XCLN: Use Network Security Option Not Working as Expected (146188)

SUMMARY

The Microsoft Exchange client Use Network Security During Logon check box does not always function as expected. This option might not allow a user to access another user's mailbox even though the proper Windows NT credentials for the other mailbox were typed. When this occurs, the user will receive the following error message:

The set of folders could not be opened.
You do not have permission to log on.

In addition, the user may be prompted to type Windows NT credentials even though they have selected Use Network Security During when logging on.

MORE INFORMATION

When named pipes is listed first in the binding order and the profile is set to not use network security during logon, the Microsoft Exchange client will prompt the user for Windows NT credentials. However, it will not use them to actually connect to the Microsoft Exchange Server and the user will be denied access. If TCP/IP is listed first in the binding order, the Microsoft Exchange client will always ask for the Windows NT domain credentials regardless of the setting for Use Network Security During logon. In this case, the typed in Windows NT domain credentials will be used and the user will be allowed access.

STATUS

This is by design. If the user connects over raw IP or IPX there is no current authenticated session and thus the user is prompted for NT credentials. These credentials are then passed in on the RPC calls. The user is only prompted for NT credentials when there are no authenticated session already active. If the user is using Named Pipes, they are already running within the context of an authenticated session and thus will never be prompted for their NT credentials.