Multiple domains, Exchange 2010, mailbox access via OWA

active-directoryexchangeexchange-2010outlook-web-app

We currently run two separate domains where our new implementation of exchange 2010 is currently on a separate domain the users.

My problem is:

joe@domaina.com cant access his mailbox at joe@domainb via OWA even though full access and sendas has been granted on domainb's mailbox to domaina's account.

I keep receiving the error:

Access is denied.
The Active Directory resource couldn't be accessed. This may be because the Active Directory object doesn't exist or the object has become corrupted, or because you don't have the correct permissions.

anyone able to help please?

Take care

Best Answer

I would check to see if sidfiltering (sometimes called quarantining) is switched on your forest trust. If it's enabled (which it is by default) then the trust will not pass SIDs over the trust, ie during the authentication process the security identifier for domaina is never passed to domainb.

Time to break out netdom as the GUI does not offer this option by default.