How To Configure OWA Authentication When Exchange Server and IIS Are on Different Computers (300646)

SUMMARY

This step-by-step article describes how to configure authentication to work with Oulook Web Access (OWA) when your host Exchange Server 5.5 is on one computer and Internet Information Services is on a different computer.

back to the top

Requirements

The following items describe the recommended hardware, software, network infrastructure, skills and knowledge and service packs you will need.

• Exchange Server Version 5.5 on one computer. For more information about configuring Exchange Server 5.5, visit the following Microsoft Web site:

  Home Page for Microsoft Exchange Server
  http://www.microsoft.com/exchange/default.asp

• Internet Information Server 4.0 or Internet Information Services 5.0 on another computer. For more information about configuring IIS, visit the following Microsoft Web site:

  Getting Started with Internet Information Services
  http://www.microsoft.com/windows2000/en/server/iis/

• Outlook Web Access configured on the IIS computer. For more information about using Outlook Web Access, visit the following Microsoft Web site to view the Planning and Deploying Outlook Web Access white paper:

  http://www.microsoft.com/exchange/techinfo/planning/55/outlookwebaccess.asp

  For additional information, click the following article number to view the article in the Microsoft Knowledge Base:

  125329 Deployment and Troubleshooting Outlook Web Access (OWA)

back to the top

Set Up Basic Clear Text Authentication on IIS 4.0 or IIS 5.0

The only authentication scheme that will work with Outlook Web Access when IIS and Exchange are on different computers is Basic Clear Text Authentication. The following instructions describe how to set up Basic Authentication on IIS 4.0 and IIS 5.0. If you require NTLM authentication, you must configure Exchange and IIS on the same computer.

back to the top

Internet Information Server 4.0

1. Click Start, point to Programs, point to Windows NT 4.0 Option Pack, point to Microsoft Internet Information Services, and then click Internet Services Manager.
2. In the Microsoft Management Console window, right-click the virtual server where Outlook Web Access is installed (this is frequently the "Default Web Site," but it may instead be a specific user-configured virtual server).
3. Click Properties, then click the Directory Security tab.
4. Click the Edit button next to Anonymous Access and Authentication Control.
5. Select Anonymous Access, and then click Edit.
6. Make sure the following appears in the Username box:

   IUSR_computername
   where computername is the specific name of the computer hosting IIS.

   
   
   Click OK.
7. Select Basic Authentication (password is sent in clear text).
8. Clear theIntegrated Windows Authentication check box. Click OK.
9. For Inheritance Overrides, click Select All. Click OK.
10. Click OK.
11. Close the Microsoft Management Console window.

back to the top

Internet Information Services 5.0

1. Click Start, point to Programs, point to Administrative Tools, and then click Internet Services Manager.
2. In the Internet Information Services window, right-click the virtual server where Outlook Web Access is installed (this is frequently the "Default Web Site" but it may instead be a specific user-configured virtual server).
3. Click Properties, then click the Directory Security tab.
4. Click the Edit button next to Anonymous Access and Authentication Control.
5. Select Anonymous Access, and then click Edit.
6. Make sure the following appears in the Username box:

   IUSR_computername
   where computername is the specific name of the computer hosting IIS.

   
   
   Click OK.
7. Select Basic Authentication (password is sent in clear text).
8. Select Digest Authentication for Windows Domain Servers.
9. Clear the Integrated Windows Authentication check box. Click OK.
10. For Inheritance Overrides, click Select All. Click OK.
11. Click OK.
12. Close the Internet Information Services window.

back to the top

Pitfalls

If you require NTLM authentication, you must configure Exchange and IIS on the same computer.

back to the top