RE: OWA fails to Authenticate with AD in SBS 2003 - Failure with O

HI Ashwin,

Thanks for updates.

I am glad to hear that the OWA works well now:

For the issue about accessing the website inside the domain, it should be
the DNS issue. Before we go any further, please make sure that there is
only one DNS entry on the client computer, I mean you need only input the
SBS internal NIC as the DNS server on the TCP/IP properties on the client
computer. It should be helpful to your current issue.

Please make sure that you have to put the ISP's DNS server as the forward
DNS server when you run CEICW. It will be responsible for internet
connection and internet website resolve.

On the internal DNS, make sure that the there is no such entry same as the
external DNS domain name(xyz.com). You can check it on the DNS console. If
you have such entry on the internal DNS server, the SBS will first point
the request to SBS server. Then you will get the page did not exists, as
you do not have such website on the SBS server. From your reply, I am sure
that you have such records on the DNS server on SBS. You need to make sure
that there is no such records on the DNS server.

Then run ipconfig/dnsflush on the client computer and SBS server to clear
the DNS cache. Then try to check if the issue can be resolved.


I appreciate your effort on this issue, please feel free to post back the
results. I am glad to be of assistance.



Best regards,

Charles Yang (MSFT)

Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security

======================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.
======================================================
This posting is provided "AS IS" with no warranties, and confers no rights.


=====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
=====================================================

This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------
| Thread-Topic: OWA fails to Authenticate with AD in SBS 2003 - Failure
with O
| thread-index: AcXxSoV+Z06VLLKATXaDvXEL86Ampg==
| X-WBNR-Posting-Host: 220.245.178.132
| From: "=?Utf-8?B?QXNod2luIEAgU3VtaXg=?="
<AshwinSumix@xxxxxxxxxxxxxxxxxxxxxxxxx>
| References: <91DFB869-0C2C-4D26-B5D5-15FEAB11ED40@xxxxxxxxxxxxx>
<7HyKw2D4FHA.1144@xxxxxxxxxxxxxxxxxxxxx>
<5026E23F-1497-4EB1-8AF3-858E37DA1163@xxxxxxxxxxxxx>
<DA7BC1BE-9FBC-4E90-AE46-F498D682FD4B@xxxxxxxxxxxxx>
<14B29506-30B3-4960-BA2E-8B247BDAE1CD@xxxxxxxxxxxxx>
<VYfhgmm7FHA.128@xxxxxxxxxxxxxxxxxxxxx>
<74978E7B-189B-40ED-9CFC-25ECAE25CEE3@xxxxxxxxxxxxx>
<U1buGQA8FHA.2612@xxxxxxxxxxxxxxxxxxxxx>
| Subject: RE: OWA fails to Authenticate with AD in SBS 2003 - Failure with
O
| Date: Thu, 24 Nov 2005 14:58:02 -0800
| Lines: 324
| Message-ID: <5FA0C6D2-145C-48D3-B598-F5CF30AD2D5B@xxxxxxxxxxxxx>
| MIME-Version: 1.0
| Content-Type: text/plain;
| charset="Utf-8"
| Content-Transfer-Encoding: 7bit
| X-Newsreader: Microsoft CDO for Windows 2000
| Content-Class: urn:content-classes:message
| Importance: normal
| Priority: normal
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
| Newsgroups: microsoft.public.windows.server.sbs
| NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
| Path: TK2MSFTNGXA02.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFTNGXA03.phx.gbl
| Xref: TK2MSFTNGXA02.phx.gbl microsoft.public.windows.server.sbs:225359
| X-Tomcat-NG: microsoft.public.windows.server.sbs
|
| Hello Charles !
|
| It works !!!
|
| Thank you so much for getting me through this, however I have another
issue
| that has arrisen.
| SInce altering the Server's DNS to reflect this - DHCP DNS - Server,
Router,
| ISP Primay and ISP Secondary.
|
| SO the clients get that range of DNS.
|
| Now when the try to view xwy.com it says page failed.
| WHen I ping xyz.com it resolves to the SBS Server.
|
| How can i set it up so that when they would like to view their own
website
| it goes to the outside world?
|
| Thank you Charles
|
| Now my issue is this, my clients website is held at an web hosting
company.
| Their domain name reflects their website. (XZY.COM)
| Now what happens is intnerally, when they go to v
| ""Charles Yang [MSFT]"" wrote:
|
| > HI Ashwin,
| >
| > Thanks a lot for your patience on this issue.
| >
| > From your description, it seems only administrator can logon to the
| > companyweb from the client computer? And it prompt a user name and
| > password. It seems the IIS is not configured correctly.
| >
| > 1. If possible, could you uncheck the proxy setting on the client
computer
| > to see if the issue can be reproduced or not?
| > 2. Does the issue occurred if you create a new user, you can create a
user
| > via add user wizard to see if you can reproduce the issue with the new
| > user.
| > 3. By default every user will be assigned to sharepoint group which
should
| > be able to access the companyweb, please check the every domain user
have
| > read permission for the following folder. c:\inetpub\companyweb
| > 4. Please also follow the steps below to check the IE setting on the
client
| > computer.
| >
| > On the client computer, double-click Internet Options in Control Panel.
On
| > the Security tab, select the "Local intranet" zone and click Sites.
Ensure
| > http://companyweb is listed in the "Web sites" list. Click Close and
then
| > click Custom Level, scroll down to the bottom of the Settings list,
under
| > User Authentication\Logon, ensure either "Automatic logon only in
Intranet
| > zone" is selected. Test again and see how it goes.
| >
| > 5. If the problem still exists, please logon companyweb via user name
and
| > password with admin and then check the following setting on the
companyweb
| > sites.
| >
| > Open Companyweb via the administrator account. In the Home page please
| > click Site Settings. Click manage Users. Please Make sure your user
account
| > has proper rights in this page.
| >
| > I really appreciate your understanding on this issue. Please feel free
to
| > post back results. I am glad to be of assistance.
| >
| >
| >
| > Best regards,
| >
| > Charles Yang (MSFT)
| >
| > Microsoft CSS Online Newsgroup Support
| >
| > Get Secure! - www.microsoft.com/security
| >
| > ======================================================
| > This newsgroup only focuses on SBS technical issues. If you have issues
| > regarding other Microsoft products, you'd better post in the
corresponding
| > newsgroups so that they can be resolved in an efficient and timely
manner.
| > You can locate the newsgroup here:
| > http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
| >
| > When opening a new thread via the web interface, we recommend you check
the
| > "Notify me of replies" box to receive e-mail notifications when there
are
| > any updates in your thread. When responding to posts via your
newsreader,
| > please "Reply to Group" so that others may learn and benefit from your
| > issue.
| >
| > Microsoft engineers can only focus on one issue per thread. Although we
| > provide other information for your reference, we recommend you post
| > different incidents in different threads to keep the thread clean. In
doing
| > so, it will ensure your issues are resolved in a timely manner.
| >
| > For urgent issues, you may want to contact Microsoft CSS directly.
Please
| > check http://support.microsoft.com for regional support phone numbers.
| >
| > Any input or comments in this thread are highly appreciated.
| > ======================================================
| > This posting is provided "AS IS" with no warranties, and confers no
rights.
| >
| >
| > =====================================================
| > When responding to posts, please "Reply to Group" via your newsreader
so
| > that others may learn and benefit from your issue.
| > =====================================================
| >
| > This posting is provided "AS IS" with no warranties, and confers no
rights.
| >
| > --------------------
| > | Thread-Topic: OWA fails to Authenticate with AD in SBS 2003 - Failure
| > with O
| > | thread-index: AcXv7xdUSgBcLmShSjSfyfEymfwHMg==
| > | X-WBNR-Posting-Host: 220.245.178.132
| > | From: "=?Utf-8?B?QXNod2luIEAgU3VtaXg=?="
| > <AshwinSumix@xxxxxxxxxxxxxxxxxxxxxxxxx>
| > | References: <91DFB869-0C2C-4D26-B5D5-15FEAB11ED40@xxxxxxxxxxxxx>
| > <7HyKw2D4FHA.1144@xxxxxxxxxxxxxxxxxxxxx>
| > <5026E23F-1497-4EB1-8AF3-858E37DA1163@xxxxxxxxxxxxx>
| > <DA7BC1BE-9FBC-4E90-AE46-F498D682FD4B@xxxxxxxxxxxxx>
| > <14B29506-30B3-4960-BA2E-8B247BDAE1CD@xxxxxxxxxxxxx>
| > <VYfhgmm7FHA.128@xxxxxxxxxxxxxxxxxxxxx>
| > | Subject: RE: OWA fails to Authenticate with AD in SBS 2003 - Failure
with
| > O
| > | Date: Tue, 22 Nov 2005 21:31:02 -0800
| > | Lines: 325
| > | Message-ID: <74978E7B-189B-40ED-9CFC-25ECAE25CEE3@xxxxxxxxxxxxx>
| > | MIME-Version: 1.0
| > | Content-Type: text/plain;
| > | charset="Utf-8"
| > | Content-Transfer-Encoding: 7bit
| > | X-Newsreader: Microsoft CDO for Windows 2000
| > | Content-Class: urn:content-classes:message
| > | Importance: normal
| > | Priority: normal
| > | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
| > | Newsgroups: microsoft.public.windows.server.sbs
| > | NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
| > | Path: TK2MSFTNGXA02.phx.gbl!TK2MSFTNGXA03.phx.gbl
| > | Xref: TK2MSFTNGXA02.phx.gbl microsoft.public.windows.server.sbs:224836
| > | X-Tomcat-NG: microsoft.public.windows.server.sbs
| > |
| > | Hello Charles.
| > |
| > | Thank you for that information, here are the results.
| > |
| > | I have reinstalled the Intranet COmponent.
| > |
| > | I can ping company web from the client computers,
| > |
| > | But when they go to access the page, it prompts them with a password
| > field,
| > | and will not allow them to login. Only Adminstrators are allowed to
log
| > in.
| > |
| > | I have checked the permissions in IIS on companyweb as to my own SBS
box
| > and
| > | the credentials are the same:
| > |
| > | Enable Annoynmous Access is not enabled
| > | Windows Authentification is checked.
| > |
| > | What can cause the users not be dennied to access the intranet?
| > |
| > | Your help would much appreicated.
| > |
| > | Thank you Charles
| > |
| > | ""Charles Yang [MSFT]"" wrote:
| > |
| > | > Hi Ashwin,
| > | >
| > | > Thanks for updates.
| > | >
| > | > You can ping companyweb from the client computer via "ping
companyweb"
| > on
| > | > the command line to see what is the results. Make sure that only
the
| > SBS
| > | > server is list on the DNS entry of the client computer.
| > | >
| > | > Please remove any ISP DNS from the client computer's DNS.
| > | >
| > | > Thanks for your efforts.
| > | >
| > | >
| > | > Best regards,
| > | >
| > | > Charles Yang (MSFT)
| > | >
| > | > Microsoft CSS Online Newsgroup Support
| > | >
| > | > Get Secure! - www.microsoft.com/security
| > | >
| > | > ======================================================
| > | > This newsgroup only focuses on SBS technical issues. If you have
issues
| > | > regarding other Microsoft products, you'd better post in the
| > corresponding
| > | > newsgroups so that they can be resolved in an efficient and timely
| > manner.
| > | > You can locate the newsgroup here:
| > | > http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
| > | >
| > | > When opening a new thread via the web interface, we recommend you
check
| > the
| > | > "Notify me of replies" box to receive e-mail notifications when
there
| > are
| > | > any updates in your thread. When responding to posts via your
| > newsreader,
| > | > please "Reply to Group" so that others may learn and benefit from
your
| > | > issue.
| > | >
| > | > Microsoft engineers can only focus on one issue per thread.
Although we
| > | > provide other information for your reference, we recommend you post
| > | > different incidents in different threads to keep the thread clean.
In
| > doing
| > | > so, it will ensure your issues are resolved in a timely manner.
| > | >
| > | > For urgent issues, you may want to contact Microsoft CSS directly.
| > Please
| > | > check http://support.microsoft.com for regional support phone
numbers.
| > | >
| > | > Any input or comments in this thread are highly appreciated.
| > | > ======================================================
| > | > This posting is provided "AS IS" with no warranties, and confers no
| > rights.
| > | >
| > | >
| > | > =====================================================
| > | > When responding to posts, please "Reply to Group" via your
newsreader
| > so
| > | > that others may learn and benefit from your issue.
| > | > =====================================================
| > | >
| > | > This posting is provided "AS IS" with no warranties, and confers no
| > rights.
| > | >
| > | > --------------------
| > | > | Thread-Topic: OWA fails to Authenticate with AD in SBS 2003 -
Failure
| > | > with O
| > | > | thread-index: AcXuQB/jKNfPbnBSTAG4/RTn4/K+tQ==
| > | > | X-WBNR-Posting-Host: 220.245.178.132
| > | > | From: "=?Utf-8?B?QXNod2luIEAgU3VtaXg=?="
| > | > <AshwinSumix@xxxxxxxxxxxxxxxxxxxxxxxxx>
| > | > | References: <91DFB869-0C2C-4D26-B5D5-15FEAB11ED40@xxxxxxxxxxxxx>
| > | > <7HyKw2D4FHA.1144@xxxxxxxxxxxxxxxxxxxxx>
| > | > <5026E23F-1497-4EB1-8AF3-858E37DA1163@xxxxxxxxxxxxx>
| > | > <DA7BC1BE-9FBC-4E90-AE46-F498D682FD4B@xxxxxxxxxxxxx>
| > | > | Subject: RE: OWA fails to Authenticate with AD in SBS 2003 -
Failure
| > with
| > | > O
| > | > | Date: Sun, 20 Nov 2005 18:06:03 -0800
| > | > | Lines: 276
| > | > | Message-ID: <14B29506-30B3-4960-BA2E-8B247BDAE1CD@xxxxxxxxxxxxx>
| > | > | MIME-Version: 1.0
| > | > | Content-Type: text/plain;
| > | > | charset="Utf-8"
| > | > | Content-Transfer-Encoding: 8bit
| > | > | X-Newsreader: Microsoft CDO for Windows 2000
| > | > | Content-Class: urn:content-classes:message
| > | > | Importance: normal
| > | > | Priority: normal
| > | > | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
| > | > | Newsgroups: microsoft.public.windows.server.sbs
| > | > | NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
| > | > | Path: TK2MSFTNGXA02.phx.gbl!TK2MSFTNGXA03.phx.gbl
| > | > | Xref: TK2MSFTNGXA02.phx.gbl
microsoft.public.windows.server.sbs:224054
| > | > | X-Tomcat-NG: microsoft.public.windows.server.sbs
| > | > |
| > | > | Hello Charles
| > | > |
| > | > | I can ping my sever via name and IP
| > | > |
| > | > | How do I ping the companyweb?
| > | > |
| > | > |
| > | > | "Ashwin @ Sumix" wrote:
| > | > |
| > | > | > Hello Charles
| > | > | >
| > | > | > Its more so a case for internal clients accessing companyweb
page.
| > | > | >
| > | > | > I am not too concerened about external access
| > | > | >
| > | > | > I will portforward 444 to the SBS box
| > | > | >
| > | > | > I have already performed the CEICW on the SBS and still to no
| > avail...
| > | > | >
| > | > | > I will check the proxy on IE tonight.
| > | > | >
| > | > | > I have no ISA server installed on the network
| > | > | >
| > | > | > Just a simple router with provides net access.
| > | > | >
| > | > | > Thank you.
| > | > | >
| > | > | > P.S did you have a look at the smart hosts issue I posted on
| > Saturday?
| > | > | >
| > | > | >
| > | > | > "Ashwin @ Sumix" wrote:
| > | > | >
| > | > | > > Hello Charles.
| > | > | > >
| > | > | > > Thank you for your support in this matter.
| > | > | > >
| > | > | > > This has corrected the issue, although I tried these before,
all
| > bar
| > | > | > > clearing the cached files!
| > | > | > >
| > | > | > > Thank you.
| > | > | > >
| > | > | > > I have one other problem at the moment with Sharepoint on SBS.
| > | > | > >
| > | > | > > Is there anyway to rebuild it back to defaults. My client has
| > messed
| > | > around
| > | > | > > with the program and really screwed it up, I can not display
thhe
| > | > company
| > | > | > > webpage, but i can manually browse to
companyweb/default.aspx.
| > | > Although this
| > | > | > > works only half the time.
| > | > | > > None of the LAN pc's can see either of the pages.
| > | > | > >
| > | > | > > Is there anyway i can completly rebuild this or - reinstall
it,m
| > | > without
| > | > | > > effecting the Exchange OWA ?
| > | > | > >
| > | > | > > Any help would be great.
|

.

Relevant Pages

  • Re: DNS While PPTP / IPSec VPN is open
    ... You have set IPSec VPN between SBS server and a remote hardware firewall, ... DNS While PPTP / IPSec VPN is open ... |> Any machine using SBS services must use only the SBS as DNS server. ...
    (microsoft.public.windows.server.sbs)
  • RE: SBS 2003 DHCP server drops to "not connected"
    ... You may need to configure your SBS as the DNS server. ... Microsoft CSS Online Newsgroup Support ... This newsgroup only focuses on SBS technical issues. ...
    (microsoft.public.windows.server.sbs)
  • RE: Slow Web aft SP1 & ISA2004 Upgrd
    ... Leave the Default Gateway of the internal NIC blank on the SBS. ... DNS Service as the DNS Server. ... Then try accessing the internet web site from the clients again, ... Microsoft CSS Online Newsgroup Support ...
    (microsoft.public.windows.server.sbs)
  • RE: SBS2003: Intermitent Connectivity from Clients to Public websi
    ... you should have the following Forward zones on DNS console: ... Microsoft CSS Online Newsgroup Support ... This newsgroup only focuses on SBS technical issues. ...
    (microsoft.public.windows.server.sbs)
  • RE: Accessing local website from the internet
    ... Anyone that knocks Microsoft or thier staff are ... be required because the A Record on the local DNS would resolve it. ... > Regarding _msdcs.Clubsoftware.itaustralia.info, by default, SBS DNS Forward ... > root domain of a new Active Directory forest is created on a Windows Server ...
    (microsoft.public.windows.server.sbs)
Loading