Exchange Server Forums

Child domain users can't logon using OWA

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [Microsoft Exchange 2007] >> Outlook Web Access >> Child domain users can't logon using OWA

Page: [1]

Message

<< Older Topic Newer Topic >>

Child domain users can't logon using OWA - 8.Apr.2008 8:26:45 AM

kvecenaj

Posts: 8
Joined: 8.Apr.2008
Status: offline

Greetings, all!

I have forest with 5 child domains. I have migrated one child domain user's mailbox from Exchange 2003 mailbox server placed in this child domain to a new Exchange 2007 mailbox server placed in root domain.

In root domain I also have CAS+HT server and CAS is published to the Internet using ISA 2004 SP3. Everything works fine (mail flow, OAB, ..) for migrated child domain users except OWA logon.

This is important: OWA works for child domain users from inside LAN network: https://servername/owa logon using childdomain\username.
Also, these childdomain users have SMTP address different than root domain users - so, I have multiple SMTP domains authoritative in my Exchange org.

OWA from the Internet for root domain users works ok: when they use https://mail2.domain.com/owa, they can logon using domain\username. But when u child domain user tries to logon to the same address as childdomain\username, OWA reloads and says:
"You could not be logged on to Outlook Web Access. Make sure your domain\user name and password are correct, and then try again".

I would be kindly gratefull if anyone could help me solving this mistery.

Some ideas of mine:
1. maybe I need to create another virtual directory in IIS on CAS server - something like Method 1: here: http://kbalertz.com/293386/Error.aspx
2. ISA server doesn't know how to authenticate child domain users?

Post #: 1

Featured Links*

Solved! - 9.Apr.2008 4:20:08 AM

kvecenaj

Posts: 8
Joined: 8.Apr.2008
Status: offline

Hi!

I solved the problem today

The problem was in RADIUS (IAS) service - it included Web server publishing only gor Authenticated users from root domain - I have added childdomain\Domain Users group (+IAS service Stop & Start) and it worked immediately..

Hope someone will have a good use of this post!
Regards to all

(in reply to kvecenaj)

Post #: 2