Exchange 2016 OWA Log on UPN format won't work

sf1elds
sf1elds used Ask the Experts™
on
I'm trying to set my OWA login option to UPN format. However it seems not to work even though I've set it to that format in authentication. See attached.

I'm trying to use the following format | username@domain.com

Only this format works | domain\username

I've also restarted the IIS.
EXCHANGE-2017-11-13-08-59-46.png
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
CESNetwork Administrator

Commented:
You need to change the forms-based authentication format.

in the ECP, go to Servers > Virtual Directories.  Open the OWA virtual directory and then go to Authentication.  Change the radio button under forms based authentication to meet your needs.

You may need to restart IIS to get this to take effect.
MASEE Solution Guide - Technical Dept Head
Most Valuable Expert 2017

Commented:
Did you try after reseting  IIS
iisreset/noforce
sf1eldsNetwork Administrator

Author

Commented:
@ CES IT: I did exactly that, I included a screen shot in my question.

@ MAS: Yes I did that.
Ensure you’re charging the right price for your IT

Do you wonder if your IT business is truly profitable or if you should raise your prices? Learn how to calculate your overhead burden using our free interactive tool and use it to determine the right price for your IT services. Start calculating Now!

Pete LongTechnical Consultant

Commented:
Check you user object(s) that their UPN is actually set to what you think it is, and is not the netbios name for the domain. (i.e your email address is not your UPN)
Does the CAS serve you are logging into hate a global catalog server in the same site/subnet object in AD?
sf1eldsNetwork Administrator

Author

Commented:
@Pete: Totally lost as to what your trying to say here. "Check you user object(s) that their UPN is actually set to what you think it is, and is not the netbios name for the domain. (i.e your email address is not your UPN)
Does the CAS serve you are logging into hate a global catalog server in the same site/subnet object in AD?"
MASEE Solution Guide - Technical Dept Head
Most Valuable Expert 2017

Commented:
For testing please change it back to "Username only"  and make sure OWA VDs works fine.
Capture2.PNG
Tom CieslikIT Engineer
Distinguished Expert 2017
Commented:
Do you have external name for your domain installed in your active directory ?

In most cases users using different name for inside and outside, so for example inside UPN name is user@domain.local where for outside is like email address: user@domain.com
sf1eldsNetwork Administrator

Author

Commented:
It works fine with 'username only'. Tried that already.
EE Solution Guide - Technical Dept Head
Most Valuable Expert 2017
Commented:
I hope you changed your UPN as below. i.e. User logon name is equal to email address.
Capture2.PNG
sf1eldsNetwork Administrator

Author

Commented:
I just tried logging on to the OWA from the local network using "username@domain.local" and that worked.
Tom CieslikIT Engineer
Distinguished Expert 2017

Commented:
That's why because you domain.local is recognized and your External domain don't.
sf1eldsNetwork Administrator

Author

Commented:
@MAS Ok you maybe onto something here. When I go to user properties I'm only seeing "@domain.local". How do I add "@domain.com"?
MASEE Solution Guide - Technical Dept Head
Most Valuable Expert 2017

Commented:
Please check this to add a new UPN suffix.
https://technet.microsoft.com/en-us/library/cc772007(v=ws.11).aspx
Pete LongTechnical Consultant

Commented:
This was the point I was trying to make above?

P
Tom CieslikIT Engineer
Distinguished Expert 2017

Commented:
That's why I was asking you if external domain name is registered in your Doman. :)

To add UPN suffixes
Open Active Directory Domains and Trusts. To open Active Directory Domains and Trusts, click Start , click Administrative Tools , and then click Active Directory Domains and Trusts .
In the console tree, right-click Active Directory Domains and Trusts , and then click Properties .
On the UPN Suffixes tab, type an alternative UPN suffix for the forest, and then click Add .
Repeat step 3 to add additional alternative UPN suffixes.

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial