After you upgrade the global catalog to Windows Server 2003, you receive an error message when you use Outlook 2000 or an earlier version to resolve aliases or to connect to a server that is running Exchange Server (903295)


The information in this article applies to:

  • Microsoft Exchange Server 2003 Enterprise Edition
  • Microsoft Exchange Server 2003 Standard Edition
  • Microsoft Exchange 2000 Server

SYMPTOMS

You upgrade the global catalog to Microsoft Windows Server 2003. When you use Microsoft Outlook 2000 or an earlier version to resolve aliases by clicking Check Names, you receive an error message that is similar to the following:
The name could not be resolved. Network problems are preventing connection to the Microsoft Exchange Server computer. Contact your system administrator if this condition persists.
Alternatively, when you use Outlook 2000 or an earlier version to connect to a server that is running Microsoft Exchange Server, you receive an error message that is similar to the following:
Exchange Server is unavailable.

CAUSE

This issue occurs because the Windows Server 2003 security templates are more secure than the Microsoft Windows 2000 security templates.

RESOLUTION

To resolve the issue, follow these steps:
  1. On the global catalog that was upgraded to Windows Server 2003, click Start, point to All Programs, point to Administrative Tools, and then click Domain Controller Security Policy.
  2. Expand Local Policies, and then click Security Options.
  3. Set the policies as listed in the following table.
    Policy NameStatus
    Network access: Allow anonymous SID/Name translationEnabled
    Network access: Do not allow anonymous enumeration of SAM accountsDisabled
    Network access: Let Everyone permissions apply to anonymous usersEnabled
    Network security: Do not store LAN Manager hash value on next password changeDisabled
    Network security: LAN Manager authentication levelSend LM & NTLM response
  4. Close the Domain Controller Security Policy console.
  5. Click Start, click Run, type gpupdate /force, and then click OK.
  6. On the Exchange server, click Start, click Run, type services.msc, and then click OK.
  7. Locate the Microsoft Exchange System Attendant service, click Restart Service on the toolbar, and then close the Services console.
Modification Type:MajorLast Reviewed:7/27/2005
Keywords:kbexchDIRECTORY kbprb KB903295 kbAudITPRO
©2004 Microsoft Corporation. All rights reserved.