RE: 401.3 Unauthorized: Unauthorized due to ACL on resource

Hi Brian,

Thanks for your update.

Since my colleague Crina is taking leave today, I will continue working on
this issue with you.

I have reviewed the whole thread of this issue. It appears that the
original problem has been resolved and now the problem is that you received
a blank page after logging in the OWA.

Before we go any further, I would like to confirm with you if you have
applied the SBS Server SP1? If not, there is a known issue which would
cause this problem. Please refer to the following KB article for detailed
resolution and apply this Hotfix on the SBS Server: (If you have applied
the SBS SP1, please also follow the workaround in this KB)

FIX: IIS 6.0 compression corruption causes access violations
http://support.microsoft.com/?id=831464

Meanwhile, please try giving the everyone group Read permission on the
System32 directory.

If the problem persists after applying the above hotfix, please help me
gather the following info for further troubleshooting:

1. Please following this KB article to re-run the CEICW Wizard:

825763 How to configure Internet access in Windows Small Business Server
2003
http://support.microsoft.com/?id=825763

2. Will you receive the same problem when accessing OWA from internal
client?

3. Please capture a screenshot on the error page and send the .jpg file to
my colleague Crina's mailbox: v-crinal@xxxxxxxxxxxxx

4. Do you have any problems when accessing RWW and other websites hosted on
the SBS Server?

5. Does the problem occur on all remote OWA clients?

Hope the above info helps. Please let me know if you have further concerns.

Have a nice day!

Best Regards
Edward Tian(MSFT)
Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security
======================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.
======================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------
| Thread-Topic: 401.3 Unauthorized: Unauthorized due to ACL on resource
| thread-index: AcYRUN3FlW9f/BonTDSJxDUG896s1Q==
| X-WBNR-Posting-Host: 72.11.91.140
| From: =?Utf-8?B?QnJpYW5NdWx0aUxhbmd1YWdl?=
<BrianMultiLanguage@xxxxxxxxxxxxxxxxxxxxxxxxx>
| References: <BE09C4D9-C5FD-4889-A7B5-D9A33CB1A395@xxxxxxxxxxxxx>
<gokFs8NEGHA.1888@xxxxxxxxxxxxxxxxxxxxx>
| Subject: RE: 401.3 Unauthorized: Unauthorized due to ACL on resource
| Date: Wed, 4 Jan 2006 09:04:04 -0800
| Lines: 122
| Message-ID: <775CEC45-A7C4-45E4-9B6C-794D9FEE6E33@xxxxxxxxxxxxx>
| MIME-Version: 1.0
| Content-Type: text/plain;
| charset="Utf-8"
| Content-Transfer-Encoding: 7bit
| X-Newsreader: Microsoft CDO for Windows 2000
| Content-Class: urn:content-classes:message
| Importance: normal
| Priority: normal
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
| Newsgroups: microsoft.public.windows.server.sbs
| NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
| Path: TK2MSFTNGXA02.phx.gbl!TK2MSFTNGXA03.phx.gbl
| Xref: TK2MSFTNGXA02.phx.gbl microsoft.public.windows.server.sbs:234022
| X-Tomcat-NG: microsoft.public.windows.server.sbs
|
| Thank you.
| That resolved the problem but after the login page is displayed and
logged
| into, it just shows the header and a blank page.
| http://DOMAIN/exchange/LogonFrm.asp?isnewwindow=0&mailbox=USERSMAILBOX.
|
|
|
| ""Crina Li"" wrote:
|
| > Hi Brian,
| >
| > Thank you for posting in SBS newsgroup.
| >
| > From the description, I understand the issue to be: you received error
| > "401.3 Unauthorized: Unauthorized due to ACL on resource" when you
access
| > OWA. If I have misunderstood your concerns, please do not hesitate to
let
| > me know.
| >
| > As I know, this issue occurs if the Authenticated Users group does not
have
| > access permissions to the Exchsrvr\exchweb folder.
| >
| > To resolve this issue, follow these steps:
| >
| > 1. Start Windows Explorer, right-click the drive :\Program
Files\Exchsrvr
| > folder, and then click Properties , where drive refers to the drive
letter
| > of your system drive (typically it is C).
| > 2. Click the Security tab, and then click to select the Allow
inheritable
| > permissions from parent to propagate to this object check box.
| > 3. Click Apply .
| > 4. Make sure that the Authenticated Users group has the following
| > permissions in the Exchsrvr\exchweb folder:
| >
| > Read & execute
| > List Folder Contents
| > Read
| > If the Authenticated Users group does not have these permissions, set
these
| > permissions manually. Close the exchweb Properties dialog box.
| >
| > 5. Repeat steps 1-4 on the C:\Program Files\Common Files\Microsoft
Shared
| > folder.
| > 6. Click Start , point to Programs , point to Administrative Tools ,
and
| > then click Internet Services Manager .
| > 7. Right-click your server, and then click Restart IIS .
| > 8. In the What do you want IIS to do list, click Restart Internet
Services
| > on Server Name , and then click OK .
| > 9. Click Start , point to Programs , point to Administrative Tools ,
and
| > then click Services to open the Services dialog box.
| > 10. Restart all Exchange services.
| > 11. Close the Services dialog box.
| >
| > If the problem still occurs, you can also try the following:
| >
| > Changed permissions to full control for Domain Users on the following
| > registry keys:
| >
| > HKLM\system\currentcontrolset\services\MSExchangeWeb
| >
| > HKLM\system\currentcontrolset\services\W3svc
| >
| > and then reboot the server.
| >
| > You can also refer to the following KB articles:
| >
| > 317471 "Access Denied" Error Message When You Try to Use Outlook Web
Access
| > http://support.microsoft.com/default.aspx?scid=kb;EN-US;317471
| >
| > 317627 XWEB: Troubleshooting HTTP 401.x Errors in Outlook Web Access 5.5
| > http://support.microsoft.com/default.aspx?scid=kb;EN-US;317627
| >
| > Hope it helps and I look forward to hearing from you.
| >
| > Best regards,
| >
| > Crina Li (MSFT)
| >
| > Microsoft CSS Online Newsgroup Support
| >
| > Get Secure! - www.microsoft.com/security
| >
| > =====================================================
| > This newsgroup only focuses on SBS technical issues. If you have issues
| > regarding other Microsoft products, you'd better post in the
corresponding
| > newsgroups so that they can be resolved in an efficient and timely
manner.
| > You can locate the newsgroup here:
| > http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
| >
| > When opening a new thread via the web interface, we recommend you check
the
| > "Notify me of replies" box to receive e-mail notifications when there
are
| > any updates in your thread. When responding to posts via your
newsreader,
| > please "Reply to Group" so that others may learn and benefit from your
| > issue.
| >
| > Microsoft engineers can only focus on one issue per thread. Although we
| > provide other information for your reference, we recommend you post
| > different incidents in different threads to keep the thread clean. In
doing
| > so, it will ensure your issues are resolved in a timely manner.
| >
| > For urgent issues, you may want to contact Microsoft CSS directly.
Please
| > check http://support.microsoft.com for regional support phone numbers.
| >
| > Any input or comments in this thread are highly appreciated.
| >
| > =====================================================
| >
| > This posting is provided "AS IS" with no warranties, and confers no
rights.
| > --------------------
| > | Thread-Topic: 401.3 Unauthorized: Unauthorized due to ACL on resource
| > | From: =?Utf-8?B?QnJpYW5NdWx0aUxhbmd1YWdl?=
| > <BrianMultiLanguage@xxxxxxxxxxxxxxxxxxxxxxxxx>
| > | Subject: 401.3 Unauthorized: Unauthorized due to ACL on resource
| > | Date: Tue, 3 Jan 2006 10:38:03 -0800
| > | | Newsgroups: microsoft.public.windows.server.sbs
| > ||
| > | 401.3 Unauthorized: Unauthorized due to ACL on resource
| > | We are getting this when we try to access web outlook, internal and
| > external.
| > | I am not sure what file permission has changed?
| > | Anyone seen this b4>?
| > | Thank you
| > |
| >
| >
|

.

Relevant Pages

  • Re: Problem with connect computer wizard
    ... Microsoft CSS Online Newsgroup Support ... This newsgroup only focuses on SBS technical issues. ... Please double-check the default application pool in IIS. ...
    (microsoft.public.windows.server.sbs)
  • RE: Fax monitor incoming + outgoing calls?
    ... Microsoft CSS Online Newsgroup Support ... This newsgroup only focuses on SBS technical issues. ... When opening a new thread via the web interface, we recommend you check the ...
    (microsoft.public.windows.server.sbs)
  • Re: pop & smtp
    ... Please change the users apply to the SBS Internet Access rule ... Microsoft CSS Online Newsgroup Support ... This newsgroup only focuses on SBS technical issues. ... Please help me collect ISA info and firewall log for analyze. ...
    (microsoft.public.windows.server.sbs)
  • Re: DNS and email problem
    ... Microsoft CSS Online Newsgroup Support ... This newsgroup only focuses on SBS technical issues. ... our remote outgoing mail server as discussed, Comcast ...
    (microsoft.public.windows.server.sbs)
  • RE: fax not sending
    ... Thanks for updates. ... it did not relate to any problem on your fax or SBS side. ... Microsoft CSS Online Newsgroup Support ... This newsgroup only focuses on SBS technical issues. ...
    (microsoft.public.windows.server.sbs)