Exchange 2007 OWA on Windows Server 2008

How to spend a few hours fighting with a new server. Thought I’d post this to help out any other poor soul that’s stuck with the same problem.


The Setup
Exchange Server 2007 SP1 running on Windows Server 2008, and having users trying to run Outlook Web Access (OWA).

The Problem
Only users that are members of the Administrators group can connect to OWA successfully.

The Resolution
Ensure that all users that need to use OWA are at least members of the Builtin\Users group.


Sounds simple right! Well for some reason, Microsoft have kindly changed the default permissions on the %windir% directory on Server 2008 so that "Authenticated Users" no longer have Read access as they used to on Server 2003. This means that anyone not in any of the other groups that has access by default can no longer read the ASP.Net ISAPI filters; so when the user logs in, IIS responds with a 401.3 to say Unauthorized: Access is denied due to an ACL. "Domain Users" do not have any permissions on the directory either, so newly created users in an AD domain will not have access by default (if OWA is running on a domain controller; hopefully they’ll get this right when SBS 2008 finally comes out later in the year).

Advertisements

About Theo Gray

MCP, Web Designer/Developer and Musician (when spare time allows)
This entry was posted in Computers and Internet. Bookmark the permalink.

One Response to Exchange 2007 OWA on Windows Server 2008

  1. jacob says:

    Dear All,I am very interesting with this discussion, I have problem of the same nature, I have Exchange 2007 runing on Win 2008 Enterpr, OWA is working locally, but Outlook Anywhere does not working, I have enable and provide External URL, but if I go to IIS7 redirect to add the URL does not which cause even internal not to work, what could be the problem? Please I need assistance from you, Thanks

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out /  Change )

Google+ photo

You are commenting using your Google+ account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s