Re: odd owa issue

Hello Customer,

Thank you for kind update.

I. If you this issue only happen on external access, the internal access is
good, this is a ISA publish issue:

Based on my further research, we could not enable FBA on ISA 2004 and
Exchange server at same time. I suggest we try the following steps to see
if we can resolve this issue:

1. Uncheck the FBA in ISA 2004:
Please open the ISA management console, navigate to Firewall Policy, on the
right pane, click Toolbox->Network Objects->Web Listeners, double click the
"SBS Web Listener" for OWA publishing. Go to the Preferences tab, click
Authentication, make sure the OWA Forms-Based option is unchecked and
Integrated is checked. Click OK twice. Then please click Apply to save the
settings.

2. Please rerun the CEICW to reset the OWA publishing rule to default
settings:

Go through the follow KB and Rerun CEICW again carefully.

How to configure Internet access in Windows Small Business Server 2003
http://support.microsoft.com/kb/825763/en-us

Detailed steps for your reference:

a. On the SBS 2003 Server open the Server Management console. Go to
Standard Management\To Do List.

b. Click the "Connect to the Internet" link.

c. When navigating to the Firewall page, select "Enable firewall" and click
Next (I suppose you have 2 network adapters in SBS 2003).

d. On the "Services Configuration" page, select all the items and then
click Next.

e. On the "Web Services Configuration" page, you can select "Allow access
to the entire Web site from the Internet". If you select "Allow access to
only the following Web site services from the Internet", make sure "Outlook
Web Access" item in the list is selected. Click Next.

f. On the "Web Server Certificate" page, choose to create a new Web server
certificate and then type the public FQDN (your public DNS name) that you
will use to access OWA (for example, if your public FQDN that you use to
access the sites is www.xyz.com, you should type www.xyz.com as the new
certificate name).

g. Go through the remaining steps.

II. If the issue happen on both internal and external access, we have to
rest OWA virtual directories:

1. Install the IIS 6.0 Resource Kit Tools. To obtain the IIS 6.0 Resource
Kit Tools, visit the following Microsoft Web site:
http://www.microsoft.com/downloads/details.aspx?FamilyID=56FC92EE-A71A-4C73-
B628-ADE629C89499&displaylang=en
Note If you do not want to install all the IIS tools on your computer, you
can install only the Metabase Explorer 1.6 component. To do this, follow
these steps:

a. Double-click iis60rkt.exe, and then follow the instructions that are on
your screen until you reach the Setup Type page of the IIS 6.0 Resource Kit
Tools Setup Wizard.
b. On the Setup Type page, click Custom, and the click Next.
c. Click to clear all the IIS Resource Kit Tools and components check
boxes except the Metabase Explorer 1.6 check box.
d. Click Next, and then click Finish.

2. Back up your IIS metabase. To do this, follow these steps:
a. Start IIS Manager.
b. Right-click Default Web Site, point to All Tasks, and then click Save
Configuration to a File.
c. In the Save Configuration to a File dialog box, type a configuration
name in the File name input box, and then click OK.

3. Delete the virtual directories for Outlook Web Access. To do this,
expand the Default Web Site in the left pane of IIS Manager, right-click
Exadmin, and then click Delete. Click Yes when you are prompted with the
question of whether you want to delete this item.

Repeat this step for the following virtual directories:
Exchange
ExchWeb
Microsoft-Server-ActiveSync
OMA
Public

4. Quit IIS Manager.
5. Click Start, point to All Programs, point to IIS Resources, point to
Metabase Explorer, and then click Metabase Explorer.
6. Expand LM, right-click DS2MB, and then click Delete. Click Yes when you
are prompted with the question of whether you want to delete this key and
all subkeys.
7. Quit IIS Metabase Explorer.
8. Click Start, point to All Programs, point to Administrative Tools, and
then click Services.
9. To restart the Microsoft Exchange System Attendant service, follow
these steps:
a. Click Start, click Run, type services.msc , and then click OK.
b. Right-click Microsoft Exchange System Attendant, and then click
Restart.
c. When you are prompted to restart the dependant Exchange Server
services, click Yes.

Note When you restart the Microsoft Exchange System Attendant service, the
Microsoft Exchange Information Store service is also restarted. In this
scenario, your Exchange Server users lose connectivity to their Exchange
Server mailboxes.
The virtual directories are re-created. To verify that the virtual
directories are re-created, start IIS Manager, and then view the Default
Web site folder.

Important If the virtual directories are not re-created after 15 minutes,
restart your computer.
10. Reset the access permissions to Anonymous. To do this, follow these
steps:
a. Start IIS Manager, right-click ExchWeb, click Properties, and then
click the Directory Security tab.
b. Under Authentication and access control click Edit, and then verify
that the Enable anonymous access check box is turned on.
c. Click to select the Integrated Windows authentication check box, click
OK, and then click Apply.
d. If you an Inheritance Overrides dialog box appears, click Select All,
and then click OK.
e. Under Authentication and access control, click Edit, and then click to
clear the Integrated Windows authentication check box.
f. Click OK two times, and then quit IIS Manager.

Use a Web browser to verify that you can connect to your Outlook Web Access
server. If you are also running other mobility services, verify that you
can connect to these services by using an appropriate client.

If we cannot resolve the issue after we perform the above steps, please
kindly help me collect some information for further investigation:

1. Gather IIS log:

a. Open IIS snap-in.

b. Right click Default Web Site and click Properties.

c. Uncheck the "Enable Logging" box and click Apply.

d. Go to C:\WINDOWS\system32\LogFiles\W3SVC1 folder and move all files to a
backup location.

e. Check "Enable Logging" box and click OK.

f. Run IISReset command.

g. Reproduce the problem and send the log file in
C:\WINDOWS\system32\LogFiles\W3SVC1 folder to me for research.

2. Gather IIS Metabase:

1) Download the IIS Resource Kit tools from the following page:
http://www.microsoft.com/downloads/details.aspx?FamilyId=56FC92EE-A71A-4C73-
B628-ADE629C89499&displaylang=en

2) Install it, run MBExplorer (Metabase Explorer)

3) Right click the "LM" node and choose "Export to file".

4) Specify a file name, specify the password and finish the export.

5) Send the file and the password to v-terliu@xxxxxxxxxxxxx

Hope these steps will give you some help.

Thanks and have a nice day!

Best regards,

Terence Liu(MSFT)

Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security

=====================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.
=====================================================

This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------
| NNTP-Posting-Date: Mon, 30 Jul 2007 19:26:10 -0500
| From: "dl" <d@xxxxx>
| Newsgroups: microsoft.public.windows.server.sbs
| References: <MPednbCELZGFMzHbnZ2dnUVZ_oOnnZ2d@xxxxxxxxxxxxx>
<n5M58Yo0HHA.4200@xxxxxxxxxxxxxxxxxxxxxx>
| Subject: Re: odd owa issue
| Date: Mon, 30 Jul 2007 20:26:05 -0400
| X-Priority: 3
| X-MSMail-Priority: Normal
| X-Newsreader: Microsoft Outlook Express 6.00.2900.3138
| X-RFC2646: Format=Flowed; Original
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3138
| Message-ID: <X7GdnbWsoIs_HDPbnZ2dnUVZ_rCtnZ2d@xxxxxxxxxxxxx>
| Lines: 43
| X-Usenet-Provider: http://www.giganews.com
| NNTP-Posting-Host: 64.81.203.167
| X-Trace:
sv3-IB8jfSJXJZGq4B/oev5Ap6TVSDXWflI5MF73VX7BEmYyyu83Dww9mF8qRwFFkKbN2961SErc
nyI02X+!q0o1Iyi/sMfUqQjbGr/ym3pE2rvNToCAHRb8eYrWrtdr6qCAwgBr+CTWgWDUgy8Hja4l
LZpHf9w2!5falNzMjMvp5BfEHwLDvlE6gMvO3xM8=
| X-Complaints-To: abuse@xxxxxxxxxxxxx
| X-DMCA-Complaints-To: abuse@xxxxxxxxxxxxx
| X-Abuse-and-DMCA-Info: Please be sure to forward a copy of ALL headers
| X-Abuse-and-DMCA-Info: Otherwise we will be unable to process your
complaint properly
| X-Postfilter: 1.3.35
| Bytes: 2520
| Path:
TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTFEEDS02.phx.gbl!TK2MSFTFE
EDS01.phx.gbl!news-out.cwix.com!newsfeed.cwix.com!newscon02.news.prodigy.net
!prodigy.net!border1.nntp.dca.giganews.com!nntp.giganews.com!local01.nntp.dc
a.giganews.com!nntp.speakeasy.net!news.speakeasy.net.POSTED!not-for-mail
| Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.sbs:53434
| X-Tomcat-NG: microsoft.public.windows.server.sbs
|
|
| "Terence Liu [MSFT]" <v-terliu@xxxxxxxxxxxxxxxxxxxx> wrote in message
| news:n5M58Yo0HHA.4200@xxxxxxxxxxxxxxxxxxxxxxxxx
| > Hello Customer,
| >
| > Thank you for posting here.
| >
| > According to your description, I understand that you get windows
| > authentication prompt but not web logon page when you access the OWA.
If I
| > have misunderstood the problem, please don't hesitate to let me know.
| >
| > Based on my research, I think you do not enable FBA on Exchange. I
suggest
| > we try the following steps to see if we can resolve this issue:
| >
| > 1. Please open Server Management console on SBS
| >
| > 2. Extend Advanced
| > Management->SBSname(Exchange)->Servers->SBSname->Protocols->HTTP
| >
| > 3. Right click Exchange Virtual Server, select properties
| >
| > 4. Select Settings tab, tick the option "Enable Forms Based
| > Authentication"
| >
| > 5. Click OK
| >
| > 6. Wait for a while to let the settings carryout sync with IIS.
| >
| > Then, test this issue.
| >
| > Hope these steps will give you some help.
| >
| > Thanks and have a nice day!
| >
| > Best regards,
| >
| > Terence Liu(MSFT)
|
| Thanks for responding. The tick was already in place for enable forms
based
| authentication. Any other ideas? I would think an IIS issue, just not
sure
| where to look. Thank you
|
|
|

.

Loading