Re: OWA Change Password
- From: "Ed Crowley [MVP]" <curspice@xxxxxxxxxxxxxx>
- Date: Thu, 15 Sep 2005 22:21:19 -0700
What do you mean by "external web server"? Do you have a firewall between
it an your Exchange servers and domain controllers?
--
Ed Crowley
MVP - Exchange
"Protecting the world from PSTs and brick backups!"
"Harry Bates" <None> wrote in message
news:e3aOM3huFHA.1168@xxxxxxxxxxxxxxxxxxxxxxx
> Thanks Ed,
> I orginally followed instructions on M$ here:
>
> http://support.microsoft.com/default.aspx?scid=kb;en-us;297121
>
> and every time it prompted me for the password. As a matter of fact any
> time
> I create a virtual directory the way the article stated, even if it is a
> directory like c:\test\index.htm it still prompts me for a username and
> password when moving from a page I already authenticated to on the same
> server. Should it react like this all of the time?
>
> After this, I checked out Daniel Petri's webpage on the subject:
>
> http://www.petri.co.il/enable_password_changing_through_owa_in_exchange_2003.htm
>
> What I did notice is that there are a number of security differences,
> mainly
> that Daniel did not add to his directions. My web server is running this
> virtual directory over SSL, but how secure is it? I would imagine it is
> just
> as secure the way Daniel posted it because either way you need to supply
> domain, username and password to make it function. It also runs under the
> "DefaultAppPool" instead of the "ExchangeAppPool" like M$ directed. Like I
> said it works fine the way Daniel explained it, but should it be this way
> for an external web server?
>
> -Harry
>
> "Ed Crowley [MVP]" <curspice@xxxxxxxxxxxxxx> wrote in message
> news:%23iVEoZWuFHA.3452@xxxxxxxxxxxxxxxxxxxxxxx
>> I can't tell you exactly what you have set wrong, but it seems like you
>> might have inconsistent authenticaiton type settings between the virtual
>> directories.
>> --
>> Ed Crowley
>> MVP - Exchange
>> "Protecting the world from PSTs and brick backups!"
>>
>> "Harry Bates" <None> wrote in message
>> news:efW2%23bUuFHA.1132@xxxxxxxxxxxxxxxxxxxxxxx
>> > Exchange 2003 Front-End & Back-End over Server 2003 in a native/native
>> > 2003
>> > Domain
>> > Following the instructions of KB297121 I set up the password change
>> > feature
>> > of OWA. It works fine, but when I click on "Change Passsword" to take
>> > me
>> > to
>> > the change password mini screen, it prompts me for a username and
> password
>> > to access the password mini screen. Then the password mini screen comes
> up
>> > and asks me for domain, username, old password and new password. Is
> there
>> > any way to stop the initial username and password prompt because it
> seems
>> > like overkill since I already authenticated into OWA in the first
>> > place?
>> > Or
>> > did I forget to set something up elsewhere in the IIS setup portion of
> the
>> > password change function?
>> >
>> > Thanks,
>> > -Harry
>> >
>> >
>>
>>
>
>
.
- Follow-Ups:
- Re: OWA Change Password
- From: Harry Bates
- Re: OWA Change Password
- References:
- OWA Change Password
- From: Harry Bates
- OWA Change Password
- Prev by Date: Re: Transation log
- Next by Date: Re: E-Mail notification and Autoresponder on Exchange 2003
- Previous by thread: OWA Change Password
- Next by thread: Re: OWA Change Password
- Index(es):
Relevant Pages
|
