Outlook 2000 and Active Directory

[Tom Hagen]

I just migrated a Windows peer network to a Windows 2000
AD Server. I also wipped everyones desktop clean and did
a fresh install of Windows 2000 Pro and Office 2000 Pro.
When the users would run Outlook it would fail. After
several hours of truoble shooting the only way I can get
the users to run Outlook is if they are local admins,
kinda defets a managed desktop. What am I missing in user
rights to be able to run Outlook 2000 on a managed desktop
and they don't have to local Admins?

Many Thanks,
Tom Hagen

 

[William Teng]

Hi Tom,

This issue maybe caused by several factors. Before we may go further, I
would like to collect more information to narrow down the issue.

1) What type of account are you configuring in the Outlook? Exchange,pop3
or other types?

2) If it's the exchange type, what version of your exchange
server(including service pack version)? Please also inform me the
Operating System version and the Service Pack version.

3) Do all Desktop Outlook programs failed?

4) Have you installed any anti-virus software or email monitor software?
If so, please temporarily disable or remove it and test our issue again.

5) What is the installation mode of Outlook 2000? Outlook 2000 has three
installation modes: Internet Mail Only (IMO), Corporate or Workgroup (C/W)
and No E-mail. To check your installation mode, please click "About
Microsoft Outlook" on the Outlook Help menu. In the About Microsoft Outlook
dialog box you can see if you have installed Outlook in "Internet Mail
Only", "Corporate or Workgroup" or "No Email" mode.

6) Create a new profile
1. Close Outlook.
2. Click Start, and click Control Panel.
3. Click Mail or "Mail and Fax" icon.
4. Click Show Profiles.
5. Click Prompt for a profile to be used and click Apply.
6. Click Add and type "test" in the Profile name box.
Note: Please don't choose the same name of your original profile.
7. Choose Add a new e-mail account and click Next.
8. Choose your email type and type the necessary information.
9. Click Next and click Finish.
10. Click Finish to exit.
11. Reopen Outlook.
12. Choose the new profile in the profile list and click OK.

For more information please read the article in our Microsoft Knowledge
Base:
287072 OL2002: How to Create a New E-mail Profile for Outlook
http://support.microsoft.com/?id=287072

Please inform me the troubleshooting result at your first convenience.
Thank you!



Best Regards!

William Teng
Microsoft Online Support Engineer
------------------------------------------------
Get Secure! - www.microsoft.com/security

--------------------
| Content-Class: urn:content-classes:message
| From: "Tom Hagen" <[email protected]>
| Sender: "Tom Hagen" <[email protected]>
| Subject: Outlook 2000 and Active Directory
| Date: Tue, 6 Jan 2004 09:06:48 -0800
| Lines: 12
| Message-ID: <[email protected]>
| MIME-Version: 1.0
| Content-Type: text/plain;
| charset="iso-8859-1"
| Content-Transfer-Encoding: 7bit
| X-Newsreader: Microsoft CDO for Windows 2000
| X-MIMEOLE: Produced By Microsoft MimeOLE V5.50.4910.0300
| thread-index: AcPUd3iKMIZNniHBS5uYuiB/lhbfWA==
| Newsgroups: microsoft.public.outlook.installation
| Path: cpmsftngxa07.phx.gbl
| Xref: cpmsftngxa07.phx.gbl microsoft.public.outlook.installation:41703
| NNTP-Posting-Host: tk2msftngxa12.phx.gbl 10.40.1.164
| X-Tomcat-NG: microsoft.public.outlook.installation
|
| I just migrated a Windows peer network to a Windows 2000
| AD Server. I also wipped everyones desktop clean and did
| a fresh install of Windows 2000 Pro and Office 2000 Pro.
| When the users would run Outlook it would fail. After
| several hours of truoble shooting the only way I can get
| the users to run Outlook is if they are local admins,
| kinda defets a managed desktop. What am I missing in user
| rights to be able to run Outlook 2000 on a managed desktop
| and they don't have to local Admins?
|
| Many Thanks,
| Tom Hagen
|

 

[Tom Hagen]

Thanks and sorry for the late reply,

1) They are using POP3
2) NA
3) Can't even get into Outlook unless they are a local
admin.
4) Anti-virus is Norton and is disabled when trying to run
Outlook. Don't have any other e-mail type software
running.
5) Install mode is IMO
6) Will try profile rebuild next time in office.
Currently at another company for 4 weeks doing Help Desk
issues for an Outlook 2003 rollout.

Thanks for your help,

Tom Hagen

 

[William Teng]

Hi Tom,

Thank you for your update.

We will follow up you after you try the new profile. Please inform us the
result at your first convenience. Thank you!



Best Regards!

William Teng
Microsoft Online Support Engineer

 

[Tom Hagen Jr]

Thanks for waiting. I wanted to make sure I got everything down that I could and also made a test machine to try items out on.
Here is the setup:



1) Windows 2000 Pro SP4, IE6 SP1

2) Office 2000 SR1 (did not do any of the admin or security updates)

a) Office 2000 mst file from Custom Installation Wizard with no importing of Office OPS file and no configuration of Outlook.
User will have to manually enter data needed to connect to POP3 account.

3) After doing a fresh build. Setting up a local user, logon as that users and double click the following error is given:



Microsoft Outlook

Cannot start Microsoft Outlook. Outlook cannot be configured because Administrative privileges are required for you to install some
types of software on this computer. Before you can use Outlook, you must either log on to your computer as an Administrator and
finish configuring Outlook, or ask you System Administrator to configure Outlook e-mail support for you.



I now know that is not a AD issue but an Outlook issue. How or what do I need to do so that a normal user in a managed environment
can launch Outlook and setup their Outlook with problems? Do I need to modify the mst file in some fashion or something else?



Thanks for your help,

 

[Reade Chen [MSFT]]

Hi Tom,

Based on my research, this issue may occur if the permissions for the
users/groups you are using to log in and start Outlook are not granted full
access permissions on the Office keys and sub-keys in the registry.

Check the following keys by using regedit.exe:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office
HKEY_CURRENT_USER\Software\Microsoft\Office

1. Click the Office key, on the Security menu select Permissions.

2. Click Advanced

3. Uncheck the box that says "Inherit from the parent permissions that
apply to the child objects."
(it may ask you a question about the parent permissions, choose "COPY")

4. Now, Make sure that at least the "Administrators" and "System" groups
are granted "full control".

If they are not "full control", double click on the user/group and check
the allow boxes for all permission types. If they are not listed, click
"Add" then "advanced" then "Find Now" then find the missing user/group and
highlight it, click ok, then ok again, then check the allow boxes for all
permission types, then click ok.

NOTE 1 (If there is other listings, like Administrator or specific users,
make sure they have full control also.)

NOTE 2 (if the user that is experiencing the problem is not a member of the
administrators group, then log into an admin account and add the entry
"everyone" with full control access, as well as checking that the
Administrators, System and other users have full control.)

5. After granting the proper permissions to the users/groups, check the box
"Replace permissions on all child objects with the entries show here..."
hit "apply" then "OK".

6. Perform steps 1-5 for HKLM and HKCU

7. Now start Outlook, if the permission settings are correct, Outlook
should open.

Hope this helps.

Best Regards,

Reade Chen, MCSE, MCSD
Online Support Professional
Microsoft IT Communities

Get Secure! - www.microsoft.com/security
=====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.


--------------------

From: "Tom Hagen Jr" <[email protected]>
References: <[email protected]>

<[email protected]>

Subject: Re: Outlook 2000 and Active Directory
Date: Wed, 4 Feb 2004 14:09:22 -0600
Lines: 216
X-Priority: 3
X-MSMail-Priority: Normal
X-Newsreader: Microsoft Outlook Express 6.00.2800.1158
X-MIMEOLE: Produced By Microsoft MimeOLE V6.00.2800.1165
Message-ID: <[email protected]>
Newsgroups: microsoft.public.outlook.installation
NNTP-Posting-Host: 63-231-161-85.mpls.qwest.net 63.231.161.85
Path: cpmsftngxa07.phx.gbl!cpmsftngxa10.phx.gbl!TK2MSFTNGXA05.phx.gbl!TK2MSFTNGP08
.phx.gbl!tk2msftngp13.phx.gbl
Xref: cpmsftngxa07.phx.gbl microsoft.public.outlook.installation:42838
X-Tomcat-NG: microsoft.public.outlook.installation

Thanks for waiting. I wanted to make sure I got everything down that I

could and also made a test machine to try items out on.

Here is the setup:



1) Windows 2000 Pro SP4, IE6 SP1

2) Office 2000 SR1 (did not do any of the admin or security updates)

a) Office 2000 mst file from Custom Installation Wizard with no

importing of Office OPS file and no configuration of Outlook.

User will have to manually enter data needed to connect to POP3 account.

3) After doing a fresh build. Setting up a local user, logon as

that users and double click the following error is given:

Microsoft Outlook

Cannot start Microsoft Outlook. Outlook cannot be configured because

Administrative privileges are required for you to install some

types of software on this computer. Before you can use Outlook, you must

either log on to your computer as an Administrator and

finish configuring Outlook, or ask you System Administrator to configure

Outlook e-mail support for you.

I now know that is not a AD issue but an Outlook issue. How or what do I

need to do so that a normal user in a managed environment

can launch Outlook and setup their Outlook with problems? Do I need to

modify the mst file in some fashion or something else?

 

[Tommy Campbell - [MSFT]*]

Hello,

Just a follow up on your post. Did the recommendations posted help you
solve your issue?

If we don't hear back from you, we'll assume that you no longer need
assistance with this particular issue. Please respond to the newsgroups if
you need additional help.

If you have any suggestions or comments for us, please post in
partnerfeedback. If you want to talk to other partners, please post in
partnering.

Best Regards,

Tommy Campbell, 2000 MCSA, MCSE
Microsoft Online Support Engineer
Get Secure! - www.microsoft.com/security
=====================================================
When responding to posts, please "Reply to Group" via
your newsreader so that others may learn and benefit
from your issue.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.