XCCC: The "Log On Locally" Right Is Not Required for Outlook Web Access in Exchange 2000 Server (311422)

SUMMARY

In earlier versions of Microsoft Outlook Web Access (OWA), users must have the "Log on locally" right to gain access to OWA. In the Exchange 2000 version of OWA and later, this right is no longer required. The only right that users must have is the "Access this computer from the network" right, which is given to the Users group by default in Microsoft Windows 2000.

MORE INFORMATION

By default, Exchange 2000 virtual roots (HTTP Virtual Servers/Directories) in Active Directory have the msExchLogonMethod attribute set to 3. This maps to the LogonMethod value in the Internet Information Services (IIS) metabase, which is populated by the Exchange 2000 directory service to metabase process. This value defines the rights that are required to authenticate against an IIS resource. IIS defaults this value to 0, but Exchange 2000 defaults this value to 3.

Values for the LogonMethod value are:

0 = Users must have the "Log on locally" right to authenticate.
1 = Users must have the "Log on as batch job" right to authenticate.
2 = Users must have the "Access this computer from the network" right to authenticate.
3 = Users must have the "Access this computer from the network" right to authenticate.