Unable to access outlook web email
Dear Sir,
We are running Windows 2003 domain environment, we have 2 domain controllers running windows 2003 server, and we have one Exchange 2003 server running under Windows 2003 servers. The Exchange server is connected to primary domain controller very closely, we also have 10 sites, each site has its own domain controller running windows 2003 server, all sites servers are performing replication process to each other and primary domain controller.
The exchange 2003 server is running very well for both MS outlook and outlook web access for past 8 years.
For Exchange 2003 outlook web access, we never have any problem, people is able to access outlook web emails from home or other locations. Today, staffs are able to connect the outlook web by typing http://mail.domain name/exchange, BUT, nobody is able to open the web email by typing Correct Password, and get ACCESS Deny.
Is this causing by Virus? or something else causing Access Deny? I have stopped and Started IIS on exchange 2003 server, but the problem still can't be resolved.
Thank you and please help,
Paul
We are running Windows 2003 domain environment, we have 2 domain controllers running windows 2003 server, and we have one Exchange 2003 server running under Windows 2003 servers. The Exchange server is connected to primary domain controller very closely, we also have 10 sites, each site has its own domain controller running windows 2003 server, all sites servers are performing replication process to each other and primary domain controller.
The exchange 2003 server is running very well for both MS outlook and outlook web access for past 8 years.
For Exchange 2003 outlook web access, we never have any problem, people is able to access outlook web emails from home or other locations. Today, staffs are able to connect the outlook web by typing http://mail.domain name/exchange, BUT, nobody is able to open the web email by typing Correct Password, and get ACCESS Deny.
Is this causing by Virus? or something else causing Access Deny? I have stopped and Started IIS on exchange 2003 server, but the problem still can't be resolved.
Thank you and please help,
Paul
Amit
I advise to restart the server. It seems you have non paged memory issue. If you have 3GB switch on Exchange 2003, then you have only 128MB non paged pool memory left. Goto task manager and check how much non paged pool memory is in use. If it is above 100, restart the server and check again.
ASKER
Dear sir,
After I restart the mail server, the outlook web access by http://mail.domain/exchange is still unable to open email by entering domain\user id and correct password to login outlook web access. This is the first time happening, we did not have this problem before. I don't know how to fix.
Thank you and need help very urgent,
Paul
After I restart the mail server, the outlook web access by http://mail.domain/exchange is still unable to open email by entering domain\user id and correct password to login outlook web access. This is the first time happening, we did not have this problem before. I don't know how to fix.
Thank you and need help very urgent,
Paul
ASKER
Dear Sir,
The problem is staffs are accessing company email from home or other office via http://mail.domain/exchange, and windows security widows is asking to enter user name Domain\user ID, correct user password, and then can't open outlook web email, Access is denied. I have followed your instruction to restart the mail server, but the problem is still exist, Access is denied.
Thank you and please help,
Paul
The problem is staffs are accessing company email from home or other office via http://mail.domain/exchange, and windows security widows is asking to enter user name Domain\user ID, correct user password, and then can't open outlook web email, Access is denied. I have followed your instruction to restart the mail server, but the problem is still exist, Access is denied.
Thank you and please help,
Paul
owa works internally or from external location is giving problem ?
Any events on event viewer what about Outlook Users they able to access mails ?
Any events on event viewer what about Outlook Users they able to access mails ?
ASKER
OWA does not work for both internal and external locations is given user access is denied from windows security user log on.
The regular outlook users are able to access mails from all locations because we have domain active directory 2003 servers with Global Catalog located at each office site and replicated each other.
Thank you,
Paul
The regular outlook users are able to access mails from all locations because we have domain active directory 2003 servers with Global Catalog located at each office site and replicated each other.
Thank you,
Paul
ASKER
Exchange 2003 server Active Syn. is working pretty well for all our smartphones and Tablet PCs. Just not working on OWA
user log on security for both internal and external, access is denied.
Thank you,
Paul
user log on security for both internal and external, access is denied.
Thank you,
Paul
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Excellent support, problem has been resolved. Thank you, paul
Anytime :)
ASKER
There is another problem, our OWA is working ok for user access security now, however, our Exchange 2003 service active syn. is not working, it was working when we are working on OWA issue. All emails are not able to be updated emails from Exchange 2003 mail server to both Tablet PCs and Smartphones. I restart IIS Default Web site, stop and start, It is still not working for the active syn. to mobile devices. I understand the Exchange active syn is also required to enter user ID and password of domain. We fixed one thing, this is another one.
Thank you,
Paul
Thank you,
Paul
ASKER
Amit,
Do you have any idea why all mobile devices are not able to syn from Exchange 2003 after we fixed OWA?
Should I restart IIS Admin service from exchange 2003 server services?
Thank you,
Paul
Do you have any idea why all mobile devices are not able to syn from Exchange 2003 after we fixed OWA?
Should I restart IIS Admin service from exchange 2003 server services?
Thank you,
Paul
it seems someone changed IIS related settings. Any GPO applied recently? here is an article for troubleshooting AS issue
https://alanhardisty.wordpress.com/2010/02/28/exchange-2003-and-activesync-configuration-and-troubleshooting/
https://alanhardisty.wordpress.com/2010/02/28/exchange-2003-and-activesync-configuration-and-troubleshooting/
ASKER
Amit,
I follow this instruction and finally the Exchange 2003 ActiveSync is working for all mobile devices, but our previous OWA program come back again, user access is denied. It seems OWA and ActiveSync are related problem each other.
How can we make both are stable working?
Thank you,
Paul
I follow this instruction and finally the Exchange 2003 ActiveSync is working for all mobile devices, but our previous OWA program come back again, user access is denied. It seems OWA and ActiveSync are related problem each other.
How can we make both are stable working?
Thank you,
Paul
What you done to fix AS issue, what you change and where?
ASKER
I did Change Exchange Virtual Directory security setting to integrated & Basic, MS ActiveSync to Basic, and Public Virtual Directory to integrated & Basic on Default Web site. Uncheck anonymous access box for all 3.
I assume you haven't removed any permission you set to fix OWA. If yes, did you restarted Exchange server? I suggest to restart and check it.
ASKER
No I did not restart exchange server because there are many people are connected to Exchange server, I will restart after business hour, I will let know the outcome.
Thank you,
Paul
Thank you,
Paul
ASKER
I have restarted Exchange 2003 server, the ActiveSync is working well to mobile devices and smartphones, but OWA is not working, windows Security error" access is denied". I don't where and what else are missing, I follow your link, http://support.microsoft.com/en-us/kb/317471.
ASKER
Amit,
I spent whole day today to figure out how to make both OWA and ActiveSync working properly. I can't make them working at the same time. This is what I test both of them from Exchange 2003 IIS management,
1. IF Let OWA working from http://mail.domain/exchange, and user is able to log on and open outlook web emails without error, I have to configure authentication and access control on Directory Security for
a, Exchange Virtual server - Basic authentication
b. Public - Basic authentication
c. Exchange WEB - uncheck both Basic Authentication and Integrated Windows Authentication, and select the Enable anonymous access check box
d. Default Web site stop and then start.
OWA will be working perfectly without error. But ActiveSync stop and fail working.
2. If let ActiveSync work perfectly, I have to configure authentication and access control on Directory security for,
a. Exchange Virtual Directory - both integrated windows authentication and Basic authentication boxes check.
b. No Touch exchange Web
c. Microsoft-Server-ActiveSyn
d. Public Virtual Directory - both integrated windows and Basic authentication boxes check.
ActiveSync will be working perfectly, all mobile devices are synchronized properly. BUT OWA fail working and user getting access denied.
So, both OWA and ActiveSync are not able to work properly at the same time. We don't have this problem for past 8 years. The issue is the authentication between Basic and integrated windows, how to play correct roles for both OWA and ActiveSync working properly. Exchange 2003 server is suddenly not able to determine those roles for both OWA and ActiveSync.
Hopefully, you understand my writing for time I spent. I am wondering whether it is causing by Microsoft widows updates to the server.
Thank you and please help us to solve problems,
Paul
I spent whole day today to figure out how to make both OWA and ActiveSync working properly. I can't make them working at the same time. This is what I test both of them from Exchange 2003 IIS management,
1. IF Let OWA working from http://mail.domain/exchange, and user is able to log on and open outlook web emails without error, I have to configure authentication and access control on Directory Security for
a, Exchange Virtual server - Basic authentication
b. Public - Basic authentication
c. Exchange WEB - uncheck both Basic Authentication and Integrated Windows Authentication, and select the Enable anonymous access check box
d. Default Web site stop and then start.
OWA will be working perfectly without error. But ActiveSync stop and fail working.
2. If let ActiveSync work perfectly, I have to configure authentication and access control on Directory security for,
a. Exchange Virtual Directory - both integrated windows authentication and Basic authentication boxes check.
b. No Touch exchange Web
c. Microsoft-Server-ActiveSyn
d. Public Virtual Directory - both integrated windows and Basic authentication boxes check.
ActiveSync will be working perfectly, all mobile devices are synchronized properly. BUT OWA fail working and user getting access denied.
So, both OWA and ActiveSync are not able to work properly at the same time. We don't have this problem for past 8 years. The issue is the authentication between Basic and integrated windows, how to play correct roles for both OWA and ActiveSync working properly. Exchange 2003 server is suddenly not able to determine those roles for both OWA and ActiveSync.
Hopefully, you understand my writing for time I spent. I am wondering whether it is causing by Microsoft widows updates to the server.
Thank you and please help us to solve problems,
Paul
Can you check, if you installed kb3002657 by mistake, if so remove it.
http://windowsitpro.com/patch-tuesday/patch-tuesday-kb3002657-causing-authentication-problems-exchange-other-apps
http://windowsitpro.com/patch-tuesday/patch-tuesday-kb3002657-causing-authentication-problems-exchange-other-apps
ASKER
Amit,
Yes, I found kb3002657 was installed on 3/12/2015. I did remove it. Then, what should I do to make the correct authentications for both OWA and ActiveSync ? Should I restart server and Default web site (Stop and Start)?
Please give me the direction. kb3002657 has been removed in Exchange 2003.
Thank you,
Paul
Yes, I found kb3002657 was installed on 3/12/2015. I did remove it. Then, what should I do to make the correct authentications for both OWA and ActiveSync ? Should I restart server and Default web site (Stop and Start)?
Please give me the direction. kb3002657 has been removed in Exchange 2003.
Thank you,
Paul
This KB is causing issues on Exchange 2003. Reboot the server and check again.
ASKER
For Authentication from exchange system manager: Protocol HTTP
Exchange Virtual Directory - Basic
Public - Basic
For Authentication from IIS - Default Web Site
Exchange - Basic & Integrated
Exchange Web - Enable anonymous access, uncheck both basic and integrated
MS-Server-ActiveSync - Basic
Public - Basic & Integrated
Please check those security setting are correct before I reboot server. I can't reboot server during the business hours, I will do this around 8:30pm tonight , are you available if I tell you the outcome?
Thank you,
Paul
Exchange Virtual Directory - Basic
Public - Basic
For Authentication from IIS - Default Web Site
Exchange - Basic & Integrated
Exchange Web - Enable anonymous access, uncheck both basic and integrated
MS-Server-ActiveSync - Basic
Public - Basic & Integrated
Please check those security setting are correct before I reboot server. I can't reboot server during the business hours, I will do this around 8:30pm tonight , are you available if I tell you the outcome?
Thank you,
Paul
I will check back tomorrow.