Microsoft KB Archive/248486

From BetaArchive Wiki
Knowledge Base

XCCC: Mailbox Access Through OWA Is Denied on Exchange Server Across Domains

PSS ID Number: 248486

Article Last Modified on 10/1/2003

The information in this article applies to:

  • Microsoft Exchange Server 5.5

This article was previously published under Q248486


When you use Outlook Web Access (OWA) to gain access to Microsoft Exchange Server 5.5 in another domain, you may receive one of the following error messages indicating that access is denied:

Failed to get Inbox

Failed to get Inbox or OWA was unable to get your inbox or HTTP/1.0 401

Access is Denied

All users who are members of the same domain as the Exchange Server computer can access their mail through OWA, but no one in your domain is able to do so. The domains are in a two-way trust relationship.


This behavior can occur when users in the remote domain do not belong to a local group in the domain where the Microsoft Internet Information Server (IIS) computer is located and have not been granted the right to log on locally.


To resolve this issue, add the global group of OWA users to the local group in the local domain, and assign the correct permissions:

  1. Create a global group in the remote domain and then add all of the OWA users.
  2. Create a local group, in the local domain, on the IIS computer.
  3. Add the global group from the remote domain to the local group in the local domain.
  4. Assign the new local group the correct permissions to the needed files, registry keys, and policies.

    For additional information, click the following article number to view the article in the Microsoft Knowledge Base:

    317627 XWEB: Troubleshooting HTTP 401.x Errors in Outlook Web Access 5.5


For more information about correctly configuring Outlook Web Access, please see the Troubleshooting Guide for Outlook Web Access at the following Microsoft Web site:

Keywords: kbprb KB248486
Technology: kbExchange550 kbExchangeSearch kbZNotKeyword2