMSServletFilter.doFilter(DMSServletFilter.java:139)
        at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)
        at weblogic.servlet.internal.RequestEventsFilter.doFilter(RequestEventsFilter.java:27)
        at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)
        at weblogic.servlet.internal.WebAppServletContext$ServletInvocationAction.wrapRun(WebAppServletContext.java:3730)
        at weblogic.servlet.internal.WebAppServletContext$ServletInvocationAction.run(WebAppServletContext.java:3696)
        at weblogic.security.acl.internal.AuthenticatedSubject.doAs(AuthenticatedSubject.java:321)
        at weblogic.security.service.SecurityManager.runAs(SecurityManager.java:120)
        at weblogic.servlet.internal.WebAppServletContext.securedExecute(WebAppServletContext.java:2273)
        at weblogic.servlet.internal.WebAppServletContext.execute(WebAppServletContext.java:2179)
        at weblogic.servlet.internal.ServletRequestImpl.run(ServletRequestImpl.java:1490)
        at weblogic.work.ExecuteThread.execute(ExecuteThread.java:256)
        at weblogic.work.ExecuteThread.run(ExecuteThread.java:221)
Thank you

Hi,
I think that you have to fill mandatory attrbute in exchange form.
Please fill User Logon Name, Recipient Type, Database, Alias attributes on exchange user form while provisioning.

Similar Messages

Exchange 2003 Provisioning issue

Hi All,
I am trying to create a user on Exchange 2003.In my setup AD & Exchange running on same host win2003 r2.As AD has configured in SSL Mode, i have not done any ssl configuration for Exchange.
User Provisioning to AD is happening successfully and when I am trying to do provisioing to Exchange OIM returning errors.In weblogic server trace, I am seeing some exceptions
*ERROR,27 Jan 2011 22:29:07,661,[XELLERATE.ADAPTERS],Class/Method: tcAdpEvent/getITAttrVal encounter some problems: Could not find attibute value for IT Resource*
Key = 0 and attribute = Remote Script Location
*ERROR,27 Jan 2011 22:29:07,786,[XELLERATE.ADAPTERS],Class/Method: tcAdpEvent/getITAttrVal encounter some problems: Could not find IT asset value for Svr_key = 0*
and attribute = Remote Script Location
*ERROR,27 Jan 2011 22:29:07,833,[XELLERATE.ADAPTERS],Class/Method: tcAdpEvent/getITAttrVal encounter some problems: DATA_ERROR*
com.thortech.xl.dataobj.util.tcAdapterTaskException: DATA_ERROR
As I am usiing Exchange 2003 I have not mentioned Remote Script Location and I have not created Seperate IT Resource, I am using ADITResource while provisioning.
Please Help me on this...
Regards,
Madhu

Hi,
Thanks for the reply..
I am using the same resource (ADITResource) with which I am able to provision to AD.From errors on weblogic console,it seems it is looking for Remote script which is required while provisioning to Exchange 2007.But I am using Exchange 2003.
Regards,
Madhu

Cannot provision Exchange 2003 account in OIM 11gR2

Hello,
I'm trying to provision Exchange 2003 accounts from OIM 11gR2 but I keep getting errors. My AD connector works and is able to reconcile and provision account and my Exchange connector is linked to it. I've understood that the only mandatory fields in the Exchange 2003 provisioning form are "mail store name" and "alias", so I've tested by only filling those. However, the provisioning does not complete and the logs show this error :
[2013-01-25T11:46:19.292-05:00] [oim_server1] [ERROR] [] [XELLERATE.ADAPTERS] [tid: [ACTIVE].ExecuteThread: '6' for queue: 'weblogic.kernel.Default (self-tuning)'] [userId: xelsysadm] [ecid: b70c24a5215a6ee3:-625a909b:13c6d3ae4c5:-8000-0000000000002b50,0] [APP: oim#11.1.2.0.0] Class/Method: tcAdpEvent/getITAttrVal encounter some problems: Could not find attibute value for IT Resource Key = 0 and attribute = Server Address
[2013-01-25T11:46:19.293-05:00] [oim_server1] [ERROR] [] [XELLERATE.ADAPTERS] [tid: [ACTIVE].ExecuteThread: '6' for queue: 'weblogic.kernel.Default (self-tuning)'] [userId: xelsysadm] [ecid: b70c24a5215a6ee3:-625a909b:13c6d3ae4c5:-8000-0000000000002b50,0] [APP: oim#11.1.2.0.0] Class/Method: tcAdpEvent/getITAttrVal encounter some problems: Could not find IT asset value for Svr_key = 0 and attribute = Server Address
[2013-01-25T11:46:19.293-05:00] [oim_server1] [ERROR] [] [XELLERATE.ADAPTERS] [tid: [ACTIVE].ExecuteThread: '6' for queue: 'weblogic.kernel.Default (self-tuning)'] [userId: xelsysadm] [ecid: b70c24a5215a6ee3:-625a909b:13c6d3ae4c5:-8000-0000000000002b50,0] [APP: oim#11.1.2.0.0] Class/Method: tcAdpEvent/getITAttrVal encounter some problems: DATA_ERROR[[
com.thortech.xl.dataobj.util.tcAdapterTaskException: DATA_ERROR
at com.thortech.xl.adapterfactory.events.tcAdpEvent.getITAttrVal(tcAdpEvent.java:2023)
at com.thortech.xl.adapterGlue.ScheduleItemEvents.adpMEXCCREATEMAILBOX.implementation(adpMEXCCREATEMAILBOX.java:90)
at com.thortech.xl.client.events.tcBaseEvent.run(tcBaseEvent.java:196)
That's the only error I see and I'm not really sure about what it means. Any ideas?
Thanks,
--jtellier

Are you using the version 9 or 11 of the connector? I've done more investigations with version 9 and realized that the DB is not correctly updated by the connector. I've reported the problem with Oracle and a bug has been open. Here are the details :
When reconciling or provisioning a mailbox, a new row is added in the OIU table. This row has "null" as its APP_INSTANCE_KEY. Manually setting the Exchange's app instance key as the value of this column solves the problem.
Hope this helps!
--jtellier

Exchange 2003 Auto Provision: OIM

I'm trying to provision a user to exchange 2003. I'm using Windows 2003. I can create an exchange account successfully via OIM if I provision it manually.
I've created 2 Access Policies, one for AD and one for Exchange (Priority 1 and 2). They are both supposed to automatically provision a user in AD/Exchange once the account is created in OIM. AD account gets provisioned successfully.
However, Exchange 2003 account gets a status of Rejected on Check AD User Process. So I tried setting the Depends On value in Exchange Resource Object to AD User via the console. Now it gives me a status of Waiting and never actually creates the mailbox.
Help!!!

Yes, turns out it's a bug. Found it on metalink, Doc ID 786449.1

Migrating from IIFP + Exchange 2003 to FIM + EXchange 2010

Hello Everyone,
hope you can help me figure something out
i had an IIFP Galsync synchronising users and contacts between 2 exchange 2003 environment and now i would like to switch to fim 2010 and Exchange 2010,
from what i tried just exporting and importing the IIFP configuration to FIM 2010 works, but from what i know exchange 2003 is provisioned through vb code and exchange tools and exchange 2010 through remote powershell, is there anything to change in the
original galsync extension code to enable exchange 2010 provisioning ?
thanks !!
Hitch Bardawil

Hi there Hitch
The old IIFP galsync solution is obviously deprecated now, so I understand why you are wanting to convert it - but there have been too many architectural changes made in each of the components you're targeting to make any kind of conversion exercise realistic.
It is not an overly complicated scenario to handle in FIM, and as you point out the Exchange 2010 platform integration point is totally different and is even built into the MA itself (see
Management Agent for Active Directory Global Address List (GAL)). I suggest you have a trawl through old posts on Carol's blog
to read about her take on what you are trying to do.
Bob Bradley (FIMBob @
TheFIMTeam.com) ... now using FIM Event Broker for just-in-time delivery of FIM 2010 policy via the sync engine, and continuous compliance for FIM

Office 365 Deployment w/Decommissioned Exchange 2003 environment

Hello,
I'm having an issue creating Office365 mailboxes. Here's my situation:
In 2011 we we migrated off of an on-premise Exhange 2003 server and on to Google Apps (Gmail). To my knowledge the on-premise Exchange 2003 server was fully decommissioned and removed from our network. Now we're try to move from Google Apps (Gmail)
to Office365. I've set up AD synchronization and all my AD accounts synchronize as expected. However, only some of my synchronized accounts are provisioning mailboxes correctly. After some troubleshooting on the Office365 community we were
able to narrow down the issue: http://community.office365.com/en-us/f/156/t/252194.aspx. It appears that the only accounts that are successully provisioning mailboxes are accounts that DID NOT previously have a mailbox associated on the on-premise
Exchange 2003 server...Accounts that DID hold a mailbox on the on-premise Exchange 2003 server are NOT being successfully provisioned with an Office365 mailbox. My understanding is that this is actually expected functionality...Per MS support techs:
If an AD account has attributes indicating an on-premise Exchange server, then Office365 will not provision a mailbox until the on-premise mailbox is migrated. The issue I have is, I do not have an on-premise mailbox to migrate or an on-premise Exchange
server at all.
My on-premise Exchange 2003 server no longer exists. What attributes do I need to remove and/or reset on my accounts for Office365 to be able to provision a mailbox correctly?
Thank you in advance!

Hi,
What’s the error message do you receive when trying to create the mailbox?
You can check the user’s AD properties by:
ldifde -f c:\<Name of User>.txt -d "distinguishedName of User"
Here is the detailed steps for getting the
distinguishedName of a user:
a. Run the Adsiedit.msc from a command prompt.
b. Expand “Domain”->”DC=domainName,DC=com”->”CN=Users”
c. Right click on ”CN=the problematic user name”, click “Properties”.
d. Find the attribute “distinguishedName” attribute. Double click copy the value of it.
Thanks,
Simon Wu
TechNet Community Support

Any ideas for how to sync to Exchange 2003 - contacts and calendar

Hi
I am still searching for a mechanism to give me the sync solution I want, which is as follows:
At work I have a PC running Outlook 2003 via an Exchange Server 2003 setup.
At home I have an iMac running Snow Leopard
In the middle I have an iPhone 3G
I want to sync Calendar and Contacts across all three machines.
I want to sync work email between the Exchange server and the iphone, but do NOT need this to sync on my iMac at home
That's it.
At the moment I can sync email, calendars and contacts successfully between the Exchange server and iPhone, using the over-the-air Exchange Sync on the iPhone. But sadly my iMac will not sync contacts and calendars to the exchange server 2003 as Snow Leopard only supports exchange 2007.
Ironically (because I don't need this bit to work) I have managed to get my iMac to sync with my Exchange server EMAIL, by selecting the Exchange IMAP option when setting up the mail account on my iMac (as opposed to the Exchange 2007 option). However, I cannot get iCal or Address book to sync with Exchange 2003, regardless of the options I select when setting up the new accounts in Address book or iCal. I guess these just do not work with Exchange 2003
I know that I cannot use mobileme as a solution, as you cannot have two over-the-air syncs going on, and I need to maintain my iphone link to the exchange server via activesync
I also know that using itunes to sync via the cable will not work, as this creates separate contacts and calendar files on the iphone and so does not provide the syncing solution I seek.
I have tried using google to act as the middle man between my iMac and Exchange server data - getting the iMac to sync to Google Calandar and Google Address Book, and then using a third party piece of software called gsyncit to sync from google to the .ost outlook file on my PC workstation. This works some of the time, but keeps crashing and leaving me with multiple duplicates to have to sort out - much too much hard work on a regular basis.
So I still do not have a solution. Unfortunately upgrading to Exchange server 2007 is not a solution.....
Any new ideas out there
Thanks

I don't think there will be a solution to this. Exchange 2003 just isn't supported.

Cannot Move Mailbox from Exchange 2003 to Exchange 2007

Hello,
I am migrating exchange 2003 to Exchange 2007 and have moved almost all the mailboxes without any issue, but there are some mailboxes which are not being moved since they are giving me the below error.
Error:
Error was found for John Doe ([email protected]) because: Error occurred in the step: Opening source mailbox. Failed to open mailbox with error: ClassFactory cannot supply requested class, error code: -1056749262
Initially I found that the account was disabled from Active
Directory so enabled it but and also replicated the active Directory but still the problem is there, its not hidden in the GAL aswell.
http://www.arabitpro.com

Thanks everybody .. I have solved the problem myself.
To resolve this issue I had to give the account "SELF" permissions for "Associated external account". If the user does not have these
permissions to its own account it is unable to set the msExchMasterAccountSID attribute for the disabled account causing the error. By setting this permission on the disabled account, it allows it to mark the msExchMasterAccountSID attribute.
To do this follow this procedure:
1. In the Active Directory Users and Computers snap-in, on the View menu, click Advanced Features.
2. In the Exchange Advanced properties of the disabled user object that owns the mailbox, click Mailbox Rights, and then search the list of accounts for one
that has the Associated External Account permission.
4. If no account has this permission, grant the SELF account Associated External Account and Full Mailbox Access permissions.
https://support.microsoft.com/kb/278966?wa=wsignin1.0
http://www.arabitpro.com

Exchange 2003 Permissions Error when attempting to forward emails

Server 2003 R2 (fully patched as of 11/2013) running Exchange 2003 SP2 (Built 7638.x2) on ESXi 4.1; WinXP clients and Server 2003 Terminal Servers running Outlook 2003; Domain and Forest are running at 2008 Functional Levels.
Occasionally, some users are receiving this error message: "You do not have sufficient permission to perform this operation on this object. See the folder contact or your system administrator" intermittently when attempting
to 1) forward email both to and from senders/recipients inside and outside the domain, 2) When attempting to modify the subject of a previously received email (I didn't know you could do that), 3) When attempting to open received attachments.
There is no discernible pattern to the users or the original senders of the emails.
Most of the results I've found when searching relate to NTFS permissions or a ReadOnly propery on items in the users's profile folder, or sending on behalf of another user - these either do not apply or have been verified as not the cause.
During the initial rash of problems when there was a problem with an attachment and we absolutely needed it, I was able to connect to OWA using a special administrative account with access to the mailbox, open the attachment and log out. Once I had
done so with this account, the end user was able to open the attachment on their own without a warning.
Changes made to the environment prior to this issue that may be related (nobody remembers when exactly this started, so I can't state that it definitively happened after this change):
All servers were virtualized on ESXi 4.1 in late 2011; subsequently converted and migrated to Hyper-V Server 2012 in early 2013 (with the exception of the Exchange and SQL servers).
All 2003/R2 domain controllers demoted and removed; DFL/FFL raised to 2008; SYSVOL replication was migrated from FRS to DFS-R.
Troubleshooting steps:
Exchange server and affected client computers have been restarted several times; the various exchange services have been restarted; permissions on the mailboxes and AD objects have been verified; event logs are generally clean with the exception of ActiveSync
errors for a single user not currently affected by forwarding emails, there are no other errors reported.
Per recommendations on another forum, I had enabled several diagnostic logs in the diagnostic logging tab of the server. Unfortunately not much was found in the Application log even after filtering out the basics. There were occasional errors
referencing User A failed to modify an item in User B's mailbox because access was denied; however, I was unable to correlate these errors to any reported incidence of the above message.
I created a new mailbox database on the same server and migrated all the mailboxes to the new database, there was no change; users immediately began seeing these errors.
Over a holiday weekend, I then spun up a new Win 2003 R2 server, with a fresh installation of Server 2003 R2 (also fully patched through 11/2013) running the same version of Exchange 2003 SP2 this time running as a virtual guest on Hyper-V Server 2012.
I migrated all mailboxes from the original mail server to the new mail server and it appeared that the problem was remedied; however, it has slowly started up again and is starting to become more frequent.
I'm really at my wits end with this problem and would like to get it resolved before we purchase and install our new Exchange Server later this year.

Updates
Users have reported that they can forward the email from OWA; even after doing so, they are unable to forward from Outlook. So either my previous notes on the issue were wrong, or this is just more of the "intermittent" nature of the problem.
I will have to investigate what logging options are available to me at the Outlook client level - any thoughts on that subject are also welcome.
Users have now reported that a previous (rarely used) workaround (the administrative account opening the email in OWA) no longer enables them to view attachments or forward emails in Outlook.
I'm still adjusting the various diagnostic logging settings to see if I can spot an event which corresponds to a reported occurrence. The most unusual warning reported is the following:
Source:MSExchangeIS Mailbox Store
Category: Access Control
Event ID: 1029
[email protected] failed an operation because the user did not have the following access rights:
'Delete' 'Read Property' 'Write Property' 'Create Message' 'View Item' 'Create Subfolder' 'Write Security Descriptor' 'Write Owner' 'Read Security Descriptor' 'Contact'
The distinguished name of the owning mailbox is /O=DOMAIN/OU=FIRST ADMINISTRATIVE GROUP/CN=RECIPIENTS/CN=USER_B. The folder ID is in the data section of this event.
However odd these occasional warnings are, they do not appears to correlate to the reported permissions issue. Everytime I've seen one of these events, I've inquired with "user_A" to see if they've recently seen the popup and in each case they have
not.

Unity 4.2 voice mail only with Exchange 2003

Hi Team,
we are replacing window 2000 OS with Win 2003 for unity 4.2. This is a single box solution. Exchange 2000 is installed on same unity server. Now we are upgrading the OS from 2000 to 2003. With window 2003 we have to installed the Exchange 2003. In unity installation 4.0(5) following paragraph is mentioned which means we need separate hardware for Exchange. Kindly advise whether we need a separate server for Exchange 2003 or we can install on the on unity box.
If you are using Exchange 2003, install Exchange 2003 administration software on the Cisco Unity server. (Exchange 2003 is installed on a separate server.)
If you are using Exchange 2000, you can install Exchange 2000 either on the Cisco Unity server or on a separate server. If you install Exchange 2000 on a separate server (typically for systems with a large number of subscribers), install Exchange 2000 administration software on the Cisco Unity server.
BR
Muhammad Irfan

Thank you Javalenc,
I can understand from following that Exchange 2003 can be installed on same server.
Voice Messaging
•Exchange 2003 on the Cisco Unity server or on a separate server. If you want to install Exchange 2003 on the Cisco Unity server, note the following:
–The Cisco Unity server must be running Windows Server 2003.
–Exchange 2003 can be installed only on the currently shipping servers supported for use with Cisco Unity 4.2 (MCS-78xx-x2, MCS-78xx-x3, or later, including IBM and HP equivalents). Currently shipping servers are listed in the Cisco Unity Supported Platforms List at http://www.cisco.com/en/US/products/sw/voicesw/ps2237/
As you know we are just replacing the OS, from win 2K to 2k3. So any thing I need to take care to back up the existing Unity with win 2000 and exchange 2000..
I am taking the back up of my unity 4.2 installed on window 2000 with DiRT and will restore on unity 4.2 with win 2003 and Exchange 2003.
Kindly advise.
BR

Exchange 2003 & Mail not syncing

All,
In Leopard Mail, I have a .Mac account as well as an Exchange account set up with the Exchange server where I work. The .Mac account works great, does everything I want it to do; the Exchange account, however, simply will NOT sync email & what I do with it with Exchange.
For the Exchange account setup, I have Mail set up to "Move Deleted Messages to the Trash Mailbox" checked, to "Store Deleted Messages on the Server," and to "Permanently Erase Deleted Messages When: Quitting Mail."
So during the day, I'll move some messages to the Exchange folders that Mail did set up correctly, delete messages I don't want anymore, and then I'll hit "Synchronize All Accounts." When that's done, I quit Mail.
About 5 minutes or so later, I'll log in to Windows using Parallels, open up Outlook, and see that the ENTIRE DAY'S MESSAGES are still in the Outlook inbox. They're shown as "read," but none of the messages that I'd moved to other folders in Mail or the ones I deleted in Mail are appropriately placed where they should be (either in their respective folders or in the "Deleted Items" folder in Outlook).
Is anyone else having this problem?
I do have a copy of Entourage 2008 with Exchange support, and that works fine (though it tends to crash 2-3 times per week). The thing is, I don't really like Entourage, am used to Mail, and prefer it to Entourage...and badly wish I could get Mail to work correctly with Exchange (2003).
BTW, our Exchange server does have IMAP turned on, which works great with the iPhone. But Mail just simply won't work with Exchange no matter what I try.
Any hints/ideas/something obvious I'm overlooking?

We are having problems where I work as well. The problem is that Mail is constantly syncing with the server and takes FOREVER to complete it. I've tried every combination of settings you could do in Mail, and we've had both Mac & PC IT guys in that can't figure out why it takes so long to sync, and why it feels it's necessary to sync when I simply click on my Sent folder, or Trash folder...any little click causes the program to want to sync something. Even my calendar events of which i have zero, take 10 - 15 minutes to sync.
Can anyone suggest a fix to my problem or the original poster's problem?
Thanks in advance.

IPhone 3G will not sync with Exchange 2003 after updating to 4.0.1

I keep reading a lot of posts about users who updated to 4.0 not being able to get Exchange to sync and 4.0.1 was supposed to fix that however I just updated from 3.something to 4.0.1 and now my Exchange 2003 server email will not sync (kind of) and my Contacts are slowly disappearing.
I tried to delete and re-enter the exchange account however after 5 hours I only have about a dozen emails out of the hundreds that should be there. Also the contacts that were there are now slowly disappearing.
I saw somewhere that I should try to access www.myserver.com/oma and www.myserver.com/exchange to see if I can log in there. I am able to get into OMA without an issue however when I go to /Exchange I am able to login and get the left window pane to start (inbox, contact, notes, etc buttons), but no other pane has anything.
I don't know if this is related, but I did notice that on some sites that use script for the menus I am no longer able to navigate the menus. They drop, but clicking a link in the menu does nothing.
I have another 3G that is working fine with the 4.0.1 and all the BB and Windows Mobile and Droids are working fine.

You know, yesterday I deleted the entire Exchange account, rebooted, added it -- nothing... then I deleted it again, rebooted again, etc... after about the 3rd time of doing this and allowing the Internet Accounts to automatically discover the account, it started working again.
You might want to give it the brute-force-angry-uninstall-and-reboot-multiple-times-while-shaking-angry-fists -and-cursing routine and see if that helps you!

I bought a new imac running Loin and Office 2011. The server we use to access emails runs exchange 2003 and my IT person says the imac is not compatible with the server. The server does not want to let me access using any email software.

I bought a new imac running Loin with Office 2011. I am the only mac in the office and the Server we use to access emails runs exchange 2003 and my IT person says the imac is not compatible with the server. The server does not want to let me access using any email software other than webmail access through our website. It looks as though 2011 is not compatible with 2003 per some searches online, but what are some options I have to gain full access again? I purchased parallels in hopes that this my help and I am able to use remote desktop connection to log on to server but can not drag and drop files I need. There is a shared drive on that Server we all use to exchange files.
The two main issues are gaining access to my email again and ability to drag and drop files from mac to pc. I hope this is enough info to get some solutions.
PS - IT person says my iMac's IP is what his server does not understand so that is why I can not login.

Office 2011 is not compatbile with Exchange 2003.
I suggest you post further Office related questions on Microsoft's own forums for their Mac software:
http://answers.microsoft.com/en-us/mac

Trying to recover a mailbox from an old Exchange 2003 server

I still have a 2003 server in my environment but all functions and mailboxes are on Exchange 2010. The only reason the 2003 server is still around is for the off chance of requiring a restoration which has now come up. I have successfully restored a
mail store to a recovery storage group but I am unable to export mailboxes from it using exmerge.
I get the following error:
[10:16:16] Copying data from mailbox 'Jacques Legare' ('LEGARE') on Server 'MAIL-SERVER' to file 'C:\TEMP\LEGARE.PST'.
[10:16:16] Error opening message store (MSEMS). Verify that the Microsoft Exchange Information Store service is running and that you have the correct permissions to log on. (0x8004011d)
[10:16:16] Errors encountered. Copy process aborted for mailbox 'Jacques Legare' ('LEGARE').
I have read many, many articles regarding the requirement for “send as” permission. I have granted send as permissions to several different domain accounts and local accounts on the Exchange server but I get the same result with all of them.
It looks like the problem may be because the mailbox no longer exists on the Exchange 2003 server.
So what do I have to do to recover this mailbox? Can I create a mailbox for this user on the 2003 server without messing up his the mailbox on the 2010 server? Instead of restoring to the recovery storage group, should I restore and overwrite the original mailbox
store? Again, will that mess up anything with the 2010 server?

0x8004011d is permission related Error.
Refer to the link below and download EXMERGE guide which has complete procedure documented.
https://gallery.technet.microsoft.com/office/Guide-to-Use-Exmerge-to-fd00af49
If the mailbox that need to be restored has to be extracted from RSG is already moved to Exchange 2010 then you will not be able to run exmerge against it.
You might have to update the attribute MsExchOrigMDB on the RSG to point to Exchange 2010 Database where the mailbox is now located.
even this information is enclosed in the EMERGE Guide.
Revert back for any queries/outcome.
Pavan Maganti ~ ( Exchange | 2003/2007/2010/E15(2013)) ~~ Please remember to click “Vote As Helpful" if it really helps and "Mark as Answer” if it answers your question, “Unmark as Answer” if a marked post does not actually answer your
question. ~~ This Information is provided is "AS IS" and confers NO Rights!!

Account Lockout issue between Apple devices and Exchange 2003

I have been having an ongoing issue for a couple of months with a few different users Apple devices locking out their accounts in AD when they try to authenticate to ActiveSync. This doesn't happen every time they authenticate, it seems to be random,
while the rest of the time they have access to their email. It might occasionally happen with an Android, but not on a repetitive basis like this.
Primarily this has been four different iPads, running different versions of iOS, and an iPhone running the latest release of iOS 7. Other iPhones and iPads function without having the problem, including iPhones on iOS 7.
The user accounts in question are set to never have their passwords expire, but again, they aren't the only users that are set like this, and those other users, even with Apple devices are not having the same problem.
I used NetWrix to trace out the source machine, which is my Exchange 2003 server and times, and I've checked the W3SVC1 log file, and come up with the following as an example with identification details masked:
<internal IP>, <Domain\Username>, 4/30/2014, 8:10:04, W3SVC1, <ServerName>, <internal IP>, 15, 329, 3367926, 200, 0, GET, /exchange-oma/<[email protected]>/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/iPad/ApplV50462*****/eb53cd5d5b9fcf40****************-20ef44,
As I was typing this, the owner of the iPad from the log file above came by my desk, so I asked a couple more questions. He's never had another iPad, it's a gen 1, and he's never updated the iOS on it. I know one of the other iPads in question
has the most up to date iOS, and the other one is brand new, replacing one that was broken, but the owner of that one had the same issue on a 3 year old iOS.
There is nothing special about the user accounts, no special privileges or restrictions.
Has anyone encountered this before? Exchange 2003, Server 2003 in a 2008 domain. Promotion to the 2008 domain was 2 years ago.

Hi Brian,
I am so sorry for the delay.
Do you have any progress by now?
Since there are lots of devices which use user accounts to log on, failed logon attempts on these devices could be the cause for account lockout.
If this issue persists, I suggest you refer to these troubleshooting articles below:
Troubleshooting account lockout the PSS way
http://blogs.technet.com/b/instan/archive/2009/09/01/troubleshooting-account-lockout-the-pss-way.aspx
Troubleshooting Account Lockout
http://technet.microsoft.com/en-us/library/cc773155(v=WS.10).aspx
In addition, you can also get efficient support at Active Sync forum below:
http://social.technet.microsoft.com/Forums/exchange/en-US/home?forum=exchangesvrmobilitylegacy
Best Regards,
Amy

OIM11gR2 - Exchange 2003 provisioning

Similar Messages

Maybe you are looking for