Solved

OWA Secuirty issue

Posted on 2009-07-01
4
204 Views
Last Modified: 2012-06-22
Hi All,

I have, what I hope is a simple permissions issue with OWA.

I thought our OWA was working fine, until I tested it under a non-admin account and found that for general users it would not get any further than the username/password before going to the 401 Access denied page in IE.

I am pretty sure it is all related to permissions, as I said myself and other Domain Admin accounts work with out problems in OWA and when I add a test staff account to Domain Admins it works as well.

Cleary, there is something a miss with OWA permissions - but what I know not. I'd be obliged if some could help out with this issue.

Best wishes and thanks in advance,
Adam.
0
Comment
Question by:adamlcohen
  • 2
  • 2
4 Comments
 
LVL 65

Expert Comment

by:Mestha
ID: 24759156
Reset the virtual directories.
http://support.microsoft.com/default.aspx?kbid=883380
That is always the best place to start.

Simon.
0
 

Author Comment

by:adamlcohen
ID: 24761402
Thanks for this, I've gone through the KB steps to recreate the folder but I still have the same problem. I am seeing the following line in the IIS logs for the OWA server:

2009-07-01 11:38:09 W3SVC1 172.16.0.19 GET /exchange - 443 freemens\staff.test 172.16.0.18 Mozilla/4.0+(compatible;+MSIE+8.0;+Windows+NT+5.1;+Trident/4.0;+.NET+CLR+1.1.4322;+.NET+CLR+2.0.50727;+.NET+CLR+3.0.04506.30;+.NET+CLR+3.0.04506.648;+InfoPath.1;+.NET+CLR+3.0.4506.2152;+.NET+CLR+3.5.30729) 401 5 0

Is there somehting obvious I am missing ?

Cheers,
Adam.
0
 
LVL 65

Expert Comment

by:Mestha
ID: 24762546
There is nothing in that log to indicate what is going on.
Was that from a working user, or a non-working user?

Simon.
0
 

Accepted Solution

by:
adamlcohen earned 0 total points
ID: 24762959
Hi,

I've managed to fix this now. For refence the back-end server had the wrong permissions on the DAVEX.dll files. I needed to add Authenticated Users as read/execute access to this file. Stop and restart IIS and all is well now.

Thanks for you efforts prior to this.

Aam.
0

Featured Post

Best Practices: Disaster Recovery Testing

Besides backup, any IT division should have a disaster recovery plan. You will find a few tips below relating to the development of such a plan and to what issues one should pay special attention in the course of backup planning.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Lotus Notes – formerly IBM Notes – is an email client application, while IBM Domino (earlier Lotus Domino) is an email server. The client possesses a set of features that are even more advanced as compared to that of Outlook. Likewise, IBM Domino is…
Follow this checklist to learn more about the 15 things you should never include in an email signature from personal quotes, animated gifs and out-of-date marketing content.
To show how to create a transport rule in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Mail Flow >> Rules tab.:  To cr…
To add imagery to an HTML email signature, you have two options available to you. You can either add a logo/image by embedding it directly into the signature or hosting it externally and linking to it. The vast majority of email clients display l…

839 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question