Solved

403 - Forbidden: Access is denied- For OWA

Posted on 2015-02-03
4
447 Views
Last Modified: 2015-02-06
hi guys

I've set up Exchange but I can't get OWA to work externally. I can access it internally by going to https://servername/owa.

I have set up http redirect on all of the virtual directory folders, like 'Default Web Site', Autodiscover, EWS, Exchangeweb, OWA, Powershell, RPC etc. All of them have the checkbox 'Redirect requests to this destination' with the entries: https://mail.domainname.com/owa

The check box 'Only redirect requests to content in this directory' has also been checked.

On the firewall, I have done a redirect for anything hitting the external IP to the internal for ports 80 and 443.
I can't access it by the domain name yet as the 'A' record hasn't been set up.

But currently, when I type: https://external_IP/owa I get to the following error:

403 - Forbidden: Access is denied.
You do not have permission to view this directory or page using the credentials that you supplied.

Any ideas guys?

Thanks
Yash
0
Comment
Question by:Yashy
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
  • 2
4 Comments
 
LVL 34

Accepted Solution

by:
it_saige earned 500 total points
ID: 40586485
Yashy, this is not how redirects are setup.  Autodiscover, EWS, Powershell, RPC and OWA are *all* seperate services.

First, you need to rebuild your Exchange virtual directories:

http://technet.microsoft.com/en-us/library/ff629372.aspx

Once completed verify that you can access OWA externally by the standard http address.

Then use the steps presented by Brian Desmond:

http://briandesmond.com/blog/redirecting-owa-urls-in-exchange-2010/

Note that he removes the redirection from the other Exchange related virtual directories.

-saige-
0
 
LVL 1

Author Comment

by:Yashy
ID: 40591422
Hey Saige,

Thank you for the response. I started the first step.  And i went on to the second step. However, when trying to login, then I get an error 'this webpage has a redirect loop'.

Any ideas what it could be?
0
 
LVL 34

Expert Comment

by:it_saige
ID: 40591999
You should be able to login without performing the second steps.  Check to ensure that the root website has redirection turned off.

-saige-
0
 
LVL 1

Author Comment

by:Yashy
ID: 40593272
All that has been done and I followed both guides. When I try to login with Chrome, I get the 'this webpage has a redirect loop' and if with IE then it literally does not login. It's trying to login but never does. It looks as though the redirect is now working correctly.
0

Featured Post

Free Tool: ZipGrep

ZipGrep is a utility that can list and search zip (.war, .ear, .jar, etc) archives for text patterns, without the need to extract the archive's contents.

One of a set of tools we're offering as a way to say thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

After hours on line I found a solution which pointed to the inherited Active Directory permissions . You have to give/allow permissions to the "Exchange trusted subsystem" for the user in the Active Directory...
This article will help to fix the below error for MS Exchange server 2010 I. Out Of office not working II. Certificate error "name on the security certificate is invalid or does not match the name of the site" III. Make Internal URLs and External…
This video discusses moving either the default database or any database to a new volume.
Exchange organizations may use the Journaling Agent of the Transport Service to archive messages going through Exchange. However, if the Transport Service is integrated with some email content management application (such as an antispam), the admini…

728 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question