Remote access to Outlook email 1

[MHUK]

Hi

I run a small network which runs on Windows 2000 and has Exchange 2000 for all our email accounts running on Outlook. One user is on the road a lot and wishes to buy a laptop and access his work email account remotely by using a dial up connection and simple 56k modem in the laptop. Is there a simple way to set this up, without the need to buy lots of extra equipment? Ideally he will just find a phone connection and dial up to the internet with his laptop and then access his work email. But how could this be set up?

How can I enable the web mail services within Exchange 2000? Will this allow the user to check their work email via web pages? I have also heard of Outlook Web Access. What is this, and is this the same thing as 'web mail services'? I'm not that familiar with Exchange but we have Small Business Server 2000 which I do know.

Thank you very much for any help.

MHUK

 

[Spirit]

Personally I would create a nice wee vpn for him/her and let them connect through this which allows acce4ss to their files as well as the email.

Or how about weboutlook? Check both out on the M$ knowledge base.

Iain

 

[Marcs41]

Use OWA or IMAP, that is the easiest way.

http://support.microsoft.com/default.aspx?scid=kb;en-us;319878

Marc
_{If 'something' 'somewhere' gives 'some' error, expect random guesses or no replies at all. Please specify details.
Free Tip: The F1 Key does NOT destroy your PC!}
How Do I Get Great Answers To my Tek-Tips Questions? See faq219-2884

 

[MHUK]

Thanks for all your replies. I have followed your link which brought up a Microsoft page which suggested I type the following in address bar: "

http://ServerName"

which worked fine, where I typed in my network password/username and it brought up two pop up pages. The URL of the first page was "

http://ServerName/localstart.asp"

and the second:

http://localhost/iishelp/iis/misc/default.asp

However neither seem to give any help on how to access the network email or whether I actually have to change any settings in Exchange or go into Control Panel to change any settings. How can I tell if Outlook Web Access is actually set up on my server?

Thank you for any help. Much appreciated.

MHUK

 

[Marcs41]

Again

http://support.microsoft.com/default.aspx?scid=kb;en-us;319878

make sure port 80 (or 443 for SSL) is forwarded to that server.

Marc
_{If 'something' 'somewhere' gives 'some' error, expect random guesses or no replies at all. Please specify details.
Free Tip: The F1 Key does NOT destroy your PC!}
How Do I Get Great Answers To my Tek-Tips Questions? See faq219-2884

 

[MHUK]

Thanks, however I'm still not sure what to do. When I click the link you suggest I assume I have to do the following that it states:

"Redirect the Default Web Site to point to the Exchange virtual directory, follow these steps:
Start the Microsoft Management Console (MMC) IIS snap-in.
Right-click Default Web Site, click Properties on the shortcut menu, and then click the Home Directory tab.
Under When connecting to this resource, the content should come from, click A redirection to a URL.
In the Redirect to box, type /exchange.
Under The client will be sent to, click A directory below this one.
Stop and start the Default Web Site."

My first question is: Is this what I have to do?
Secondly: What is the default website? Is this the page that appears when I type

http://ServerName

?
My third question is - if I do indeed have to do the above I cannot get into the IIS snap-in - the reasons for this are explained below:

This is the instruction on how to open IIS Snap-In:
"To launch the Internet Information Services snap-in

Click Start, point to Programs, point to Administrative Tools, and click Computer Management.
Under the Server Applications and Services node, expand Internet Information Services."

The problem is I cannot see Administrative Tools anywhere in the Start Menu under programs. I am on Windows 2000 and live in the UK. Could there be an English equivalent to Administrative Tools? I have tried also looking under Accessories then "System Tools" however "Computer Management" is not listed. Also looked in Settings and control panel but can't see an equivalent. I suspect "System Tools" is the best bet but don't want to edit settings in the wrong place. Any help will be greatly appreciated.

Thank you

MHUK

 

[Marcs41]

The default name is

http://servername-or-address/Exchange

Test it on the server with

http://127.0.0.1/Exchange

Administrative Tools is in the control Panel.

Computer Management can be started manual with Start - Run - compmgmt.msc

Marc
_{If 'something' 'somewhere' gives 'some' error, expect random guesses or no replies at all. Please specify details.
Free Tip: The F1 Key does NOT destroy your PC!}
How Do I Get Great Answers To my Tek-Tips Questions? See faq219-2884

 

[MHUK]

Thanks Marcs. The address:

http://ServerName/Exchange/

works! However (another query ..sorry) it only lets me log on using the main Adminstrator username and password. In this case it is "administrator" and the network password. It works and takes me straight to the Web Outlook for the administrator which is perfect, except I need it to work for other users on the network.

However when I try to log on as my own username and password "matt" and my network password it wont allow me access. I am half way there. How can I set up access so that other users, aside from adminsistrator can log on to Web Outlook using their network logon username and password?

Thank you for all your help. I really appreciate it.

 

[Marcs41]

You can then use

http://ServerName/Exchange/Username

Of course, you have to check their permissions in AD, to see if they have the HTTP protocol enabled.

 

[MHUK]

Thanks. Just tried and can't seem to work so looks as though I will have to check the permissions and settings. What is AD? Is this something in Exchange or Computer Management?

 

[Marcs41]

Active Directory

Marc
_{If 'something' 'somewhere' gives 'some' error, expect random guesses or no replies at all. Please specify details.
Free Tip: The F1 Key does NOT destroy your PC!}
How Do I Get Great Answers To my Tek-Tips Questions? See faq219-2884

 

[MHUK]

Thanks. I've gone into the Active Directory and gone to the user who is to be accessing the email remotely and gone to their properties. Which tab will have the option to check if HTTP protocol is enabled?

 

[Marcs41]

Exchange Advanced - protocol settings - HTTP has to be enabled.


Marc
_{If 'something' 'somewhere' gives 'some' error, expect random guesses or no replies at all. Please specify details.
Free Tip: The F1 Key does NOT destroy your PC!}
How Do I Get Great Answers To my Tek-Tips Questions? See faq219-2884

 

[MHUK]

Hi

Everything seems to work fine typing the following URL:

http://serverName/Exchange/user

BUT it only works when I connect to the internet at work. I tried typing the same URL from home externally and page could not be displayed. Should I be typing an IP address followed by the above URL when accessing outside the network, such as

http://ip

address/ServerName/Exchange/user

The User properties didn't have an option anywhere to go to Exchange Advanced to look at protocol settings. However I did find out that HTTP is enabled by going to another node in our Small Business Server called Internet Information Services and within this there are two sub categories called "Default Website" and "Administration Website". I looked at the properties of both these. They have the same 'tab' headings in their properties, which are - Web Site, Operators, Performance, ISAPI filters, Home Directory, Documents, Directory Security, HTTP Headers, Custom Errors. What is the difference between "Default Website" and "Administration Website"? At first glance the properties of each seem to be the same under all the tab headings.

I had a good look in each of the tabs and found the check box for enabling HTTP under the "Website" tab. It was checked and already enabled. However, still within the "Website" tab, something just above the HTTP enable checkbox was some other information - it said "IP address: (All unassigned)" and a button next to it said "Advanced". I clicked Advanced and it came up with a little box showing two main columns: IP Address and TCP Port. Under the column "IP Address" it said "(All Unassigned)" and under the TCP Port it gives a port number. There is however an "ADD" button which when clicked allows me to add a static IP address.

Is it fine to leave the IP Addresses 'all unassigned' or should I add the static IP address of a local PC, such as mine to test? I believe it says 'all unassigned' as our IP addresses are normally dynamic, however I can change the IP addresses of local PC's to a static address if required.

I had a look in another of the tabs in Default and Administration website called "Directory Security". Within this tab there was a sentance saying "Enable anonymous access and edit authentication methods for this resource", then there was an EDIT button next to this. I clicked it and the screen came up with an UN-checked tickbox for Anonymous Access. Should this be checked or un-checked?

Coming out of the 'Edit' button, still in Directory Security tab, there was another sentance further down saying "Grant or deny access to this resource (meaning the default or admin website) using IP addresses or internet domain names". Next to this was an EDIT button. I clicked it and showed another sentance saying "IP Address Access Restrictions. By default all computers will be:" Then there are two radio buttons: one un-checked saying "Granted Access" and a second checked button saying "Denied Access". Below this there was another final sentance saying "Except those listed below: IP address 127.0.0.1". There was an ADD button next to this.

Should I click ADD to add an IP address of a local pc or shold I just check the radio button "Granted Access"?


One final question (sorry about this long message!) this may solve the problem - going back to the Active Directory and the User properties I did see a section tab called "Dial In Services" and another tab called "Terminal Services". In the "Dial In Services" tab there was a sentance saying "Remote Access Permission (Dial-in or VPN)" and two radio buttons, one un-checked saying "Allow Access" and a checked button saying "Deny Access". Should "Allow Access" be checked instead?

And is there anything in the "Terminal Services" tab that should be looked at?

I am sure it is just a couple of changes I need to make to get this working. It is working like I said logging on to a web browser inside work but outside work I think the URL address may need an IP address in it, for example:

http://ip

address/ServerName/Exchange/user
Is this correct?


Thank you again for your time to read this and any help will be very much appreciated.

Matt

 

[Marcs41]

To get to the Exchange Advanced settings, click View - Advanced Features first.

http://serverName/Exchange/user

will not work from home or anywhere else unless servername is known on the net. You either use the IP address or a registered name to your IP.


Remote Access Permission (Dial-in or VPN) are not in use for OWA.

you can grant access per IP address, but to test leave it on grant all.

You also need to make sure port 80, or whatever you added is forwarded to the server on the router or firewall, if any.
If you use another port, like 2280, don't forget to add it, like:

http://ipaddress:2280/Exchange/User

Marc
_{If 'something' 'somewhere' gives 'some' error, expect random guesses or no replies at all. Please specify details.
Free Tip: The F1 Key does NOT destroy your PC!}
How Do I Get Great Answers To my Tek-Tips Questions? See faq219-2884

 

[MHUK]

Hi

Thanks for your help. I think I am nearly there. HTTP is enabled and definitely pointing to PORT 80 and access is checked to "grant all access" for the "Default website" IP Address restrictions.

But I'm not sure what you mean by "You either use the IP address or a registered name to your IP". I am not sure what to type in the URL. I have tried

http://ipaddress/Exchange/nameofUser

But doesn't work. I'm going home now so will try a test from there but I think a couple more changes are needed to get this working externally. When I get the URL correct will I only have to enter my normal network username and password, or will it be a different username/password specifically for "Anonymous access"?

Thank you again for all your help.

MHUK

 

[Marcs41]

http://ipaddress/Exchange/nameofUser

should do it from home, but do try

http://ipaddress/Exchange

to and try a login as administrator (temp. to test).

You connect with your domain-username and password.

 

[MHUK]

Still no luck for some reason.

I type in the URL and eventually it says Gateway Timeout the server could not be reached.

The IP address I have been using in the URL is that of the network server machine.

Yesterday in "IIS" in the "Default Website" properties I added the IP address of the network server machine for Port 80. The other thing that is was already in the list is "(All Unassigned)" also at Port 80.

Should I also set up the "DNS" IP address for port 80 in the list too? Is the DNS IP address the Domain IP address?

I suspect this may be why I can't access outside work because I am using the Network Server machine IP instead of the DNS IP.

Should I therefore, type in the URL

http://IPaddressOfDNS/Exchange/nameOfUser

?

Thank you for your help. Really appreciate your time to answer.

MHUK

 

[MHUK]

I forgot to mention I can access OWA fine inside work using

http://ipAddressOfNetworkServerMachine/Exchange

But not outside work. The gateway timeout error occurs.

Thank you again for your help.

 

[Marcs41]

I hope you are using your PUBLIC address when trying this from home?

Also, make very sure port 80 is forwarded to the INTERNAL IP of the Exchange Server.