OWA authentication

Hi,

We have installed 2 Exchange 2007 Mailboxservers an 2 CAS/HUB Servers on our
network. On the DMZ we have two ISA 2006 Enterprise Servers for publishing
Sharepoint and OWA. The ISA Servers are on an Array on a workgroup.
For publishing OWA we have configured Formbased Authentication with RSA
SecurID. This works fine. But now when I logon with my credentials (Name,
Domainpassword and Passcode for RSA) I recieve a new window to make a second
login to the Exchange Server. When I put in my Login informations (for
Domain) I can work with my OWA. Thats fine.
But when I logout from OWA (without to close IE) and a friend login, he
recieve my mailbox.
I think it has saved the second logon information and make the logon to
exchange with this informations.

Why? Can someone help?

Thanks,
Paul

Danie
Fri Feb 01 01:51:17 CST 2008

Verify that forms-based authentication is off on the Mailbox servers and
more important on your CAS.

What happens is that your ISA has its own forms-based page and then request
info from your CAS. If forms-based is on on your CAS, that is what is sent
to the ISA server and subsequently to the user.

If FB is off on the CAS the ISA uses the Windows Integrated method to
request info from the CAS. Then, no dual FB prompt.

Check
http://www.microsoft.com/technet/isa/2006/deployment/exchange.mspx#FBAFE

"wipaul" <wipaul@discussions.microsoft.com> wrote in message
news:AC08A9ED-590D-493F-8F1D-CD086AA67F47@microsoft.com...
> Hi,
>
> We have installed 2 Exchange 2007 Mailboxservers an 2 CAS/HUB Servers on
> our
> network. On the DMZ we have two ISA 2006 Enterprise Servers for publishing
> Sharepoint and OWA. The ISA Servers are on an Array on a workgroup.
> For publishing OWA we have configured Formbased Authentication with RSA
> SecurID. This works fine. But now when I logon with my credentials (Name,
> Domainpassword and Passcode for RSA) I recieve a new window to make a
> second
> login to the Exchange Server. When I put in my Login informations (for
> Domain) I can work with my OWA. Thats fine.
> But when I logout from OWA (without to close IE) and a friend login, he
> recieve my mailbox.
> I think it has saved the second logon information and make the logon to
> exchange with this informations.
>
> Why? Can someone help?
>
> Thanks,
> Paul

wipaul
Fri Feb 01 02:58:03 CST 2008

Thanks a lot.

Now it works fine!

Happy Thanks,
Paul

"Danie Vink" wrote:

> Verify that forms-based authentication is off on the Mailbox servers and
> more important on your CAS.
>
> What happens is that your ISA has its own forms-based page and then request
> info from your CAS. If forms-based is on on your CAS, that is what is sent
> to the ISA server and subsequently to the user.
>
> If FB is off on the CAS the ISA uses the Windows Integrated method to
> request info from the CAS. Then, no dual FB prompt.
>
> Check
> http://www.microsoft.com/technet/isa/2006/deployment/exchange.mspx#FBAFE
>
> "wipaul" <wipaul@discussions.microsoft.com> wrote in message
> news:AC08A9ED-590D-493F-8F1D-CD086AA67F47@microsoft.com...
> > Hi,
> >
> > We have installed 2 Exchange 2007 Mailboxservers an 2 CAS/HUB Servers on
> > our
> > network. On the DMZ we have two ISA 2006 Enterprise Servers for publishing
> > Sharepoint and OWA. The ISA Servers are on an Array on a workgroup.
> > For publishing OWA we have configured Formbased Authentication with RSA
> > SecurID. This works fine. But now when I logon with my credentials (Name,
> > Domainpassword and Passcode for RSA) I recieve a new window to make a
> > second
> > login to the Exchange Server. When I put in my Login informations (for
> > Domain) I can work with my OWA. Thats fine.
> > But when I logout from OWA (without to close IE) and a friend login, he
> > recieve my mailbox.
> > I think it has saved the second logon information and make the logon to
> > exchange with this informations.
> >
> > Why? Can someone help?
> >
> > Thanks,
> > Paul
>
>
>

Danie
Fri Feb 01 03:59:24 CST 2008

Glad to be of help.

"wipaul" <wipaul@discussions.microsoft.com> wrote in message
news:AC97B266-39BA-4C13-926A-9AF64E6EE467@microsoft.com...
> Thanks a lot.
>
> Now it works fine!
>
> Happy Thanks,
> Paul
>
> "Danie Vink" wrote:
>
>> Verify that forms-based authentication is off on the Mailbox servers and
>> more important on your CAS.
>>
>> What happens is that your ISA has its own forms-based page and then
>> request
>> info from your CAS. If forms-based is on on your CAS, that is what is
>> sent
>> to the ISA server and subsequently to the user.
>>
>> If FB is off on the CAS the ISA uses the Windows Integrated method to
>> request info from the CAS. Then, no dual FB prompt.
>>
>> Check
>> http://www.microsoft.com/technet/isa/2006/deployment/exchange.mspx#FBAFE
>>
>> "wipaul" <wipaul@discussions.microsoft.com> wrote in message
>> news:AC08A9ED-590D-493F-8F1D-CD086AA67F47@microsoft.com...
>> > Hi,
>> >
>> > We have installed 2 Exchange 2007 Mailboxservers an 2 CAS/HUB Servers
>> > on
>> > our
>> > network. On the DMZ we have two ISA 2006 Enterprise Servers for
>> > publishing
>> > Sharepoint and OWA. The ISA Servers are on an Array on a workgroup.
>> > For publishing OWA we have configured Formbased Authentication with RSA
>> > SecurID. This works fine. But now when I logon with my credentials
>> > (Name,
>> > Domainpassword and Passcode for RSA) I recieve a new window to make a
>> > second
>> > login to the Exchange Server. When I put in my Login informations (for
>> > Domain) I can work with my OWA. Thats fine.
>> > But when I logout from OWA (without to close IE) and a friend login, he
>> > recieve my mailbox.
>> > I think it has saved the second logon information and make the logon to
>> > exchange with this informations.
>> >
>> > Why? Can someone help?
>> >
>> > Thanks,
>> > Paul
>>
>>
>>