Unable to login into Exchange 2003 OWA
Hi, When i am trying to login into Exchange 2003 SP2 OWA (IPAddress\exchange), it's not accepting the user ID/password & keep prompting for UID/Password. This is happening for all users. these maiboxes are moved from exchange 2000 server. Basic & Windows integrated authentication are selected on Exchange Virtual Directory in Exchange. Kindly let me know where can i check the OWA login logs or what could be the reason of this problem. Dhiraj
May 26th, 2010 1:09pm

Assuming OWA is enabled for the users etc and you have successfully connected to some mailboxes in the "new" environment have you tried specifying the mail alias or primary SMTP address in the url? (Assuming below that IIS is not configured to only allow secure access) ie - http://<ip address>/exchange/fred or http://<ip address>/exchange/fred@corp.com Seen a similar issue recently and the mail alias didn't work, but their smtp address did Didn't get time to investigate a "why" in my case the work around was enough for me at the time.
Free Windows Admin Tool Kit Click here and download it now
May 26th, 2010 5:25pm

Thanks for your reply. tried both options but still the same problem. it's not accepting the User ID/Password. OWA is enabled for all users & tried domain\User ID. Dhiraj
May 27th, 2010 8:31am

Hi, By default, the OWA IIS logs are located in c:\Windows\system32\Logfiles\W3SVC1 You can also find the directory in Default Web Site-> Properties And more information about : Troubleshooting Outlook Web Access logon failures in Exchange 2000 and in Exchange 2003 http://support.microsoft.com/kb/327843Frank Wang
Free Windows Admin Tool Kit Click here and download it now
May 27th, 2010 11:26am

Thanks, Frank i have gone through the KB & everything is as per requirement. but still the same problem. getting below messages in IIS logs. unable to track any error here. #Fields: date time s-sitename s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs(User-Agent) sc-status sc-substatus sc-win32-status 2010-05-27 05:28:44 W3SVC1 192.168.1.1 GET /exchange/albert.smith - 80 - 192.168.1.1 Mozilla/4.0+(compatible;+MSIE+8.0;+Windows+NT+5.2;+Trident/4.0;+.NET+CLR+1.1.4322) 401 2 2148074254 2010-05-27 05:28:53 W3SVC1 192.168.1.1 GET /exchange/albert.smith - 80 - 192.168.1.1 Mozilla/4.0+(compatible;+MSIE+8.0;+Windows+NT+5.2;+Trident/4.0;+.NET+CLR+1.1.4322) 401 1 0 2010-05-27 05:28:53 W3SVC1 192.168.1.1 GET /exchange/albert.smith - 80 ap\albert.smith 192.168.1.1 Mozilla/4.0+(compatible;+MSIE+8.0;+Windows+NT+5.2;+Trident/4.0;+.NET+CLR+1.1.4322) 302 0 0 2010-05-27 05:28:53 W3SVC1 192.168.1.1 GET /exchange/albert.smith/ - 80 - 192.168.1.1 Mozilla/4.0+(compatible;+MSIE+8.0;+Windows+NT+5.2;+Trident/4.0;+.NET+CLR+1.1.4322) 401 2 2148074254 2010-05-27 05:28:53 W3SVC1 192.168.1.1 GET /exchange/albert.smith/ - 80 - 192.168.1.1 Mozilla/4.0+(compatible;+MSIE+8.0;+Windows+NT+5.2;+Trident/4.0;+.NET+CLR+1.1.4322) 401 1 0 2010-05-27 05:28:53 W3SVC1 192.168.1.1 GET /exchange/albert.smith/ - 80 - 192.168.1.1 Mozilla/4.0+(compatible;+MSIE+8.0;+Windows+NT+5.2;+Trident/4.0;+.NET+CLR+1.1.4322) 401 1 2148074248 2010-05-27 05:29:02 W3SVC1 192.168.1.1 GET /exchange/albert.smith@domain.com - 80 - 192.168.1.1 Mozilla/4.0+(compatible;+MSIE+8.0;+Windows+NT+5.2;+Trident/4.0;+.NET+CLR+1.1.4322) 401 2 2148074254 2010-05-27 05:29:02 W3SVC1 192.168.1.1 GET /exchange/albert.smith@domain.com - 80 - 192.168.1.1 Mozilla/4.0+(compatible;+MSIE+8.0;+Windows+NT+5.2;+Trident/4.0;+.NET+CLR+1.1.4322) 401 1 0 2010-05-27 05:29:02 W3SVC1 192.168.1.1 GET /exchange/albert.smith@domain.com - 80 ap\albert.smith 192.168.1.1 Mozilla/4.0+(compatible;+MSIE+8.0;+Windows+NT+5.2;+Trident/4.0;+.NET+CLR+1.1.4322) 302 0 0 2010-05-27 05:29:02 W3SVC1 192.168.1.1 GET /exchange/albert.smith@domain.com/ - 80 - 192.168.1.1 Mozilla/4.0+(compatible;+MSIE+8.0;+Windows+NT+5.2;+Trident/4.0;+.NET+CLR+1.1.4322) 401 2 2148074254 2010-05-27 05:29:02 W3SVC1 192.168.1.1 GET /exchange/albert.smith@domain.com/ - 80 - 192.168.1.1 Mozilla/4.0+(compatible;+MSIE+8.0;+Windows+NT+5.2;+Trident/4.0;+.NET+CLR+1.1.4322) 401 1 0 2010-05-27 05:29:02 W3SVC1 192.168.1.1 GET /exchange/albert.smith@domain.com/ - 80 - 192.168.1.1 Mozilla/4.0+(compatible;+MSIE+8.0;+Windows+NT+5.2;+Trident/4.0;+.NET+CLR+1.1.4322) 401 1 2148074248 2010-05-27 05:29:08 W3SVC1 192.168.1.1 GET /exchange/albert.smith@domain.com/ - 80 - 192.168.1.1 Mozilla/4.0+(compatible;+MSIE+8.0;+Windows+NT+5.2;+Trident/4.0;+.NET+CLR+1.1.4322) 401 1 0 2010-05-27 05:29:08 W3SVC1 192.168.1.1 GET /exchange/albert.smith@domain.com/ - 80 - 192.168.1.1 Mozilla/4.0+(compatible;+MSIE+8.0;+Windows+NT+5.2;+Trident/4.0;+.NET+CLR+1.1.4322) 401 1 2148074248 Dhiraj
May 27th, 2010 3:23pm

Hi Frank, Any idea!!!whta else could be the reason. Dhiraj
Free Windows Admin Tool Kit Click here and download it now
June 1st, 2010 8:25am

Hi Dhiraj, About the error logs: 401.2 - Denied by server configuration 401.1 - Denied by Invalid User Credentials 302 - Object moved Did you try to create a new test user and log on to OWA? If you just enable basic auth, what's the results? More information: Troubleshooting HTTP 401 errors in IIS http://support.microsoft.com/kb/907273 Frank Wang
June 2nd, 2010 5:43am

Hi Frank, Same is happening for all users. It's even not accepting password. keep prompting. Tried to recreate Exchange virtual folders as well, but same. Kindly let me know how to troubleshoot it. Due to this Outlook Calender Free/Busy status also not working. Dhiraj
Free Windows Admin Tool Kit Click here and download it now
January 28th, 2011 5:45am

Hi Dhiraj, Please follow this guide to reset your virtual directories with IIS, this will eliminate any "unexpected" issues: http://support.microsoft.com/kb/883380 - follow method 1, most easy Good luck ilantz
February 3rd, 2011 8:23am

Thanks ilantz, Already tried to reset IIS Virtual Directories but no luck. Any other suggestion. Can we debug it with Netmon or any other log to resolve it. Dhiraj
Free Windows Admin Tool Kit Click here and download it now
February 4th, 2011 12:11am

If all fails, you might have to consider recreating the OWA virtual directory.
February 4th, 2011 12:29pm

Jose, As i have answered in my last post already tried to recreate them but same problem. Already deleted all Exch VDir's, checked all permissions, checked auth type as well on on Exchange VDir. but still no resolution Dhiraj
Free Windows Admin Tool Kit Click here and download it now
February 5th, 2011 10:12am

Hi Dhiraj, More questions :) How about enabling Form-Authentication? What about SSL/IP Restrictions settings for the virtual directories? Can you log-in while in LAN, from domain joined computer - using NTLM/Kerberos authentication ? ilantz
February 6th, 2011 3:49am

Hi ilantz, Form Based Authentication is disabled. no certificate is installed on this IIS hence SSL si disabled. i am able to login into domain with this ID. OWA is not working for all users who are having mailboxes on this server. in the same Exchange Admin group we have another four servers where OWA is working. only on this server it's not working. Dhiraj
Free Windows Admin Tool Kit Click here and download it now
February 6th, 2011 5:16am

Hi Dhiraj, Thanks for the update, can you verify that you can access mailboxes on the "problematic" server from another server? using http://goodserver/exchange/mailbox.to.test@domain.com If all fails i suggest you to consider re-building the server with disaster recovery installation, might solve it better to continue the troubleshooting... but then again.. i might be exaggerating... ilantz
February 6th, 2011 6:23am

Thanks ilantz, same advised given to me from another forum also to rebuild it. Can't take downtime to rebuild it only bcoz OWA is not working. I thought to take MS Experts help to debug this issue. Anybody have any idea to resolve it. Any Netmon trace or PCap to debug it. Dhiraj
Free Windows Admin Tool Kit Click here and download it now
February 7th, 2011 12:28am

Have you had a look at the following Microsoft kb article on 401 errors http://support.microsoft.com/kb/907273 There are some good debug tools for IIS errors linked on there. Cheers Phil
February 8th, 2011 5:24am

Not getting anything to resolve this issue. Getting below IIS Logs. As earlier mentioned by Frank it's going with three code only 401 1 / 401 2 / 302 but i am not getting the root cause of these errors. Getting below errors in W3SVC log file. 401 2 2148074254 401 1 2148074248 Tried with Wfetch in both Basic & NTLM Authentication & getting below errors. both are working on another server. NTLM : HTTP/1.1 401 Unauthorized\r\n Basic : HTTP/1.1 501 not implemented\r\n Dhiraj
Free Windows Admin Tool Kit Click here and download it now
February 18th, 2011 4:14am

Not getting anything to resolve this issue. Getting below IIS Logs. As earlier mentioned by Frank it's going with three code only 401 1 / 401 2 / 302 but i am not getting the root cause of these errors. 401 2 2148074254 401 1 2148074248 Dhiraj
February 18th, 2011 4:14am

Check the IIS process account if changed from IWAM and ISUR have access to the OWA directorys, if you've recreated them you may get this error. It seems like your basic authentication doesn't have access to the necessary files to allow you to pass the user creds. Again just something to have a look at. Cheers Phil
Free Windows Admin Tool Kit Click here and download it now
February 21st, 2011 4:42am

OWA, prompting password for three times & then showing Access Denied message. Not accepting user password. getting below errors in W3SVC logs. Tried so many things but nto getting the root cause of the problem / actual reason. 401 2 2148074254 : Denied by server configuration 401 1 0 : Denied by invalid user credentials 302 0 0 : Object Moved 401 1 2148074248 : Denied by invalid user credentials 404 0 2 : Lockdown policy prevents this request Dhiraj
February 28th, 2011 9:26am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics