Unable to login into Exchange 2003 OWA
Hi,
When i am trying to login into Exchange 2003 SP2 OWA (IPAddress\exchange), it's not accepting the user ID/password & keep prompting for UID/Password. This is happening for all users. these maiboxes are moved from exchange 2000 server. Basic
& Windows integrated authentication are selected on Exchange Virtual Directory in Exchange. Kindly let me know where can i check the OWA login logs or what could be the reason of this problem.
Dhiraj
May 26th, 2010 1:09pm
Assuming OWA is enabled for the users etc and you have successfully connected to some mailboxes in the "new" environment have you tried specifying the mail alias or primary SMTP address in the url?
(Assuming below that IIS is not configured to only allow secure access)
ie - http://<ip address>/exchange/fred
or http://<ip address>/exchange/fred@corp.com
Seen a similar issue recently and the mail alias didn't work, but their smtp address did
Didn't get time to investigate a "why" in my case the work around was enough for me at the time.
Free Windows Admin Tool Kit Click here and download it now
May 26th, 2010 5:25pm
Thanks for your reply. tried both options but still the same problem. it's not accepting the User ID/Password. OWA is enabled for all users & tried domain\User ID.
Dhiraj
May 27th, 2010 8:31am
Hi,
By default, the OWA IIS logs are located in c:\Windows\system32\Logfiles\W3SVC1
You can also find the directory in Default Web Site-> Properties
And more information about :
Troubleshooting Outlook Web Access logon failures in Exchange 2000 and in Exchange 2003
http://support.microsoft.com/kb/327843Frank Wang
Free Windows Admin Tool Kit Click here and download it now
May 27th, 2010 11:26am
Thanks, Frank i have gone through the KB & everything is as per requirement. but still the same problem. getting below messages in IIS logs. unable to track any error here.
#Fields: date time s-sitename s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs(User-Agent) sc-status sc-substatus sc-win32-status
2010-05-27 05:28:44 W3SVC1 192.168.1.1 GET /exchange/albert.smith - 80 - 192.168.1.1 Mozilla/4.0+(compatible;+MSIE+8.0;+Windows+NT+5.2;+Trident/4.0;+.NET+CLR+1.1.4322) 401 2 2148074254
2010-05-27 05:28:53 W3SVC1 192.168.1.1 GET /exchange/albert.smith - 80 - 192.168.1.1 Mozilla/4.0+(compatible;+MSIE+8.0;+Windows+NT+5.2;+Trident/4.0;+.NET+CLR+1.1.4322) 401 1 0
2010-05-27 05:28:53 W3SVC1 192.168.1.1 GET /exchange/albert.smith - 80 ap\albert.smith 192.168.1.1 Mozilla/4.0+(compatible;+MSIE+8.0;+Windows+NT+5.2;+Trident/4.0;+.NET+CLR+1.1.4322) 302 0 0
2010-05-27 05:28:53 W3SVC1 192.168.1.1 GET /exchange/albert.smith/ - 80 - 192.168.1.1 Mozilla/4.0+(compatible;+MSIE+8.0;+Windows+NT+5.2;+Trident/4.0;+.NET+CLR+1.1.4322) 401 2 2148074254
2010-05-27 05:28:53 W3SVC1 192.168.1.1 GET /exchange/albert.smith/ - 80 - 192.168.1.1 Mozilla/4.0+(compatible;+MSIE+8.0;+Windows+NT+5.2;+Trident/4.0;+.NET+CLR+1.1.4322) 401 1 0
2010-05-27 05:28:53 W3SVC1 192.168.1.1 GET /exchange/albert.smith/ - 80 - 192.168.1.1 Mozilla/4.0+(compatible;+MSIE+8.0;+Windows+NT+5.2;+Trident/4.0;+.NET+CLR+1.1.4322) 401 1 2148074248
2010-05-27 05:29:02 W3SVC1 192.168.1.1 GET /exchange/albert.smith@domain.com - 80 - 192.168.1.1 Mozilla/4.0+(compatible;+MSIE+8.0;+Windows+NT+5.2;+Trident/4.0;+.NET+CLR+1.1.4322) 401 2 2148074254
2010-05-27 05:29:02 W3SVC1 192.168.1.1 GET /exchange/albert.smith@domain.com - 80 - 192.168.1.1 Mozilla/4.0+(compatible;+MSIE+8.0;+Windows+NT+5.2;+Trident/4.0;+.NET+CLR+1.1.4322) 401 1 0
2010-05-27 05:29:02 W3SVC1 192.168.1.1 GET /exchange/albert.smith@domain.com - 80 ap\albert.smith 192.168.1.1 Mozilla/4.0+(compatible;+MSIE+8.0;+Windows+NT+5.2;+Trident/4.0;+.NET+CLR+1.1.4322) 302 0 0
2010-05-27 05:29:02 W3SVC1 192.168.1.1 GET /exchange/albert.smith@domain.com/ - 80 - 192.168.1.1 Mozilla/4.0+(compatible;+MSIE+8.0;+Windows+NT+5.2;+Trident/4.0;+.NET+CLR+1.1.4322) 401 2 2148074254
2010-05-27 05:29:02 W3SVC1 192.168.1.1 GET /exchange/albert.smith@domain.com/ - 80 - 192.168.1.1 Mozilla/4.0+(compatible;+MSIE+8.0;+Windows+NT+5.2;+Trident/4.0;+.NET+CLR+1.1.4322) 401 1 0
2010-05-27 05:29:02 W3SVC1 192.168.1.1 GET /exchange/albert.smith@domain.com/ - 80 - 192.168.1.1 Mozilla/4.0+(compatible;+MSIE+8.0;+Windows+NT+5.2;+Trident/4.0;+.NET+CLR+1.1.4322) 401 1 2148074248
2010-05-27 05:29:08 W3SVC1 192.168.1.1 GET /exchange/albert.smith@domain.com/ - 80 - 192.168.1.1 Mozilla/4.0+(compatible;+MSIE+8.0;+Windows+NT+5.2;+Trident/4.0;+.NET+CLR+1.1.4322) 401 1 0
2010-05-27 05:29:08 W3SVC1 192.168.1.1 GET /exchange/albert.smith@domain.com/ - 80 - 192.168.1.1 Mozilla/4.0+(compatible;+MSIE+8.0;+Windows+NT+5.2;+Trident/4.0;+.NET+CLR+1.1.4322) 401 1 2148074248
Dhiraj
May 27th, 2010 3:23pm
Hi Frank, Any idea!!!whta else could be the reason.
Dhiraj
Free Windows Admin Tool Kit Click here and download it now
June 1st, 2010 8:25am
Hi Dhiraj,
About the error logs:
401.2 -
Denied by server configuration
401.1 - Denied by Invalid User Credentials
302 - Object moved
Did you try to create a new test user and log on to OWA?
If you just enable basic auth, what's the results?
More information:
Troubleshooting HTTP 401 errors in IIS
http://support.microsoft.com/kb/907273
Frank Wang
June 2nd, 2010 5:43am
Hi Frank,
Same is happening for all users. It's even not accepting password. keep prompting. Tried to recreate Exchange virtual folders as well, but same.
Kindly let me know how to troubleshoot it. Due to this Outlook Calender Free/Busy status also not working.
Dhiraj
Free Windows Admin Tool Kit Click here and download it now
January 28th, 2011 1:43pm
Hi Dhiraj,
Please follow this guide to reset your virtual directories with IIS, this will eliminate any "unexpected" issues:
http://support.microsoft.com/kb/883380 - follow method 1, most easy
Good luck
ilantz
February 3rd, 2011 4:22pm
Thanks ilantz,
Already tried to reset IIS Virtual Directories but no luck. Any other suggestion. Can we debug it with Netmon or any other log to resolve it.
Dhiraj
Free Windows Admin Tool Kit Click here and download it now
February 4th, 2011 8:09am
If all fails, you might have to consider recreating the OWA virtual directory.
February 4th, 2011 8:27pm
Jose, As i have answered in my last post already tried to recreate them but same problem. Already deleted all Exch VDir's, checked all permissions, checked auth type as well on on Exchange VDir. but still no resolution
Dhiraj
Free Windows Admin Tool Kit Click here and download it now
February 5th, 2011 6:10pm
Hi Dhiraj,
More questions :)
How about enabling Form-Authentication?
What about SSL/IP Restrictions settings for the virtual directories?
Can you log-in while in LAN, from domain joined computer - using NTLM/Kerberos authentication ?
ilantz
February 6th, 2011 11:48am
Hi ilantz,
Form Based Authentication is disabled. no certificate is installed on this IIS hence SSL si disabled. i am able to login into domain with this ID. OWA is not working for all users who are having mailboxes on this server. in the same Exchange Admin group
we have another four servers where OWA is working. only on this server it's not working.
Dhiraj
Free Windows Admin Tool Kit Click here and download it now
February 6th, 2011 1:14pm
Hi Dhiraj,
Thanks for the update,
can you verify that you can access mailboxes on the "problematic" server from another server? using http://goodserver/exchange/mailbox.to.test@domain.com
If all fails i suggest you to consider re-building the server with disaster recovery installation, might solve it better to continue the troubleshooting... but then again.. i might be exaggerating...
ilantz
February 6th, 2011 2:21pm
Thanks ilantz, same advised given to me from another forum also to rebuild it. Can't take downtime to rebuild it only bcoz OWA is not working. I thought to take MS Experts help to debug this issue. Anybody have any idea to resolve it. Any Netmon trace
or PCap to debug it.
Dhiraj
Free Windows Admin Tool Kit Click here and download it now
February 7th, 2011 8:26am
Have you had a look at the following Microsoft kb article on 401 errors
http://support.microsoft.com/kb/907273
There are some good debug tools for IIS errors linked on there.
Cheers
Phil
February 8th, 2011 1:24pm
Not getting anything to resolve this issue. Getting below IIS Logs. As earlier mentioned by Frank it's going with three code only 401 1 / 401 2 / 302 but i am not getting the root cause of these errors. Getting below errors in W3SVC log file.
401 2 2148074254
401 1 2148074248
Tried with Wfetch in both Basic & NTLM Authentication & getting below errors. both are working on another server.
NTLM : HTTP/1.1 401 Unauthorized\r\n
Basic : HTTP/1.1 501 not implemented\r\n
Dhiraj
Free Windows Admin Tool Kit Click here and download it now
February 18th, 2011 12:13pm
Check the IIS process account if changed from IWAM and ISUR have access to the OWA directorys, if you've recreated them you may get this error. It seems like your basic authentication doesn't have access to the necessary files to allow you to pass the user
creds.
Again just something to have a look at.
Cheers
Phil
February 21st, 2011 12:41pm
OWA, prompting password for three times & then showing Access Denied message. Not accepting user password. getting below errors in W3SVC logs. Tried so many things but nto getting the root cause of the problem / actual reason.
401 2 2148074254 : Denied by server configuration
401 1 0 : Denied by invalid user credentials
302 0 0 : Object Moved
401 1 2148074248 : Denied by invalid user credentials
404 0 2 : Lockdown policy prevents this request
Dhiraj
Free Windows Admin Tool Kit Click here and download it now
February 28th, 2011 5:25pm