Cannot Use Outlook Web Access to Access an Exchange Server Installed on a Windows 2000 Cluster Node (329938)



The information in this article applies to:

  • Microsoft Windows 2000 Advanced Server SP3

This article was previously published under Q329938
Windows SE:33627
Exchange:211504

SYMPTOMS

Symptoms Exchange 2003 Setup on a cluster node that is running Windows 2000 with Kerberos Authentication enabled has a prerequisite that will prevent Setup from continuing unless you first:
  • Intall the hotfix that this article provides.

    -or-
  • Install Windows 2000 Service Pack 4.
When you increase diagnostic logging on the server, you may receive the following event message in the Security log of the Event Viewer:

Event type: Failure Audit
Event source: Security
Category: Logon/Logoff
Event ID: 537
Date: date
Time: time
User: NT AUTHORITY\SYSTEM
Computer: computername
Description:

Logon Failure:
Reason: An unexpected error occurred during logon
User Name:
Domain:
Logon Type: 3
Logon Process: Kerberos
Authentication Package: Kerberos
Workstation Name: -

CAUSE

This behavior occurs because Kerberos authentication is turned on. As a result, an authentication issue occurs between Internet Information Services (IIS) 5.0 and the Exchange virtual server's IIS resources.
The W3Svc.exe service is not cluster-aware. As a result, it supplies a non-null credential to obtain a credentials handle. This is incorrect in this case, because the server cluster's credentials are stored in the logon session. When the W3Svc.exe service supplies an explicit credential, the cluster's credentials cannot be used.

RESOLUTION

Service Pack Information

To resolve this problem, obtain the latest service pack for Microsoft Windows 2000. For additional information, click the following article number to view the article in the Microsoft Knowledge Base:

260910 How to Obtain the Latest Windows 2000 Service Pack

Hotfix Information

The following file is available for download from the Microsoft Download Center:
DownloadDownload the Windows2000-KB329938-x86-ENU.exe package now. For additional information about how to download Microsoft Support files, click the following article number to view the article in the Microsoft Knowledge Base:

119591 How to Obtain Microsoft Support Files from Online Services

Microsoft scanned this file for viruses. Microsoft used the most current virus-detection software that was available on the date that the file was posted. The file is stored on security-enhanced servers that help to prevent any unauthorized changes to the file. The English version of this fix has the file attributes (or later) that are listed in the following table. The dates and times for these files are listed in coordinated universal time (UTC). When you view the file information, it is converted to local time. To find the difference between UTC and local time, use the Time Zone tab in the Date and Time tool in Control Panel.

Date         Time   Version            Size    File name
-----------------------------------------------------------
05-Oct-2002  00:03  5.0.2195.6048     333,584  Asp.dll
05-Oct-2002  00:03  5.0.2195.3649     299,792  Fscfg.dll
05-Oct-2002  00:03  5.0.2195.5255       8,464  Ftpctrs2.dll
05-Oct-2002  00:03  5.0.2195.5255       6,416  Ftpmib.dll
05-Oct-2002  00:03  5.0.2195.5255       9,488  Httpmib.dll
05-Oct-2002  00:03  5.0.2195.6080      13,584  Infoadmn.dll
05-Oct-2002  00:03  5.0.2195.6080     246,544  Infocomm.dll
05-Oct-2002  00:03  5.0.2195.6080      62,736  Isatq.dll
13-Jun-2001  05:05  5.0.2195.3727       3,856  Svcpack1.dll
05-Oct-2002  00:03  5.0.2195.5255       7,440  W3ctrs.dll


STATUS

Microsoft has confirmed that this is a problem in the Microsoft products that are listed at the beginning of this article.

MORE INFORMATION

For additional information about how to obtain a hotfix for Windows 2000 Datacenter Server, click the article number below to view the article in the Microsoft Knowledge Base:

265173 The Datacenter Program and Windows 2000 Datacenter Server Product


Modification Type:MinorLast Reviewed:9/30/2005
Keywords:kbHotfixServer kbQFE kbWin2kSP4fix kbWin2000preSP4Fix kbfix kbbug kbprb KB329938 kbAudEndUser kbAudITPRO