RE: OWA fails to Authenticate with AD in SBS 2003 - Failure with O

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance



HI Ashwin,

Thanks a lot for your patience on this issue.

>From your description, it seems only administrator can logon to the
companyweb from the client computer? And it prompt a user name and
password. It seems the IIS is not configured correctly.

1. If possible, could you uncheck the proxy setting on the client computer
to see if the issue can be reproduced or not?
2. Does the issue occurred if you create a new user, you can create a user
via add user wizard to see if you can reproduce the issue with the new
user.
3. By default every user will be assigned to sharepoint group which should
be able to access the companyweb, please check the every domain user have
read permission for the following folder. c:\inetpub\companyweb
4. Please also follow the steps below to check the IE setting on the client
computer.

On the client computer, double-click Internet Options in Control Panel. On
the Security tab, select the "Local intranet" zone and click Sites. Ensure
http://companyweb is listed in the "Web sites" list. Click Close and then
click Custom Level, scroll down to the bottom of the Settings list, under
User Authentication\Logon, ensure either "Automatic logon only in Intranet
zone" is selected. Test again and see how it goes.

5. If the problem still exists, please logon companyweb via user name and
password with admin and then check the following setting on the companyweb
sites.

Open Companyweb via the administrator account. In the Home page please
click Site Settings. Click manage Users. Please Make sure your user account
has proper rights in this page.

I really appreciate your understanding on this issue. Please feel free to
post back results. I am glad to be of assistance.



Best regards,

Charles Yang (MSFT)

Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security

======================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.
======================================================
This posting is provided "AS IS" with no warranties, and confers no rights.


=====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
=====================================================

This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------
| Thread-Topic: OWA fails to Authenticate with AD in SBS 2003 - Failure
with O
| thread-index: AcXv7xdUSgBcLmShSjSfyfEymfwHMg==
| X-WBNR-Posting-Host: 220.245.178.132
| From: "=?Utf-8?B?QXNod2luIEAgU3VtaXg=?="
<AshwinSumix@xxxxxxxxxxxxxxxxxxxxxxxxx>
| References: <91DFB869-0C2C-4D26-B5D5-15FEAB11ED40@xxxxxxxxxxxxx>
<7HyKw2D4FHA.1144@xxxxxxxxxxxxxxxxxxxxx>
<5026E23F-1497-4EB1-8AF3-858E37DA1163@xxxxxxxxxxxxx>
<DA7BC1BE-9FBC-4E90-AE46-F498D682FD4B@xxxxxxxxxxxxx>
<14B29506-30B3-4960-BA2E-8B247BDAE1CD@xxxxxxxxxxxxx>
<VYfhgmm7FHA.128@xxxxxxxxxxxxxxxxxxxxx>
| Subject: RE: OWA fails to Authenticate with AD in SBS 2003 - Failure with
O
| Date: Tue, 22 Nov 2005 21:31:02 -0800
| Lines: 325
| Message-ID: <74978E7B-189B-40ED-9CFC-25ECAE25CEE3@xxxxxxxxxxxxx>
| MIME-Version: 1.0
| Content-Type: text/plain;
| charset="Utf-8"
| Content-Transfer-Encoding: 7bit
| X-Newsreader: Microsoft CDO for Windows 2000
| Content-Class: urn:content-classes:message
| Importance: normal
| Priority: normal
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
| Newsgroups: microsoft.public.windows.server.sbs
| NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
| Path: TK2MSFTNGXA02.phx.gbl!TK2MSFTNGXA03.phx.gbl
| Xref: TK2MSFTNGXA02.phx.gbl microsoft.public.windows.server.sbs:224836
| X-Tomcat-NG: microsoft.public.windows.server.sbs
|
| Hello Charles.
|
| Thank you for that information, here are the results.
|
| I have reinstalled the Intranet COmponent.
|
| I can ping company web from the client computers,
|
| But when they go to access the page, it prompts them with a password
field,
| and will not allow them to login. Only Adminstrators are allowed to log
in.
|
| I have checked the permissions in IIS on companyweb as to my own SBS box
and
| the credentials are the same:
|
| Enable Annoynmous Access is not enabled
| Windows Authentification is checked.
|
| What can cause the users not be dennied to access the intranet?
|
| Your help would much appreicated.
|
| Thank you Charles
|
| ""Charles Yang [MSFT]"" wrote:
|
| > Hi Ashwin,
| >
| > Thanks for updates.
| >
| > You can ping companyweb from the client computer via "ping companyweb"
on
| > the command line to see what is the results. Make sure that only the
SBS
| > server is list on the DNS entry of the client computer.
| >
| > Please remove any ISP DNS from the client computer's DNS.
| >
| > Thanks for your efforts.
| >
| >
| > Best regards,
| >
| > Charles Yang (MSFT)
| >
| > Microsoft CSS Online Newsgroup Support
| >
| > Get Secure! - www.microsoft.com/security
| >
| > ======================================================
| > This newsgroup only focuses on SBS technical issues. If you have issues
| > regarding other Microsoft products, you'd better post in the
corresponding
| > newsgroups so that they can be resolved in an efficient and timely
manner.
| > You can locate the newsgroup here:
| > http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
| >
| > When opening a new thread via the web interface, we recommend you check
the
| > "Notify me of replies" box to receive e-mail notifications when there
are
| > any updates in your thread. When responding to posts via your
newsreader,
| > please "Reply to Group" so that others may learn and benefit from your
| > issue.
| >
| > Microsoft engineers can only focus on one issue per thread. Although we
| > provide other information for your reference, we recommend you post
| > different incidents in different threads to keep the thread clean. In
doing
| > so, it will ensure your issues are resolved in a timely manner.
| >
| > For urgent issues, you may want to contact Microsoft CSS directly.
Please
| > check http://support.microsoft.com for regional support phone numbers.
| >
| > Any input or comments in this thread are highly appreciated.
| > ======================================================
| > This posting is provided "AS IS" with no warranties, and confers no
rights.
| >
| >
| > =====================================================
| > When responding to posts, please "Reply to Group" via your newsreader
so
| > that others may learn and benefit from your issue.
| > =====================================================
| >
| > This posting is provided "AS IS" with no warranties, and confers no
rights.
| >
| > --------------------
| > | Thread-Topic: OWA fails to Authenticate with AD in SBS 2003 - Failure
| > with O
| > | thread-index: AcXuQB/jKNfPbnBSTAG4/RTn4/K+tQ==
| > | X-WBNR-Posting-Host: 220.245.178.132
| > | From: "=?Utf-8?B?QXNod2luIEAgU3VtaXg=?="
| > <AshwinSumix@xxxxxxxxxxxxxxxxxxxxxxxxx>
| > | References: <91DFB869-0C2C-4D26-B5D5-15FEAB11ED40@xxxxxxxxxxxxx>
| > <7HyKw2D4FHA.1144@xxxxxxxxxxxxxxxxxxxxx>
| > <5026E23F-1497-4EB1-8AF3-858E37DA1163@xxxxxxxxxxxxx>
| > <DA7BC1BE-9FBC-4E90-AE46-F498D682FD4B@xxxxxxxxxxxxx>
| > | Subject: RE: OWA fails to Authenticate with AD in SBS 2003 - Failure
with
| > O
| > | Date: Sun, 20 Nov 2005 18:06:03 -0800
| > | Lines: 276
| > | Message-ID: <14B29506-30B3-4960-BA2E-8B247BDAE1CD@xxxxxxxxxxxxx>
| > | MIME-Version: 1.0
| > | Content-Type: text/plain;
| > | charset="Utf-8"
| > | Content-Transfer-Encoding: 8bit
| > | X-Newsreader: Microsoft CDO for Windows 2000
| > | Content-Class: urn:content-classes:message
| > | Importance: normal
| > | Priority: normal
| > | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
| > | Newsgroups: microsoft.public.windows.server.sbs
| > | NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
| > | Path: TK2MSFTNGXA02.phx.gbl!TK2MSFTNGXA03.phx.gbl
| > | Xref: TK2MSFTNGXA02.phx.gbl microsoft.public.windows.server.sbs:224054
| > | X-Tomcat-NG: microsoft.public.windows.server.sbs
| > |
| > | Hello Charles
| > |
| > | I can ping my sever via name and IP
| > |
| > | How do I ping the companyweb?
| > |
| > |
| > | "Ashwin @ Sumix" wrote:
| > |
| > | > Hello Charles
| > | >
| > | > Its more so a case for internal clients accessing companyweb page.
| > | >
| > | > I am not too concerened about external access
| > | >
| > | > I will portforward 444 to the SBS box
| > | >
| > | > I have already performed the CEICW on the SBS and still to no
avail...
| > | >
| > | > I will check the proxy on IE tonight.
| > | >
| > | > I have no ISA server installed on the network
| > | >
| > | > Just a simple router with provides net access.
| > | >
| > | > Thank you.
| > | >
| > | > P.S did you have a look at the smart hosts issue I posted on
Saturday?
| > | >
| > | >
| > | > "Ashwin @ Sumix" wrote:
| > | >
| > | > > Hello Charles.
| > | > >
| > | > > Thank you for your support in this matter.
| > | > >
| > | > > This has corrected the issue, although I tried these before, all
bar
| > | > > clearing the cached files!
| > | > >
| > | > > Thank you.
| > | > >
| > | > > I have one other problem at the moment with Sharepoint on SBS.
| > | > >
| > | > > Is there anyway to rebuild it back to defaults. My client has
messed
| > around
| > | > > with the program and really screwed it up, I can not display thhe
| > company
| > | > > webpage, but i can manually browse to companyweb/default.aspx.
| > Although this
| > | > > works only half the time.
| > | > > None of the LAN pc's can see either of the pages.
| > | > >
| > | > > Is there anyway i can completly rebuild this or - reinstall it,m
| > without
| > | > > effecting the Exchange OWA ?
| > | > >
| > | > > Any help would be great.
| > | > > Thank you
| > | > >
| > | > > ""Charles Yang [MSFT]"" wrote:
| > | > >
| > | > > > Hi,
| > | > > >
| > | > > > Welcome to SBS newsgroup.
| > | > > >
| > | > > > Issue description:
| > | > > > ==============
| > | > > >
| > | > > > I understand that you encountered problem when accessing OWA
| > internally and
| > | > > > externally.
| > | > > >
| > | > > > Analyzing and suggestion:
| > | > > > ==============
| > | > > >
| > | > > > In order to make the issue more clearly, please help perform
the
| > steps
| > | > > > below:
| > | > > >
| > | > > > 1. Rerun CEICW,. This wizard will help you configure the SBS
| > network and
| > | > > > website automatically, makes sure that you select OWA in the
web
| > services
| > | > > > selection pages. Please note that do not just by pass the web
| > pages, please
| > | > > > go through every steps to make sure that the wrong
configuration is
| > | > > > corrected by the wizard. You can refer to the KB article below
to
| > configure
| > | > > > your CEICW:
| > | > > >
| > | > > > 825763 How to configure Internet access in Windows Small
Business
| > Server
| > | > > > 2003
| > | > > > http://support.microsoft.com/?id=825763
| > | > > >
| > | > > > 2. Check the OWA VD on the IIS node, you can refer to the
default
| > setting
| > | > > > below to double confirm your OWA setting, please note that OWA
on
| > SBS 2003
| > | > > > is different with OWA on Exchange 2003.
| > | > > >
| > | > > > A. Exchaweb Virtual directory, this should be allowed anonymous
| > access in
| > | > > > the directory security tab.
| > | > > > B. Exchane Virtual directory, this should be allowed basic
| > authentication
| > | > > > no anonymous access is allowed, please do not use Windows
| > integration
| > | > > > method.
| > | > > >
| > | > > > 3. Does the issue occur on all the users, do you encountered
any
| > problem
| > | > > > when using outlook 2003 on the client computer? Please also
create
| > a new
| > | > > > user via "Add user wizard" to see if the issue still exists on
the
| > new
| > | > > > users. Please note that if you create a new user via ADUC,
please
| > right
| > | > > > click the user you create choose properties, in the Exchange
| > feature page,
| > | > > > make sure that OWA is enabled for that user.
| > | > > > 4. Do you have 831464 installed? After it is installed, make
sure
| > you clear
| > | > > > %windir%\IIS Temporary Compressed Files, IE cache as well as
ISA
| > cache if
| > | > > > you are using SBS 2003 premium.
| > | > > > Detailed steps:
| > | > > >
| > | > > > Download and apply the 831464 update:
| > | > > >
| > | > > > 831464 FIX: IIS 6.0 Compression Corruption Causes Access
Violations
| > | > > > http://support.microsoft.com/?id=831464
| > | > > > Clear the cached, compressed copy of the affected files on the
SBS
| > server:
| > | > > >
| > | > > > A. Clear the IIS server files:
| > | > > > *. Go to your %windows%\IIS Temporary Compressed Files directory
| > | > > > *. Select all of the content in this directory and delete it.
| > | > > > B. Go to a command prompt, type "iisreset".
| > | > > >
| > | > > >
| > | > > > If you have ISA installed on the SBS server, take the following
| > steps to
| > | > > > clear the ISA cache.
| > | > > >
| > | > > > A. Stop the Web Proxy service.
| > | > > > B. Locate the Urlcache folder.
| > | > > > C. From the multiple files in this folder, locate the *.cdat
file
| > in this
| > | > > > folder.
| > | > > > D. Delete the *.cdat file.
| > | > > > E. Start the Web Proxy service.
| > | > > >
| > | > > > Related Knowledge Base article:
| > | > > >
| > | > > > 301471 How to Delete the Web Cache on Internet Security and
| > Acceleration
| > | > > > Server
| > | > > > http://support.microsoft.com/?id=301471
| > | > > >
| > | > > > You should also delete the cached files on the client to make
sure
| > that the
| > | > > > corrupted files from the cache are not used. To do so, follow
these
| > steps:
| > | > > >
| > | > > > A. In Internet Explorer, click Internet Options on the Tools
menu.
| > | > > > B. Click the General tab, and then click Delete Files.
| > | > > > C. Click OK.
| > | > > >
| > | > > > - Compare the email addresses in the E-mail Addresses tab in
the
| > user
| > | > > > account properties between users that can log in and those that
| > can't. Do
| > | > > > they have the same primary SMTP Address?
| > | > > >
| > | > > > I really appreciate your time to cooperate on this issue,
please
| > feel free
| > | > > > to post back your results. We are glad to be of further
assistance.
| > | > > >
| > | > > >
| > | > > >
| > | > > > Best regards,
| > | > > >
| > | > > > Charles Yang (MSFT)
| > | > > >
| > | > > > Microsoft CSS Online Newsgroup Support
| > | > > >
| > | > > > Get Secure! - www.microsoft.com/security
| > | > > >
| > | > > > ======================================================
| > | > > > This newsgroup only focuses on SBS technical issues. If you
have
| > issues
| > | > > > regarding other Microsoft products, you'd better post in the
| > corresponding
| > | > > > newsgroups so that they can be resolved in an efficient and
timely
| > manner.
| > | > > > You can locate the newsgroup here:
| > | > > >
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
| > | > > >
| > | > > > When opening a new thread via the web interface, we recommend
you
| > check the
| > | > > > "Notify me of replies" box to receive e-mail notifications when
| > there are
| > | > > > any updates in your thread. When responding to posts via your
| > newsreader,
| > | > > > please "Reply to Group" so that others may learn and benefit
from
| > your
| > | > > > issue.
| > | > > >
| > | > > > Microsoft engineers can only focus on one issue per thread.
| > Although we
| > | > > > provide other information for your reference, we recommend you
post
| > | > > > different incidents in different threads to keep the thread
clean.
| > In doing
| > | > > > so, it will ensure your issues are resolved in a timely manner.
|

.



Relevant Pages

  • Re: http://companyweb/ - You are not authorized to view this page
    ... Run the change Server IP tool to change server address 10.0.0.1. ... Companyweb Virtual Directory miss stsfltr filter. ... Microsoft CSS Online Newsgroup Support ... This newsgroup only focuses on SBS technical issues. ...
    (microsoft.public.windows.server.sbs)
  • Re: companyweb is down.
    ... Microsoft CSS Online Newsgroup Support ... This newsgroup only focuses on SBS technical issues. ... Subject: companyweb is down. ... Extract all files to a folder on ISA server ...
    (microsoft.public.windows.server.sbs)
  • RE: RWW Menu - No companyweb option
    ... Thanks for updates. ... It seems the issue is so wired, from your icwlog, the companyweb is ... Microsoft CSS Online Newsgroup Support ... This newsgroup only focuses on SBS technical issues. ...
    (microsoft.public.windows.server.sbs)
  • RE: Restore public folders and companyweb
    ... Microsoft CSS Online Newsgroup Support ... This newsgroup only focuses on SBS technical issues. ... Restore public folders and companyweb ... >>> Use backup wizard from sbs and backup default drives ...
    (microsoft.public.windows.server.sbs)
  • Re: RPC server is unavailable while requesting new certificate
    ... Microsoft CSS Online Newsgroup Support ... RPC server is unavailable while requesting new certificate ... Test connect the client computer with the SBS Server to a hub, ...
    (microsoft.public.windows.server.sbs)