Solved

OWA Secuirty issue

Posted on 2009-07-01
4
206 Views
Last Modified: 2012-06-22
Hi All,

I have, what I hope is a simple permissions issue with OWA.

I thought our OWA was working fine, until I tested it under a non-admin account and found that for general users it would not get any further than the username/password before going to the 401 Access denied page in IE.

I am pretty sure it is all related to permissions, as I said myself and other Domain Admin accounts work with out problems in OWA and when I add a test staff account to Domain Admins it works as well.

Cleary, there is something a miss with OWA permissions - but what I know not. I'd be obliged if some could help out with this issue.

Best wishes and thanks in advance,
Adam.
0
Comment
Question by:adamlcohen
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
  • 2
4 Comments
 
LVL 65

Expert Comment

by:Mestha
ID: 24759156
Reset the virtual directories.
http://support.microsoft.com/default.aspx?kbid=883380
That is always the best place to start.

Simon.
0
 

Author Comment

by:adamlcohen
ID: 24761402
Thanks for this, I've gone through the KB steps to recreate the folder but I still have the same problem. I am seeing the following line in the IIS logs for the OWA server:

2009-07-01 11:38:09 W3SVC1 172.16.0.19 GET /exchange - 443 freemens\staff.test 172.16.0.18 Mozilla/4.0+(compatible;+MSIE+8.0;+Windows+NT+5.1;+Trident/4.0;+.NET+CLR+1.1.4322;+.NET+CLR+2.0.50727;+.NET+CLR+3.0.04506.30;+.NET+CLR+3.0.04506.648;+InfoPath.1;+.NET+CLR+3.0.4506.2152;+.NET+CLR+3.5.30729) 401 5 0

Is there somehting obvious I am missing ?

Cheers,
Adam.
0
 
LVL 65

Expert Comment

by:Mestha
ID: 24762546
There is nothing in that log to indicate what is going on.
Was that from a working user, or a non-working user?

Simon.
0
 

Accepted Solution

by:
adamlcohen earned 0 total points
ID: 24762959
Hi,

I've managed to fix this now. For refence the back-end server had the wrong permissions on the DAVEX.dll files. I needed to add Authenticated Users as read/execute access to this file. Stop and restart IIS and all is well now.

Thanks for you efforts prior to this.

Aam.
0

Featured Post

Office 365 Training for Admins - 7 Day Trial

Learn how to provision tenants, synchronize on-premise Active Directory, implement Single Sign-On, customize Office deployment, and protect your organization with eDiscovery and DLP policies.  Only from Platform Scholar.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article explains in simple steps how to renew expiring Exchange Server Internal Transport Certificate.
After hours on line I found a solution which pointed to the inherited Active Directory permissions . You have to give/allow permissions to the "Exchange trusted subsystem" for the user in the Active Directory...
In this video we show how to create a Resource Mailbox in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: Navigate to the Recipients >> Resources tab.: "Recipients" is our default selection …
In this video we show how to create an email address policy in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.:  First we need to log into the Exchange Admin Center. Navigate to the Mail Flow…

707 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question