Re: OWA issue, still

From: Matt Trudewind[MSFT] (a-mattt_at_online.microsoft.com)
Date: 03/24/04 

Date: Wed, 24 Mar 2004 16:29:52 GMT

--------------------
>Yes, it does work from anywhere but here, the issue here
>only started after SBS was installed.
>
>Will I be opening up any security risks by allowing "any"
>outgoing request?
>>-----Original Message-----
>>
>>--------------------
>>>Reply-To: "MCTrainer" <swb_mct@msn.com>
>>>From: "MCTrainer" <swb_mct@msn.com>
>>>References: <f07f01c410da$4b56c830$a601280a@phx.gbl>
>>>Subject: Re: OWA issue, still
>>>Date: Tue, 23 Mar 2004 08:21:02 -0600
>>>Lines: 30
>>>X-Priority: 3
>>>X-MSMail-Priority: Normal
>>>X-Newsreader: Microsoft Outlook Express 6.00.2900.2096
>>>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2096
>>>X-RFC2646: Format=Flowed; Original
>>>Message-ID: <#kejTIOEEHA.700@TK2MSFTNGP09.phx.gbl>
>>>Newsgroups: microsoft.public.windows.server.sbs
>>>NNTP-Posting-Host: cpe-65-25-224-40.mn.rr.com
>65.25.224.40
>>>Path: cpmsftngxa06.phx.gbl!TK2MSFTNGXA01.phx.gbl!
>TK2MSFTNGP08.phx.gbl!TK2MSFTNGP09.phx.gbl
>>>Xref: cpmsftngxa06.phx.gbl
>microsoft.public.windows.server.sbs:54313
>>>X-Tomcat-NG: microsoft.public.windows.server.sbs
>>>
>>>Currently pemissions to the users mailbox are assigned
>to "self", not
>>>explicily to their account. Give the user account the
>same permissions
>>>explcitly.
>>>
>>>To do this
>>>1. Open Active Directory Users and Computers:
>>>2. Change to Advanced View
>>>3. Open the users Account > Exchange Advance Tab >
>mailbox rights > add
>>>user account and give them "read permissions"
>and "full mail box access".
>>>
>>>Another fix that worked in once instance - and even
>though this makes no
>>>sense - we would have the problem when using an
>internet shortcut in
>>>favorites to reach the OWA account and would not have
>the problem if the
>>>same url was manually entered in IE. By replacing the
>old shortcut the
>>>problem went away. This was lan - not an internet
>connection in our case.
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>>"Mark" <anonymous@discussions.microsoft.com> wrote in
>message
>>>news:f07f01c410da$4b56c830$a601280a@phx.gbl...
>>>>I have yet to find an answer to this issue, since
>>>> installing SBS Premium a user can no longer access
>her OWA
>>>> account at another domain, the page loads partially
>then
>>>> prompts for a password again.
>>>
>>>
>>>
>>
>>Have her check to see if she can get to this OWA mailbox
>from another location. If she can then you know it is
>something to do with your setup, but if she can't then it
>is
>>probably something wrong at the OWA site. Are they
>behind an ISA server? If so IE has problems passing
>creditinals twice. If you are require authorization to
>access
>>the outside world, and the other site is requiring
>authorization to access OWA then IE never passes the
>creditianls correctly. To test this go ahead and allow
>outbond
>>internet access to Anyone. To do this change the
>Protocol Rule for All Ip Traffic to Applies to Any
>Request. You will also need to change the Site and
>Content Rule to
>>apply to Any Request.
>>
>>See if this helps at all.
>>
>>Matt Trudewind
>>Microsoft Product Support Specialist
>>This posting is provided "AS IS" with no warranties, and
>confers no rights.
>>
>>
>>.
>>
>

swb_mct@msn.com had good suggestions about disabling authentication as well earlier in this post. Basically you security risk would be internal only, as this would
allow clients to go to the internet without any creditinals. I would say try it first and see if it works. If it does, then decide wether you want clients to authenticated for
outgoing web requests or not. If your network is small enough for you to monitor what is going on simply by walking around the office, then I would not worry about
outbound authentication.

Matt Trudewind
Microsoft Product Support Specialist
This posting is provided "AS IS" with no warranties, and confers no rights.

Relevant Pages

  • Re: RWW Access Time
    ... It's strange that you can access sites like OWA, but not the RWW at certain ... log created and find the request made by your client computer. ... This posting is provided "AS IS" with no warranties, and confers no rights. ... >> Matthew Huynh ...
    (microsoft.public.windows.server.sbs)
  • Re: HTTP/1.1 401 Unauthorized Error
    ... This posting is provided AS IS with no warranties, and confers no rights. ... I will go back over her permissions and see> if i can find any difference between her user credentials> and another that can sucessfully use owa. ... >>you have windows integrated authentication enabled in IE> (under internet ... >>Jason Brown ...
    (microsoft.public.inetserver.iis.security)
  • Re: OWA issue, still
    ... Give the user account the same permissions ... This was lan - not an internet connection in our case. ... >> installing SBS Premium a user can no longer access her OWA ... To do this change the Protocol Rule for All Ip Traffic to Applies to Any Request. ...
    (microsoft.public.windows.server.sbs)
  • Re: Driver verifier cause SYSTEM_SERVICE_EXCEPTION
    ... This posting is provided "AS IS" with no warranties, and confers no rights. ... a request that has a cancel routine assigned to it (e.g. you called ... > An exception happened while executing a system service routine. ...
    (microsoft.public.development.device.drivers)
  • It was a Stark and Dormy Night (OT?)
    ... Naturally I will honor the request that ... I thank the author for a good effort and for the Christmas greetings. ... knock on the door. ... "He does it via the Internet." ...
    (sci.archaeology)