Re: user can't access OWA or RWW



That's the odd thing. I filtered the Security log on the server using her name in the User box and unchecked Success. No hits.

Ah ..... It just hit me to try something else; I did a different filter just now clearing her name and unchecking Success. Now I see Event 533's for her account when I tried it this morning. Here's a sample:

Event Type: Failure Audit
Event Source: Security
Event Category: Logon/Logoff
Event ID: 533
Date: 1/30/2009
Time: 6:30:57 AM
User: NT AUTHORITY\SYSTEM
Computer: <computername>
Description:
Logon Failure:
Reason: User not allowed to logon at this computer
User Name: jessica
Domain: <computername>
Logon Type: 3
Logon Process: Advapi
Authentication Package: Negotiate
Workstation Name: <computername>
Caller User Name: IUSR_<computername>
Caller Domain: <domainname>
Caller Logon ID: (0x0,0x3B5E3)
Caller Process ID: 6008 <this is w3wp.exe, called by user NETWORK SERVICE>
Transited Services: -
Source Network Address: -
Source Port: -

I know we're getting somewhere, but I need a "nudge" in the right direction. <thinking out loud> The IUSR account is for anonymous internet access, a guest account. Her account is a member of Domain Power Users, Domain Users, Internet Users, Mobile Users, Remote Desktop Users, and Remote Web Workplace Users groups. The Guest account on the server is disabled. </thinking out loud>

I'm at a loss right now on where to turn. Can you give me an idea?

Mike


"Dana Epp [Security MVP]" <dana@xxxxxxxxxxx> wrote in message news:06DD20E7-CEBC-4E2B-AADD-B2F90069540C@xxxxxxxxxxxxxxxx
Have you looked at the Security eventlog to see what the error is when she attempts to log in? There should be a couple of events during this login process. If she can log into her desktop, but not into RWW or OWA, she may simply not have the appropriate permissions to do so.

Regards,
Dana Epp
Microsoft Security MVP

"Mike in Nebraska" <Mike_in_Nebraska@xxxxxxxxxxxxxxxx> wrote in message news:B51B9833-EE9E-40FE-A017-AAD5FF385E36@xxxxxxxxxxxxxxxx
I continue to be stumped with this problem. I backed up the users data and mailbox, deleted the user, rebooted the server, created her account using the Add User wizard - same login name and email address, restored her files and settings, rejoined to her mailbox. She is as she was before - to include NOT being able to login to OWA or RWW (http://<servername>/exchange or /remote). Tried on my PC, too.

What am I missing????
--
Mike Webb
Platte River Whooping Crane Maintenance Trust, Inc.
a conservation non-profit (501 (c)(3)) organization
Wood River, NE

"Mike in Nebraska" <Mike_Webb@xxxxxxxxxxxxxxxxx> wrote in message news:OBB9TYKfJHA.4868@xxxxxxxxxxxxxxxxxxxxxxx
Running SBS 2003 Premium with Exchange 2003; all current with patches and SPs.
=============
New staff member aboard; heading out on a business trip so I'm walking her through the process of accessing her email and desktop remotely. However, she can't get into either. Keeps getting the note that either her login or password are bad.

She can login locally with no problems. I verified that my login and password will work from her desktop and laptop, both inside and outside the LAN, and then tried her login and password - same result.

Checked her group membership and Exchange tabs for anything different than anyone else - nothing. Also nothing in the Security log on the server.

I must be drawing a blank - what am I missing???

TIA,

--
Mike Webb
Platte River Whooping Crane Maintenance Trust, Inc.
a conservation non-profit (501 (c)(3)) organization
Wood River, NE



.



Relevant Pages

  • Re: Basic Authentication + IIS 5 + Windows 2000 + Frontpage 2002 = failure?
    ... Everytime I attempt to login under Basic Authentication, ... IUSR_blah account. ... the anonymous user impersonated by the IIS Server is the ... > Event Viewer Security log. ...
    (microsoft.public.inetserver.iis.security)
  • Secure web authentication system w/o SSL and PKI
    ... In the beginning, a user should be able to register for an account, ... minted one-time password to their email address. ... it is assumed that only both the server and the end ... I'm making the big assumption that the user's email login has not been ...
    (comp.security.misc)
  • Re: Error 10061, 0x800ccc0e, bug?
    ... message 'connection to server cannot be established. ... booting and in your first XP login session, ... * changing windows account is not important, ...
    (microsoft.public.windows.inetexplorer.ie6_outlookexpress)
  • Re: 0x800ccc0e & 0x800ccc0d
    ... Are you saying that I,:login username@xxxxxxxxxxxxx? ... Tiscali is my ISP but I have not got an e-mail account with them, ... server, set a reasonable number of days to delete from server, or your ISP ... Your Live mail account Will NOT work in WM, ...
    (microsoft.public.windows.vista.mail)
  • Re: Tough password question!
    ... Is it possible that NTLMv2 login is failing for some reason and the server / ... > I have used passwords longer than 14 characters on ... >>> account and it will login if I change the domain admin password to ...
    (microsoft.public.windows.server.active_directory)