OWA Password Change Problem

[SpideySMJ]

We have an Exchange 2003 organization setup and running fine. I have a front end server I am using as the OWA server, that's it's only function. On our DMZ we have installed an ISA server to accept incoming OWA requests from the external network. Currently, this works perfectly, except for the password change option. When a user tries to change their password they get:

Error Code: 403 Forbidden. The server denied the specified Uniform Resource Locator (URL). Contact the server administrator. (12202)

Now, the kicker is this. If you access the server internally, that means not going through ISA, then everything works fine. Only going through ISA does it have issues. Anybody have any ideas?

"I reject your reality and substitute one of my own.

 

[markdmac]

Add the path /iisadmpwd* to the destination set for your mail domain in ISA.

Also be sure you have configured the change password option like this:
(1) You need to have SSL configured in your web server
before you could do this.
(2) Then, you need to create a new Virtual Directory
called Iisadmpwd under the
Default Web Site. Perform the following steps to do
this.
1. Open IIS from the Administrative Tools.
2. In IIS Manager expand your server, expand Web
Sites, and then expand Default Web Site.
3. Right-click Default Web site and choose New,
select Virtual Directory. In the Welcome screen click
Next.
4. In the Virtual Directory window type Iisadmpwd.
Click Next.
5. In the Website Content Directory screen move to %
Systemroot%\System32\Inetsrv\Iisadmpwd. Click Next.
6. In the Virtual Directory Access Permissions grant
Read, Run Scripts and Execute permissions. Click Next.
8. Click Finish.
9. Confirm the availability of the new virtual
directory in the IIS Console.


I hope you find this post helpful.

Regards,

Mark

 

[johncan20]

i have done this but i still dont get the option in OWA. any idea why?

 

[markdmac]

It should be on the Options screen.

You may also need to assign NTFS rights to %Systemroot%\System32\Inetsrv\Iisadmpwd for your network users.

Oh, and there is a registry setting you may not have to enable the Change Password button. In the Registry of the server.

Open Regedit.
Navigate to
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MSExchangeWEB\OWA

Create a new REG-DWORD value with the name of "DisablePassword" (without the quotes) and give it the value of 0 (zero).
Restart the IIS Services (you can do it from the IIS Admin tool).
Now check to see if the Change Password option is available in OWA.


I hope you find this post helpful.

Regards,

Mark