Solved

User can log into OWA using old password if username entered as user@domain

Posted on 2014-10-20
2
385 Views
Last Modified: 2014-10-21
A user just came to me to say he changed his password and then noticed that he can log into OWA using both the old and new password.

I had him try it on my computer and it would not allow him to do it, so I just told him to go clear his cache, thinking it was just strange voodoo that would go away.

He came back to me again and said if he logged in user domain\user then it would only work with his new password, but if used user@domain as the username, then he could log in with both passwords.

I had him show me on my machine and sure  enough, it was true.  I assume he was using his old and new password and have no reason to not believe him.

The only thing I could think was that he was authenticating using 2 different DCs that hadn't synchronized, but we only have one mail server and I can't see the browser going out through a remote site VPN to authenticate and then come back here to access the exchange server.

Any thoughts on this?
0
Comment
Question by:Sys_Admin1
2 Comments
 
LVL 29

Accepted Solution

by:
becraig earned 500 total points
ID: 40393665
There is a cache setting in IIS / OWA
http://support.microsoft.com/kb/152526

When the user authenticates, he or she is given a token that is valid for a certain window.
So you have two potential things here:
1. A Global Catalog that has not yet caught up
2. The Token has not yet expired on the OWA server.

Here is some additional reading on this which should help.


http://www.techrepublic.com/article/why-does-my-old-password-work-via-activesync/
0
 
LVL 1

Author Closing Comment

by:Sys_Admin1
ID: 40394258
Thanks.  Here is another KB I found, which seems to be the same information.  http://support.microsoft.com/kb/267568

I'm currently running Exchange 2013 running on server 2012R2, with IIS 8.5
0

Featured Post

Best Practices: Disaster Recovery Testing

Besides backup, any IT division should have a disaster recovery plan. You will find a few tips below relating to the development of such a plan and to what issues one should pay special attention in the course of backup planning.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

In my previous Experts Exchange Articles (http://www.experts-exchange.com/ARTH_1864316.html?arthOrderBy=3&arthSort=1#arth), most have featured Basic and Intermediate VMware Topics.  As a Virtualisation Consultant, we implement many different virtual…
This article will review the basic installation and configuration for Windows Software Update Services (WSUS) in a Windows 2012 R2 environment.  WSUS is a Microsoft tool that allows administrators to manage and control updates to be approved and ins…
In this Micro Tutorial viewers will learn how to use Boot Corrector from Paragon Rescue Kit Free to identify and fix the boot problems of Windows 7/8/2012R2 etc. As an example is used Windows 2012R2 which lost its active partition flag (often happen…
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…

786 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question