SBS 2003 OWA Access is requiring Domain Admin rights...

Discussion in 'Windows Small Business Server' started by mark, Apr 24, 2006.

  1. mark

    mark Guest

    I have a problem with users accessing OWA.

    They receive the following error message after entering their username
    and password,"You could not be logged on to Outlook Web Access. Ensure
    that your user name and password are orrect, and then try again."

    I have created all users via the add user wizzard using the mobile user
    template. They receive the message internally and externally when
    attempting to access OWA. The only point I have found is if I add them
    to the Domain Admins group - they are then able to access OWA
    internally and externally successfully. I have not made any changes to
    the install of SBS2003 - using most all of the defaults.

    Any suggestions - I have been pulling my hair out for a few weeks.

    Thanks for any suggestions...

    Mark
     
    mark, Apr 24, 2006
    #1
    1. Advertisements

  2. Merv Porter [SBS-MVP], Apr 24, 2006
    #2
    1. Advertisements

  3. mark

    mark Guest

    Merv - How do I check if I am Exchange 2003 SP1 Installed? I know that I
    have SBS2003 SP1..

    Thanks,

     
    mark, Apr 24, 2006
    #3
  4. mark

    mark Guest

    I have confirmed - it is running Exchange SP1...So is the fix to run 831464?
    Thanks,
     
    mark, Apr 24, 2006
    #4
  5. If Exchange 2003 SP1 is installed, the fix should be KB 843539.
     
    Merv Porter [SBS-MVP], Apr 24, 2006
    #5
  6. mark

    mark Guest

    Merv,

    I will give it a shot this evening. Thanks for your suggestion!

     
    mark, Apr 24, 2006
    #6
  7. mark

    mark Guest

    Merv,

    I install KB843539 and even restart IIS - Problem continues...

    Any other suggestions?

    Thanks,

     
    mark, Apr 25, 2006
    #7
  8. Try install 831464...

    OWA Login Problem
    http://groups.google.com/group/micr...look+Web+Access&rnum=5&hl=en#aedb83a02443496c

    --
    Merv Porter [SBS MVP]
    ===================================
     
    Merv Porter [SBS-MVP], Apr 25, 2006
    #8
  9. mark

    mark Guest

    Merv,

    I will install 831464 this evening.

    Thanks,

    Mark

     
    mark, Apr 25, 2006
    #9
  10. mark

    mark Guest

    Merv,

    I will install 831464 this Friday evening. I will update you on status.
    Thanks,

     
    mark, May 3, 2006
    #10
  11. mark

    mark Guest

    Merv,

    I just attempted to install 831464 and I received the following message,
    "Setup has detected that the Service Pack version of this system is newer
    than the update you are applying. There is no need to install this update".
    I just had a selection to click OK. So the update could and would not run
    since it appears to be older. Any other suggestions?

    Thanks,

     
    mark, May 7, 2006
    #11
  12. Can you successfully access OWA with domain\username rather than just
    username?

    --
    Merv Porter [SBS MVP]
    ===================================
     
    Merv Porter [SBS-MVP], May 7, 2006
    #12
  13. Have you installed hotfix 843539?

    You cannot use Outlook Web Access with forms-based authentication and you
    receive a Store.exe e-mail alert message
    http://support.microsoft.com/?kbid=843539

    --
    Merv Porter [SBS MVP]
    ===================================
     
    Merv Porter [SBS-MVP], May 7, 2006
    #13
  14. mark

    mark Guest

    Merv,

    Yes I have installed 843539...Users can only logon to OWA if they are
    members of the Domain Administrators Group. Any suggestions? Thanks much.

     
    mark, May 7, 2006
    #14
  15. Have you re-run CEICW, enabled the firewall, deselected OWA, completed
    CEICW; then run CEICW again, reenable the firewall, select OWA and finish
    CEICW?

    Is this SBS 2003 Standard, Premium with ISA 2000 or Premium with ISA2004?
    Have you installed .NET 2.0?
    Are you hosting any web sites on the server?

    Control Panel | IIS | <servername> (local computer) | Web Sitrs | Default
    Web Site | rt. click ExchWeb | Permissions

    Do you have an entry for Users (<domain>Users) with Read & Execute,
    List Folder Contents, and Read permissions?

    --
    Merv Porter [SBS MVP]
    ===================================
     
    Merv Porter [SBS-MVP], May 7, 2006
    #15
  16. mark

    mark Guest

    Merv,

    This installtion is SBS2003 Standard - I have NOT re-ran the CEICW - I wil
    try that...

    I will also check:
    "Do you have an entry for Users (<domain>Users) with Read & Execute, List
    Folder Contents, and Read permissions?"

    I am NOT hosting any web sites with the exception of the default company
    intranet site - and for that I have not touched that site yet.

     
    mark, May 7, 2006
    #16
  17. mark

    mark Guest

    Merv,

    I just checked the permissions on the "ExchWeb" folder,

    I clicked on the tab, "Directory Security" then click on Edit on
    Authentication and access control. There was a check next to anonymous
    access and had "IUSR_SBSSRV" in the user name field. The password had
    "*****". I am looking in the correct place?

    Also - I did not see .NET 2.0 in add/remove programs either so I guess that
    I don't have that installed.

    I did not want to run CEICW while connected to the server via RWW. I can
    try that this week.

    Thanks,

     
    mark, May 7, 2006
    #17
  18. No, not the "Directory Security" tab.

    Click on "Web Sites", then "Default Web Site", then rt.click "Exchweb" and
    select "Permissions" from the menu (3rd item down on the menu).

    --
    Merv Porter [SBS MVP]
    ===================================
     
    Merv Porter [SBS-MVP], May 8, 2006
    #18
  19. mark

    mark Guest

    Merv,

    Sorry about that - I did check the permissions.

    Domain Admins - Full Control
    Authenticated Users - Read
    System

    Should I make your suggested change here?

    Thanks,

     
    mark, May 8, 2006
    #19
  20. I would wait until you re-run CEICW as this may fix things. If not, you can
    always add the Users' additional permissions after CEICW.

    --
    Merv Porter [SBS MVP]
    ===================================
     
    Merv Porter [SBS-MVP], May 8, 2006
    #20
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.