asked on

OWA prompts for password some users and some not

I work in a school. Recently setup Exchange 2003. Both staff and students use OWA . The enabled authentications settings are: Basic Authentication and Integrated Windows Authentication.
What I want achieve for all users is to access OWA without having to enter a username and password (when accessing it from within the domain), which is what I thought the Integrated Windows Authentication does.
The problem I have at the moment is that students are prompted to enter a username and password while staff are not.
a) Why does OWA differentiate between students and staff and how?
b) How do I get exchange to not prompt students for password ?
c) Obvously students and staff have differnt GPs. Could that be the reason ? If yes what would be GP the setting that causes this?
Thanks in advance
Christos

rakeshmiglani

check this
http://support.microsoft.com/kb/282805/en-us

LeeDerbyshire

Integrated Auth should use existing logon credentials when you use IE, (only MS browsers can use IA) and provided that it is enabled in the IE Advanced Internet Options. Try turning off Basic Auth, so that it is not presented to the browser as an option, and see what happens at the client end.

olchs

ASKER

LeeDerbyshire

Tried it - I disabled Basic Authentication and left only IA. Students are still prompted for a username and password

Note (as a proof that BA is disabled) that extrenal users get an Access denied straight away.

Any other suggestions ?

LeeDerbyshire

That seems odd. The students are definitely logged on to the domain at the time?

olchs

ASKER

They are definitely logged on. Could it be something in the Group Policy for the students that causes that?

ASKER CERTIFIED SOLUTION

LeeDerbyshire

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

olchs

ASKER

CORRECTION / UPDATE: I just noticed that it is only speciffic computers within the domain that prompt the students (not staff) to enter a username and password.

There is one GP policy for all computers so that shouldn't be the reason. Also the fact that students can access OWA with a password on some computers proves it is not user GP issue.

The question is what is it? Could it be something like the DC contoller doesn not see these Pc as part of the domain? but if so how do the users log on? and how do they access networked drives..

LeeDerbyshire

It seems very strange. On the affected PCs, when a staff user goes to OWA, which Internet zone does it show? Is it different to that shown when a student logs in?

olchs

ASKER

i have to go now but will check on Monday. Please check this again on Monday . Many thanks for your help so far