Link to home
Start Free TrialLog in
Avatar of Jeb911
Jeb911

asked on

Exchange Server 2003- Multiple Email Domains Successful- OWA Question

I have an Exchange Server 2003 running on Server 2003.  I have multiple domains running successfuly.  But, I can not get the alternate domains to gain access to the web access.  What I did is created new trees and new public and mail stores.  Everything works fine but I cannot log into the exchange web with the domains.  I can only log in with the Administrator account or anyone I create under the default store.  
Server name MAILSRV   Exchange Store  ExchangeSRV  

Altername domains i.e. mysite.com, yoursite.com

These domains can transfer email, but It wont allow web access
All named are created under the Active Directory.  

Please assist me if you can.

Thanks
JEB
Avatar of David Wilhoit
David Wilhoit
Flag of United States of America image

Are you hosting different companies? If so, check this article and see if it fits your needs...

http://support.microsoft.com/default.aspx?scid=kb;en-us;318635

David
Avatar of Jeb911
Jeb911

ASKER

Not exactly.. I have a regular Exchange 2003 server set up with Server 2003.  I created the default exchange site.  Then, I added a new tree and I also under the server I created a new storage group.  So it looks like the alternate storage groups are not communication with the default group.  What I dont understand is do I have to specify each group when I log in i.e 911designs\Josh.Britt  or do I use the default server i.e HDMAIL\Josh.Britt  because neither of those will work.  All of the user names are created with AD.  I can create a basic name on the default exchange group and it works fine. But, when I create a new user under the storage called 911designs then it does not work?   Any suggestions from there?
what new tree? the SG has zero to do with it. You can however make OWA use the smtp address as a login, but you should be using FBA in 2003. Are you using it?
Avatar of Jeb911

ASKER

Look at this http://208.62.143.7/screenprint.rtf   If you look at the servers then HDMAIL you will see the First storage group.  If I create anything under that group it will work fine.  When I create a user under the 911designs group in exchange it will allow email to work, but then OWA will not allow log in
can't view that page....are you talking about a different OU called 911designs group? Cause a different SG won't cause this issue.

D
Avatar of Jeb911

ASKER

Well, I had it working for a minute.  I changed the DOMAIN and the REALM to the IP address of the server and it worked and then it quit.  This is very confusing.  It is like the additional public stores are not communicating with the server properly.

Avatar of Jeb911

ASKER

Please dont use acronyms.  No I created a new sotrage group called 911designs  then within that group in Exchange I  created a new public store and mail store also called 911designs.  Then under the recipient policies I tied the email @911designs.com to the new store called 911designs to the 911designs storage
only the default MAPI public store can be seen by the client, so that isn't going to work anyway. If it's the public store that's failing, that's the proper behavior.
Avatar of Jeb911

ASKER

So I cannot create a new public store called 911designs and then create mail for that public store and allow users to log in through the outlook web access?
mailboxes aren't the problem, it's the public store. No, only one public store is available to your Outlook/OWA clients, and that's the default one created when you build Exchange.
sorry, my bad, only MAPI clients have the issue, OWA clients should be able to choose a tree.
What article did you use to set this up? Was it:

http://support.microsoft.com/default.aspx?scid=kb;EN-US;272183

D
Avatar of Jeb911

ASKER

No I did it myself and actually all of the stores work now all I had to do was add the default domain into the policy of each stores policy i.e. HDImail.com  for SMTp and it allows people to log in.  The only thing now is you have to type in hdmail\username to log out
Check IIS, see that the \exchweb\bin directory has anon access enabled.
Avatar of Jeb911

ASKER

Ok I got that working, but now... No one has access to the public folders.  I dont know what has happened but it gives me a page canot be displayed or you may not have permission. It does this for the Administrator account also.  Any suggestions on that?
is the everyone group listed on the TLH of the new tree you created? It has to be there....

D
Avatar of Jeb911

ASKER

Define TLH for me please.. Forgive me I am not up to date on my acronyms.

Thanks

Jeb
ASKER CERTIFIED SOLUTION
Avatar of David Wilhoit
David Wilhoit
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of Jeb911

ASKER

Yeah I changed the permission on the folder and that tree and that worked.  Ok you are getting there.  One More thing.  I have created seperate trees i.e  911designs.com and spurtalk.com  I created trees for those then basically a new store for each domain.  Everything is working fine.  Now I want to seperate the public folders so when I log in as Josh.Britt which ties to 911designs.com  I should only see the public folders for josh.britt in 911designs  and when I log in as Jim Miles which is a member of spurtalk.com Jim should only see the Spurtalk public folder.

Also,  I have to type in HDMAIL\<Username>  every time I log in and log out.  What can I do to stop from having to type this in?

Thanks

J
 
Can't really get around the domain\username format, unless you specify a default domain name using basic authentication. And that won't work if you're using forms-based authentication in 2003, but if this is E2K, you can set that variable in the ESM, under the exchange virtual server.

As far as the trees go, everyone has to be on the perms in the TLH, but I believe you can uncheck the "list" or "view" perms for certain folders to prevent their access. Just don't deny or remove the everyone group, it's bad news....

D
Avatar of Jeb911

ASKER

well I did specify default domain the the security under the virtual directories.  Please explain the purpose of forms based authentication for me.  Do i need that.
only if you have a cert, and you're gonna use HTTPS......

D
Avatar of Jeb911

ASKER

OK i disabled FBA and went into the security of the Virtual Directory and it works fine now.  Now I need to route the public folders to the right place.  The added domains are getting the default public folders instead of the new ones I created.