ACS 5.1 with Outlook Web Access

Hi Everyone,
I have a weird issue which i am troubleshooting. I just wanted to see if anyone had a different view on this.....
I have an AD User, lets call them work\auser and there password just expired, so next logon to the domain they need to change there password.
They decide while at home to connect to Outlook Web Access, which authenticates to via ACS 5.1 to AD, when they try and connect they are denied with the following message in ACS -
24407 User authentication against Active Directory failed since user is required to change his password
: Authentication failed
ACS also says this as resolution -
Check the password expiry under Account options in the properties of an external database user. If the password is expired and the Enable Change Password is turned on in the Users and Identity Stores: External Identity Stores > Active Directory page, then the password will be changed.
Now, our OWA is not configured to allow password resets, so they must call in to have there password reset, or they can connect via VPN and our ASA allows them to change there password as configured under Identity Stores > Active Directory > Enable Password Change
This VPN password change is successful although OWA still will not work. The only way to fix it is to select passwsord does not expire within AD. Let it replicate, then de-select password does not expire and let it replicate.
This is pointing to a OWA issue in my opinion, although ACS is somehow involved, is it possible that ACS caches authentication, or because OWA does not allow password resets, it keeps responding with user required to change his password?
Any thoughts or different ways to look at this from a troubleshooting perspective would be greatly appreciated!
Thanks

The following is the procedure I am familiar with:
Resetting the Administrator Password
If you are not able to log in to the system due to loss of administrator password, you can use the ACS 5.1 Recovery DVD to reset the administrator password.
To reset the administrator password:
Step 1 Power up the appliance.
Step 2 Insert the ACS 5.1 Recovery DVD.
The console displays:
Welcome to Cisco Secure ACS 5.1 Recovery - CSACS 1121
To boot from hard disk press
Available boot options:
[1] Cisco Secure ACS 5.1 Installation (Keyboard/Monitor)
[2] Cisco Secure ACS 5.1 Installation (Serial Console)
[3] Reset Administrator Password (Keyboard/Monitor)
[4] Reset Administrator Password (Serial Console)
Boot from hard disk
Please enter boot option and press .
boot:
Step 3 To reset the administrator password, at the system prompt, enter 3 if you are using a keyboard and video monitor, or enter 4 if you are using a serial console port.

Similar Messages

Help! Can I sync my Palm Desktop with Outlook Web Access?? I'm using a T5 -- NOT wireless, but cable-synced

I have spent the last 3+ weeks trying to get my Palm Desktop information to sync with an Outlook Web Access account.
I have been able to sync my Palm Desktop info with Outlook 2007, and I have been able to acess an Outlook Web Access account through a microsoft exchange server.
BUT, when I talk with tech support.... I get several conflicting answers. One tech says it should be easily possible; one says I need to buy another monthly service; one says it is impossible and I should just buy a Blackberry.
At this point.... I'm not sure I actually care what the answer is, but I would just like a definitive answer....
I have a Palm Tungsten T5.
I want to sync that Contact and Calendar information regularly with an Outlook Web Access account so that my colleagues can see and edit my schedule as needed.... then the info would sync BACK to my Palm so that I can have my current schedule with me.
Can anyone shed some light on this please??
Thank you!
Emily Koenig
Post relates to: Tungsten T5

The short answer is no.
The t-5 has the ability to connect to an exchange server but the version of versamail it has would only sync mail and calendar. You would have to have a wifi card to be able to do even that. To do what you would want you would need to upgrade the versamail client (I don't believe Palm has an upgrade for the T-5) and a wifi card.
Post relates to: None

MS Exchange portlet with Outlook Web Access

While testing the MS Exchange 5.5 portlets, I've run into a problem where it does not create a MAPI session if you are not trying to access a local exchange server. In other words, how do I modify the asp code so the portlet will work if you are accessing Outlook Web Access?
If Outlook Web Access is on a different domain than the asp's in the MSEXCHANGE55.zip portlet package, what else needs to be modified?

The problem is a bit different than the post you referenced.
Although exchange and owa existing on the server with the Exchange asp's from Oracle, the problem of authentication still exists (the asp code needs to be modified in order to fix it).
For example --
The domain of Oracle portal and the windows 2000 server that's the web provider for the portlet is somehost.oracle.com.
The email server that has OWA installed (the one that has the email we want to view) is on someotherhost.ibm.com.
When try to test the inbox.asp by trying
https://somehost.oracle.com/exchange_portlet/inbox.asp?owapath=https://someotherhost.ibm.com/exchange
the session with the exchange server via OWA is not accomplished.
What needs to be changed in the code so the asp's can reside on a server that's not in the same domain as the OWA server?

Using Mail with Outlook Web Access?

I've heard there is a lot of trouble with this but wondering if someone can help me out, I would really love to get my work email this way, I DESPISE Outlook Web Access, I entered the proper POP server address and it took, but kept ignoring my password, any help?
Thanks!

Just to confirm, since I don't see it mentioned, can you confirm that you're not on Exchange 2003.
OWA for Exchange 2003:
http://i190.photobucket.com/albums/z242/asatoran/OWA2003.jpg
OWA for Exchange 2007:
http://i190.photobucket.com/albums/z242/asatoran/OWA2007.jpg
OWA for Exchange 2010:
http://i190.photobucket.com/albums/z242/asatoran/OWA2010.jpg
Configuring Mail for Exchange does not work on Exchange 2003 and earlier.

Using Safari with Outlook web access

I use MS Outlook Web Access to access my work email (OWA). When I first bought the iPhone and tried to access OWA, Safari would "hang" and never connect.
My IT department found the solution. They implemented OWA with SSL. Once they activiated that feature on the Exchange server, it worked fine.
You will access your OWA account through Safari with an https://mail.yourmail.com/exchange. It will prompt you for your ID and password. You are good to go!

Try turning off the pop up blocker. The reply in OWA opens a new window.

Syncing with Outlook Web Access

I recently installed Thunderbird to access work e-mail, which uses Outlook Web Access. When I move a message in Thunderbird to a folder, I see that it's still in the inbox in Outlook. There must be some syncing setting that I'm missing. Help is much appreciated.

Lets see. OWA is not IMAP. You can access exchange mail via OWA. Either using davmail or the exequilla add-on.
The IMAP implementation in exchange is odd. This is mainly because Microsoft never intended anyone to actually use it, but marketing needed to be able to say it supported it. So have you set Mail.imap.expunge_after_delete to true and restarted Thunderbird.
Many settings that have no user interface are only read on startup of the program.

Is there a Firefox plug-in for Outlook Web Access?

I want to access all of Outlook's functions but can't through Firefox, only through Explorer.
In Outlook Web Access through Firefox, I don't have access to menu options for italics, bold, underlining, etc., and I can't view the list of emails on one side while viewing the email content of one email on the other side. The place to access folders like the sent box is different, too, through Firefox. It's a very downgraded version of Outlook Web Access. How can I get the better version of Outlook Web Access while still keeping Firefox as my browser? Is there a plug-in? If not, can Firefox fix this issue with its browser?

Firefox 3.03 - why such an old version? 3.6.12 is the most recent release.
It is up to Microsoft to fix Outlook Web Access to work with Firefox or to come up with a plugin for Firefox. If Mozilla was to start fixing or write plugins for all the software out there that is made to work with Internet Explorer and not any other browser, they wouldn't have time to work on Firefox.
There are two Firefox extensions that will open IE in a Firefox tab. Many users install one of these addons to get around problems like you are having with Outlook Web Access.
IE Tab2
https://addons.mozilla.org/en-US/firefox/addon/92382
IE Tab Plus
https://addons.mozilla.org/en-US/firefox/addon/52809/

Outlook Web Access (OWA)

My company uses an Exchange Server with Outlook Web Access enabled, but I'm not sure of the other settings (IMAP?)
When I got my iPhone I could not set up a link to the main server, but after some research discovered I could retrieve and send mail if I set up the account like this:
webmail.companyname.com
username: first.lastname (as my company designates us)
password: as required.
This worked fine until the company turned off some function of the server so that we can only access mail by signing into webmail with a browser (very cumbersome). However, users of Sprint Instincts can still access their mail by using the Instinct's mail setup and specifying an OWA account. Their mail is not "pushed" to their phones, but they can still access it by going to their mail function similar to us iPhone users just touching the mail icon. They are not looking at a website like through a browser, but rather just like any other synched mailbox.
Why can't the iPhone still access webmail like the Instinct? Is there a way around this or an App that makes webmail accessible without going through the browser?
Thanks,
Tim

check www.emoze.com
Haikal

Portal and Non-Exchange Outlook Web-access integration

Hi, Expert,
the question concerns SAP EP integration with Outlook Web Access (OWA).
The problem is that OWA is not based on MS Exchange Server, but on CommuniGate Pro.
So I need any help, here are my question:
1. Did anyone integrate this 2 systems?
2. What is the point where I have to begin from?
3. Do I need any connectors for this activity?
For the completness of my problem: what do i really need is to use calendar (an other Outlook-like things) in my portal.
Thanks in advance!

You could try this if you have Outlook Web Access already working, put the following into a html portlet and just replace the url with your outlook web access url.
Our admin guys have enabled automatic login to outlook if using internet explorer
<iframe height="800" width="1024" src=http://mail></iframe>

BlackBerry Internet Service with Microsoft Outlook Web Access account

I need to switch my 8820 to a new work account. They use Outlook Exchange 2003, but do not support BES. I have access via both regular desktop Outlook and also Outlook Web Access (from a different server). I read the procedure to use BIS in KnowledgeBase KB03133. After entering my email address and password, I get a message that it was successfully set up. But, I get no e-mail messages delivered. When I check the settings, it looks like it is not using the correct server for Web Access. However, I can find no way to manually enter it - I don't get the error message described in Step 5 where I can pick "I will provide the settings." I try to set up via computer but I get a message that my BIS cannot be accessed via HTML and need to set up on my BB.
Any suggestions? Would it work with a newer phone running a newer OS? Do I need to check with AT&T if it supports Outlook Web Access? Thanks in advance.

Hi and Welcome to the Forums!
Lot's of possible variables...here a several other KBs to try:
KB03133How to integrate a Microsoft Outlook Web Access email address with a BlackBerry Internet Service account
KB18567BlackBerry Internet Service cannot connect to a Microsoft Outlook Web Access account using Microsoft Exchange 2007 or Microsoft Exchange 2010
KB15173Locate the mailbox name for a Microsoft Outlook Web Access 2007 email account
KB04804Error message appears when attempting to integrate a Microsoft Outlook Web Access 2010 account
KB02858Unable to integrate a Microsoft Outlook Web Access email address with a BlackBerry Internet Service account
The trick to getting to the manual settings screen is to provide your valid email address, but an incorrect password...then, it will allow you to manually enter the settings.
Good luck!
Occam's Razor nearly always applies when troubleshooting technology issues!
If anyone has been helpful to you, please show your appreciation by clicking the button inside of their post. Please click here and read, along with the threads to which it links, for helpful information to guide you as you proceed. I always recommend that you treat your BlackBerry like any other computing device, including using a regular backup schedule...click here for an article with instructions.
Join our BBM Channels
BSCF General Channel
PIN: C0001B7B4 Display/Scan Bar Code
Knowledge Base Updates
PIN: C0005A9AA Display/Scan Bar Code

I cannot sync Ical on my iMac with my professional calendar (outlook web access). and I don't understand why it doesn't work since I have already made it with my iPhone. Help

Hello,
I bought an iMac few days ago. I would like to sync ical on my iMac with my professional calendar I use in my company (from outlook web access).
I was easy to manage it on my iPhone (I just add a new "exchange" mail account and ask for a calendar sync only) and it worked very quickly.
But I cannot do it with the iMac, and I don't undersatnd why?
the domain is is used for my iPhone is the following :
owa.companyname.com
I tried all the solutions I found in this forum but it doesn't work.
Many thanks in advancefor your help.
Matt

Does it have to be an applet?
If you want the same behaviour as in the code with traffic lights, change
class MortgageApplet extends JApplet implements ActionListener {
to
class MortgageApplet extends JFrame implements ActionListener {
and change
public void init() {
to
public MortgageApplet() {

A problem with Win 7 Pro, Outlook Web Access based on Exchange Server 2003, and two different domains

Dear Microsoft Support,
As mentioned in the title,
I have two domains. One is Domain A at HQ. The other one is Domain A at branch office. A laptop having Win 7 Pro OS is a client of Domain A. The Domain A has Exchange Server 2003. Users of Domain B get connected to Exchange Server for email services. In
all clients of the Domain B, IP address of the email server added in C:\Windows\System 32\drivers\etc\host file.
Whereas in the clients of Domain A it was not done, because all the servers including the email server belong to the Domain A.
Now, a user with Domain A's client (it is a laptop) came to Branch office and wanted to access the Outlook (using Outlook Web Access). since there is no IP address added in the Host file of the laptop, connectivity to email is not possible. When I try to
add the IP address, I was not able to do so due to Domain A's security reasons.
So, let me know, is there a way out to add the IP address in the host file of the Domain A's client.
Thanks in advance.
Ravi Sekhar Modukuru

I would suggest adding the mailserver address in Domain B's DNS. Would that be possible?
I agree. The correct solution in this case (since it appears you already have a two-way Domain Trust in place) is to properly configure DNS in Domain 'B' to be a secondary of Domain 'A' and completely eliminate the need to maintain the HOSTS file.
Lawrence Garvin, M.S., MCSA, MCITP:EA, MCDBA
SolarWinds Head Geek
Microsoft MVP - Software Packaging, Deployment & Servicing (2005-2014)
My MVP Profile: http://mvp.microsoft.com/en-us/mvp/Lawrence%20R%20Garvin-32101
http://www.solarwinds.com/gotmicrosoft
The views expressed on this post are mine and do not necessarily reflect the views of SolarWinds.

Cannot view OWA email - after upgrade to Firefox 5.0, Outlook Web Access displays ASCII characters (garbage) in message body. Same issue with multiple servers.

Email body of HTML or RTF messages are rendered in ASCII characters after upgrading to Firefox 5 when viewing email in MS Outlook Web Access (OWA) light from MS Exchange 2007 servers. Issue is repeatable with two entirely different Exchange systems.
Text email renders OK. Work around is to forward email (in use MS-IE).

You are welcome. I'm glad you got it back up.
(1) You say you did the symbolic link. I will assume this is set correctly; it's very important that it is.
(2) I don't know what you mean by "Been feeding the [email protected] for several weeks now, 700 emails each day at least." After the initial training period, SpamAssassin doesn't learn from mail it has already processed correctly. At this point, you only need to teach SpamAssassin when it is wrong. [email protected] should only be getting spam that is being passed as clean. Likewise, [email protected] should only be getting legitimate mail that is being flagged as junk. You are redirecting mail to both [email protected] and [email protected] ... right? SpamAssassin needs both.
(3) Next, as I said before, you need to implement those "Frontline spam defense for Mac OS X Server." Once you have that done and issue "postfix reload" you can look at your SMTP log in Server Admin and watch as Postfix blocks one piece of junk mail after another. It's kind of cool.
(4) Add some SARE rules:
Visit http://www.rulesemporium.com/rules.htm and download the following rules:
70sareadult.cf
70saregenlsubj0.cf
70sareheader0.cf
70sarehtml0.cf
70sareobfu0.cf
70sareoem.cf
70sarespoof.cf
70sarestocks.cf
70sareunsub.cf
72sare_redirectpost
Visit http://www.rulesemporium.com/other-rules.htm and download the following rules:
backhair.cf
bogus-virus-warnings.cf
chickenpox.cf
weeds.cf
Copy these rules to /etc/mail/spamassassin/
Then stop and restart mail services.
There are other things you can do, and you'll find differing opinions about such things. In general, I think implementing the "Frontline spam defense for Mac OS X Server" and adding the SARE rules will help a lot. Good luck!

Safari 4.0.3 problems with MS Outlook Web Access

I am constantly prompted for my password in MS Outlook Web Access since I upgraded to 4.0.3. This was a minimal problem previously; each time I logged in I would have to enter my password a few times and then be done with it. Now, almost any time I click on ANYTHING I am prompted for my password. Checking the box for 'Remember this password in my keychain' has never had any affect. I'm rather computer illiterate, but I'm willing to try any suggestions! Thanks!

I have a feeling it's a problem with Apple's javascript. I've also posted a thread here showing that it doesn't work properly with javascript if multiple tabs are open.
This wouldn't be a "fix"... but it might be worth a try to close all other tabs and see if it works when only one tab is open & then try it again with multiple tabs open and see if that breaks it.
At least then we'll know we've got a pattern here similar to my issue. I have a feeling the only way this'll get fixed is if Apple gets a head's up and fixes it themselves in Safari.

Will notes in Mail sync with Notes on Exchange server and Outlook Web Access?

Will notes in Mail 5.0 sync with Notes in latest versions of Microsoft Exchange server and Outlook Web Access?

I was just trying to find the answer to this question myself.
As it happens it's all here in another post: https://discussions.apple.com/thread/3416007
Looks like Notes used to Sync in iOS4, but no longer sync in iOS5
Thanks
Mike

ACS 5.1 with Outlook Web Access

Similar Messages

Maybe you are looking for