Microsoft KB Archive/909268

= You cannot access your mailbox on an Exchange Server 2003 front-end server by using Entourage 2004 for Mac =

Article ID: 909268

Article Last Modified on 12/4/2007

-

APPLIES TO


 * Microsoft Entourage 2004 for Mac
 * Microsoft Internet Security and Acceleration Server 2004 Standard Edition
 * Microsoft Internet Security and Acceleration Server 2004 Enterprise Edition
 * Microsoft Exchange Server 2003 Standard Edition
 * Microsoft Exchange Server 2003 Enterprise Edition

-





SYMPTOMS
Consider the following scenario. Your organization is using Microsoft Internet Security and Acceleration (ISA) Server 2004 on a perimeter network. In ISA Server, forms-based authentication is turned on for Microsoft Outlook Web Access. The internal network includes a front-end server that is running Microsoft Exchange Server 2003. This front-end server provides Outlook Web Access-based access to user mailboxes. In this scenario, when you use Microsoft Entourage 2004 for Mac to access your mailbox, you are prompted to enter your password again. After you enter password again, you receive the following error message:

Mail could not be received at this time.

After you close this error message, you receive the following error message:

Logon failure: unknown user name or bad password. Your username/password or security settings may be incorrect. Would you like to try re-entering your password?

If you click Yes in this error message, the same symptoms occur when you reenter your password.



CAUSE
This problem occurs because Entourage is designed to work with forms-based authentication in Exchange Server 2003. When Entourage performs forms-based authentication, Entourage expects to use the Owaauth.dll file. Entourage submits the user's credentials to the Owaauth.dll file at the following location:

Exchweb/Bin/Auth/Owaauth.dll

The Owaauth.dll file is located on the Exchange front-end server that is running Outlook Web Access. However, ISA Server uses the CookieAuth.dll file to perform forms-based authentication. Entourage cannot use the CookieAuth.dll file for authentication.



WORKAROUND
To work around this problem, follow these steps:
 * 1) Turn off forms-based authentication in ISA Server.
 * 2) In ISA Server, enable application-based filtering.
 * 3) Turn on forms-based authentication on the Exchange Server 2003 front-end server that is running Outlook Web Access.



STATUS
Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the &quot;Applies to&quot; section.



MORE INFORMATION
For more information, visit the following Microsoft Web site:

http://www.microsoft.com/technet/prodtechnol/isa/2004/plan/firewall-exchange2003.mspx

For more information, click the following article number to view the article in the Microsoft Knowledge Base:

891748 How to authenticate the Inbox in Exchange Server 2003 with forms-based authentication enabled by using Visual Basic .NET

Keywords: kbprb KB909268

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.