Solved

401 Unauthorized OWA External Access Error

Posted on 2007-03-27
7
732 Views
Last Modified: 2012-05-05
I am currently able to access our Exchange 2003 SP2/ OWA/ IIS6.0 services internally on our network.  No problems there.

I cannot access OWA externally using  "mail.domainname.com/exchange"  I get a 401 Unauthorized error.  I do not get prompted for a Username and password, however.  This is very confusing seeing as how I am able to access internally.  FYI, I have followed KB articles http://support.microsoft.com/kb/293386  and  http://support.microsoft.com/kb/327843.  The first KB article got my error from "Error: Access Denied" to "401 Unauthorized"

Any help is greatly appreciated! Thank you.
0
Comment
Question by:metricroofing
  • 3
  • 3
7 Comments
 
LVL 104

Expert Comment

by:Sembee
ID: 18803955
When you are prompted for a username and password, what do you enter?

username
password

domain\username
password

something else?

Simon.
0
 
LVL 11

Expert Comment

by:AnthonyP9618
ID: 18804305
Are you accessing OWA through an ISA server or directly on the FE?

0
 

Author Comment

by:metricroofing
ID: 18804362
I do not receive a login prompt, it seems to give me this error right away.

I am accessing it through a firewall but not an ISA Server. Ports 80 and 443 have been allowed via NAT to the private IP of the exchange server.

Thank you
0
U.S. Department of Agriculture and Acronis Access

With the new era of mobile computing, smartphones and tablets, wireless communications and cloud services, the USDA sought to take advantage of a mobilized workforce and the blurring lines between personal and corporate computing resources.

 
LVL 104

Accepted Solution

by:
Sembee earned 500 total points
ID: 18804373
If you are getting the prompt immediately, then that would indicate the authentication settings are not correct somewhere.

Check that you have anonymous enabled on /exchweb
on /exadmin it should be integrated only
on /exchange it should be integrated if you are not using SSL, if you are then /basic and integrated, if you are using forms based authentication then it should be basic only.

Simon.
0
 

Author Comment

by:metricroofing
ID: 18804585
Sembee:

Correct, I have double checked these authorizations and all seems as it should.  I did have one difference, the /exchange was set to Anonymous and Integrated. De-selecting Anonymous changes the error I get in the browser to "Error: Access Denied". Internally all still works as long as Integrated under /exchange is selected.

FYI, I've tried OWA Externally from Firefox 2.0, IE 6, IE 7 and Linux running Firefox 2.0. All the same error(s).

Thank you

0
 
LVL 104

Assisted Solution

by:Sembee
Sembee earned 500 total points
ID: 18809015
You shouldn't have anonymous on the /exchange virtual directory.
If you don't have basic enabled, then authentication doesn't work for anything other than Internet Explorer either.

Therefore I would change the settings then drop in to a command prompt and type iisreset to ensure the changes are written to the metabase.

Simon.
0
 

Author Comment

by:metricroofing
ID: 18810364
Sembee:

I have disabled anonymous access to the /exchange virtual directory. I still receive that error "Unauthorized" but there is one difference.  The whole time I was using anonymouse.org to simulate an outside connection because I was in my local network.  Apparently anonymouse.org does not support something because I tried connecting from home via mail.domainname.com/exchange and it worked!  Although this is a peculiar problem, seemingly with just the external web browser test I was using, OWA seems to work on other PCs as well.

Thank you for your help and sorry if I wasted your time.  You did help me confirm the correct settings though.
0

Featured Post

Windows Server 2016: All you need to know

Learn about Hyper-V features that increase functionality and usability of Microsoft Windows Server 2016. Also, throughout this eBook, you’ll find some basic PowerShell examples that will help you leverage the scripts in your environments!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Follow this checklist to learn more about the 15 things you should never include in an email signature from personal quotes, animated gifs and out-of-date marketing content.
This article explains how to install and use the NTBackup utility that comes with Windows Server.
In this video we show how to create a Resource Mailbox in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: Navigate to the Recipients >> Resources tab.: "Recipients" is our default selection …
In this video we show how to create an Address List in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Organization >> Ad…

821 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question