Re: IWA automatically re-enables on OWA folders.

Where are you making the authentication change? If you are changing this in
IIS Manager, the problem may be a process called DS2MB, where the settings
within Exchange System Manager (hence AD) override (and overwrite) the
settings in the IIS Metabase. IIRC, the DS2MB process runs every 15
minutes.

Go into ESM, server, protocols, HTTP, Exchange Virtual Server, Exchange
properties, then Access tab, Authentication button. Make sure that
Integrated is not checked. If it is, uncheck it in here and not in IIS
Manager.

--
Ben Winzenz
Exchange MVP
MessageOne


"Jab Wocky" <jabbrwcky@xxxxxxxxxxx> wrote in message
news:6rd391hh0e5b3ubl7bjoe09ctf8pf7k36m@xxxxxxxxxx
> This is a bit of a strange one.
>
> We're running OWA on an E2k3 cluster in support of a large client base
> of mixed Win2k and XP Pro clients. Our site is SSL secured and
> therefore we have manually DISABLED Integrated Windows Authentication
> on the Exchange virtual directory within Exchange System Manager,
> leaving only basic enabled.
>
> The system has been running fine for months but recently we ran into a
> problem where none of our Win2k clients could log on. After a whole
> hunt, we found that this was because Integrated Windows Authentication
> had mysteriously switched itself back on!
>
> Microsoft say our UPN logons were failing because of the 2k version of
> credui.dll which cannot process UPN logons through IWA whereas the XP
> version can. Sure enough, when we manually disabled IWA again, the
> problem disappeared.
>
> However, this doesn't explain why that setting switched itself on.
> This wasn't a once off either and has happened several times since
> then - with nothing obvious in the event logs, no failover, servers
> just sitting there...
>
> Bizarro; anyone got any ideas?


.