RWW ALMOST GOT IT

The fact that you manually created the Remote directory is the problem.  I'd suggest that you reinstall IIS again according to this KB:  http://support.microsoft.com/kb/887305

You do not want to have to manually reconfigure all the correct permissions, etc.

Jeff
TechSoEasy

cool, I re-installed IIS according to the intructions and eveything seems to be working fine except the following:

When I sign onto remote web workplace I click on "Use Outlook Web Access", it just says loading.......

Can you access OWA via http://servername/exchange locally?

Jeff
TechSoEasy

I could log in locally and access the OWA through  http://servername/exchange,
I took it a step further and went to http://servername/remote, I signed on to RWW and then
clicked on Outlook web access, it came up with a OWA login screen, (I guess this is what I should be seeing when I trying this remotely.


Currently I could access OWA remotely if I access it directly (http://FQDN/Exchange)

Not sure if this matters or not, but my server name is different from my FQDN....

it makes no difference what your servername is.  Does this problem happen from ANY location you are trying to connect from?  Or just one?

Jeff
TechSoEasy

I just tried it from my house and its says loading again. Only this time it didn't stay there for thaaaaat long, after about 15 seconds it went to "Action Cancelled" at the bottom of page there was an "error on page" that would flip between "DONE" and "Error on Page". I double clicked on it and I got the following error from Internet Explorer:



Error: Permission Denied
URL:http://FQDN/Remote/header.aspx

dakeys,

You're going to need to follow the troubleshooting steps listed in this KB:  http://support.microsoft.com/kb/280823

Or review this KB to see if it applies:  http://support.microsoft.com/kb/910119

Jeff
TechSoEasy

One question... when you ran the Configure Email and Internet Connection Wizard, did you select OWA as being available?  If you aren't sure, you can rerun the wizard.

Jeff
TechSoEasy

When I ran the Configure E-Mail and Internet Connection Wizard I did include OWA, either way, I could sign onto OWA, just not through RWW.

I'll take a look at the KB articles:

thanks

My main problem now is not the "LOADING" this is not nearly taking as long as it was yesterday, After just a couple of seconds I get the "permission denied" error.

There has to be something with the permission rights on the "Remote" virtual directory in "IIS". Like I said above when I sign onto RWW remotely and click on OWA it comes up with that error saying that I don't have permission to Header.aspx, which is inside the remote virutal directory in IIS.

Yes, there must be... and if you follow the TROUBLESHOOTING link I provided above, you'll find out what it is.

Jeff
TechSoEasy

about the troubleshooting guides that you mentioned above:

the 1st one is titled "Troubleshooting OWA when the contents frame displays "Loading"

My problem isn't when I access OWA through http://FQDN/exchange, this way I am able to login and I don't get anything that says Loading.

My problem is only through RWW. It goes into loading for a couple seconds then gives me the permission denied error. It continues to get stuck in "Header.aspx" which is in the "REMOTE" Virtual Directory in IIS.

Here are my "Remote" Property settings in IIS:

1st Tab=Virtual Directory
 Local Path: C:\Inetpub\Remote (I verified and this is their)
(here is what is checked On) Read, Write, Log Visits, Index this Resource

App Settings

App Name: Remote
Exec Perm:Scripts and Executables
App Pool: DefaultAppPool

3rd Tab: (Directory Security)

Auth and Access Control -->Edit -->Enable Anonymous is checked
Right below that is says "Auth Access"

1st box =Integrated Windwos Auth is checked
3rd box= Basic Auth is checked

def domain = domainname

back to main tab of (Directory Security)
IP address and domain name restrictions -->Edit -->Granted Access is chosen

back to main tab of (Directory security)
Secure Communications -->Edit -->only 1 thing chosen and that Ignore client Certificates

Either way I did read the whole 1st guide and everything I have in the ExchWeb properties is according to the article

The second guide is when you have a Front and backend. I have it all on a single server.

I read anyway and it doesn't seem to apply to my situation

Okay, how about this one: http://support.microsoft.com/kb/327843

This would have been easy to find if you had entered "OWA 401 error troubleshooting" in the search box on the Microsoft.com KB site page that was linked.

Jeff
TechSoEasy

There's this one as well:  http://www.cgnet.com/Exchange/owa_ts.htm

Thanks I will try tomorrow and let you know how it went.

just for thought though:

At the bottom of my page after I login to RWW and i click on Outlook web access, it says http://FQDN/Remote/Header.aspx and after a couple of minutes it give me the permission denied error.

Wouldn't my problem be in the Remote Virtual directory in IIS?

Or is there a setting in System Manager that control any portion of RWW?

Or does it need a special certificate to access it?

sorry if i'm asking to many questions, but I'm trying to give you as much information as possible

No problem with the questions... and it does give a clue... the fact that you are accessing RWW with http and not https provides the clue.

Please try using https://FQDN/Remote and see if that solves your problem.  If it does, then you have manually altered the directory security settings of Remote or Exchange at some point.

All of this is usually configured with the Configure Email and Internet Connection Wizard, where you create your SSL certificate and designate which services will be active.

Additional configuration beyond that is not usually necessary.

You may have to, at this point, remove all local certificates from your server and make sure that they are removed from any remote machine you have used, and then rerun the CEICW again to re-configure.

Jeff
TechSoEasy

Removed the certificate and re-ran the CEICW, It's weird though because when I run it, there is a part in the wizard that it asks whether or not to

Deny all users from access this web site
allow only the following web sites to be viewed (This is the option that has RWW,OWA,OMA etc....)
Allow all

If I just either the 2 or 3rd one, it asks me to enter in a certificate name or browse for a CA. The last option is to leave the web certificate the way it is, but this is greyed out b/c I dont have a Web Certificate.

the only way around this is if I choose the services that I want like (RWW and OWA) and then choose the deny option.
This seems to get it installed, but the only problem is OWA doesn't show up inside of RWW onthe left side where it normally says (Additional Links)......

How can I add this link back there.

If you choose DENY, even if you've selected the services you want, they still won't work.  You are not understanding something very basic about this wizard..... you are RIGHT that you don't have a web certificate... which is why you need to use the FIRST area of the Server Certificate screen that says, "Create a new web server certificate"!

So when it asks for the name, PUT ONE IN THERE!  Use the FQDN that you are using to have users connect remotely, ie, server.companyname.com.

See http://sbsurl.com/ceicw for an example

Jeff
TechSoEasy

Okay I have done all the above and it is still coming up with the loading for about 10-15sec and then give me the permission denied error.

at the same location:

 http://FQDN/Remote/Header.aspx

I have located the headers.aspx file and compared the security rights on it to other files in the same directory. They all look equal.

Do you have the default settings that are supposed to be on this remote folder?
Is the problem on the Remote virutal directory or on the Exchweb directory?
If I remove the Virtual directory such as Exchweb, Exchange and add them back
would that help?
Remember I could login locally on site and access this, its only remotely that I cannot.

Are you STILL using http instead of https???

Jeff
TechSoEasy

Yes I'm still using the Http:, b/c I haven't purchased a SSL certificate.

I removed the require encryption so I know thats not the problem.

Okay I will do that,

do i have to do anything in the certificate authority?

no

Finally worked. I was able to remote into my client and check e-mail thanks alot

Congrats!  I hope the lesson learned was to "read the manual"   :-)  

Jeff
TechSoEasy