Solved

401 Unauthorized OWA External Access Error

Posted on 2007-03-27
7
731 Views
Last Modified: 2012-05-05
I am currently able to access our Exchange 2003 SP2/ OWA/ IIS6.0 services internally on our network.  No problems there.

I cannot access OWA externally using  "mail.domainname.com/exchange"  I get a 401 Unauthorized error.  I do not get prompted for a Username and password, however.  This is very confusing seeing as how I am able to access internally.  FYI, I have followed KB articles http://support.microsoft.com/kb/293386  and  http://support.microsoft.com/kb/327843.  The first KB article got my error from "Error: Access Denied" to "401 Unauthorized"

Any help is greatly appreciated! Thank you.
0
Comment
Question by:metricroofing
  • 3
  • 3
7 Comments
 
LVL 104

Expert Comment

by:Sembee
ID: 18803955
When you are prompted for a username and password, what do you enter?

username
password

domain\username
password

something else?

Simon.
0
 
LVL 11

Expert Comment

by:AnthonyP9618
ID: 18804305
Are you accessing OWA through an ISA server or directly on the FE?

0
 

Author Comment

by:metricroofing
ID: 18804362
I do not receive a login prompt, it seems to give me this error right away.

I am accessing it through a firewall but not an ISA Server. Ports 80 and 443 have been allowed via NAT to the private IP of the exchange server.

Thank you
0
Does Powershell have you tied up in knots?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

 
LVL 104

Accepted Solution

by:
Sembee earned 500 total points
ID: 18804373
If you are getting the prompt immediately, then that would indicate the authentication settings are not correct somewhere.

Check that you have anonymous enabled on /exchweb
on /exadmin it should be integrated only
on /exchange it should be integrated if you are not using SSL, if you are then /basic and integrated, if you are using forms based authentication then it should be basic only.

Simon.
0
 

Author Comment

by:metricroofing
ID: 18804585
Sembee:

Correct, I have double checked these authorizations and all seems as it should.  I did have one difference, the /exchange was set to Anonymous and Integrated. De-selecting Anonymous changes the error I get in the browser to "Error: Access Denied". Internally all still works as long as Integrated under /exchange is selected.

FYI, I've tried OWA Externally from Firefox 2.0, IE 6, IE 7 and Linux running Firefox 2.0. All the same error(s).

Thank you

0
 
LVL 104

Assisted Solution

by:Sembee
Sembee earned 500 total points
ID: 18809015
You shouldn't have anonymous on the /exchange virtual directory.
If you don't have basic enabled, then authentication doesn't work for anything other than Internet Explorer either.

Therefore I would change the settings then drop in to a command prompt and type iisreset to ensure the changes are written to the metabase.

Simon.
0
 

Author Comment

by:metricroofing
ID: 18810364
Sembee:

I have disabled anonymous access to the /exchange virtual directory. I still receive that error "Unauthorized" but there is one difference.  The whole time I was using anonymouse.org to simulate an outside connection because I was in my local network.  Apparently anonymouse.org does not support something because I tried connecting from home via mail.domainname.com/exchange and it worked!  Although this is a peculiar problem, seemingly with just the external web browser test I was using, OWA seems to work on other PCs as well.

Thank you for your help and sorry if I wasted your time.  You did help me confirm the correct settings though.
0

Featured Post

The problems with reply email signatures

Do you wish that you could place an email signature under a reply? Well, unfortunately, you can't. That great Exchange/Office 365 signature you've created will just appear at the bottom of an email chain. What a pain! Is there really no way to solve this? Well, there might be...

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This process describes the steps required to Import and Export data from and to .pst files using Exchange 2010. We can use these steps to export data from a user to a .pst file, import data back to the same or a different user, or even import data t…
This article lists the top 5 free OST to PST Converter Tools. These tools save a lot of time for users when they want to convert OST to PST after their exchange server is no longer available or some other critical issue with exchange server or impor…
In this video we show how to create a Shared Mailbox in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Recipients >> Sha…
In this video we show how to create an email address policy in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.:  First we need to log into the Exchange Admin Center. Navigate to the Mail Flow…

910 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

16 Experts available now in Live!

Get 1:1 Help Now