Exchange Server Forums

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

RE: New to Exchange and OWA question

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [Microsoft Exchange 2003] >> Outlook Web Access >> RE: New to Exchange and OWA question Page: <<   < prev  1 [2]
Login
Message << Older Topic   Newer Topic >>
Limited time MSExchange.org offer! -- 1.Sep.2008 1:00:00 PM
TechGenix and SolarWinds have partnered to provide free copies of SolarWinds Exchange Monitor to all visitors who join the MSExchange.org Forums. SolarWinds Exchange Monitor is a handy desktop dashboard that continuously monitors Microsoft Exchange to deliver real-time insight into Exchange services, mail queue sizes, and host server health. Learn more about Exchange Monitor and the free offer!
RE: New to Exchange and OWA question - 1.Apr.2006 2:10:56 PM   
menko

 

Posts: 114
Joined: 22.Jan.2006
Status: offline
Check this too for additional background info and tips:

http://www.microsoft.com/technet/prodtechnol/exchange/2003/library/cliaccgde.mspx


_____________________________

Regards,

Menko den Ouden
MCSE+I+Messaging

(in reply to menko)
Post #: 21
RE: New to Exchange and OWA question - 1.Apr.2006 2:46:27 PM   
SUSANVV

 

Posts: 75
Joined: 26.Mar.2006
Status: offline
Nothing happens. I goes nowhere. We have the router setup to let a specific port in and forward it to 443. With that I get the certificate information and then an exchange basic login and then a "Under Construction" message. I'm guessing it is something to do with my authentication on some page somewhere but I don't know where. Perhaps group permissions on a web directory?

Thanks for your help.

Sue Van

(in reply to menko)
Post #: 22
RE: New to Exchange and OWA question - 1.Apr.2006 3:10:11 PM   
menko

 

Posts: 114
Joined: 22.Jan.2006
Status: offline
Did you really enable Forms Based Authentication on the Exchange Server's HTTP protocol?:

http://support.microsoft.com/kb/830827/en-us
Enabling forms-based authentication
You must enable Secure Sockets Layer (SSL) on the server before you enable forms-based authentication. For more information about how to install a certificate in Microsoft Windows Server 2003 before you enable SSL, click the following article number to view the article in the Microsoft Knowledge Base:
816794 (http://support.microsoft.com/kb/816794/) How to install imported certificates on a Web server in Windows Server 2003 To enable forms-based authentication in Exchange 2003, follow these steps.

Note In a front-end/back-end server environment, you must enable forms-based authentication only on the front-end server. Do not enable forms-based authentication on the back-end server. In an environment where you do not use a front-end server, enable forms-based authentication on the mailbox server.



1.
Start Exchange System Manager.

2.
If administrative groups are enabled, expand Administrative Groups.

3.
Expand Servers, and then expand your front-end server.

4.
Expand Protocols, expand HTTP, right-click Exchange Virtual Server, and then click Properties.

5.
Click the Settings tab, and then click to select the Enable Forms Based Authentication check box.

6.
In the Compression list, click the level of compression that you want.

Note We recommend that you do not enable compression in a single-server environment because compression in a single-server environment places an additional load on the server.

7.
Click OK.

8.
If you receive a message that states that the IIS service must be restarted, click OK. To restart IIS, type the following command at a command prompt: iisreset

If you enabled forms-based authentication on a front-end server, follow these steps on your back-end servers:



1.
Start Exchange System Manager.

2.
If administrative groups are enabled, expand Administrative Groups.

3.
Expand Servers, and then expand your back-end server.

4.
Expand Protocols, expand HTTP, and then expand Exchange Virtual Server.

5.
Right-click the Exchange virtual directory that appears under the Exchange Virtual Server container, and then click Properties.

6.
Click the Access tab, and then click Authentication.

7.
If it is not already selected, click to select the Basic authentication check box.

8.
Enter a backslash (\) in the Default Domain box.

9.
Click OK two times to close the property windows.

_____________________________

Regards,

Menko den Ouden
MCSE+I+Messaging

(in reply to SUSANVV)
Post #: 23
RE: New to Exchange and OWA question - 3.Apr.2006 6:15:07 PM   
SUSANVV

 

Posts: 75
Joined: 26.Mar.2006
Status: offline
Thanks for the help. Howwever, we have only a single server. I notices one thing. Under anonymous access it is set to IUSR_Exchange servername. This does not exist in our AD. Does that matter? Permissions on the Default Web Site list :
Internet Guest Account ExchangeServerName(IUSR_ExchangeServerName

I am getting the notification regarding the SSL certificate so I am getting that far.
I am getting the basic login where I put in the domain.
I then get that the website is "Under construction".

This is from a web browser using our static IP address.

It has to be a permission on a directory or a right, or an access.

I tried what was applicable that you wrote with no change.

TIA for the help.

Sue Van

(in reply to menko)
Post #: 24
RE: New to Exchange and OWA question - 3.Apr.2006 7:11:04 PM   
leederbyshire

 

Posts: 968
Joined: 4.Jan.2006
Status: offline
IUSR_computername (and IWAM_computername) are built-in accounts that IIS uses to access Web content on behalf of Web clients.  Are you sure that you can't see them in Active Directory Users and Computers, in the Users container?

_____________________________

Lee.
___________________________________

Outlook Web Access for PDA and WAP:
www.leederbyshire.com
___________________________________

(in reply to SUSANVV)
Post #: 25
RE: New to Exchange and OWA question - 3.Apr.2006 7:28:36 PM   
SUSANVV

 

Posts: 75
Joined: 26.Mar.2006
Status: offline
Hi again,
    Thanks for the reply. I am certain they are not there. I have IUSR_DomainControllerName not IUSR_MailServerName as the member mail server has a different name. Not in Users and not in Computers.

I believe that anonymous user should be enabled for Exchweb only. Correct?

I see the certificate but I do not get the FBA logon although it is enabled.

Good to talk to you again. Thanks for your help.

Sue Van

(in reply to leederbyshire)
Post #: 26
RE: New to Exchange and OWA question - 3.Apr.2006 7:44:41 PM   
leederbyshire

 

Posts: 968
Joined: 4.Jan.2006
Status: offline
Is OWA still working internally?  If it is, then you do not need to worry about the IUSR accounts - they must be either working, or not relevant to the problem.  Are you using the same URL internally and externally?  The normal URL is http://servername/exchange .  I assume that this is what you use internally.  I ask because you say that you get the built-in IIS placeholder page 'Under Construction' externally.  This is exactly what you would expect to get if you typed in http://servername , but I don't understand how you get it if you type http://servername/exchange .

_____________________________

Lee.
___________________________________

Outlook Web Access for PDA and WAP:
www.leederbyshire.com
___________________________________

(in reply to SUSANVV)
Post #: 27
RE: New to Exchange and OWA question - 3.Apr.2006 7:46:26 PM   
de.blackman

 

Posts: 1436
Joined: 4.Apr.2005
From: Toronto, Canada
Status: offline
You will see the IUSR account for domain controllers only in the AD Users and Computers. For member servers they have their own local IUSR accounts.

What URL are you using to try and get FBA?

_____________________________

De BlackMan
List Moderator
"Did you backup your Information Store Today?!"

(in reply to leederbyshire)
Post #: 28
RE: New to Exchange and OWA question - 3.Apr.2006 8:19:09 PM   
SUSANVV

 

Posts: 75
Joined: 26.Mar.2006
Status: offline
Externally we have mail.domain.com pointing to our static IP. On our router we have a port pointing to 443.
On the Default Web Site, Home directory, Application settings is set to "Default" not Exchange. Should that matter?
I have tried the following:
    https://mail.domain.com:port/ This gets me the certificate notification, a basic logon box and then "Under Construction"
    https://static IP:port/exchange  gets me nothing
    https://mail.domain.com/exchange  gets me nothing.

And yes, it does work internally. Ironically we do not plan to have most people access their email, etc from web access. This is to be mostly for people on the road.

And no, it doesn't make sense. It has to be a permission, or a right on one of the web directories.

Thanks again.

Sue Van

(in reply to de.blackman)
Post #: 29
RE: New to Exchange and OWA question - 3.Apr.2006 8:41:07 PM   
leederbyshire

 

Posts: 968
Joined: 4.Jan.2006
Status: offline
If it works internally, then I can't think of anything permissions-related that would cause the problem.  I would not bother inserting the port numbers into your URLs, if you are using the standard 443 for SSL.  What settings you have on your Default Web Site will mostly not affect OWA, since they are overridden by the settings on the Exchange Virtual Directory.  My suggestion right now, would be to get it back to basics, by forwarding incoming port 80 at the router to the OWA server, and trying http://staticip/exchange , that way any possible problems caused by SSL are eliminated.

_____________________________

Lee.
___________________________________

Outlook Web Access for PDA and WAP:
www.leederbyshire.com
___________________________________

(in reply to SUSANVV)
Post #: 30
RE: New to Exchange and OWA question - 3.Apr.2006 9:27:52 PM   
SUSANVV

 

Posts: 75
Joined: 26.Mar.2006
Status: offline
Thank you leederbyshire. Port 80 did not work but we forwarded 443 directly and POOF it worked. My boss wanted to use a different port for a bit of added security. To use another port I will have to use that port internally instead of 443, correct?

Onward to the next problem. You will probably hear back from me then. Is there anyway you get points or anything so I can recommend you?

Many thanks again.

Sue Van

(in reply to leederbyshire)
Post #: 31
RE: New to Exchange and OWA question - 3.Apr.2006 10:16:54 PM   
leederbyshire

 

Posts: 968
Joined: 4.Jan.2006
Status: offline
You will need to use the port set for SSL in the properties of your Default Web Site.  You can have one port for SSL, and one port for normal TCP/HTTP per Web Site, so whatever you use internally, you must also use externally.  If you want different ports, you will need to add other Web Sites.  If this is purely for OWA, you will need to add the Web site by going into Exchange System Manager, and adding another HTTP Virtual Server under the HTTP protocol settings.

No points used here, just a nice warm feeling.

_____________________________

Lee.
___________________________________

Outlook Web Access for PDA and WAP:
www.leederbyshire.com
___________________________________

(in reply to SUSANVV)
Post #: 32
RE: New to Exchange and OWA question - 27.Dec.2007 8:40:20 PM   
boxexpert

 

Posts: 57
Joined: 8.Oct.2007
Status: offline
same problem here: all is configured as written inthe manual,but still no website

(in reply to menko)
Post #: 33
RE: New to Exchange and OWA question - 30.Dec.2007 2:23:47 PM   
boxexpert

 

Posts: 57
Joined: 8.Oct.2007
Status: offline
im having a similar problem,although we have a FE/BE topology.

we already have a OWA and it works fine. i did the same settings on our second OWA but that doesnt work at all

please help me

(in reply to menko)
Post #: 34

Page:   <<   < prev  1 [2] << Older Topic    Newer Topic >>
All Forums >> [Microsoft Exchange 2003] >> Outlook Web Access >> RE: New to Exchange and OWA question Page: <<   < prev  1 [2]
Jump to:

New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts