Microsoft KB Archive/248486

= XCCC: Mailbox Access Through OWA Is Denied on Exchange Server Across Domains =

PSS ID Number: 248486

Article Last Modified on 10/1/2003

-

The information in this article applies to:


 * Microsoft Exchange Server 5.5

-



This article was previously published under Q248486



SYMPTOMS
When you use Outlook Web Access (OWA) to gain access to Microsoft Exchange Server 5.5 in another domain, you may receive one of the following error messages indicating that access is denied:

Failed to get Inbox

Failed to get Inbox or OWA was unable to get your inbox or HTTP/1.0 401

Access is Denied

All users who are members of the same domain as the Exchange Server computer can access their mail through OWA, but no one in your domain is able to do so. The domains are in a two-way trust relationship.



CAUSE
This behavior can occur when users in the remote domain do not belong to a local group in the domain where the Microsoft Internet Information Server (IIS) computer is located and have not been granted the right to log on locally.



RESOLUTION
To resolve this issue, add the global group of OWA users to the local group in the local domain, and assign the correct permissions:

 Create a global group in the remote domain and then add all of the OWA users. Create a local group, in the local domain, on the IIS computer. Add the global group from the remote domain to the local group in the local domain. Assign the new local group the correct permissions to the needed files, registry keys, and policies.

For additional information, click the following article number to view the article in the Microsoft Knowledge Base:

317627 XWEB: Troubleshooting HTTP 401.x Errors in Outlook Web Access 5.5





MORE INFORMATION
For more information about correctly configuring Outlook Web Access, please see the Troubleshooting Guide for Outlook Web Access at the following Microsoft Web site:

http://support.microsoft.com/support/exchange/content/whitepapers/owa_tshoot.asp

Keywords: kbprb KB248486

Technology: kbExchange550 kbExchangeSearch kbZNotKeyword2

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© 2004 Microsoft Corporation. All rights reserved.