Creating a 2nd OWA Virtual directory without Intergrated Windows authentication
Hi, I have a 2007 exchange SCC environment. My default OWA authentication is set to 'Intergrated windows authentication' which is great for my users as they do not have to type in their AD passwords when they go into webmail. Unfortunately I also need the ability for someone to log onto a different webmail account other than the one they are logged in with themselves. Some of our offices have PC's where people just drop in to check their e-mail and it's a real pain for them to have to log the current user off and login as themselves. I have expermented with the OWA URL and found that if the logged on user is a member of the manged users for someone elses webmail they can login using the folloing URL https://<SERVERNAME>/owa/<SMTPADDRESS> The downside to this is that I would have to allow everyone to manage anyone elses mailbox which I cannot do for security and logistic reasons. What I really want is a seperate internal URL fo OWA and virtual directory so I can disable 'Intergrated windows authentication' on that URL but leave the default one as it is. Is this the best way to do this or is there another way?
July 28th, 2008 12:56pm

After much head scratching I have figured out how to do this. Go to Exchange 2007 server and open IISCreate a websiteat the same level as "default web site" Call it "OWA2" or whateverSelectdefault settings (c:\inetweb\wwwroot, read & run script, default.htm...) Select a different port number for TCP and SSL eg 81 and 444 Open PowerShell and run the follow commandlet:New-OWAVirtualDirectory -Name "owa" -WebSiteName "OWA2" This creates the new site and should show up in the Exchange console Server Configuration/client access/outlook web access tab. Your new URL should be of the format https://servername:444/owaif it is an SSL site. Remember to addany SSLcertificates into the new OWA2 webpage that you use for the rest of exchange. Make sure to check the correct authentication option in the Exchange console and in the new IIS site. In my case untick Windows Intergrated authentication. You then have two seperate URL's for OWA, one that logs in the current user and one which can be used to log onto someone else's webmail without logging off the current user.
Free Windows Admin Tool Kit Click here and download it now
July 29th, 2008 6:58pm

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics