Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people, just like you, are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
Solved

Exchange 2007 OWA issues

Posted on 2012-04-05
9
344 Views
Last Modified: 2012-04-08
I recently fixed a crashed Exchange 2007 server installed on an Enterprise 2003 Windows server and was able to re-install everything, however I'm having a couple of issues with OWA. First issue is that when I go to make OWA "Forms based" authentication...It flat out doesnt work. The OWA page sends a "Page Not Displayed" error. The second issue is that when a user authenticates and OWA loads the page doesnt load any graphics and none of the links work. I absolutely positive that this is a permissions issue of some sort but I'm not sure where to go to fix it. Recently I un-installed IIS, and Un-installed the CAS server role which fixed other issues. The process I followed were found in these articles:

http://exchangeshare.wordpress.com/2008/07/16/how-to-recreate-owa-virtual-directory-exchange-2007/

http://my.opera.com/RavenOverride/blog/2009/06/17/how-to-recreate-all-virtual-directories-for-exchange-2007

http://support.microsoft.com/kb/320202

The two issues I need to fix are, how do we fix Forms Based Authentication and How do we fix the permissions issue so that users can login and see the normal OWA page and use it correctly.

Any help would be greatly appreciated.
0
Comment
Question by:Sec-Man
  • 5
  • 3
9 Comments
 
LVL 4

Expert Comment

by:Repil
ID: 37811732
Recreate OWA Virtual Directory ; Below article will help you on this process.

http://exchangeshare.wordpress.com/2008/07/16/how-to-recreate-owa-virtual-directory-exchange-2007/
0
 
LVL 3

Author Comment

by:Sec-Man
ID: 37811796
Repil - When you uninstall/re-install IIS and then uninstall/re-install CAS server role, OWA and all Exchange related directories are recreated in IIS. I've done this a couple of times now in the hopes of permissions being re-initialized...but they are not. Any other ideas?
0
 
LVL 31

Accepted Solution

by:
LeeDerbyshire earned 500 total points
ID: 37812196
Can you find the iis log entries for the request for logon.aspx (which is the FBA logon page)?  It will help to see how the server responded.

The graphics problem may be because you no longer have Anonymous Access enabled on the exchweb directory in IIS.  Come to think of it, this might cause the FBA problem, too.
0
VMware Disaster Recovery and Data Protection

In this expert guide, you’ll learn about the components of a Modern Data Center. You will use cases for the value-added capabilities of Veeam®, including combining backup and replication for VMware disaster recovery and using replication for data center migration.

 
LVL 3

Author Comment

by:Sec-Man
ID: 37812486
Looking at EV...I dont see anything obvious that would be considered IIS Log Entries. Is there somewhere specific you'd like me to look?

The exchweb virtual directory was indeed not set for anonymous access, which I have corrected but whenever I do an "iisreset /noforce" I get the following error:

C:\Documents and Settings\Administrator>iisreset/noforce

Attempting stop...
Restart attempt failed.
The service cannot accept control messages at this time. (2147943461, 80070425)

C:\Documents and Settings\Administrator>

Open in new window


So I do a simple iisreset and when I do that exchweb reverts back to anonymous access not being checked...

Anyway...I just now thought...well if iisreset is resetting the settings on exchweb then they are probably changed on owa as well. I checked and sure enough they were... So I change anonymous for both owa and exchweb resync the IUSR_SERVERNAME PW and unbelievably OWA is working!

So...how do I make the settings take so that if the server bounces or I do an iisreset they stay in place? I havent tried FBA yet...I dont want to jinx anything (...yet)
0
 
LVL 31

Expert Comment

by:LeeDerbyshire
ID: 37812624
The iisreset shouldn't be changing anything by itself.  The settings may be coming from the settings in Exchange itself.  I can't remember how you check them in E2007, but try Get-OWAVirtualDirectory | fl , and see what auth settings are listed.  Maybe the iisreset just forces a change to the Exchange settings (the Exchange VDirs get 'special treatment' in this respect), thus replacing something that may have been mistakenly changed in IIS Manager more recently.

IIS log entries are usually text files (.log files) in C:\Windows\System32\Logfiles\W3SVC1
0
 
LVL 3

Author Comment

by:Sec-Man
ID: 37812704
Well I execute "Get-OWAVirtualDirectory | fl" and I got so much returned that it scrolled past the top of the screen. Is there a way to dump it to a file?

Are the log entries for IIS still necessary? If not thanks for that, its still useful.
0
 
LVL 31

Expert Comment

by:LeeDerbyshire
ID: 37813265
You should be able to scroll the CMD window.  Or direct it to a text file:

Get-OWAVirtualDirectory | fl > c:\temp.txt

Might not need to iis logs yet.
0
 
LVL 3

Author Comment

by:Sec-Man
ID: 37816188
I looked at the output and I didnt see anything obvious. I attached the file if you wanted to take a look.
0
 
LVL 3

Author Closing Comment

by:Sec-Man
ID: 37821334
FBA and everything works. Nice call!
0

Featured Post

Netscaler Common Configuration How To guides

If you use NetScaler you will want to see these guides. The NetScaler How To Guides show administrators how to get NetScaler up and configured by providing instructions for common scenarios and some not so common ones.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This script can help you clean up your user profile database by comparing profiles to Active Directory users in a particular OU, and removing the profiles that don't match.
This article aims to explain the working of CircularLogArchiver. This tool was designed to solve the buildup of log file in cases where systems do not support circular logging or where circular logging is not enabled
In this Micro Video tutorial you will learn the basics about Database Availability Groups and How to configure one using a live Exchange Server Environment. The video tutorial explains the basics of the Exchange server Database Availability grou…
This video shows how to quickly and easily add an email signature for all users on Exchange 2016. The resulting signature is applied on a server level by Exchange Online. The email signature template has been downloaded from: www.mail-signatures…

809 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question