Solved

OWA Secuirty issue

Posted on 2009-07-01
4
201 Views
Last Modified: 2012-06-22
Hi All,

I have, what I hope is a simple permissions issue with OWA.

I thought our OWA was working fine, until I tested it under a non-admin account and found that for general users it would not get any further than the username/password before going to the 401 Access denied page in IE.

I am pretty sure it is all related to permissions, as I said myself and other Domain Admin accounts work with out problems in OWA and when I add a test staff account to Domain Admins it works as well.

Cleary, there is something a miss with OWA permissions - but what I know not. I'd be obliged if some could help out with this issue.

Best wishes and thanks in advance,
Adam.
0
Comment
Question by:adamlcohen
  • 2
  • 2
4 Comments
 
LVL 65

Expert Comment

by:Mestha
Comment Utility
Reset the virtual directories.
http://support.microsoft.com/default.aspx?kbid=883380
That is always the best place to start.

Simon.
0
 

Author Comment

by:adamlcohen
Comment Utility
Thanks for this, I've gone through the KB steps to recreate the folder but I still have the same problem. I am seeing the following line in the IIS logs for the OWA server:

2009-07-01 11:38:09 W3SVC1 172.16.0.19 GET /exchange - 443 freemens\staff.test 172.16.0.18 Mozilla/4.0+(compatible;+MSIE+8.0;+Windows+NT+5.1;+Trident/4.0;+.NET+CLR+1.1.4322;+.NET+CLR+2.0.50727;+.NET+CLR+3.0.04506.30;+.NET+CLR+3.0.04506.648;+InfoPath.1;+.NET+CLR+3.0.4506.2152;+.NET+CLR+3.5.30729) 401 5 0

Is there somehting obvious I am missing ?

Cheers,
Adam.
0
 
LVL 65

Expert Comment

by:Mestha
Comment Utility
There is nothing in that log to indicate what is going on.
Was that from a working user, or a non-working user?

Simon.
0
 

Accepted Solution

by:
adamlcohen earned 0 total points
Comment Utility
Hi,

I've managed to fix this now. For refence the back-end server had the wrong permissions on the DAVEX.dll files. I needed to add Authenticated Users as read/execute access to this file. Stop and restart IIS and all is well now.

Thanks for you efforts prior to this.

Aam.
0

Featured Post

How to improve team productivity

Quip adds documents, spreadsheets, and tasklists to your Slack experience
- Elevate ideas to Quip docs
- Share Quip docs in Slack
- Get notified of changes to your docs
- Available on iOS/Android/Desktop/Web
- Online/Offline

Join & Write a Comment

ADCs have gained traction within the last decade, largely due to increased demand for legacy load balancing appliances to handle more advanced application delivery requirements and improve application performance.
Follow this checklist to learn more about the 15 things you should never include in an email signature from personal quotes, animated gifs and out-of-date marketing content.
In this video we show how to create a mailbox database in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Servers >> Data…
how to add IIS SMTP to handle application/Scanner relays into office 365.

772 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

12 Experts available now in Live!

Get 1:1 Help Now