Microsoft KB Archive/275520

= XADM: Error Message &quot;Error 500: Internal Server Error&quot; Browsing Public Folders =

PSS ID Number: 275520

Article Last Modified on 6/17/2003

-

The information in this article applies to:


 * Microsoft Exchange 2000 Server

-



This article was previously published under Q275520



SYMPTOMS
If you use a Web browser to gain access to Microsoft Outlook Web Access (OWA) and browse the public folder tree of Exchange 2000 Server, you may receive the following error message from the Internet Information Service (IIS):

Error 500: Internal server error.

You cannot navigate further through the public folder tree.

Also, when you view a frameset page (for example, OWA), one or more panes of the frameset may display properly but the remainder of panes may not.



CAUSE
This issue can occur if Kerberos authentication does not work between the client (the Web browser) and the IIS that hosts the public folder tree because the time on the client computer is more than five minutes out of synchronization with the server.



RESOLUTION
To resolve this issue, synchronize the time on the client computer with the time on the server computer.



WORKAROUND
To work around this issue, increase the length of time that Kerberos authentication allows clients to be out of synchronization with servers by modifying the default domain policy. However, if you modify this default, you may increase the security risk of a client with a time that is out of synchronization.

In default domain policy, open the following sections: Windows Settings, Security Settings, Account Policies, Kerberos Policy. Modify the Maximum tolerance for computer clock synchronization setting.



MORE INFORMATION
For a discussion of Kerberos authentication and security, see the &quot;Windows 2000 Kerberos Authentication&quot; white paper from the following Microsoft Web site:

http://www.microsoft.com/windows2000/techinfo/howitworks/security/kerberos.asp

The following is an excerpt from that white paper:

Maximum tolerance for computer clock synchronization. Determines the maximum difference (in minutes) that Kerberos will tolerated between the time on a client’s clock and the time on a server’s clock while still considering the two clocks synchronous. By default, the setting is five minutes.

Additional query words: exch2kp2w

Keywords: kberrmsg kbprb KB275520

Technology: kbExchange2000Search kbExchange2000Serv kbExchange2000ServSearch kbExchangeSearch

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© 2004 Microsoft Corporation. All rights reserved.