Re: Disabling Win.Integrated Auth for OWA

From: Rich Matheisen [MVP] (richnews_at_rmcons.com.NOSPAM.COM)
Date: 10/21/04


Date: Thu, 21 Oct 2004 12:53:49 -0400


"Rich Roller" <rich@*REMOVE-THIS*r2c.com> wrote:

>Eventhough BASIC AUTH - default domain was entered in 3 VD's
>(Exchange, ExchWeb, Public) it still required user to enter their
>name in "domain\user" format.

And you've made sure that the "Default domain" on the VD is correct?
Using basic authentication doesn't mean that you can get by without
having a default domain. :)

>They had both Basic & Windows Integrated enabled and so I DISABLED
>WIN.INTEGRATED and now it works fine! They can simply enter
>"user" without domain name.

Good. That's the way it's supposed to work.

>My questions about this are:
>
>1. Are there any downsides to disabling Win.Integrated that I
>should be considering? e.g. less security/encryption?

Not if you use SSL.

>(Note: They are running with Forms-based-auth disabled. They also
>run NO SSL so their Basic auth passwords are not encrypted)

That's not smart. You can even use self-issued certs if you have a
small number of clients.

-- 
Rich Matheisen
MCSE+I, Exchange MVP
MS Exchange FAQ at http://www.swinc.com/resource/exch_faq.htm


Relevant Pages

  • Re: Disabling Win.Integrated Auth for OWA
    ... >>it still required user to enter ... > Using basic authentication doesn't mean that you can get by ... > Not if you use SSL. ... encryption of some sort or another, ...
    (microsoft.public.exchange.admin)
  • SSL Problem
    ... I'm having a wierd issue with SSL. ... Exchange is using SSL. ... certificate acceptance window pops up, I click Yes and then I get a 404 ... The site works fine using basic authentication but for ...
    (microsoft.public.exchange.admin)
  • SSL Problem
    ... I'm having a wierd issue with SSL. ... Website and Exchange. ... Exchange is using SSL. ... The site works fine using basic authentication but for ...
    (microsoft.public.exchange.admin)
  • Re: Outlook 2003 - RPC over HTTP
    ... have you applied SP1 for Exchange 2003? ... configure the RPC Proxy server to use the specified default ports for RPC ... >> I need a SSL certificate and we plan to use our own CA to issue the ... >> certificates and therefore, I have installed certificate services on the ...
    (microsoft.public.outlook.general)
  • Re: Exchange Server ActiveSync HTTP_403
    ... PPC did not support SSL or use different kinds of SSL which is not the ... "With Exchange ... |>> Microsoft CSS Online Newsgroup Support ... Microsoft CSS Online Newsgroup Support ...
    (microsoft.public.windows.server.sbs)