RE: 401.3 Unauthorized: Unauthorized due to ACL on resource

Hi Brian,

Thank you for posting in SBS newsgroup.

>From the description, I understand the issue to be: you received error
"401.3 Unauthorized: Unauthorized due to ACL on resource" when you access
OWA. If I have misunderstood your concerns, please do not hesitate to let
me know.

As I know, this issue occurs if the Authenticated Users group does not have
access permissions to the Exchsrvr\exchweb folder.

To resolve this issue, follow these steps:

1. Start Windows Explorer, right-click the drive :\Program Files\Exchsrvr
folder, and then click Properties , where drive refers to the drive letter
of your system drive (typically it is C).
2. Click the Security tab, and then click to select the Allow inheritable
permissions from parent to propagate to this object check box.
3. Click Apply .
4. Make sure that the Authenticated Users group has the following
permissions in the Exchsrvr\exchweb folder:

Read & execute
List Folder Contents
Read
If the Authenticated Users group does not have these permissions, set these
permissions manually. Close the exchweb Properties dialog box.

5. Repeat steps 1-4 on the C:\Program Files\Common Files\Microsoft Shared
folder.
6. Click Start , point to Programs , point to Administrative Tools , and
then click Internet Services Manager .
7. Right-click your server, and then click Restart IIS .
8. In the What do you want IIS to do list, click Restart Internet Services
on Server Name , and then click OK .
9. Click Start , point to Programs , point to Administrative Tools , and
then click Services to open the Services dialog box.
10. Restart all Exchange services.
11. Close the Services dialog box.

If the problem still occurs, you can also try the following:

Changed permissions to full control for Domain Users on the following
registry keys:

HKLM\system\currentcontrolset\services\MSExchangeWeb

HKLM\system\currentcontrolset\services\W3svc

and then reboot the server.

You can also refer to the following KB articles:

317471 "Access Denied" Error Message When You Try to Use Outlook Web Access
http://support.microsoft.com/default.aspx?scid=kb;EN-US;317471

317627 XWEB: Troubleshooting HTTP 401.x Errors in Outlook Web Access 5.5
http://support.microsoft.com/default.aspx?scid=kb;EN-US;317627

Hope it helps and I look forward to hearing from you.

Best regards,

Crina Li (MSFT)

Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security

=====================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.

=====================================================

This posting is provided "AS IS" with no warranties, and confers no rights.
--------------------
| Thread-Topic: 401.3 Unauthorized: Unauthorized due to ACL on resource
| From: =?Utf-8?B?QnJpYW5NdWx0aUxhbmd1YWdl?=
<BrianMultiLanguage@xxxxxxxxxxxxxxxxxxxxxxxxx>
| Subject: 401.3 Unauthorized: Unauthorized due to ACL on resource
| Date: Tue, 3 Jan 2006 10:38:03 -0800
| | Newsgroups: microsoft.public.windows.server.sbs
||
| 401.3 Unauthorized: Unauthorized due to ACL on resource
| We are getting this when we try to access web outlook, internal and
external.
| I am not sure what file permission has changed?
| Anyone seen this b4>?
| Thank you
|

.

Relevant Pages

  • Accessing the ACL of a file?
    ... Is it possible to query the ACL for a given ... file to determine if a given user has read permissions for ... Denied" error when trying to request them, ... simply never see the links to the resource to begin with. ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • RE: Constant w3wp.exe and webengine.dll errors
    ... Grant NETWORK SERVICE the necessary permissions to access the ... the permissions on the registry key may be reset. ... To grant NETWORK SERVICE the necessary permissions to access the ASP.NET ... Microsoft CSS Online Newsgroup Support ...
    (microsoft.public.windows.server.sbs)
  • Re: Access denied message even with the Administrator user
    ... > 1> Check the permissions settings in ADSI Edit. ... > the full content of the output to the Newsgroup: ... you may want to contact Microsoft CSS directly. ... >>Edhy Rijo ...
    (microsoft.public.windows.server.sbs)
  • RE: Since SP1 install auto backup failing
    ... Microsoft CSS Online Newsgroup Support ... This newsgroup only focuses on SBS technical issues. ... >> permissions are changed in Windows Server 2003 SP1. ... >> registry and then restarting the DCOM process that you want to examine. ...
    (microsoft.public.windows.server.sbs)
  • RE: Since SP1 install auto backup failing
    ... permissions are changed in Windows Server 2003 SP1. ... registry and then restarting the DCOM process that you want to examine. ... Programs that use DCOM do not work correctly after you install Microsoft ... error information in the newsgroup. ...
    (microsoft.public.windows.server.sbs)