Solved

OWA Secuirty issue

Posted on 2009-07-01
4
205 Views
Last Modified: 2012-06-22
Hi All,

I have, what I hope is a simple permissions issue with OWA.

I thought our OWA was working fine, until I tested it under a non-admin account and found that for general users it would not get any further than the username/password before going to the 401 Access denied page in IE.

I am pretty sure it is all related to permissions, as I said myself and other Domain Admin accounts work with out problems in OWA and when I add a test staff account to Domain Admins it works as well.

Cleary, there is something a miss with OWA permissions - but what I know not. I'd be obliged if some could help out with this issue.

Best wishes and thanks in advance,
Adam.
0
Comment
Question by:adamlcohen
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
  • 2
4 Comments
 
LVL 65

Expert Comment

by:Mestha
ID: 24759156
Reset the virtual directories.
http://support.microsoft.com/default.aspx?kbid=883380
That is always the best place to start.

Simon.
0
 

Author Comment

by:adamlcohen
ID: 24761402
Thanks for this, I've gone through the KB steps to recreate the folder but I still have the same problem. I am seeing the following line in the IIS logs for the OWA server:

2009-07-01 11:38:09 W3SVC1 172.16.0.19 GET /exchange - 443 freemens\staff.test 172.16.0.18 Mozilla/4.0+(compatible;+MSIE+8.0;+Windows+NT+5.1;+Trident/4.0;+.NET+CLR+1.1.4322;+.NET+CLR+2.0.50727;+.NET+CLR+3.0.04506.30;+.NET+CLR+3.0.04506.648;+InfoPath.1;+.NET+CLR+3.0.4506.2152;+.NET+CLR+3.5.30729) 401 5 0

Is there somehting obvious I am missing ?

Cheers,
Adam.
0
 
LVL 65

Expert Comment

by:Mestha
ID: 24762546
There is nothing in that log to indicate what is going on.
Was that from a working user, or a non-working user?

Simon.
0
 

Accepted Solution

by:
adamlcohen earned 0 total points
ID: 24762959
Hi,

I've managed to fix this now. For refence the back-end server had the wrong permissions on the DAVEX.dll files. I needed to add Authenticated Users as read/execute access to this file. Stop and restart IIS and all is well now.

Thanks for you efforts prior to this.

Aam.
0

Featured Post

Secure Your Active Directory - April 20, 2017

Active Directory plays a critical role in your company’s IT infrastructure and keeping it secure in today’s hacker-infested world is a must.
Microsoft published 300+ pages of guidance, but who has the time, money, and resources to implement? Register now to find an easier way.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

How to resolve IMCEAEX NDRs in Exchange or Exchange Online related to invalid X500 addresses.
In-place Upgrading Dirsync to Azure AD Connect
The basic steps you have just learned will be implemented in this video. The basic steps are shown to configure an Exchange DAG in a live working Exchange Server Environment and manage the same (Exchange Server 2010 Software is used in a Windows Ser…
A short tutorial showing how to set up an email signature in Outlook on the Web (previously known as OWA). For free email signatures designs, visit https://www.mail-signatures.com/articles/signature-templates/?sts=6651 If you want to manage em…

733 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question