Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations John Tel on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

IIS 6.0 OWA Change password Help!

Status
Not open for further replies.

TecGuy

MIS
Sep 18, 2002
44
US
Greetings Everyone,

I'm currently running Windows 2003 Server (SP1) with Exchange 2003 (Ent. edition SP2) installed.

I'm running into an issue where when a password needs to be changed at login and the user only has OWA access. They are changed to a page asking for their username, Old password, new password and confirm new password. The problem is once you hit "Ok" to change it you are then prompted for another login box. This box I'm assuming is related to IIS. Can someone confirm that and also is there a way to avoid having to put in your infomration twice.

Once the user attempts to login they are redirected to the change password page. Once they supply all the correct information another pop up is displayed asking for username and password. This pop is requesting your old password not your new one.

Here are a few articles that show the problem I'm having but I was unable to find a solution for it. Below is the microsoft Article on this.


When you click OK, you are prompted to submit the Password Change credentials
This problem can occur if the client has not authenticated to IIS before the client submits the request. Typically, this problem occurs in OWA when the following conditions are true: • Basic Authentication is enabled on the Iisadmpwd virtual directory and on the Exchange virtual directory.
• Exchange is using Owaauth.dll to control the logon to OWA.
When you are prompted for credentials, make sure that you enter the old password that you are trying to change. Enter the old password because you are still changing the password when you click OK. Only enter your new credentials after you receive the message that the password was successfully changed.



Anyone know of a fix for this? Am I missing a setting in IIS to aviod users having to enter their information again. IIS is using Basic authentication for both the IISADMPWD and Exchange Directory in IIS.


Thanks in Advance
 
Could be that the user or process that the OWA site uses doesn't have execute permissions on the OWAAuth.dll file?



Steve.

"They have the internet on computers now!" - Homer Simpson
 
Greetings,

That isn't the file used with IIS 6.0 Its the "iispwchg.dll". I have domain admin rights and even when setting my password to change at next login I still get the double prompts.

Can anyone verify the settings they have on a live OWA box. Confirm what rights that are assigned and where. Mine are as follow: Below show's 2 tabs from IIS. The virutal directory Tab and the Directory Security tab / Authentication and access controls.


I'm assumeing this is a permissions issues somewhere or some how since they are being prompted twice for loging and password.



************************************************************

Virtual Directory - TAB

The content for this resource should come from:
---- A directory located on thsi coputer

Local path:
---- C:\WINDOWS\system32\inetsrv\iisadmpwd
()Script Source Access
(X)Read
()Write
()Directory Browsing
(X)Log visists
(X)Index this resouce

Application Settings:
-Application name: IISADMPWD
-Starting point: <Default Web Site>\IISADM...
-Excute Permissions: Scrips only
-Application Pool: ExchangeApplicationPool
************************************************************

Directory Security - TAB
- Authentication and Control Methonds -
(X) Basic Authentication (password sent in clear txt)
- Default Domain: OURDOMANNAMEHERE





 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top