|
|
|
date: Fri, 7 Oct 2005 11:09:01 -0700,
group: microsoft.public.exchange2000.clients
back
RE: OWA Access Denied When clicking on Folders
Hi,
Thank you for your post!
I understand that you get Access Denied (401) when you click the Folders
button. Please correct me if I am off base.
Since it is a permission issue, I suggest you try the following steps first:
1. Open IIS manager console.
2. Right click Exchange virtual directory and click Properties.
3. Click Directory Security tab and click Edit in the Anonymous access and
Authentication control field.
4. Click Edit in the "Authenticated access" area.
5. Put the Domain NetBIOS name in the Domain Name field.
6. Repeat the step 2-6 for Public virtual directory.
If the problem persists, please help me collect the IIS log for further
analysis:
a. Open IIS MMC, right click Default Web Site and then click Properties.
b. Click Website tab and then check Enable logging.
c. Stop the Default Website and rename the existing IIS log files under
C:\WINDOWS\system32\LogFiles.
d. Restart the Default Website and browse OWA to reproduce the problem.
e. Go to the following folder: C:\WINDOWS\system32\LogFiles.
f. Send me the log file to my working email address wensun@microsoft.com.
Should you have any concern, please feel free to let me know. I am glad to
be of assistance!
Thanks & regards,
Wen Sun
Microsoft Online Partner Support
MCP, MCP+I, MCSE,
Get Secure! - www.microsoft.com/security
====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
====================================================
Business-Critical Phone Support (BCPS) provides you with technical phone
support at no charge during critical LAN outages or "business down"
situations. This benefit is available 24 hours a day, 7 days a week to all
Microsoft technology partners in the United States and Canada.
This and other support options are available here:
BCPS:
https://partner.microsoft.com/US/technicalsupport/supportoverview/40010469
Others: https://partner.microsoft.com/US/technicalsupport/supportoverview/
If you are outside the United States, please visit our International
Support page:
http://support.microsoft.com/default.aspx?scid=%2finternational.aspx.
This posting is provided "AS IS" with no warranties, and confers no rights.
date: Mon, 10 Oct 2005 02:07:24 GMT
author: (Wen Sun [MSFT])
RE: OWA Access Denied When clicking on Folders
It appears that the security has changed on the Public Folders as they are no
longer displayed in OWA. I'm trying to go through the security settings on
the Public Folders in System Manager but so far everything looks correct as
I've compared it to another clients server of the same setup.
Is there a tool to reset the security on the Public Folders to default?
What are the default settings?
JTT
""Wen Sun [MSFT]"" wrote:
> Hi,
>
> Thank you for your post!
>
> I understand that you get Access Denied (401) when you click the Folders
> button. Please correct me if I am off base.
>
> Since it is a permission issue, I suggest you try the following steps first:
>
> 1. Open IIS manager console.
> 2. Right click Exchange virtual directory and click Properties.
> 3. Click Directory Security tab and click Edit in the Anonymous access and
> Authentication control field.
> 4. Click Edit in the "Authenticated access" area.
> 5. Put the Domain NetBIOS name in the Domain Name field.
> 6. Repeat the step 2-6 for Public virtual directory.
>
> If the problem persists, please help me collect the IIS log for further
> analysis:
>
> a. Open IIS MMC, right click Default Web Site and then click Properties.
> b. Click Website tab and then check Enable logging.
> c. Stop the Default Website and rename the existing IIS log files under
> C:\WINDOWS\system32\LogFiles.
> d. Restart the Default Website and browse OWA to reproduce the problem.
> e. Go to the following folder: C:\WINDOWS\system32\LogFiles.
> f. Send me the log file to my working email address wensun@microsoft.com.
>
> Should you have any concern, please feel free to let me know. I am glad to
> be of assistance!
> Thanks & regards,
> Wen Sun
> Microsoft Online Partner Support
> MCP, MCP+I, MCSE,
> Get Secure! - www.microsoft.com/security
> ====================================================
> When responding to posts, please "Reply to Group" via your newsreader so
> that others may learn and benefit from your issue.
> ====================================================
> Business-Critical Phone Support (BCPS) provides you with technical phone
> support at no charge during critical LAN outages or "business down"
> situations. This benefit is available 24 hours a day, 7 days a week to all
> Microsoft technology partners in the United States and Canada.
>
> This and other support options are available here:
> BCPS:
> https://partner.microsoft.com/US/technicalsupport/supportoverview/40010469
> Others: https://partner.microsoft.com/US/technicalsupport/supportoverview/
>
> If you are outside the United States, please visit our International
> Support page:
> http://support.microsoft.com/default.aspx?scid=%2finternational.aspx.
> This posting is provided "AS IS" with no warranties, and confers no rights.
>
>
date: Mon, 10 Oct 2005 08:39:06 -0700
author: JTT alias
RE: OWA Access Denied When clicking on Folders
Hi,
Thanks for the update!
If the Public Folder is absent from OWA, I think it is a permission issue
and we can globally add the permissions using the tool PFDavAdmin utility.
Note: This tool is available via the following link:
ftp://ftp.microsoft.com/PSS/Tools/Exchange%20Support%20Tools/PFDavAdmin/
PFDavAdmin 2.3 must be run on a computer that has the .NET Framework 1.1
installed, running Windows 2000, Windows XP, or Windows 2003. It must also
be a member of the forest in which the target Exchange 2003 server resides.
The user running the tool must be logged into windows as an Exchange
Administrator.
Let's try the steps below to reset the permission:
1. Download and run the PFDavAdmin utility, click File, click Connect.
2. Type the Exchange Server that hosts the Public Folder, then choose
Public
Folders and then click OK.
3. Right click Public Folders and then click Propagate folder ACEs. Click
OK when the warning prompts
4. Add the user account that you do want to grant the permission and
specify the permissions roles.
5. Then click OK and select the checkboxes before the newly added users.
6. Click OK. Wait until all the folders'' permission has been changed.
7. Do you have the same problem using this account in OWA?
I hope the above information helps. Should you have any concern, please
feel free to let me know. I am glad to be of assistance!
Have a good day!
Thanks & regards,
Wen Sun
Microsoft Online Partner Support
MCP, MCP+I, MCSE,
Get Secure! - www.microsoft.com/security
====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
====================================================
Business-Critical Phone Support (BCPS) provides you with technical phone
support at no charge during critical LAN outages or "business down"
situations. This benefit is available 24 hours a day, 7 days a week to all
Microsoft technology partners in the United States and Canada.
This and other support options are available here:
BCPS:
https://partner.microsoft.com/US/technicalsupport/supportoverview/40010469
Others: https://partner.microsoft.com/US/technicalsupport/supportoverview/
If you are outside the United States, please visit our International
Support page:
http://support.microsoft.com/default.aspx?scid=%2finternational.aspx.
This posting is provided "AS IS" with no warranties, and confers no rights.
date: Tue, 11 Oct 2005 09:04:12 GMT
author: (Wen Sun [MSFT])
RE: OWA Access Denied When clicking on Folders
Wen-
Sorry I got pulled off on another emergency so I hadn't had time to try
this. When I do run the utility as you instrcuted I get prompted with the
following prompt:
"Since there is no actual root folder to propagate permissions from, you
must first create a DACL from which you can propagate ACE's. You will now be
presented with a folder permissions dialog for that purpose."
So I selected OK, when in here when I click OK nothing happens, so I tried
the Repair Roles option and it ran through some things but this still did not
fix the problem.
I want to get the default security settings that are set when we install
Exchange back. I then went to another Exchange server that we have for a
different site and compared the settings between the two servers using this
util and they match. Any thing else we can try?
Thanks
JTT
""Wen Sun [MSFT]"" wrote:
> Hi,
>
> Did my explanation in my previous post address you problem regarding the
> Public Folder issue? Please drop me a note if you need further assistance.
>
> Thank you for your time.
> Have a good day!
>
> Thanks & regards,
>
> Wen Sun
> Microsoft Online Partner Support
> MCP, MCP+I, MCSE,
>
> Get Secure! - www.microsoft.com/security
>
> This posting is provided "AS IS" with no warranties, and confers no rights.
>
>
date: Fri, 14 Oct 2005 11:52:03 -0700
author: JTT alias
RE: OWA Access Denied When clicking on Folders
Hi,
Thanks for the reply!
Basically, the message you received is an expected behavior. I am not sure
how you reset the permission, but I would like to try the following steps
to reset the default permission:
1. Run the PFDavAdmin utility, click File, click Connect.
2. Type the Exchange Server that hosts the Public Folder, then choose
Public Folders and then click OK.
3. Right click Public Folders and then click Propagate folder ACEs. Click
OK when the warning prompts.
Note: The default permission should be as following:
Everyone: None
NT Authority\Anonymous logon: None
4. You can remove the user accounts by the steps below:
a. Click Add and browse the user account then click OK.
b. Add all the user accounts you need to remove and then click OK.
c. Check the accounts you want to remove and choose remove in the bottom
section then click OK.
Hope it helps!
Thanks & regards,
Wen Sun
Microsoft Online Partner Support
MCP, MCP+I, MCSE,
Get Secure! - www.microsoft.com/security
====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
====================================================
Business-Critical Phone Support (BCPS) provides you with technical phone
support at no charge during critical LAN outages or "business down"
situations. This benefit is available 24 hours a day, 7 days a week to all
Microsoft technology partners in the United States and Canada.
This and other support options are available here:
BCPS:
https://partner.microsoft.com/US/technicalsupport/supportoverview/40010469
Others: https://partner.microsoft.com/US/technicalsupport/supportoverview/
If you are outside the United States, please visit our International
Support page:
http://support.microsoft.com/default.aspx?scid=%2finternational.aspx.
This posting is provided "AS IS" with no warranties, and confers no rights.
date: Mon, 17 Oct 2005 10:31:51 GMT
author: (Wen Sun [MSFT])
RE: OWA Access Denied When clicking on Folders
Went through the steps and applied the settings and I get the same error when
opening up OWA. The only accounts setup up are Everyone and NT
Authority\Anonymous both set to none.
I went into IIS for another issue on this server and noticed that my public,
exchange, and exadmin all haver Error markings and I'm not sure the cause of
that so I ran the permission Wizard on the public but that did not help with
either issue.
Anything else I can check?
""Wen Sun [MSFT]"" wrote:
> Hi,
>
> Thanks for the reply!
>
> Basically, the message you received is an expected behavior. I am not sure
> how you reset the permission, but I would like to try the following steps
> to reset the default permission:
>
> 1. Run the PFDavAdmin utility, click File, click Connect.
> 2. Type the Exchange Server that hosts the Public Folder, then choose
> Public Folders and then click OK.
> 3. Right click Public Folders and then click Propagate folder ACEs. Click
> OK when the warning prompts.
> Note: The default permission should be as following:
> Everyone: None
> NT Authority\Anonymous logon: None
> 4. You can remove the user accounts by the steps below:
> a. Click Add and browse the user account then click OK.
> b. Add all the user accounts you need to remove and then click OK.
> c. Check the accounts you want to remove and choose remove in the bottom
> section then click OK.
>
> Hope it helps!
>
> Thanks & regards,
>
> Wen Sun
> Microsoft Online Partner Support
> MCP, MCP+I, MCSE,
>
> Get Secure! - www.microsoft.com/security
>
> ====================================================
> When responding to posts, please "Reply to Group" via your newsreader so
> that others may learn and benefit from your issue.
> ====================================================
> Business-Critical Phone Support (BCPS) provides you with technical phone
> support at no charge during critical LAN outages or "business down"
> situations. This benefit is available 24 hours a day, 7 days a week to all
> Microsoft technology partners in the United States and Canada.
>
> This and other support options are available here:
> BCPS:
> https://partner.microsoft.com/US/technicalsupport/supportoverview/40010469
>
> Others: https://partner.microsoft.com/US/technicalsupport/supportoverview/
>
> If you are outside the United States, please visit our International
> Support page:
> http://support.microsoft.com/default.aspx?scid=%2finternational.aspx.
>
> This posting is provided "AS IS" with no warranties, and confers no rights.
>
>
date: Tue, 18 Oct 2005 14:41:44 -0700
author: JTT alias
RE: OWA Access Denied When clicking on Folders
Hi,
Thank you for your update!
I think the two behaviors are expected as the default permission on the
Public Folder is only set None to Everyone and NT Authority\Anonymous.
Regarding the second question, it is normal behavior as you are running in
Exchange 2000. It occurs because the World Wide Web service (W3SVC) starts
before the MSExchangeIS service. If you do not want to see the stop sign,
you can simply restart the IIS service. For more information, please refer
to the following Knowledge Base Article:
XADM: W3SVC Logs Event ID 101 in the System Event Log
http://support.microsoft.com/?id=259373
Hope it helps!
Thanks & regards,
Wen Sun
Microsoft Online Partner Support
MCP, MCP+I, MCSE,
Get Secure! - www.microsoft.com/security
====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
====================================================
Business-Critical Phone Support (BCPS) provides you with technical phone
support at no charge during critical LAN outages or "business down"
situations. This benefit is available 24 hours a day, 7 days a week to all
Microsoft technology partners in the United States and Canada.
This and other support options are available here:
BCPS:
https://partner.microsoft.com/US/technicalsupport/supportoverview/40010469
Others: https://partner.microsoft.com/US/technicalsupport/supportoverview/
If you are outside the United States, please visit our International
Support page:
http://support.microsoft.com/default.aspx?scid=%2finternational.aspx.
This posting is provided "AS IS" with no warranties, and confers no rights.
date: Thu, 20 Oct 2005 12:41:45 GMT
author: (Wen Sun [MSFT])
RE: OWA Access Denied When clicking on Folders
Hi,
Thanks for keeping me update!
At this point, I would like to collect some information to determine the
root cause:
1. MPSReport
Please go to the following link to download and collect the MPS report for
the Exchange issue. We will perform further research based on the MPS
report.
"http://download.microsoft.com/download/b/b/1/bb139fcb-4aac-4fe5-a579-30b0bd
915706/MPSRPT_Exchange.EXE"
2. Screenshot of the message.
3. IIS Log again:
a. Open IIS MMC, right click Default Web Site and then click Properties.
b. Click Website tab and then check Enable logging.
c. Stop the Default Website and rename the existing IIS log files under
C:\WINDOWS\system32\LogFiles.
d. Restart the Default Website and browse OWA to reproduce the problem.
e. Go to the following folder: C:\WINDOWS\system32\LogFiles.
Please send me the log file to my working email address
wensun@microsoft.com.
As always, I thank you for your patience and I am awaiting your reply!
Thanks & regards,
Wen Sun
Microsoft Online Partner Support
MCP, MCP+I, MCSE,
Get Secure! - www.microsoft.com/security
====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
====================================================
Business-Critical Phone Support (BCPS) provides you with technical phone
support at no charge during critical LAN outages or "business down"
situations. This benefit is available 24 hours a day, 7 days a week to all
Microsoft technology partners in the United States and Canada.
This and other support options are available here:
BCPS:
https://partner.microsoft.com/US/technicalsupport/supportoverview/40010469
Others: https://partner.microsoft.com/US/technicalsupport/supportoverview/
If you are outside the United States, please visit our International
Support page:
http://support.microsoft.com/default.aspx?scid=%2finternational.aspx.
This posting is provided "AS IS" with no warranties, and confers no rights.
date: Tue, 25 Oct 2005 13:44:07 GMT
author: (Wen Sun [MSFT])
RE: OWA Access Denied When clicking on Folders
Hi,
Unfortunately, I still did not get your email. Anyway, I have created a
workspace for you to transfer the log file. Please follow the steps below:
1. Click the link below:
https://sftasia.one.microsoft.com/choosetransfer.aspx?key=024feaf8-1927-4b81
-b067-9b2448002fad)
2. Please select Send Files to Microsoft, and then enter the password:
[CEO2vQc)w1
3. Click Go, Click Browse, locate the file you wish to send and then click
Upload.
I am awaiting your reply!
Thanks & regards,
Wen Sun
Microsoft Online Partner Support
MCP, MCP+I, MCSE,
Get Secure! - www.microsoft.com/security
====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
====================================================
Business-Critical Phone Support (BCPS) provides you with technical phone
support at no charge during critical LAN outages or "business down"
situations. This benefit is available 24 hours a day, 7 days a week to all
Microsoft technology partners in the United States and Canada.
This and other support options are available here:
BCPS:
https://partner.microsoft.com/US/technicalsupport/supportoverview/40010469
Others: https://partner.microsoft.com/US/technicalsupport/supportoverview/
If you are outside the United States, please visit our International
Support page:
http://support.microsoft.com/default.aspx?scid=%2finternational.aspx.
This posting is provided "AS IS" with no warranties, and confers no rights.
date: Wed, 02 Nov 2005 10:46:21 GMT
author: (Wen Sun [MSFT])
RE: OWA Access Denied When clicking on Folders
Wen-
I uploaded exchange.zip. I had to remove the ) at the end of the HTML you
listed, but the password still let me in so I uploaded it anyway. It kept
telling me the URL was incorrect with the end ).
JTT
""Wen Sun [MSFT]"" wrote:
> Hi,
>
> Unfortunately, I still did not get your email. Anyway, I have created a
> workspace for you to transfer the log file. Please follow the steps below:
>
> 1. Click the link below:
> https://sftasia.one.microsoft.com/choosetransfer.aspx?key=024feaf8-1927-4b81
> -b067-9b2448002fad)
>
> 2. Please select Send Files to Microsoft, and then enter the password:
>
> [CEO2vQc)w1
>
> 3. Click Go, Click Browse, locate the file you wish to send and then click
> Upload.
>
> I am awaiting your reply!
>
> Thanks & regards,
>
> Wen Sun
> Microsoft Online Partner Support
> MCP, MCP+I, MCSE,
>
> Get Secure! - www.microsoft.com/security
>
> ====================================================
> When responding to posts, please "Reply to Group" via your newsreader so
> that others may learn and benefit from your issue.
> ====================================================
> Business-Critical Phone Support (BCPS) provides you with technical phone
> support at no charge during critical LAN outages or "business down"
> situations. This benefit is available 24 hours a day, 7 days a week to all
> Microsoft technology partners in the United States and Canada.
>
> This and other support options are available here:
> BCPS:
> https://partner.microsoft.com/US/technicalsupport/supportoverview/40010469
>
> Others: https://partner.microsoft.com/US/technicalsupport/supportoverview/
>
> If you are outside the United States, please visit our International
> Support page:
> http://support.microsoft.com/default.aspx?scid=%2finternational.aspx.
>
> This posting is provided "AS IS" with no warranties, and confers no rights.
>
>
>
>
date: Thu, 3 Nov 2005 09:17:32 -0800
author: JTT alias
RE: OWA Access Denied When clicking on Folders
Hi,
I have gone through the log files you uploaded and it seems that this issue
occurred because there is no authentication method specified on the Public
Folder (there is a 403 error when you access Public virtual directory).
Please try the following steps to see if it works:
1. Open IIS manager console.
2. Right click Public and click Properties.
3. Click Directory Security tab and click Edit in the "Anonymous Access"
area.
4. Click to select Basic Authentication and Integrated Windows
Authentication.
5. Test the issue again.
If the problem persists, I recommend you reset the Exchange related virtual
directories according to the following Knowledge Base Article:
[More Information]
Troubleshooting OWA when the contents frame displays "Loading"
http://support.microsoft.com/?id=280823
Hope it helps!
Thanks & regards,
Wen Sun
Microsoft Online Partner Support
MCP, MCP+I, MCSE,
Get Secure! - www.microsoft.com/security
====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
====================================================
Business-Critical Phone Support (BCPS) provides you with technical phone
support at no charge during critical LAN outages or "business down"
situations. This benefit is available 24 hours a day, 7 days a week to all
Microsoft technology partners in the United States and Canada.
This and other support options are available here:
BCPS:
https://partner.microsoft.com/US/technicalsupport/supportoverview/40010469
Others: https://partner.microsoft.com/US/technicalsupport/supportoverview/
If you are outside the United States, please visit our International
Support page:
http://support.microsoft.com/default.aspx?scid=%2finternational.aspx.
This posting is provided "AS IS" with no warranties, and confers no rights.
date: Mon, 07 Nov 2005 09:17:48 GMT
author: (Wen Sun [MSFT])
RE: OWA Access Denied When clicking on Folders
Hi,
Thanks for the update and I am glad to hear the original problem was fixed
by resetting Exchange virtual directories. As you indicated that the
folders disappear from OWA now, can you view them in Outlook and can you
see the folder hierachy in OWA? If you can see them in Outlook, please send
me the IIS log again. For your convenience, I include the steps below:
a. Open IIS MMC, right click Default Web Site and then click Properties.
b. Click Website tab and then check Enable logging.
c. Stop the Default Website and rename the existing IIS log files under
C:\WINDOWS\system32\LogFiles.
d. Restart the Default Website and reproduce the problem.
e. Go to the following folder: C:\WINDOWS\system32\LogFiles.
f. Send me the log file to my working email address wensun@microsoft.com.
I thank you for your time and I am awaiting your reply?
Thanks & regards,
Wen Sun
Microsoft Online Partner Support
MCP, MCP+I, MCSE,
Get Secure! - www.microsoft.com/security
====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
====================================================
Business-Critical Phone Support (BCPS) provides you with technical phone
support at no charge during critical LAN outages or "business down"
situations. This benefit is available 24 hours a day, 7 days a week to all
Microsoft technology partners in the United States and Canada.
This and other support options are available here:
BCPS:
https://partner.microsoft.com/US/technicalsupport/supportoverview/40010469
Others: https://partner.microsoft.com/US/technicalsupport/supportoverview/
If you are outside the United States, please visit our International
Support page:
http://support.microsoft.com/default.aspx?scid=%2finternational.aspx.
This posting is provided "AS IS" with no warranties, and confers no rights.
date: Mon, 28 Nov 2005 08:32:36 GMT
author: (Wen Sun [MSFT])
RE: OWA Access Denied When clicking on Folders
Dear Jason,
Can you see the Public Folder in Exchange System Manager? If you are unable
to view these folders in Outlook, it should not be an OWA issue. Did you
make any change except resetting Exchange virtual directory? In addition,
can you see those folders in ADUC by the following steps:
1. Open ADUC.
2. Click View-> Advance Features.
3. Expand "Microsoft Exchange System Objects" container, can you view the
folders in the right pane?
You may make a screenshot and send it to my working email address:
wensun@microsoft.com.
Thanks & regards,
Wen Sun
Microsoft Online Partner Support
MCP, MCP+I, MCSE,
Get Secure! - www.microsoft.com/security
====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
====================================================
Business-Critical Phone Support (BCPS) provides you with technical phone
support at no charge during critical LAN outages or "business down"
situations. This benefit is available 24 hours a day, 7 days a week to all
Microsoft technology partners in the United States and Canada.
This and other support options are available here:
BCPS:
https://partner.microsoft.com/US/technicalsupport/supportoverview/40010469
Others: https://partner.microsoft.com/US/technicalsupport/supportoverview/
If you are outside the United States, please visit our International
Support page:
http://support.microsoft.com/default.aspx?scid=%2finternational.aspx.
This posting is provided "AS IS" with no warranties, and confers no rights.
________________________________________
From: Jason T. Trafny [mailto:jasont@intermountainit.com]
Sent: Wednesday, 7 December 2005 1:30 PM
To: Wen Sun
Subject: Subject: RE: OWA Access Denied When clicking on Folders
Wen-
Attached is the log file you requested. We cannot see the public folders
through OWA or Outlook. Let me know what to try next.
Thanks
JTT
date: Thu, 08 Dec 2005 12:04:37 GMT
author: (Wen Sun [MSFT])
|
|