Can somebody explain the rights flow to me please? What is happening is that we have shared mailboxes that are permissioned via administrative groups in Active Directory as well as within the mailbox.
So, the mailbox is up and running fine. We create an AD group and add members to the group. Then, we manage Full Access permissions to the shared mailbox and add the group. We only have 2 domain controllers that replicate every 15 minutes. What I have seen happen is that I add somebody to the group, and they logout and back in 3 or 4 times and even reboot their Windows XP workstation, and they are unable to access the shared mailbox. I usually ask them to wait until the next day, and then they have access.
I have users that will grant access to the Inbox from within the shared mailbox, and the rights might not be available until the next day for the user. Even if they logout and back in a few times.
We are not having any active directory issues. I have run dsdiag and everything is fine. Can you guys help me understand rights flow and why it is so slow and let me know if there are any good troubleshooting tools?
When we grant permissions to shared dfs folders, rights are quick. The only problem that we are having is with Exchange mailbox rights taking a while to trickle down.
We have a CCR environment with 2 servers and one CAS server. All users are located in the same building. Our data center is located in a different building.