Unable to access outlook web email

Dear Sir,

We are running Windows 2003 domain environment, we have 2 domain controllers running windows 2003 server, and we have one Exchange 2003 server running under Windows 2003 servers.   The Exchange server is connected to primary domain controller very closely, we also have 10 sites, each site has its own domain controller running windows 2003 server, all sites servers are performing replication process to each other and primary domain controller.  
The exchange 2003 server is running very well for both MS outlook and outlook web access for past 8 years.

For Exchange 2003 outlook web access, we never have any problem, people is able to access outlook web emails from home or other locations.     Today,  staffs are able to connect the outlook web by typing  http://mail.domain name/exchange,    BUT, nobody is able to open the web email by typing Correct Password, and get  ACCESS Deny.  

Is this causing by Virus? or  something else causing Access Deny?    I have stopped and Started IIS on exchange 2003 server, but the problem still can't be resolved.

Thank you and please help,
Paul
paul_linAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

AmitIT ArchitectCommented:
I advise to restart the server. It seems you have non paged memory issue. If you have 3GB switch on Exchange 2003, then you have only 128MB non paged pool memory left. Goto task manager and check how much non paged pool memory is in use. If it is above 100, restart the server and check again.
0
paul_linAuthor Commented:
Dear sir,

After I restart the mail server, the outlook web access by http://mail.domain/exchange is still unable to open email by entering domain\user id and correct password to login outlook web access.  This is the first time happening, we did not have this problem before.   I don't know how to fix.  

Thank you and need help very urgent,
Paul
0
paul_linAuthor Commented:
Dear Sir,

The problem is staffs are accessing company email from home or other office via http://mail.domain/exchange, and windows security widows is asking to enter user name  Domain\user ID, correct user password, and then can't open outlook web email, Access is denied.       I have followed your instruction to restart the mail server, but the problem is still exist, Access is denied.

Thank you and please help,
Paul
0
Simplify Active Directory Administration

Administration of Active Directory does not have to be hard.  Too often what should be a simple task is made more difficult than it needs to be.The solution?  Hyena from SystemTools Software.  With ease-of-use as well as powerful importing and bulk updating capabilities.

HariomExchange ExpertsCommented:
owa works internally or from external location is giving problem ?

Any events on event viewer what about Outlook Users they able to access mails ?
0
paul_linAuthor Commented:
OWA does not work for both internal and external locations is given user access is denied from windows security user log on.

The regular outlook users are able to access mails from all locations because we have domain active directory 2003 servers with Global Catalog located at each office site and replicated each other.  

Thank you,
Paul
0
paul_linAuthor Commented:
Exchange 2003 server Active Syn.  is working pretty well for all our smartphones and Tablet PCs.  Just not working on OWA
user log on security for both internal and external,  access is denied.

Thank you,
Paul
0
AmitIT ArchitectCommented:
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
paul_linAuthor Commented:
Excellent support,  problem has been resolved.   Thank you, paul
0
AmitIT ArchitectCommented:
Anytime :)
0
paul_linAuthor Commented:
There is another problem, our OWA is working ok for user access security now, however, our Exchange 2003 service active syn. is not working, it was working when we are working on OWA issue.      All emails are not able to be updated emails from Exchange 2003 mail server to both Tablet PCs and Smartphones.   I restart IIS Default Web site, stop and start,  It is still not working for the active syn. to mobile devices.     I understand the Exchange active syn is also required to enter user ID and password of domain.      We fixed one thing, this is another one.

Thank you,
Paul
0
paul_linAuthor Commented:
Amit,

Do you have any idea why all mobile devices are not able to syn from Exchange 2003 after we fixed OWA?

Should I restart  IIS Admin service from exchange 2003 server services?  

Thank you,
Paul
0
AmitIT ArchitectCommented:
it seems someone changed IIS related settings. Any GPO applied recently?  here is an article for troubleshooting AS issue

https://alanhardisty.wordpress.com/2010/02/28/exchange-2003-and-activesync-configuration-and-troubleshooting/
0
paul_linAuthor Commented:
Amit,

I follow this instruction and finally the Exchange 2003 ActiveSync is working for all mobile devices, but our previous OWA program come back again,  user access is denied.     It seems OWA and ActiveSync are related problem each other.

How can we make both are stable working?

Thank you,
Paul
0
AmitIT ArchitectCommented:
What you done to fix AS issue, what you change and where?
0
paul_linAuthor Commented:
I did Change Exchange Virtual Directory  security setting to integrated & Basic,  MS ActiveSync to Basic, and Public Virtual Directory to integrated & Basic  on Default Web site.   Uncheck anonymous access box for all 3.
0
AmitIT ArchitectCommented:
I assume you haven't removed any permission you set to fix OWA. If yes, did you restarted Exchange server? I suggest to restart and check it.
0
paul_linAuthor Commented:
No I did not restart exchange server because there are many people are connected to Exchange server, I will restart after business  hour, I will let know the outcome.

Thank you,
Paul
0
paul_linAuthor Commented:
I have restarted Exchange 2003 server, the ActiveSync is working well to mobile devices and smartphones, but OWA is not working,  windows Security error" access is denied".       I don't where and what else are missing, I follow your link, http://support.microsoft.com/en-us/kb/317471.
0
paul_linAuthor Commented:
Amit,

I spent whole day today to figure out how to make both OWA and ActiveSync working properly.  I can't make them working at the same time.    This is what I test both of them from Exchange 2003 IIS management,

1. IF Let OWA working from http://mail.domain/exchange, and user is able to log on and open outlook web emails without error,   I have to configure authentication and access control on Directory Security for

a,  Exchange Virtual server - Basic authentication
b. Public - Basic authentication
c. Exchange WEB - uncheck both Basic Authentication and Integrated Windows Authentication, and select the Enable anonymous access check box
d.  Default Web site stop and then start.

OWA will be working perfectly without error.    But ActiveSync stop and fail  working.

2.  If let ActiveSync work perfectly,  I have to configure authentication and access control on Directory security for,

a. Exchange Virtual Directory -  both integrated windows authentication and Basic authentication boxes check.
b. No Touch exchange Web
c. Microsoft-Server-ActiveSync Virtual Directory - Basic authentication box check.
d. Public Virtual Directory - both integrated windows and Basic authentication boxes check.

ActiveSync will be working perfectly, all mobile devices are synchronized properly.  BUT OWA fail working and user getting access denied.

So, both OWA and ActiveSync are not able to work properly at the same time.   We don't have this problem for past 8 years.        The issue is the authentication between Basic and integrated windows, how to play correct roles for both OWA and ActiveSync working properly.  Exchange 2003 server is suddenly not able to determine those roles for both OWA and ActiveSync.

Hopefully, you understand my writing for time I spent.  I am wondering whether it is causing by Microsoft widows updates to the server.

Thank you and please help us to solve problems,
Paul
0
AmitIT ArchitectCommented:
0
paul_linAuthor Commented:
Amit,

Yes, I found kb3002657 was installed on 3/12/2015.  I did remove it.  Then, what should I do to make the correct authentications for both OWA and ActiveSync ?  Should I restart server and Default web site (Stop and Start)?

Please give me the direction.    kb3002657 has been removed in Exchange 2003.

Thank you,
Paul
0
AmitIT ArchitectCommented:
This KB is causing issues on Exchange 2003. Reboot the server and check again.
0
paul_linAuthor Commented:
For Authentication from exchange system manager: Protocol HTTP

Exchange Virtual Directory - Basic
Public - Basic

For Authentication from IIS - Default Web Site
Exchange - Basic & Integrated
Exchange Web - Enable anonymous access, uncheck both basic and integrated
MS-Server-ActiveSync - Basic
Public - Basic & Integrated

Please check those security setting are correct before I reboot server.  I can't reboot server during the business hours, I will do this around 8:30pm tonight , are you available if I tell you the outcome?

Thank you,
Paul
0
AmitIT ArchitectCommented:
I will check back tomorrow.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Email Servers

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.