Link to home
Start Free TrialLog in
Avatar of blaze2342
blaze2342

asked on

OWA prompting for passwords

We are running Exchange 2003 on Server 2003.  When my OWA users log into the website they get prompted for their username.. it lets them in and then once everything is loaded they get prompted again and again and again.  As far as I can tell they have access to what they need they just keep getting prompted.  I suspect its a permission issue.   I've tried recreating the virtual directories using this guide http://www.msexchange.org/tutorials/Resetting-OWA-Folder-IIS-security-permissions-Exchange-2003.html  but no luck.  Thoughts?
Avatar of LeeDerbyshire
LeeDerbyshire
Flag of United Kingdom of Great Britain and Northern Ireland image

You'll need to look at the IIS Log Files to see which resources are generating a 401 status, causing the login box to appear.  This problem is usually caused by not having Anonymous Access enabled on the ExchWeb Virtual Directory in IIS Manager.
Avatar of blaze2342
blaze2342

ASKER

I found this in the log.. not sure if this is right
2007-09-27 14:13:38 W3SVC1 66.152.24.189 SUBSCRIBE /exchange/cook/Calendar - 80 - 66.152.24.187 Mozilla/4.0+(compatible;+MSIE+7.0;+Windows+NT+5.1;+.NET+CLR+1.1.4322;+.NET+CLR+2.0.50727;+.NET+CLR+3.0.04506.30) 401 1 0
2007-09-27 14:13:38 W3SVC1 66.152.24.189 SUBSCRIBE /exchange/cook/Tasks - 80 - 66.152.24.187 Mozilla/4.0+(compatible;+MSIE+7.0;+Windows+NT+5.1;+.NET+CLR+1.1.4322;+.NET+CLR+2.0.50727;+.NET+CLR+3.0.04506.30) 401 1 0
2007-09-27 14:13:38 W3SVC1 66.152.24.189 SUBSCRIBE /exchange/cook/Calendar - 80 ei\cook 66.152.24.187 Mozilla/4.0+(compatible;+MSIE+7.0;+Windows+NT+5.1;+.NET+CLR+1.1.4322;+.NET+CLR+2.0.50727;+.NET+CLR+3.0.04506.30) 401 5 0
2007-09-27 14:13:38 W3SVC1 66.152.24.189 SUBSCRIBE /exchange/cook/Tasks - 80 ei\cook 66.152.24.187 Mozilla/4.0+(compatible;+MSIE+7.0;+Windows+NT+5.1;+.NET+CLR+1.1.4322;+.NET+CLR+2.0.50727;+.NET+CLR+3.0.04506.30) 401 5 0
You know the one thing that isnt popping up right now is the reminders that usually pop up when you log into exchange.  The logon prompt is popping up when that normally would pop up.  Thoughts?
There should be a lot more than that.  You will need to note the exact time that you were asked to log in, and then look in the IIS log to see what resource the browser has asked the server for (possibly without you knowing, since it does things in the background).  Note that the times in the IIS log files are in GMT.
oh yea.. the log file is huge.  I was just grabbing the last couple of lines from it related to the user "cook" that i'm testing with.  What do you think about the reminders thing?  

2007-09-27 14:17:43 W3SVC1 66.152.24.189 SEARCH /exchange/cook/Inbox/ - 80 - 66.152.24.187 Mozilla/4.0+(compatible;+MSIE+7.0;+Windows+NT+5.1;+.NET+CLR+1.1.4322;+.NET+CLR+2.0.50727;+.NET+CLR+3.0.04506.30) 401 1 0
2007-09-27 14:17:44 W3SVC1 66.152.24.189 SEARCH /exchange/cook/Inbox/ - 80 ei\cook 66.152.24.187 Mozilla/4.0+(compatible;+MSIE+7.0;+Windows+NT+5.1;+.NET+CLR+1.1.4322;+.NET+CLR+2.0.50727;+.NET+CLR+3.0.04506.30) 207 0 0
2007-09-27 14:17:44 W3SVC1 66.152.24.189 SUBSCRIBE /exchange/cook/Calendar - 80 ei\cook 66.152.24.187 Mozilla/4.0+(compatible;+MSIE+7.0;+Windows+NT+5.1;+.NET+CLR+1.1.4322;+.NET+CLR+2.0.50727;+.NET+CLR+3.0.04506.30) 401 5 0
2007-09-27 14:17:44 W3SVC1 66.152.24.189 GET /exchweb/6.5.7651.60/controls/ctrl_reminder.htc - 80 - 66.152.24.187 Mozilla/4.0+(compatible;+MSIE+7.0;+Windows+NT+5.1;+.NET+CLR+1.1.4322;+.NET+CLR+2.0.50727;+.NET+CLR+3.0.04506.30) 304 0 0
2007-09-27 14:17:44 W3SVC1 66.152.24.189 SUBSCRIBE /exchange/cook/Calendar - 80 - 66.152.24.187 Mozilla/4.0+(compatible;+MSIE+7.0;+Windows+NT+5.1;+.NET+CLR+1.1.4322;+.NET+CLR+2.0.50727;+.NET+CLR+3.0.04506.30) 401 1 0
2007-09-27 14:17:44 W3SVC1 66.152.24.189 SUBSCRIBE /exchange/cook/Calendar - 80 ei\cook 66.152.24.187 Mozilla/4.0+(compatible;+MSIE+7.0;+Windows+NT+5.1;+.NET+CLR+1.1.4322;+.NET+CLR+2.0.50727;+.NET+CLR+3.0.04506.30) 401 5 0
2007-09-27 14:17:44 W3SVC1 66.152.24.189 SUBSCRIBE /exchange/cook/Tasks - 80 - 66.152.24.187 Mozilla/4.0+(compatible;+MSIE+7.0;+Windows+NT+5.1;+.NET+CLR+1.1.4322;+.NET+CLR+2.0.50727;+.NET+CLR+3.0.04506.30) 401 2 2148074254
2007-09-27 14:17:44 W3SVC1 66.152.24.189 SUBSCRIBE /exchange/cook/Tasks - 80 - 66.152.24.187 Mozilla/4.0+(compatible;+MSIE+7.0;+Windows+NT+5.1;+.NET+CLR+1.1.4322;+.NET+CLR+2.0.50727;+.NET+CLR+3.0.04506.30) 401 1 0
2007-09-27 14:17:44 W3SVC1 66.152.24.189 SUBSCRIBE /exchange/cook/Tasks - 80 ei\cook 66.152.24.187 Mozilla/4.0+(compatible;+MSIE+7.0;+Windows+NT+5.1;+.NET+CLR+1.1.4322;+.NET+CLR+2.0.50727;+.NET+CLR+3.0.04506.30) 401 5 0
2007-09-27 14:17:46 W3SVC1 66.152.24.189 SUBSCRIBE /exchange/cook/Calendar - 80 - 66.152.24.187 Mozilla/4.0+(compatible;+MSIE+7.0;+Windows+NT+5.1;+.NET+CLR+1.1.4322;+.NET+CLR+2.0.50727;+.NET+CLR+3.0.04506.30) 401 1 0
2007-09-27 14:17:46 W3SVC1 66.152.24.189 SUBSCRIBE /exchange/cook/Tasks - 80 - 66.152.24.187 Mozilla/4.0+(compatible;+MSIE+7.0;+Windows+NT+5.1;+.NET+CLR+1.1.4322;+.NET+CLR+2.0.50727;+.NET+CLR+3.0.04506.30) 401 1 0
2007-09-27 14:17:46 W3SVC1 66.152.24.189 SUBSCRIBE /exchange/cook/Calendar - 80 ei\cook 66.152.24.187 Mozilla/4.0+(compatible;+MSIE+7.0;+Windows+NT+5.1;+.NET+CLR+1.1.4322;+.NET+CLR+2.0.50727;+.NET+CLR+3.0.04506.30) 401 5 0
2007-09-27 14:17:46 W3SVC1 66.152.24.189 SUBSCRIBE /exchange/cook/Tasks - 80 ei\cook 66.152.24.187 Mozilla/4.0+(compatible;+MSIE+7.0;+Windows+NT+5.1;+.NET+CLR+1.1.4322;+.NET+CLR+2.0.50727;+.NET+CLR+3.0.04506.30) 401 5 0
2007-09-27 14:18:44 W3SVC1 66.152.24.189 GET /exchweb/6.5.7651.60/controls/ctrl_notify.htc - 80 - 66.152.24.187 Mozilla/4.0+(compatible;+MSIE+7.0;+Windows+NT+5.1;+.NET+CLR+1.1.4322;+.NET+CLR+2.0.50727;+.NET+CLR+3.0.04506.30) 304 0 0
2007-09-27 14:18:44 W3SVC1 66.152.24.189 SUBSCRIBE /exchange/cook/Inbox - 80 - 66.152.24.187 Mozilla/4.0+(compatible;+MSIE+7.0;+Windows+NT+5.1;+.NET+CLR+1.1.4322;+.NET+CLR+2.0.50727;+.NET+CLR+3.0.04506.30) 401 2 2148074254
2007-09-27 14:18:44 W3SVC1 66.152.24.189 SUBSCRIBE /exchange/cook/Inbox - 80 - 66.152.24.187 Mozilla/4.0+(compatible;+MSIE+7.0;+Windows+NT+5.1;+.NET+CLR+1.1.4322;+.NET+CLR+2.0.50727;+.NET+CLR+3.0.04506.30) 401 1 0
2007-09-27 14:18:44 W3SVC1 66.152.24.189 SUBSCRIBE /exchange/cook/Inbox - 80 ei\cook 66.152.24.187 Mozilla/4.0+(compatible;+MSIE+7.0;+Windows+NT+5.1;+.NET+CLR+1.1.4322;+.NET+CLR+2.0.50727;+.NET+CLR+3.0.04506.30) 401 5 0
All those 401,5s look strange.  You shouldn't be getting any of those at all.  401;5 means 'Authorization failed by ISAPI/CGI application'.  What that might be, I don't know.  Do you have Forms-based Authentication enabled?
Nope.
Here are my virtual directory permissions:  

Exchange - Basic with Domain
ExchWeb - anonymous
OMA - Basic with Domain
Public - Integrated, Basic with Domain
OWAAdmin - Basic with Domain
Microsoft Server Activesync - Basic with Domain
IISADMPWD - Anonymous, Integrated
Exadmin - Integrated



ASKER CERTIFIED SOLUTION
Avatar of LeeDerbyshire
LeeDerbyshire
Flag of United Kingdom of Great Britain and Northern Ireland image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial