參考資料: http://andy1121.spaces.live.com:80/blog/cns!9CB3C98EAEE1E44E!170.entry
小弟在測試環境下exchage2007 USER登入信箱時出現下面的訊息
訊息:
目前有使用者在登入Exchange 2007 的OWA 時出現了下列的錯誤訊息，請問有什麼方法能解決這個問題？
嘗試使用您的信箱時發生問題。請連絡組織的技術支援人員。
Request
Url: https://mail.Email.com:443/owa/lang.owa
User host address: x.x.x.x
Exception
Exception type: Microsoft.Exchange.Data.Storage.StoragePermanentException
Exception message: There was a problem accessing Active Directory.
Call stack
Microsoft.Exchange.Data.Storage.ExchangePrincipal.Save()
Microsoft.Exchange.Clients.Owa.Core.RequestDispatcher.DispatchLanguagePostLocally(OwaContext owaContext, OwaIdentity logonIdentity, CultureInfo culture, String timeZoneKeyName, Boolean isOptimized)
Microsoft.Exchange.Clients.Owa.Core.RequestDispatcher.DispatchLanguagePostRequest(OwaContext owaContext)
Microsoft.Exchange.Clients.Owa.Core.RequestDispatcher.PrepareRequestWithoutSession(OwaContext owaContext, UserContextCookie userContextCookie)
Microsoft.Exchange.Clients.Owa.Core.RequestDispatcher.InternalDispatchRequest(OwaContext owaContext)
Microsoft.Exchange.Clients.Owa.Core.RequestDispatcher.DispatchRequest(OwaContext owaContext)
System.Web.HttpApplication.SyncEventExecutionStep.System.Web.HttpApplication.IExecutionStep.Execute()
System.Web.HttpApplication.ExecuteStep(IExecutionStep step, Boolean& completedSynchronously)
Inner Exception
Exception type: Microsoft.Exchange.Data.Directory.ADOperationException
Exception message: Active Directory operation failed on dc1.vivotek.tw. This error is not retriable. Additional information: 存取權限不足，無法執行操作。. Active directory response: 00002098: SecErr: DSID-03150A45, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0
Call stack
Microsoft.Exchange.Data.Directory.ADSession.AnalyzeDirectoryError(PooledLdapConnection connection, DirectoryRequest request, DirectoryException de, Int32& retries, Int32 maxRetries)
Microsoft.Exchange.Data.Directory.ADSession.ExecuteModificationRequest(ADRawEntry entry, DirectoryRequest request, ADObjectId originalId)
Microsoft.Exchange.Data.Directory.ADSession.Save(ADObject instanceToSave, IEnumerable`1 properties)
Microsoft.Exchange.Data.Storage.ExchangePrincipal.Save()
Inner Exception
Exception type: System.DirectoryServices.Protocols.DirectoryOperationException
Exception message: The user has insufficient access rights.
Call stack
System.DirectoryServices.Protocols.LdapConnection.ConstructResponse(Int32 messageId, LdapOperation operation, ResultAll resultType, TimeSpan requestTimeOut, Boolean exceptionOnTimeOut)
System.DirectoryServices.Protocols.LdapConnection.SendRequest(DirectoryRequest request, TimeSpan requestTimeout)
Microsoft.Exchange.Data.Directory.PooledLdapConnection.SendRequest(DirectoryRequest request, LdapOperation ldapOperation)
Microsoft.Exchange.Data.Directory.ADSession.ExecuteModificationRequest(ADRawEntry entry, DirectoryRequest request, ADObjectId originalId)
解決方法
解決方式:
開啟AD 使用者及電腦 ->點選 “檢視” ->”進階功能”
Open up Active Directory Users and Computers ()
Go to the View menu, Advanced.
Locate the user in AD, right click, properties. Jump to the security tab. (找到登入出問題的USER, 然後按右鍵, 選擇內容, 在內容頁面, 選到安全性的頁面去.)
Click “Advanced” next to the “For special permissions or for advanced settings, click Advanced. (在安全性的頁面, 點選進階, )
Click “Allow inheritable permissions from the parent to propagate to this object and all child objects. Include these with entries explicitly defined here.” Check box and apply. (勾選”允許從父項繼承權限套用到這個物件…….., 然後選確定鈕)
Click OK and OK again(再按一次確定鈕離開)
本篇瀏覽人數: 3604
