SBS Prem R2: Allow all users OWA internally, only certain external

Discussion in 'Windows Small Business Server' started by tim144, Jan 29, 2007.

  1. tim144

    tim144 Guest

    Our client wants us to enable OWA only for internal users, easy enough
    (changed the OWA web Publishing rule to only apply to Internal users).

    Now here's the part we're having difficulty with: They want a few select
    users to be able to pull up OWA from home. We tried making a second
    publishing rule in ISA, this one set to allow, the special users, from
    external to internal, access to OWA. What happens is ISA prompts for
    credentials, THEN OWA prompts for credentials, then we get "this page cannot
    be displayed". If we hit F5 to refresh at the cannot be displayed message,
    the full OWA screen comes up fine, and they can access their email.

    The client doesn't really mind logging in twice, once for ISA once for OWA,
    if they have to, but they don't want to see the cannot be displayed page in
    the process.

    Once we get this working they want us to do the same exact thing for Outlook
    RPC/HTTP and also for Remote Web Workplace.

    Thanks In Advance!!
    tim144, Jan 29, 2007
    1. Advertisements

  2. I think the better was is via group/user rights rather than messing'
    with publishing rules in ISA.

    Look at the user template you chose and edit up a more granular one..
    use that ..not ISA rules.
    Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP], Jan 30, 2007
    1. Advertisements

  3. tim144

    tim144 Guest

    I looked there, but this client does want OWA allowed 24/7 from internal IPs
    (local lan).

    the want OWA 24/7 allowed on specified external usernames but denied on
    other external Pcs.

    the owa connector double promps for credis, and needs an f5 refresh beween
    the 2nd login and actually seeing owa & the mail.
    tim144, Jan 30, 2007
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.