majmojo is correct. I too had the same problem. This fixed it.
Other thoughts: KEEP ON TOP OF IIS PATCHES. When you host a web page, you usually keep the box in a DMZ, isolated from your actual NT domain. It's safer that way. With OWA, you can still isolate the box in a DMZ, but...