Solved

Multiple Domain OWA Access Denied

Posted on 2006-06-16
7
305 Views
Last Modified: 2010-03-06
I have a site with multiple e-mail domains.

Most users have all e-mail address associated with their account, so, UserA might have e-mail addresses usera@domaina.com, usera@domainb.com, usera@domainc.com.

If they try and access their OWA, they can get in, no problems with UserA and their password.

I have a few users who are setup with only domainc.com e-mail addresses.  For instance, I have userB who's username is userbtk and their e-mail address is userb@domainc.com .  When they try to login to OWA, i put their username in as userbtk and their password and it just keeps reprompting for the password, eventually, 3 or so tries, we get access denied error messages.

Windows 2000 Server, Exchange 2000.

Why?

Thanks!
0
Comment
Question by:CoastalSlns
7 Comments
 
LVL 22

Expert Comment

by:kristinaw
ID: 16922270
are they accessing owa from an fe, or are they going directly to their be?
if they're getting access denied fromt he fe, what happens if they go directly to the be?
has urlscan or iislockdown been installed on the box they're trying to access owa from?
what shows up in the iis logs, just a 401?
0
 
LVL 26

Expert Comment

by:jar3817
ID: 16922394
Have you tried logging in using their full UPN (username@addomainname.company.com) or with ADOMAINNAME\username? The domain in both of those examples is the active directory domain name, not the email address domain name.
0
 

Author Comment

by:CoastalSlns
ID: 16922606
I am just getting 401's in the log.

This is whether we are accessing the server locally or through the web from another location.
There are no urlscans or lockdowns setup.


Jar3817.

When I login with their full username, i.e. userbtk@domaina.com i still get the same message. Same thing with Domain\Userbtk



0
Do email signature updates give you a headache?

Are you constantly making changes to email signatures? Are the images not formatting how you want them to? Want high-quality HTML signatures on all devices, including on mobiles and Macs? Then, let Exclaimer solve all your email signature problems today.

 
LVL 12

Expert Comment

by:craskin
ID: 16922840
be sure you're using the full domain name like

mydomain.com\myusername

0
 
LVL 104

Accepted Solution

by:
Sembee earned 350 total points
ID: 16923941
When you state the users only have an email address in one of the other domains, do you mean just that?
A single SMTP address?

If so, that will cause problems with Exchange. You should ensure that all users have an email address on the default domain. It doesn't have to be the default email address, just the default domain.

For example, if your default domain was domain.local, but you also had addresses for domain.com and domain.co.uk, then all users would have an email address on domain.local, as well as either/and email addresses on domain.o.uk and domain.com

Simon.
0
 
LVL 5

Assisted Solution

by:Amitspeedstar
Amitspeedstar earned 150 total points
ID: 16926120

The following article on technet addresses the issue of 401 errors , and describes how to resolve it by setting up users smtp addresse. try this it may solve ur problem

http://support.microsoft.com/kb/293386/en-us

Amit.
0
 

Author Comment

by:CoastalSlns
ID: 16933978
Sembee,

You had the right answer.

Thank you!

Amitspeedstar,

Your article helped me figure out a long term solution.

Thank you!
0

Featured Post

Are your end users making ugly email signatures?

Have you left it up to your end users to create their own email signatures? Are they forgetting to add the company logo or using garish font colors? Take control and ensure all users have the same email signature.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Lotus Notes – formerly IBM Notes – is an email client application, while IBM Domino (earlier Lotus Domino) is an email server. The client possesses a set of features that are even more advanced as compared to that of Outlook. Likewise, IBM Domino is…
This article aims to explain the working of CircularLogArchiver. This tool was designed to solve the buildup of log file in cases where systems do not support circular logging or where circular logging is not enabled
In this video we show how to create a Contact in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Recipients >> Contact ta…
The basic steps you have just learned will be implemented in this video. The basic steps are shown to configure an Exchange DAG in a live working Exchange Server Environment and manage the same (Exchange Server 2010 Software is used in a Windows Ser…

895 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

14 Experts available now in Live!

Get 1:1 Help Now