OWA Issues

OWA Issues (Full Version)

All Forums >> [Microsoft Exchange 2003] >> Exchange 2003 SBS

Message

mhobs -> OWA Issues (6.Dec.2006 10:37:54 AM)
Hello, I am running SBS 2003 and everything had been running great. Now when people log into OWA (using https) they can only read emails. When they try to send or reply to an email they get an "Access Denied" error message. If they try to delete an email from OWA they get a "Some items can't be deleted. They were either moved, already deleted, or access is denied." I have gone through IIS and I could not find any premission issues that would cause this. I have also gone through exchange but I am not sure what the Authentication Methods should be on the Exchange Virtual Server. The Exadmin Properties Authentication Methods lists a default domain while in IIS it has a "\" so could this be it? The Exchange Authentication Methods in the Virtual Server match the Exchange Authentication in IIS. Any help would be most appreciated, I need to get this resolved before the boss gets unhappy. I was troubling shooting a problem with the companyweb (sharepoint service) page so I messed around with a few IIS settings but I rolled everything back to the way it was before. Thanks, Mark

mhobs -> RE: OWA Issues (6.Dec.2006 6:29:45 PM)
I remember that while I was troubleshooting my Sharepoint (companyweb page) problems I reset the password for the the IUSR_MAIL and IWAM_MAIL accounts (suggested by Microsoft to fix my intranet problem). In IIS I am only using Enable anyonymous access in ExchWeb and I entered the new password for the IUSR_MAIL in this screen. I have the default domain set to "\" is this correct? Now changing the passwords in AD should proprigate out shouldn't it? Would I need to up date IWAM_MAIL with a new password somewhere else? I made a mess trying to fix another problem, I followed Microsoft Knowledge Base Articles and it screw up OWA. Please help if able! Thanks, Mark

mhobs -> RE: OWA Issues (6.Dec.2006 6:33:42 PM)
I was trying to trouble shoot an HTTP Error 404 - File or directory not found in IIS problem. So tried a few suggestions by Microsoft (see above).

jchong -> RE: OWA Issues (7.Dec.2006 2:09:17 PM)
Review your authentication settings against this article. Troubleshooting Outlook Web Access logon failures in Exchange 2000 and in Exchange 2003 http://support.microsoft.com/kb/327843

mhobs -> RE: OWA Issues (7.Dec.2006 2:43:16 PM)
Thanks for replying to my post! I went through the entire document and everything checked out on my server to what this article suggested. I am using the "\" in the default domain box rather than my domain name does that make a difference? I even entered the new password I set for IUSR in the ExchWeb folder in IIS. Still getting "Access denied" when sending or replying to emails (in OWA 03 only) for all users with accounts. Plus I get the Some items can't be deleted. They were either moved, already deleted, or access is denied" message when I try to delete mail in OWA. I am at a total loss at this point and the end users are getting antsy. Any more help would be most appreicated. Thanks!

mhobs -> RE: OWA Issues (7.Dec.2006 2:56:17 PM)
I am logging into a https owa site so could it be my SSL Certificate causing this problem? I am able to log in and read emails I just can send or delete so it has to be some kind of permission thing for Authenticated users. I am at a loss and getting desperate. Thanks

jchong -> RE: OWA Issues (7.Dec.2006 4:13:40 PM)
I doubt it's the ssl, it's more of an perm issue. Were you able to verify your authentication/security settings?

mhobs -> RE: OWA Issues (7.Dec.2006 5:48:16 PM)
I verified all of the setting in that Microsoft document and they matched. So I am totally stumped at this point. Users can log onto their OWA accounts and read all of their emails. But Sending and deleting them gives the error messages. So I agree it has to be a premissions issue but they all look fine in IIS, Exchange Manager and the Exchsvr folders. Thanks for your help so far I really appreciate it.

mhobs -> RE: OWA Issues (8.Dec.2006 3:26:19 PM)
I have gone through my security logs in the Event Viewer and I found that after I log onto OWA I no longer get Event ID 680. I get the 538 eventids (log on) and the 540 eventids (log off) only now. The EventID 680 is present for SMTP and Pop3 emails users but now OWA users. The EventID 680 description is as follows: Logon attempted by: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0 So how can I get OWA to use this Authentication Package again? I have tried everything and this seems to be pointing me in a forward direction now. Is this even related to my problem of getting access denied when I try to send emails? Thanks for your help in advance!

jchong -> RE: OWA Issues (8.Dec.2006 3:44:11 PM)
Ok I see that you tried to resynch your IWAM account did you successfully do this?

mhobs -> RE: OWA Issues (8.Dec.2006 4:26:08 PM)
I am unsure how to resync my IWAM account...I am trying to find out how in Google but could you point me in the right direction?

mhobs -> RE: OWA Issues (8.Dec.2006 4:33:18 PM)
If I try to run synciwam.vbs, I get an error 8004E00F...I am googleing away right now. Again thanks for your help I think this has been the problem all along since I reset this password.

jchong -> RE: OWA Issues (8.Dec.2006 5:00:32 PM)
Do it manually. This article works. PRB: Configured Identity Is Incorrect for IWAM Account http://support.microsoft.com/?kbid=297989

mhobs -> RE: OWA Issues (8.Dec.2006 5:53:54 PM)
Darn it! I ran the adsutil.vbs (editing it to view passwords) to obtain the IWAM password. I then reset it to something else using this utility and reset it in AD to the same password. I restarted the server just for good measure and I when I went to run the synciwam.vbs I still get the same 8004E00F error. I am still getting access denied after I log into OWA and try to send an email. The IWAM passwords match and I followed that article exactly (even though it was for Windows 2000 Server). I thought I had it! Thanks

mhobs -> RE: OWA Issues (8.Dec.2006 6:06:10 PM)
I am able to log into OWA but the Event Viewer is showing for the user name I logged in with: Event id: 529 Type: Failure Aud Reason: Unknown user name or bad password Authentication Package: Negotiate Plus I am getting this same error for the IUSR account I matched up the IUSR account using the adsutil in AD and in the ExchWeb and bin folders in IIS.

Page: [1]