Re: OWA 403 Forbidden, POP3,

It does appear as if the TrendMicro stuff messed it up.

Trend Micro has been removed, bht problems still persist.

Is there a way to just re-install the IIS components to a set of Default
Values? It was working before patches, and TrendMicro stuff was applied.
The few other things I have installed in IIS are easy to redo. This
incorrect type of install of Trend not in a virtual directory was probably
done in the late hours while things were being put back together.


"CJH" <cjh@xxxxxxxxxxxxxxxxxxxx> wrote in message
news:OruL46bCHHA.856@xxxxxxxxxxxxxxxxxxxxxxx

"chace zhang" <v-chacez@xxxxxxxxxxxxx> wrote in message
news:FjYMb5JBHHA.1976@xxxxxxxxxxxxxxxxxxxxxxxx
Hi,

Thank you for posting here.

From your post, I understand you after you rebuild SBS Server, you
experienced a couple of problems. Please understand this newsgroup is a
one
issue based service, to keep the thread clean, let's focus on OWA 403
Forbidden issue, thanks for your understanding

Based on my research, the symptom indicated that the web site only allows
restricted source IP. This is a normal behavior for a newly installed SBS
box. The SBS setup wizard implants IP restrictions on the default web
site.
We can run the CEICW to enable particular web services so that the
restrictions on the virtual directory will be removed. Can I assume that
you have already run the CEICW on the SBS server? If not, please open
Server Management console, navigate to 'To Do List'. Click 'Connect to
the
internet' in the right panel. In the web services configuration window,
select the web functions which you want to use from the internet. When
you
select to allow "Outlook Web Access" when running CEICW, the component
will
modify the IIS connection permissions for the OWA-specific virtual
directories to allow clients from any IP address to connect, while the
rest
of the site only allows local IP addresses to connect. Follow the wizard
to
complete the configurations. After doing this, will the problem be
resolved?


825763 How to configure Internet access in Windows Small Business Server
2003
http://support.microsoft.com/?id=825763

A step by step explanation of the CEICW:
http://www.sbs-rocks.com/sbs2k3/sbs2k3-n2.htm



If the issue still persists after above steps. To verify is there an IP
restriction configured on the website!

1. Click Start, point to Administrative Tools and click Internet
Information Services (IIS) Manager.

2. Expand your server | Web Sites | Default Web Site, right-click Default
Web Site and click Properties.

3. On the Directory Security tab, click Edit in the "IP address and
domain
name restrictions" section.

4. What IP address access restrictions have been configured?
192.168.0.100 (The server)
127.0.1.0 (Loopback)


5. Also check this setting for the Exchweb and the Exchange virtual
directory.

(No restrictions)



You don't need port 80 inbound open.Port 80 is still the most attacked
port
on the internet.

Please use HTTPS instead of HTTP to access OWA and forward port 443 from
the router to your external nic.

Use HTTPS only





1. Make sure you have Exchange SP1 installed

Done......


2. Clear the IIS server files. To do so, follow these steps:

Done.....


a. Go to your "%SystemRoot%\IIS Temporary Compressed Files"
(C:\WINDOWS\IIS
Temporary Compressed Files or C:\WINNT\IIS Temporary Compressed Files)
directory.

Done .....


b. Select all of the content in this directory and delete it.

3. Click Start->Run, type "iisreset" (without the quotes) and click OK to
restart the IIS services.

Done....


At the client side:

a. Open IE, and go to Tools -> Internet Options.

b. Select Delete Files, check "Delete all offline files" and click OK to
confirm that you want to delete the content. Then check if the issue
disappears.

This issue may also be caused by URLSCAN installed on IIS if it is not
configured per the Exchange 2003 OWA template. For more information, see:

URL Scan is not installed.






--------------------
| From: "CJH" <cjh@xxxxxxxxxxxxxxxxxxxx>
| Subject: OWA 403 Forbidden, POP3,
| Date: Thu, 9 Nov 2006 15:50:41 -0600
| Lines: 27
| X-Priority: 3
| X-MSMail-Priority: Normal
| X-Newsreader: Microsoft Outlook Express 6.00.2900.2869
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2962
| X-RFC2646: Format=Flowed; Original
| Message-ID: <e2jOQgEBHHA.4348@xxxxxxxxxxxxxxxxxxxx>
| Newsgroups: microsoft.public.windows.server.sbs
| NNTP-Posting-Host: profiletechgroup.com 66.93.17.78
| Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP04.phx.gbl
| Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:311500
| X-Tomcat-NG: microsoft.public.windows.server.sbs
|
| Had to rebuild server over the weekend due to a Crash, and a backup that
| would not recognize hardware.
|
| Was able to retrieve all user data, and E-mail (I assume).
|
| Server is basically up and running, but a couple of critical services are
| giving fits.
|
| 1. https:/www/company.com/remote (RWW Works, Can get to
desktops/servers
| 2. * OWA Get to Login screen, and then Error 403 Forbidden <===
Need
| this one
| 3. * POP3 Connectot, Unable to connect on 110
| 4 * IMAP4 Connection Unable to connect on 143
| 5 * Active Sync to a Treo phone connects just fine, error when
download
| of data starts
| 6 Outlook Desktop works just fine
| 7. Shared directories etc OK.
| 8. CompanyWeb does work OK (Only used Intranet)
| 9 All Automatic Services running.
|
| OWA Originally worked as expected. Between patches, updates, Install of
| Trend Micro SMB something has gone astray, and I am at a loss where to
look
| any more.
|
| Looking for input.
|
|
|


.

Relevant Pages

  • Re: I hate IIS - "Server Application Unavailable" error message
    ... I would but there is not "Application Pools" underneath the local ... Did you install, at least, the Web or Standard versions of Windows Server 2003? ... except when you choose to install IIS on a domain controller. ...
    (microsoft.public.dotnet.framework.aspnet)
  • RE: IIS Key pairs (how to export an IIS 4.0 self-issued Root CA a nd import into new IIS 4.0 box)
    ... IIS key to an Intel SSL acelerator ... it issues client certificates to the end users. ... Step I - Installing the New Server ... Install NT SP 3 ONLY ...
    (Focus-Microsoft)
  • Re: No DHCP in administrative tools
    ... OK, we need to install the DHCP service, but we're gonna hold of a mo' on ... In computer management, expand IIS, expand websites, which sites do you ... SQL Server Config ...
    (microsoft.public.windows.server.sbs)
  • RE: Internet printing
    ... Configuring the IPP Print Server: ... (IIS is synonymous with PWS, Peer Web Services, which is what ... -This will install and configure basic IIS on the current machine. ...
    (microsoft.public.windows.server.sbs)
  • RE: OWA Calendar loading error
    ... On a server that is running Microsoft Windows Small Business Server 2003 ... In the drop-down menu next to Compression, ... IIS 6.0 compression corruption causes access violations ... Open the IIS Temporary Compressed Files folder. ...
    (microsoft.public.windows.server.sbs)