Often the following error is logged in the mail or calendar agent's log files:
"Logon Error -2147221219 the attempt to log
On to the Microsoft Exchange Server computer has failed. -
MAPI_E_FAILONEPROVIDER (Microsoft Exchange Server Information Store)
Low level error: 0x0 File: 'aeWrapHelpers.h' Line: '264'"
This error is received if the Active Directory account status is set to Disabled or if the service account does not have the required permissions.
Depending on the above mentioned cause take the following steps.
1. If account is disabled do the following:
a. Enable the account.
b. Remove the account from the mail sync job if it is meant to be in a disabled status.
c. Associated External Account needs to be set to "SELF" so that "msExchMasterAccountSID" attribute is populated. This will allow the login into the mailbox of disabled account. Refer to the Microsoft KB article ID 278966: http://support.microsoft.com/kb/278966
d. Install the following Microsoft Exchange hotfix that will change the behavior in the way Exchange handles disabled accounts:
2. Verify the following permissions are set for the service account:
a. Ensure that the Quest Service Account has Full Control at the Organization level within the Target Exchange Organization. (This must include "SendAs" and "ReceiveAs" permissions.)
b. Ensure that the Quest Service Account is a member of the "Built-In/Administrators" group within Active Directory. (No other group membership is required and some group membership could actually cause explicit denies on "SendAs" and "ReceiveAs" permissions...such as Domain Administrators or Enterprise Administrators.)
c. Inheritance is setup to propagate permissions correctly from the Exchange Organization to every mailbox in the target environment.
d. Verify that the service account is a member of the local administrators group on all Exchange servers involved in the migration.
3. It was reported in may cases that assigning SendAs/ReceiveAs directly on the Information Store level rather then on the Exchange 2000/2003 organization itself resolves problems with the service account logging into the other mailboxes.