Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations TouchToneTommy on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

OWA security all messed up

Status
Not open for further replies.

leinad

IS-IT--Management
Nov 14, 2001
64
US
I'm running Exchange 2000/OWA on W2K (IIS 5.0). Users suddenly cannot access their mail with Netscape or from within AOL's interface. IE works fine, (and AOL users can minimize AOL and use IE); Outlook works fine from within the WAN, but even with in the WAN Netscape does not work.

I am a Domain Administrator, and Netscape works fine for me, but not for the normal user.

After the first prompt, the Frame page will load and some of the shortcut icons will show up, but not all. Then the prompt continues to come up forever. Putting the username/password in accomplishes nothing. Cancelling sometimes allows access to the Inbox.

It's bizarre. Any thoughts?

Daniel
 
I should have included the error log.
The source is W3SVC and the event ID is 100. Here is the text (I changed the username text):

The server was unable to logon the Windows NT account 'username' due to the following error: Logon failure: the user has not been granted the requested logon type at this computer. The data is the error code.

Daniel
 
Is this a Domain Controller? If so Everyone must have Logon Locally right. But it works from IE? Hmm... Dan
Microsoft Exchange Support @ Microsoft
 
Well, it's always been my understanding that OWA would not work with AOL's browser.

for username, try adding the domain. I can't remember if it's forward or reverse slash.

domainname/username
 
OWA doesn't work with AOL or Netscape if you use NT Authentication instead of Basic. One advantage here is that users don't require "log on" localy right any more which in turn boosts security.
 
I have never granted 'Logon Locally' permissions to any but Domain Administrators, and Netscape/AOL have never had any problem. Which authentication method should I use to get that back?

BTW, Dan... I tried to log in including the domain; it didn't work.
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top