HTTP 1.1 401 Unauthorized error 1

[baronne]

Hi folks!

I've got an error that seems to have started recently. Whenever a new user is created, they cannot logon to OWA. They get prompted three times and then an error HTTP 1.1 401 Unauthorized

I can, however, logon using Firefox and then once I have done so, it works fine in IE 6. It also works if I logon using

http://owa/exchange/USERNAME

on my computer. Then the user can logon at their machine and it works.

I've looked at articles describing a problem with the mailbox having only the SELF permission, which changes either when the account first receives mail or logs on for the first time. I have tried sending mail to the account which seems to change the permissions but I still cannot login.

I'm wondering if it's a registry setting on IE. We have a locked down environment and users get a default profile from the NETLOGON share on the domain controllers.

Any ideas?

cheers

Baronne


:: baronne
------------------
"lekker, shot bru

 

[markdmac]

I'm wondering if it's a registry setting on IE. We have a locked down environment and users get a default profile from the NETLOGON share on the domain controllers.

not much to go on here about your domain setup. I would suggest trying to create a test user that does not get that default policy to see if that is the cause fo your problem or not. From there you can work on isolating what within that policy may be at fault.

I hope you find this post helpful.

Regards,

Mark

Check out my scripting solutions at

http://www.thespidersparlor.com/vbscript

 

[WhoKilledKenny]

when trying to login, what format are you using?
If username is failing, example jdoe, then try DomainName\jdoe or jdoe@DomainName.
If you are able to log in using the DomainName\username fromat or the UPN, there is a configuration problem in IIS for the domain name.
I was able to resolve this problem by hard coding the AD domain name in the default domain: setting on the Authenticaion Methods (Autthentication and access control) page of the Directory Security Tab of the web-site properties. Before making any changes to your site, do an IISBACK so that you can recorver should you encounter an issue.

 

[baronne]

Ok, thanks Mark for your tip, that has worked. So now to try and troubleshoot the issue. Would you suggest that it would be an IE maintenance GPO issue?
cheers
Baronne

:: baronne
------------------
"lekker, shot bru

 

[markdmac]

What I would next suggest is to create a new GPO and systematically add in the policy elements 2 at a time and test this again each step of the way. When you find it breaks again you know it is one of 2 policy elements causing the problem and should be easy to isolate from there.

I hope you find this post helpful.

Regards,

Mark

Check out my scripting solutions at

http://www.thespidersparlor.com/vbscript

 

[baronne]

I haven't quite managed to resolve it yet.... but I have started adding back some of the GPOs and it is weird because it is intermittently working....

:: baronne
------------------
"lekker, shot bru

 

[markdmac]

I would suggest you add a feature then wait a while for replication to happen etc. Verify that your server logs don't show any replication issues. I'd also run a DCDIAG and a NETDIAG to see if they report any problems. Assuming that those reports come out clean, then continue to add in GPOs until you find one that definately is breaking this on you. It will be tedious but necessary to finding the culprit.

I hope you find this post helpful.

Regards,

Mark

Check out my scripting solutions at

http://www.thespidersparlor.com/vbscript