Microsoft KB Archive/823486

= Administrative and registry key settings for Exchange Server 2003 Outlook Web Access =

PSS ID Number: 823486

Article Last Modified on 6/24/2004

-

The information in this article applies to:


 * Microsoft Exchange Server 2003 Enterprise Edition
 * Microsoft Exchange Server 2003 Standard Edition
 * Microsoft Windows Small Business Server 2003, Premium Edition
 * Microsoft Windows Small Business Server 2003, Standard Edition

-





Important This article contains information about modifying the registry. Before you modify the registry, make sure to back it up and make sure that you understand how to restore the registry if a problem occurs. For information about how to back up, restore, and edit the registry, click the following article number to view the article in the Microsoft Knowledge Base:

256986 Description of the Microsoft Windows Registry



SUMMARY
This article describes new administrative and registry key settings for Microsoft Exchange Server 2003 Outlook Web Access.



MORE INFORMATION
Outlook Web Access in Exchange 2003 has several new features that include the following items:
 * Forms based authentication
 * Outlook Web Access cookie time-out
 * Attachment blocking

Use the following procedures to configure these new features.

Forms Based Authentication
Note When you enable forms based authentication, you may receive the following message about Secure Sockets Layer (SSL) connection requirements:

Forms based authentication requires clients to use a SSL connection. If SSL encryption is not offloaded to another source, complete the following steps:
 * Configure SSL
 * Restart the IIS service

For more information about how to enable Secure Sockets Layer (SSL), contact Microsoft Product Support Services.



To enable forms based authentication, follow these steps:
 * 1) Start Exchange System Manager, and then expand the Servers container.
 * 2) Expand Protocols under the Exchange 2003 computer where you want to enable forms based authentication.
 * 3) Expand HTTP, right-click Exchange Virtual Server, and then click Properties.
 * 4) On the Exchange Virtual Server properties page, click the Settings tab, and then click to select the Enable Forms Based Authentication for Outlook Web Access check box.
 * 5) Click Apply, and then click OK.

Outlook Web Access Cookie Time-out
To set the Outlook Web Access cookie time-out value, follow these steps. Warning If you use Registry Editor incorrectly, you may cause serious problems that may require you to reinstall your operating system. Microsoft cannot guarantee that you can solve problems that result from using Registry Editor incorrectly. Use Registry Editor at your own risk.  Click Start, click Run, type Regedit in the Open box, and then click OK. Locate and then click the following registry key:

 To modify the time interval for public clients:  On the Edit menu, point to New, and then click DWORD Value. Type PublicClientTimeout . Right-click the PublicClientTimeout DWORD value, and then click Modify.</li> In the Base window, click the button next to Decimal.</li> In the Value Data field, type a value (in minutes) between 1 and 43200 (43200 is 30 days) that is the number of minutes for timeout. If you do not set a value, a value of 15 is assumed.

Note The maximum possible value is 43200.

Important You must start IIS for the changes to take effect. Also, if you set the TrustedClientTimeout value to a value that is lower than PublicClientTimeout, the TrustedClientTimeout value will default to be equal to the PublicClientTimeout value. Likewise, if you set the PublicClientTimeout value to a value that is greater than the TrustedClientTimeout value, the TrustedClientTimeout value will default to be equal to the PublicClientTimeout value.</li> Click OK.</li></ol> </li> To modify the trusted client time-out value: <ol style="list-style-type: lower-alpha;"> On the Edit menu, point to New, and then click DWORD Value.</li> Type TrustedClientTimeout .</li> Right-click the TrustedClientTimeout DWORD value, and then click Modify.</li> In the Base window, click the button that is next to Decimal.</li> In the Value Data field, type a value (in minutes) between 1 and 43200 (43200 is 30 days) that is the number of minutes for timeout. If you do not set a value, a value of 1440 is assumed.

Note The maximum possible value is 43200 for 30 days.

Important You must restart IIS for the changes to take effect.</li> Click OK.</li></ol> </li> Open a command prompt, type net stop w3svc, and then press ENTER.</li> After the services stop, type net start w3svc, and then press ENTER.</li></ol>

Attachment Blocking
To enable attachment blocking, follow these steps: <ol> Click Start, click Run, type Regedit in the Open box, and then click OK.</li> Locate and then click the following registry key: 

</li> On the Edit menu, point to New, and then click DWORD Value.</li> <li>Type DisableAttachments .</li> <li>Right-click the DisableAttachments DWORD value, and then click Modify.</li> <li>In the Base window, click the button next to Decimal.</li> <li>In the Value Data field, type one of the following numbers: <ul> <li>To permit all attachments, type 0 .</li> <li>To permit no attachments, type 1 .</li> <li>To permit attachments from back-end servers only, type 2 .</li></ul> </li> <li>Click OK.</li> <li>Open a command prompt, type net stop w3svc, and then press ENTER.</li> <li>After the services stop, type net start w3svc, and then press ENTER.</li></ol>

Note You can also specify a list of front-end servers that are exceptions to the option for permitting attachments only from back-end servers. This feature lets users who connect through the specified front-end servers accept attachments.

For additional information about how to specify front-end servers that permit attachment handling, visit the following Microsoft Web site:

http://www.microsoft.com/technet/prodtechnol/exchange/2003/library/cliaccgde.mspx

Additional query words: XADM

Keywords: kbtshoot kbinfo KB823486

Technology: kbExchangeSearch kbExchangeServ2003Ent kbExchangeServ2003Search kbExchangeServ2003St kbSBServ2003Pre kbSBServ2003Search kbSBServ2003St kbSBServSearch

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© 2004 Microsoft Corporation. All rights reserved.