Outlook Web Access (OWA) clients cannot access mailbox after migration. (NETIQKB20023)

fact
Domain Migration Administrator 7.x

fact
Exchange Migrator 2.x

symptom
Outlook Web Access (OWA) clients cannot access mailbox after migration.

cause
Below are a few possible causes for Outlook Web Access to deny access:

1. The migrated account does not have permission to the source mailbox.
2. According to Microsoft, in order for users to be able to access OWA, they need the 'logon locally' right for the IIS server where OWA is installed. This could be granted via a user and/or group. SID History will also allow this access.
3. The migrated account is trying to access a hidden mailbox.

fix
Follow these steps to resolve:

1. Translate security for Exchange Mailboxes to allow the target account permissions to the source mailbox.
2. Check the 'logon locally' permissions on the IIS server.  If the logon locally right is granted via a group, make sure that group is also migrated with SID History.
3. Unhide the Exchange 5.5 mailbox.

note

For more information about Outlook Web Access permissions, please refer to the following Microsoft knowledge base article:

XWEB: How to Set Up OWA for Specific Users
http://support.microsoft.com/?kbid=236811

Formerly known as NETIQKB20023