Microsoft KB Archive/329938

= Cannot Use Outlook Web Access to Access an Exchange Server Installed on a Windows 2000 Cluster Node =

Article ID: 329938

Article Last Modified on 10/30/2006

-

APPLIES TO


 * Microsoft Windows 2000 Advanced Server

-



This article was previously published under Q329938





SYMPTOMS
Symptoms Exchange 2003 Setup on a cluster node that is running Windows 2000 with Kerberos Authentication enabled has a prerequisite that will prevent Setup from continuing unless you first:
 * Intall the hotfix that this article provides.

-or-
 * Install Windows 2000 Service Pack 4.

When you increase diagnostic logging on the server, you may receive the following event message in the Security log of the Event Viewer:

Event type: Failure Audit

Event source: Security

Category: Logon/Logoff

Event ID: 537

Date:

Time:

User: NT AUTHORITY\SYSTEM

Computer:

Description:

Logon Failure:

Reason: An unexpected error occurred during logon

User Name:

Domain:

Logon Type: 3

Logon Process: Kerberos

Authentication Package: Kerberos

Workstation Name: -



CAUSE
This behavior occurs because Kerberos authentication is turned on. As a result, an authentication issue occurs between Internet Information Services (IIS) 5.0 and the Exchange virtual server's IIS resources.



The W3Svc.exe service is not cluster-aware. As a result, it supplies a non-null credential to obtain a credentials handle. This is incorrect in this case, because the server cluster's credentials are stored in the logon session. When the W3Svc.exe service supplies an explicit credential, the cluster's credentials cannot be used.



Service Pack Information
To resolve this problem, obtain the latest service pack for Microsoft Windows 2000. For additional information, click the following article number to view the article in the Microsoft Knowledge Base:

260910 How to Obtain the Latest Windows 2000 Service Pack

Hotfix Information
The following file is available for download from the Microsoft Download Center:

Download the Windows2000-KB329938-x86-ENU.exe package now. For additional information about how to download Microsoft Support files, click the following article number to view the article in the Microsoft Knowledge Base:

119591 How to Obtain Microsoft Support Files from Online Services

Microsoft scanned this file for viruses. Microsoft used the most current virus-detection software that was available on the date that the file was posted. The file is stored on security-enhanced servers that help to prevent any unauthorized changes to the file. The English version of this fix has the file attributes (or later) that are listed in the following table. The dates and times for these files are listed in coordinated universal time (UTC). When you view the file information, it is converted to local time. To find the difference between UTC and local time, use the Time Zone tab in the Date and Time tool in Control Panel.

Date        Time   Version            Size    File name --- 05-Oct-2002 00:03  5.0.2195.6048     333,584  Asp.dll 05-Oct-2002 00:03  5.0.2195.3649     299,792  Fscfg.dll 05-Oct-2002 00:03  5.0.2195.5255       8,464  Ftpctrs2.dll 05-Oct-2002 00:03  5.0.2195.5255       6,416  Ftpmib.dll 05-Oct-2002 00:03  5.0.2195.5255       9,488  Httpmib.dll 05-Oct-2002 00:03  5.0.2195.6080      13,584  Infoadmn.dll 05-Oct-2002 00:03  5.0.2195.6080     246,544  Infocomm.dll 05-Oct-2002 00:03  5.0.2195.6080      62,736  Isatq.dll 13-Jun-2001 05:05  5.0.2195.3727       3,856  Svcpack1.dll 05-Oct-2002 00:03  5.0.2195.5255       7,440  W3ctrs.dll



STATUS
Microsoft has confirmed that this is a problem in the Microsoft products that are listed at the beginning of this article.



MORE INFORMATION
For additional information about how to obtain a hotfix for Windows 2000 Datacenter Server, click the article number below to view the article in the Microsoft Knowledge Base:

265173 The Datacenter Program and Windows 2000 Datacenter Server Product

Keywords: kbhotfixserver kbqfe kbwin2ksp4fix kbwin2000presp4fix kbfix kbbug kbprb KB329938

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.