I have a problem where users cannot access their mailboxes through OWA. The mailboxes are there, as I can log into them remotely using an domain admins login.

The users who cannot login get access denied errors. They are members of Domain Users.
I added one user to domain administrators group, but this did solve the problem. I added a new user and set up a mailbox for him but he could not access either, even though i could.

Could someone please tell me where the security setting is I need to administer?

Don't know if this makes a difference, but I had to reinstall ISA server, and since this happened it seems the problem is occurring, as these mailboxes worked before this.

Any ideas??

Thanks in advance,
Mike

Add a user to the Local Administrator Group. Then test. Users for OWA must have these Rights:

1. access this computer from the network
2. log on as a batch job
3. log on locally

Then add the IUSR_machinename account to the Local Admin Group.

If I make a local group on the Exchange server (yes, a member server), and add the OWA users from the domain to it, then add the group to the local admins then it works fine.

If I just set up the three settings you mentioned on the new group, it does not.

1. access this computer from the network
2. log on as a batch job
3. log on locally

When you say add IUSR_MachineName to the local admins, do you mean IUSR_[ExchangeServer] or IUSR_[DomainController]?

I have tried both and they didn't work?

I would like to not have to add every user to the admin group on the exchange server if possible :|

Anonymous users use the iusr account to log on, they are then prompted for credentials. I believe you should only have to add iusr_exchangebox to local admin, as that would preserve Domain Security. I'm not positive, but I think its iusr_exchangebox.

Whenever you make changes, stop/restart WWW Service