OWA 401 Error: Access is Denied from Internet Explorer

[mspain]

Hi all,

In a test lab I just installed an Exchange 2003 server. I have a mydomain.local, but I modified the default Recipient Update Policy to create mydomain.com (for future purposes, this box is not connected to the internet yet. All testing is being done internally).

The only other modification I have made is enabling SSL on the /Exchange virtual directory for secure OWA access.

I created a user account john.doe (primary email address john.doe@mydomain.com, secondary email address john.doe@mydomain.local).

Logged into a Windows XP SP2 client laptop and tried to pull up OWA in IE 6 using the url:

https://myexchange.mydomain.local/exchange

I get the popup box asking for username and password and originally tried entering the username as john.doe. This didn't work and I was asked to re-enter my credentials until finally I am taken to an Error: Access is Denied page.

If I use john.doe@mydomain.local OWA starts to load (I can see the left navigation pane with the Inbox and other folders and buttons), but then I get the popup again asking for username and password and no matter what combination I try nothing works. Eventually I am left at a blank Inbox with the message: "The folder can't be displayed. You don't have permission to perform this action."

This is Exchange 2003 Standard running SP2 on Windows 2003 Standard SP2. I did not change any other security settings other than SSL, but did check the /Exchange and /Public virtual directories and ensure Basic Authentication and Windows Integrated Authentication are enabled.

I have also checked IE6 settings and confirmed Integrated Windows Authentication is enabled.

I have also tried accessing OWA via:

https://myexchange.mydomain.local/exchange/john.doe

Furthermore, I have tried logging in from the same client using Firefox and it WORKED correctly using username: john.doe and my password.

Any ideas?

Thanks!

 

[mspain]

Well, just fooling around and tried enabling "Automatically logon with current username and password" in the Custom security settings for the Internet zone in Internet Explorer and when I browse to the OWA website now, it automatically logs me in fine. Why wouldn't it work when I enter my credentials manually?

 

[mspain]

Ok, I'm really not trying to have a conversation with myself, but I don't see an Edit button, so I'll just throw this out there:

I disabled Integrated Windows Authentication on /Exchange and /Public virtual directories, leaving just Basic Authentication and when I went to my OWA url I got prompted like before but I can now log in just fine with username john.doe and my password.