Exchange Server Forums

OWA Issues

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [Microsoft Exchange 2003] >> Exchange 2003 SBS >> OWA Issues

Page: [1]

Message

<< Older Topic Newer Topic >>

Limited time MSExchange.org offer! -- 1.Sep.2008 1:00:00 PM

TechGenix and SolarWinds have partnered to provide free copies of SolarWinds Exchange Monitor to all visitors who join the MSExchange.org Forums. SolarWinds Exchange Monitor is a handy desktop dashboard that continuously monitors Microsoft Exchange to deliver real-time insight into Exchange services, mail queue sizes, and host server health. Learn more about Exchange Monitor and the free offer!

OWA Issues - 6.Dec.2006 10:37:54 AM

mhobs

Posts: 18
Joined: 24.Sep.2004
From: Portland, Oregon
Status: offline

Hello,

I am running SBS 2003 and everything had been running great. Now when people log into OWA (using https) they can only read emails. When they try to send or reply to an email they get an "Access Denied" error message. If they try to delete an email from OWA they get a "Some items can't be deleted. They were either moved, already deleted, or access is denied."

I have gone through IIS and I could not find any premission issues that would cause this. I have also gone through exchange but I am not sure what the Authentication Methods should be on the Exchange Virtual Server. The Exadmin Properties Authentication Methods lists a default domain while in IIS it has a "\" so could this be it? The Exchange Authentication Methods in the Virtual Server match the Exchange Authentication in IIS.

Any help would be most appreciated, I need to get this resolved before the boss gets unhappy. I was troubling shooting a problem with the companyweb (sharepoint service) page so I messed around with a few IIS settings but I rolled everything back to the way it was before.

Thanks,

Mark

Post #: 1

Featured Links*

RE: OWA Issues - 6.Dec.2006 6:29:45 PM

mhobs

Posts: 18
Joined: 24.Sep.2004
From: Portland, Oregon
Status: offline

I remember that while I was troubleshooting my Sharepoint (companyweb page) problems I reset the password for the the IUSR_MAIL and IWAM_MAIL accounts (suggested by Microsoft to fix my intranet problem). In IIS I am only using Enable anyonymous access in ExchWeb and I entered the new password for the IUSR_MAIL in this screen. I have the default domain set to "\" is this correct?

Now changing the passwords in AD should proprigate out shouldn't it? Would I need to up date IWAM_MAIL with a new password somewhere else?

I made a mess trying to fix another problem, I followed Microsoft Knowledge Base Articles and it screw up OWA.

Please help if able!

Thanks,

Mark

(in reply to mhobs)

Post #: 2

RE: OWA Issues - 6.Dec.2006 6:33:42 PM

mhobs

Posts: 18
Joined: 24.Sep.2004
From: Portland, Oregon
Status: offline

I was trying to trouble shoot an HTTP Error 404 - File or directory not found in IIS problem. So tried a few suggestions by Microsoft (see above).

(in reply to mhobs)

Post #: 3

RE: OWA Issues - 7.Dec.2006 2:09:17 PM

jchong

Posts: 2516
Joined: 1.Dec.2005
From: Centreville, Virginia
Status: offline

Review your authentication settings against this article.

Troubleshooting Outlook Web Access logon failures in Exchange 2000 and in Exchange 2003
http://support.microsoft.com/kb/327843

_____________________________

James Chong
MCSE | M+, S+, MCTS, Security+
msexchangetips.blogspot.com

(in reply to mhobs)

Post #: 4

RE: OWA Issues - 7.Dec.2006 2:43:16 PM

mhobs

Posts: 18
Joined: 24.Sep.2004
From: Portland, Oregon
Status: offline

Thanks for replying to my post! I went through the entire document and everything checked out on my server to what this article suggested. I am using the "\" in the default domain box rather than my domain name does that make a difference? I even entered the new password I set for IUSR in the ExchWeb folder in IIS.

Still getting "Access denied" when sending or replying to emails (in OWA 03 only) for all users with accounts. Plus I get the Some items can't be deleted. They were either moved, already deleted, or access is denied" message when I try to delete mail in OWA.

I am at a total loss at this point and the end users are getting antsy. Any more help would be most appreicated.

Thanks!

< Message edited by mhobs -- 7.Dec.2006 2:44:34 PM >

(in reply to jchong)

Post #: 5

RE: OWA Issues - 7.Dec.2006 2:56:17 PM

mhobs

Posts: 18
Joined: 24.Sep.2004
From: Portland, Oregon
Status: offline

I am logging into a https owa site so could it be my SSL Certificate causing this problem? I am able to log in and read emails I just can send or delete so it has to be some kind of permission thing for Authenticated users.

I am at a loss and getting desperate.

Thanks

(in reply to mhobs)

Post #: 6

RE: OWA Issues - 7.Dec.2006 4:13:40 PM

jchong

Posts: 2516
Joined: 1.Dec.2005
From: Centreville, Virginia
Status: offline

I doubt it's the ssl, it's more of an perm issue. Were you able to verify your authentication/security settings?

_____________________________

James Chong
MCSE | M+, S+, MCTS, Security+
msexchangetips.blogspot.com

(in reply to mhobs)

Post #: 7

RE: OWA Issues - 7.Dec.2006 5:48:16 PM

mhobs

Posts: 18
Joined: 24.Sep.2004
From: Portland, Oregon
Status: offline

I verified all of the setting in that Microsoft document and they matched. So I am totally stumped at this point.

Users can log onto their OWA accounts and read all of their emails. But Sending and deleting them gives the error messages. So I agree it has to be a premissions issue but they all look fine in IIS, Exchange Manager and the Exchsvr folders.

Thanks for your help so far I really appreciate it.

< Message edited by mhobs -- 7.Dec.2006 6:13:04 PM >

(in reply to jchong)

Post #: 8

RE: OWA Issues - 8.Dec.2006 3:26:19 PM

mhobs

Posts: 18
Joined: 24.Sep.2004
From: Portland, Oregon
Status: offline

I have gone through my security logs in the Event Viewer and I found that after I log onto OWA I no longer get Event ID 680. I get the 538 eventids (log on) and the 540 eventids (log off) only now.

The EventID 680 is present for SMTP and Pop3 emails users but now OWA users.

The EventID 680 description is as follows:
Logon attempted by: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0

So how can I get OWA to use this Authentication Package again? I have tried everything and this seems to be pointing me in a forward direction now. Is this even related to my problem of getting access denied when I try to send emails?

Thanks for your help in advance!

(in reply to mhobs)

Post #: 9

RE: OWA Issues - 8.Dec.2006 3:44:11 PM

jchong

Posts: 2516
Joined: 1.Dec.2005
From: Centreville, Virginia
Status: offline

Ok I see that you tried to resynch your IWAM account did you successfully do this?

_____________________________

James Chong
MCSE | M+, S+, MCTS, Security+
msexchangetips.blogspot.com

(in reply to mhobs)

Post #: 10

RE: OWA Issues - 8.Dec.2006 4:26:08 PM

mhobs

Posts: 18
Joined: 24.Sep.2004
From: Portland, Oregon
Status: offline

I am unsure how to resync my IWAM account...I am trying to find out how in Google but could you point me in the right direction?

(in reply to jchong)

Post #: 11

RE: OWA Issues - 8.Dec.2006 4:33:18 PM

mhobs

Posts: 18
Joined: 24.Sep.2004
From: Portland, Oregon
Status: offline

If I try to run synciwam.vbs, I get an error 8004E00F...I am googleing away right now.

Again thanks for your help I think this has been the problem all along since I reset this password.

< Message edited by mhobs -- 8.Dec.2006 4:39:17 PM >

(in reply to mhobs)

Post #: 12

RE: OWA Issues - 8.Dec.2006 5:00:32 PM

jchong

Posts: 2516
Joined: 1.Dec.2005
From: Centreville, Virginia
Status: offline

Do it manually. This article works.

PRB: Configured Identity Is Incorrect for IWAM Account
http://support.microsoft.com/?kbid=297989

_____________________________

James Chong
MCSE | M+, S+, MCTS, Security+
msexchangetips.blogspot.com

(in reply to mhobs)

Post #: 13

RE: OWA Issues - 8.Dec.2006 5:53:54 PM

mhobs

Posts: 18
Joined: 24.Sep.2004
From: Portland, Oregon
Status: offline

Darn it! I ran the adsutil.vbs (editing it to view passwords) to obtain the IWAM password. I then reset it to something else using this utility and reset it in AD to the same password. I restarted the server just for good measure and I when I went to run the synciwam.vbs I still get the same 8004E00F error. I am still getting access denied after I log into OWA and try to send an email.

The IWAM passwords match and I followed that article exactly (even though it was for Windows 2000 Server).

I thought I had it!

Thanks

< Message edited by mhobs -- 8.Dec.2006 6:18:39 PM >

(in reply to jchong)

Post #: 14

RE: OWA Issues - 8.Dec.2006 6:06:10 PM

mhobs

Posts: 18
Joined: 24.Sep.2004
From: Portland, Oregon
Status: offline

I am able to log into OWA but the Event Viewer is showing for the user name I logged in with:

Event id: 529
Type: Failure Aud
Reason: Unknown user name or bad password
Authentication Package: Negotiate

Plus I am getting this same error for the IUSR account

I matched up the IUSR account using the adsutil in AD and in the ExchWeb and bin folders in IIS.

(in reply to mhobs)

Post #: 15