Outlook Web Access Error

[bladesport]

When attempting to login to OWA in Exchange 2000, all of my users get this error after entering username and password: “Error. Access is Denied.” Administrators can log on just fine but normal users cannot. The Exchange server is Win2K with Exchange 2K and all the latest service packs installed. OWA resides on the Exchange server through the default install. The primary domain controller and global catalog is a separate Win2K server.

OWA used to work until recently. Nothing has been modified on the Exchange Server, but recently there were some unintentional security changes on the domain controller and we don’t know what they were. The only thing I can find about login denial in OWA says to make sure that users have “log on locally” rights and “access this computer from the network” rights. They have these but still can’t login to OWA.

Any ideas?

 

[Xybertron]

That is all they need. This doesn't work by default on a DC because Everyone doesn't have logon locally.

I would verify that a problem user can logon to the server. And then try to use OWA locally on the box. Dan
Microsoft Exchange Support @ Microsoft

 

[SDELISLE]

I Have the same problem, and the ordinary user can log on localy and access his mailbox from outlook but via OWA No !!

* The only way I found is when I add him in administrators Group !!

 

[Xybertron]

You only need that if it is a DC. And they only need to be given logon locally. Not administrator!

Windows 2000 Domain Controller
Click Start, point to Programs, point to Administrative Tools, and then click Domain Controller Security Policy.
Click Security Settings, click Local Policies, and then click User Rights Assignment.
In the Details pane, double-click Log on locally, remove the Everyone group, and then add the group or users who will have access to OWA.
Close the Domain Controller Security Policy window.
Click Start, click Run, type secedit /refreshpolicy machine policy, and then click OK. Dan
Microsoft Exchange Support @ Microsoft

 

[SDELISLE]

Thank you !! I understand and already do this (logon localy)... I'm on a DC. Without Succes, seem other place in the security policy are not correctly set because to make a test if I put the user in admin group, everything work ! I can't put everybody in this group...

Thank

 

[Xybertron]

Ok so like I said add either them or Everyone rights to logon locally.

You have to have this right for OWA to work on a DC! Dan
Microsoft Exchange Support @ Microsoft