A different OWA problem

[djwatts]

Hello,

Bit of a wierd one here, OWA stopped working shortly after it was installed. Haven't had time 'till now to get it sorted out. I've been through so many articles online and none seem to have my specific problem.

We are part of a larger exchange organisation, we are a sub domain inside a larger forest. All on Server 2003

xxxx.org.uk (Exchange 2000/2003)
+ yyyyyy.co.uk (Exchange 2003)

xxxxx.org.uk doesn't use owa I think they have it disabled. The default path in our IIS for the Exchange VDIR, is pointing towards their domain which we can't change. I setup another VDIR (TEST) pointing to our domain/mailboxes yyyyyy.co.uk/MBX

We get Error: Access Denied when we try to connect to the Exchange VDIR and also the TEST vdir. If I remove the TEST vdir from the exchange application pool, it will list all the mailboxes which I can then browse using the old directory listing text mode in IE.

I have run the MS AuthDiag program and this can't find any errors in the setup at all. Has anyone experienced anything similar to this??? Really don't want to re-install exchange if it can be helped.

I've been through so much online material and there doesn't seem to be anything relevant. I've been through so many sites showing how to setup the security on the VDIRS and I'm confident mine are pretty much correct.

Any help greatly appreciated.

Regards

 

[markdmac]

Let's verify your settings in IIS. Here is how the security needs to be configured.

Default Web site
Enable Anonymous access
Integrated Windows Authentication
Exadmin
Integrated Windows Authentication
Require SSL
Require 128 bit
Exchange
Basic Authentication
Default Domain \
Exchange-oma
Integrated Windows Authentication
Basic Authentication
ExchWeb
Enable Anonymous access
Require SSL
Require 128 bit
Microsoft-Server-ActiveSync
Scripts and Executables
Exchange Application Pool
Basic Authentication
Default Domain DomainName
OMA
Scripts Only
ExchangeMobileBrowseApplicationPool
Basic Authentication
Default Domain DomainName
Public
Basic Authentication
Default Domain \
Require SSL
Require 128 bit


I hope you find this post helpful.

Regards,

Mark

Check out my scripting solutions at

http://www.thespidersparlor.com/vbscript

 

[djwatts]

Hi,

Thanks for your reply, I have just checked all the settings in IIS and ESM and they appear to be all correct. The only thing that looks out of place is that we don't have the Exchange-OMA vdir, is this a default folder for Ex2003? We don't really need to get the mobile access working just the normal OWA functionality.

any other ideas on what could be causing this???

Thanks again

 

[markdmac]

I think you need to isolate where the problem is. Can you access OWA internally by going to

http://servername/exchange?

I hope you find this post helpful.

Regards,

Mark

Check out my scripting solutions at

http://www.thespidersparlor.com/vbscript

 

[djwatts]

Hi,

No can't access it internally at all (we don't need external access), it just prompts for user name 3 times then says error: access denied.

I haven't enabled SSL yet, wanted to get it working with Basic auth first.

I have tried using various username combos i.e.

username@domain.com
domain\username
domain.co.uk\username
first.last@domain.co.uk

There is nothing being logged in the event logs, I have tried using sysinternals filemon to see where access is denied but it doesn't show anything.

The IIS log doesn't reveal anything helpful either

Any ideas on this one???

Cheers

 

[markdmac]

Look at this KB article to start. There are several MS KBs that may help you. Are you by chance using Trend Micro AV?

http://support.microsoft.com/kb/888422/en-us

I hope you find this post helpful.

Regards,

Mark

Check out my scripting solutions at

http://www.thespidersparlor.com/vbscript

 

[djwatts]

Hi again,

Sorry for not getting back - i've been off on annual leave.

i've looked at the article you mentioned above before, it seems to refer to problems relating to ISA, we're not using that product. Also we haven't enabled FBA yet, want to get it working normally first.

do you have any other ideas what could be causing this?

Thanks for your help

Regards
Dan

 

[markdmac]

Repeat my last question, are you using TrendMicro?

I hope you find this post helpful.

Regards,

Mark

Check out my scripting solutions at

http://www.thespidersparlor.com/vbscript

 

[djwatts]

Sorry, forgot to include -

No we're using Symantec AV with the exchange agent, have tried removing this but it doesn't seem to effect the problem.

Thanks for your help

Regards

 

[djwatts]

When I try and access the url it prompts for the username saying "connecting to: exchange.domain.co.uk" whereas in my test environment it shows "connecting to: domain.co.uk"

All the IIS settings point to the domain and not the computer name. Could this be anything to do with the problem???

Thanks

 

[markdmac]

The IIS settings need to be as I detailed above. If you have that then it should be good.

It is possible that you have something else messed up and a reinstall of OWA could correct it.

I hope you find this post helpful.

Regards,

Mark

Check out my scripting solutions at

http://www.thespidersparlor.com/vbscript