Exchange 2013 SP1 -OWA and ECP login authentication

Question

Coexisting with Exchange 2007 in the same Org.
Just been through a nightmare where I changed the authentication type from Basic and Forms to Windows Integrated Authentication through the EAC for OWA and ECP. It broke them completely. Three hours later after rebuilding the two virtual directories I have
it working.
So I learnt about the backend process for both ECP and OWA and realised I have to have the authentication types the same in front and back end.
1. Is there a way to set authentication for both components at the same time? (that's a stoopid design)
2. So now I have integrated authentication- but I cannot login as someone else unless of course I login to windows as that other person. Which authentication do I need to add  to allow prompting ifor other credentials (or is this not possible)?
3. Set-ECPvirtualdirectory can set the backend but get-ecpvirtualdirectory can not. It was really difficult to see the two sections had different authentication settings. Is there a way to see them?

Answer 1

I would recommend Basic Authentication and set Group Policy to add Exchange URLs to Trusted sites and modify IE settings to "Automatic login using current username/password" option for trusted settings.
This way Single-Signon would work for domain joined systems and Basic authentication would prompt for any unsuccessful logins
However, from the best practices perspective, I would recommend Form based authentication, unless there are business reasons for not doing it this way.
- Sarvesh Goel - Enterprise Messaging Administrator