Microsoft KB Archive/248486
PSS ID Number: 248486
Article Last Modified on 10/1/2003
The information in this article applies to:
- Microsoft Exchange Server 5.5
This article was previously published under Q248486
When you use Outlook Web Access (OWA) to gain access to Microsoft Exchange Server 5.5 in another domain, you may receive one of the following error messages indicating that access is denied:
All users who are members of the same domain as the Exchange Server computer can access their mail through OWA, but no one in your domain is able to do so. The domains are in a two-way trust relationship.
This behavior can occur when users in the remote domain do not belong to a local group in the domain where the Microsoft Internet Information Server (IIS) computer is located and have not been granted the right to log on locally.
To resolve this issue, add the global group of OWA users to the local group in the local domain, and assign the correct permissions:
- Create a global group in the remote domain and then add all of the OWA users.
- Create a local group, in the local domain, on the IIS computer.
- Add the global group from the remote domain to the local group in the local domain.
- Assign the new local group the correct permissions to the needed files, registry keys, and policies.
For additional information, click the following article number to view the article in the Microsoft Knowledge Base:
317627 XWEB: Troubleshooting HTTP 401.x Errors in Outlook Web Access 5.5
For more information about correctly configuring Outlook Web Access, please see the Troubleshooting Guide for Outlook Web Access at the following Microsoft Web site:
Keywords: kbprb KB248486
Technology: kbExchange550 kbExchangeSearch kbZNotKeyword2