OWA 2003 Permissions Problem

When domain users access OWA they have to enter their credentials multiple
times to eventually reach OWA, and even so some elements don't load. On the
other hand users with domain admin permissions only need to supply
credentials once.

I know there is probably a permission issue on some IIS folder on the
server, but I don't know where to look?

Catherine

kevynp
Thu Aug 19 14:44:50 CDT 2004

The following applies to OWA 2000 or OWA 2003. The following assumes that
you are not using Forms-Based Authentication(FBA).

1. Make sure that the OWA authentication settings are set as follows on the
Exchange, public, and Exchweb virtual directories. All other check boxes
should be unchecked:

Legend:
ESM = Change made in Exchange System Manager
IIS = Change made in the IIS console(has different names in Windows 2000 &
2003)

Exchange & public(ESM): Basic(w/ Default Domain = <netbios name of internal
domain>)
Exchweb & all subdirectories(IIS): Anonymous

Note: If you have to change the authethentication settings of the Exchweb
virtual directory, or any of its subdirectories, then the World Wide Web
Publishing service(w3svc) will have to restarted through the Services
program.

Note: The Exchweb directory, and its subdirectories, only contain the icons
that you see in the OWA interface, and some controllers.

Note: All mailbox(back-end) and front-end servers should match each other's
settings, for these virtual directories, exactly. The exception to this is
if you are using Exchange 2003 ActiveSync. In this case, all servers that
contain mailboxes of users that are using ActiveSync should have the
Windows Integrated check box left check(in ESM).

2. Make sure that users have the following permissions on the <drive
letter>:\<path to Exchsrvr directory>\Exchsrvr directory, and all
subdirectories. This includes all Exchsrvr directories on all drives.

Read & Execute
List Folder Contents
Read

Note: A good way to give these permissions to your users is to give the
Domain Users group these permissions to the Exchsrvr
directory(directories)..

===================================
From: Kevyn Pietsch[MSFT]

This posting is provided "AS IS" with no warranties, and confers no rights.
Use of included script samples are subject to the terms specified at:

http://www.microsoft.com/info/cpyright.htm

===================================

Doug
Thu Aug 19 14:56:15 CDT 2004

Are you using a Proxy server, Firewall, or Front-End/Back-End Configuration?
Make sure that the permissions were not changed.

Check that the default domain is specified for Basic Authentication in the
Public virtual directory. By default, the Public virtual directory is
located under the Default Web Site in Internet Services Manager.
1.. In ESM, open the Protocols - HTTP - Exchange Virtual Server - Public
Virtual Directory properties
2.. Go to the Access tab and then click Authentication .
3.. Under Basic Authentication , type the same value in the Default Domain
box as the default domain for the Exchange virtual directory within Internet
Services Manager.
4.. Apply and close the settings.
5.. Restart the Default Web Site or the W3Svc
http://support.microsoft.com/default.aspx?scid=KB;EN-US;327843


Doug Blanchard [MSFT]
Microsoft PSS

Please do not send email directly to this alias. This alias is for newsgroup
purposes only. This posting is provided "AS IS" with no warranties, and
confers no rights.

"Catherine Benoit" <cbinfo@iatroquest.com> wrote in message
news:erdPg$UhEHA.1184@TK2MSFTNGP12.phx.gbl...
> When domain users access OWA they have to enter their credentials multiple
> times to eventually reach OWA, and even so some elements don't load. On
> the
> other hand users with domain admin permissions only need to supply
> credentials once.
>
> I know there is probably a permission issue on some IIS folder on the
> server, but I don't know where to look?
>
> Catherine
>
>
>