Hi Guys, I was wondering if you could help me? We have recently undergone a Penetration Test, the guys doing the test couldn't find much but one thing they pulled us up on was that OWA was giving error messages out, they in fact said: Error messages observed during review We observed that verbose error messages are issued to the client in response to unexpected queries, or invalid application logic. These error messages were observed when testing the server. The messages were like Server Error in '/' Application - Runtime Error & Server Error in '/' Application - Trace Error. We have been told that we have got to use a Generic Error message instead as Verbose error messages prove useful to an attacker attempting to compromise an application. I have Googled around and been onto Microsoft but I can find no answers for Customizing and Applying Generic Messages or Disabling Server Error Messages. Please can you help?

Hi, Do you mean that the OWA not working getting "Server error in /owa application" ? Is there any related error in event viewer? Try to run these command to reregister asp.net: cscript %SYSTEMDRIVE%\inetpub\adminscripts\adsutil.vbs SET W3SVC/AppPools/Enable32bitAppOnWin64 0 %SYSTEMROOT%\Microsoft.NET\Framework64\v2.0.50727\aspnet_regiis.exe -ua %SYSTEMROOT%\Microsoft.NET\Framework64\v2.0.50727\aspnet_regiis.exe -i If the issue persists, please try to recreate OWA virtual direcotry: 1. Open exchange management shell, type: Remove-OwaVirtualDirectory -identity "owa (default web site)" 2. Then create a new OWA: New-OwaVirtualDirectory Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread. Thanks Gen Lin-MSFT