Intermittent OWA authtication issue for new users on Exchange 2007

Hi
We are experiencing a strange issue with OWA authentication and its happening with new users only including me. We are a small organization with approx. 70 users. Issue is with
new user accounts only.
Access to OWA stops working from any machine for the new users also they get authentication error on their phones. I have checked permissions on Virtual Directory on exchange server,
all seems to be in place. I have checked event viewer but it doesn't have any event for auth. failure.
IIS logs have the following Message,
2014-02-05 09:37:28 W3SVC1 (EXCHANGE SERVER IP) GET /owa/ - 443 myusername 77.88.97.134 Mozilla/5.0+(Windows+NT+6.3;+WOW64;+Trident/7.0;+rv:11.0)+like+Gecko
401 1 1326
Server details
Server 2003 Ent. x64 R2
Exchange Server 2007 Version: 08.03.0342.000
IIS 6.0
Rebooting the exchange server resolves the issue sometime for 2 days sometime for 3-4 weeks.
Please advise.
Best Regards
Prabhash

Hi,
According to your description, new users cannot login OWA .
And to narrow down the cause, I recommend the following troubleshooting:
1. Check if the option"User must change password on next login" has been selected for the new users.
2. Check if the new users can login Outlook when the issue happens.
3. Check if it’s configured to use Integrated Windows authentication for OWA web site:
http://support.microsoft.com/kb/871179
If you have any question, please feel free to let me know.
Thanks,
Angela Shi
TechNet Community Support

Similar Messages

Created mailbox for new user in Exchange 2010, user not visible in AD.

Hi everyone!
This morning I created a mailbox for a new user on my Exchange 2010 box.
Everything works fantastically but I am unable to view the new user in AD except by searching. If I run a search the results say the user exists in my Users container, and I can view the properties of the user account from the search results, but I
am unable to actually see the user profile object in the Users container.
I notice in EMC that the mailbox has a user icon on the mailbox icon instead of the regular standard icon - I'm not sure what this implies.
Can anyone offer some advice as to why this happens and how to resolve it?
Thanks!

Hi,
AD objects store in the Domain partition Database.
Its replication Scope is :Domain Wide
Its replication model is: Multi Master
There are two possible cause.
1. AD replication latency if you have several DCs.
You could wait for AD replication or force replication, Click
refresh on ADUC.
2. You create the new user
in other OU, not Users.
You could run this command to get
the user’s DistingushedName attribution.
Get-mailbox –identity
[email protected] |fl
Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

Issue moving remote user from exchange 2007 to 2013

have moved over 60 people so far from exchange 2007 to 2013, it was going well with no major problems.
during migration I have created a DNS setting called legacy.mydomain.com, and it points to the old exchange server, while mail.mydomain.com points to the new exchange server.
outlook was working connecting to both servers, and OWA was working on both servers.
couple of remote users who connect via SSL-VPN and outlook 2010 had issues connecting, but as soon as I moved them to 2013 exchange they connected without vpn using outlook anywhere.
but - I have one remote user who even though the mailbox move to the new 2013 server was successful, their outlook still points to the 2007 exchange server.
if I try creating a new profile in outlook 2013, it fails because it cannot contact exchange server, even when ssl-vpn is running.
when I started troubleshooting I found lots of spyware on his laptop, symantec had been blocking some trojans, obviously he had downloaded something he shouldnt have.
could this have caused my outlook connectivity issue?
I ran malawarebytes, and it shows clean now, but still unable to get his outlook to connect.
I had thought about moving his mailbox back to the old server, seeing if it works on outlook, then moving it to the new one again.
any suggestions?

I had thought about moving his mailbox back to the old server, seeing if it works on outlook, then moving it to the new one again.
Hi,
Have you done this step? Sometimes moving mailbox to another database can auto-fix problems.
According to your description, I know that all migrated mailboxes work well except a specific user. I notice that the user's laptop has a lots of spyware, and symantec has been clocking some trojans.
Please try to logon OWA to check whether this user works.
If works in OWA, it seems that the mailbox has been migrated to 2013 successfully.
Generally, re-creating profile can fix this issue. Unfortunately, you have tried it and failed.
Please try to run Outlook under safe mode to avoid AVs and add-ins.
Thanks
Mavis Huang
TechNet Community Support

Unable to view pdf - initially thought to be user / OS issue for new user to MAC.

Unable to view pdf created in Live Cycle Designer ES2. I initially thought this was a user / OS issue when I created a document for someone who is new to a MAC laptop. She could not view the document through email. Unfortunately, I began seeing the same error in my own document folders when searching for another document showing as icons instead of a list. I can open the file without a problem although I see the error she sees only while viewing the icons in my folder. I am using a Windows 7 PC. Now, I also know that if the document is downloaded, it can be viewed.
Other notes:
If trying to access the form via the internet, the same error is seen through Chrome, Firefox, and Mozilla but NOT through IE
Everyone seems to have the latest or a very recent READER
The form is compatible with Reader versions 7 and up
Again, downloading from the internet to the computer appears to allow the file to open properly
Document cannot be viewed on the Galaxy Tab 2 via Chrome or the pre-installed Internet Browser, nor can it be viewed through the Reader after download to tablet. I did not try on an Apple iPad.
All parties involved are up-to-date with virus protection.
Below is a link to the exact message received when trying to open the document.
https://www.dropbox.com/s/wmjqzwyriovg9vi/Adobe%20Error.pdf

Sorry, this is a user to user forum and we're just customers who help out when we can, so things don't always happen right away.
Reader, Regardless of OS or device, is as the name implies, only a Reader. There are different mail settings between Mac Mail Outlook and Thunderbird as well as Andsroid's mail app, whose name escpoaes me.
Have you checked in the Live Cycle Forum? There are people there with FAR more experience using LC developed forms. It's part of my Creative Suite, but I've never even opened it myself.

GPO not working for new Users (Background)

Terminal Server 2012 in a hosted environment
I've set the below policy to set a default background wich can be changed by the users after this.
The target is an networkdrive. (The Reason behind this is that we have multiple resellers that all have the same networkdrive but pointing to a different store) Lets just say for this example that is P:/Background/ResellerBackground.jpg
The policy is Linked to the Resellers OU.
This works perfectly for all the existing users.
For new users this is not working at all. It does run the policy but it create the profile after running the policies.
So the above setting gets overruled by the default windows server 2012 background. The RunOnce atribute is set now, so it will not load it again.
I have read a lot of different sollutions so far, but none are working in this environment. (From changing the default Hive to changing the default picture etc)
One sollution came close, but not working perfectly either, this is removing the RunOnce atribute from the register, and letting the new users log in again. You do not wanna let new users login twice.
Before Windows 7/8/2012, in XP it just copied the default user and then the policies ran. So here the problem does not exist. Now it makes the profile after running the policies.
Anyone having an idea to resolve this issue?

Hi,
Before going further, what’s the value in the wallpaper registry entry
value data for new users?
>>One sollution came close, but not working perfectly either, this is removing the RunOnce atribute from the register, and letting the new users log in again. You
do not wanna let new users login twice.
If we choose this solution, we can try running cmd command
gpupdate/force to see whether it can work.
Another workaround is we can do it from scratch. We can create a new GPO to deploy wallpaper for these new users. The steps are the same as previous ones, just using
Security Filtering to apply this new GPO to new users, and unlinking and deleting the GPO after the policy getting updated.
Best regards,
Frank Shen

Is an iBooks Author tutorial available for new users?

Is an iBooks Author tutorial available for new users?

You can also try this site for video training on iBA. It's around $25/month for unlimted viewing and may be easier for some people than reading a manual:
http://www.lynda.com/iBooks-tutorials/iBooks-Author-Essential-Training/101460-2. html

How do i to totally reset iPad for new users?

How do i to totally reset iPad for new users?

Welcome to the Apple Support Communities
Open Settings > General > Reset > Erase All Content and Settings. After erasing your device, turn it off holding Sleep button

Migrating Users from Exchange 2007 to Exchange 2013 Without redirection through exchange 2013.

We have all our users and mailboxes on Exchange 2007 and I have introduced two Exchange 2013 servers in my organization and both have mailbox and CAS server installed on them.
With Exchange 2007 server, I had not modified any of the internal and external url/uri and had stayed with the defaults.
For migration most of the documents are suggesting of changing the default internal URL and Auto Discover Service internal URI values.
In my case, I want to migrate all the users and mailbox (everything that is on Exchange 2007) form 2007 to 2013 and decommission exchange 2007 completely from our organization.
I am in the phase of transferring users from Exchange 2007 to Exchange 2013 and do not want to change any settings on the existing 2007 servers.
I have created new dns entry mailx.abc.com with two IPs of both exchange 2013 and changed the Outlook Anywhere internal URL on both Exchange 2013 server to mailx.abc.com.
So by doing these, I think all existing clients will still connect to exchange 2007 and after moving their mailbox they will be connect to exchange 2013.
In short I am not redirecting or using 2013 as proxy for 2007 clients and clients whose mailbox is on exchange 2013 will directly connect to 2013 server.
Questions are, Is this the right way to migrate all the users to Exchange 2013?
Will it affect the operation of existing Exchange 2007 server?

Read the below blog on Client Connectivity in Exchange co-existence. There can't be better blog than this on this topic.
http://blogs.technet.com/b/exchange/archive/2014/03/12/client-connectivity-in-an-exchange-2013-coexistence-environment.aspx
Clients connect to Exchange from Internal-Outlook, External-Outlook, Web & Active Sync.
For Internal the configuration that you have mentioned should work as clients would get Autodiscover information from Active Directory (SCP) and get connected to right server.
However, for external connectivity it makes sense to use External URL on Exchange 2013 servers (keep the Exchange exposed to Internet), configure legacy URL for exchange 2007 and use Exchange 2013 external URL for mailboxes that are Exchange 2007 and Exchange
2013 for standardization.
Refer article for configuring URLs -
http://silbers.net/blog/2014/01/22/exchange-20072013-coexistence-urls/
- Sarvesh Goel - Enterprise Messaging Administrator

When spanning new tabs (firefox) my users are asked to re-authenticate with pages already signed into. Can you tell me how to fix this issue for firefox users?

With some research I found regedit setting called “TabProcGrowth” that allows tabs to span without re-authenticating with certain browsers. Can you tell me how to fix this issue for my Mozilla Firefox users? Our current version of Mozilla Firefox is: 24.5.0 (x86 en-US). This was first noticed with a product called Confluence that we use in our Tech Support area. Users are having to reenter their password every time they click on a new link in confluence. Any help would be appreciated.
Thank you,

Hi Bernie:
As long as you are accessing your internal server on http:// or https:// then I would expect the normal rules to apply. To see whether some external requests are being blocked, you might try using Firefox's Web Console, Network tab.
You can open the console in the lower part of a tab using either:
* Ctrl+Shift+k
* "3-bar" menu button > Developer > Web Console
* (menu bar) Tools menu > Web Developer > Web Console
Click "Network" on the top bar of the Web Console.
Then use the address bar or a bookmark to launch Confluence in the same tab. Each request made by Firefox should be displayed along with the result. You can click a row for more details.
When I look up "TabProcGrowth" it seems related to the Protected Mode feature of IE8 and newer, which is not (yet) applicable to Firefox. http://blogs.msdn.com/b/askie/archive/2009/03/09/opening-a-new-tab-may-launch-a-new-process-with-internet-explorer-8-0.aspx
However, if Confluence is heavily reliant on plugins such as Flash or Java, that could be a factor because plugins are run out-of-process in Firefox. In that case I suggest checking with Confluence for suggestions.

Single Sign on Issue for new Portal Users

We are implementing ESS on EP 6.0. the architecture is like EP 6.0 - ITS - R/3.
and we want to implement the single sign-on. so that when the users login the portal, the Portal Authenticates the user and then portal uses just the Portal UserID and logs in ITS/R3 without verifying the SAP PWD. Portal ID and SAP ID are same.
The single sign on is working fine for those users who already have an SAP ID.
we need to create new R/3 ID's for the new employees. and we don't wanna let the employees login in directly to R/3.
When we create a new ID in R/3 and login for the first time in R/3, it asks to change the password.
since the new employees won't be using R/3 and they login through portal and b'cos we implemented single signon, the portal tries to login in r/3 using the Portal ID/R3 ID, but the SAP R/3 ID is not actived since the user did not change the password, the SSO is failing.
We didn't wanna assign the R/3 ID a password. since it will be an audit issue.
Can anybody give any suggestions, so that the administrator need not assign a password and the users need not login in r/3 and change the pwd for the first time.
Hope you understand my problem, if u need any clarification, let me know..
Thanks.

Hi Gopi-
You can override the password check when a valid logon ticket is presented by setting the profile parameter:
login/pasword_change_for_SSO 0
using RZ10 in the instance profiles. (Requires a restart of R/3)
This overrides the password prompt/check when the user presents a valid logon ticket.
Hope this helps you out.
Thanks,
Marty

Front - end print with new access method G - having issues for some users

Hi Gurus,
Recently we have implemented the new access method G for front-end printing. it is working fine for 90% users in our company. but some users having problems in printing to WINDEFAULT using this new method.
Here is the SAP GUI trace file for the error that they are getting.
(Error)(25.09.09 15:42:36.444):    CALL METHOD "CreateControl"[DispID=5] OF [#1/0x0AE31790/1/{83658045-6571-3232-7082-797884697868}]
                    #0: LONG "101"
                    #1: STRING "SAPFPRINT.sapfprintCtrl.1"
                    #2: LONG "0"
                    #3: LONG "10"
IDispatch::Invoke raised exceptionException occurred
(Error)                       :
(Error)                       :    ****************************ERROR OCCURED IN MODULE: [{83658045-6571-3232-7082-797884697868}]******************************************************************************************************
(Error)                       :    PROGRAM_ID                                 |MODULE_NAME              |METHOD_NAME       |ERROR DESCRIPTION         |VERSION                    |GUI VERSION               |MODULE_PATH              |
(Error)                       :    *****************************************************************************************************************************************************************************************************
(Error)                       :    {83658045-6571-3232-7082-797884697868}     |Class name not found     |CreateControl     |Create control failed     |Version info not found     |Gui Version not found     |Module doesnot exist     |
(Error)                       :    *****************************************************************************************************************************************************************************************************
(Error)                       :
(Error)                       :    Exception fire by :SAP Frontend Server
(Error)                       :    Exception info:Create control failed
(Error)                       :    Exception code:65535
Did any one face this error? what could be the resolution?
We are already on SAP GUI 710 patch level 11
DISP+Work : 229
Appreciate your answers
Thanks,
Srini

Usually this means, that some necessary controls are not properly registered in the registry and hence can't be found. You may solve that by removing the SAPGUI from the PC completely, booting the machine and reinstall the GUI.
Markus

Outlook Web App error for new user (Exchange 2010)

Hello,
Recently, our new user can't get on OWA because their regional setting page is returning "An unexpected error occurred and your request couldn't be
handled."
with "Url: https://mail.shdm.org:443/owa/languageselection.aspx"
I've search many site and i've not been able to find a working solution.
I've check the redirection, everything seems ok
here is the complete detail message
An unexpected error occurred and your request couldn't be handled.
Request
Url: https://mail.shdm.org:443/owa/languageselection.aspx
User: [email protected]
EX Address: /o=SHDM/ou=Exchange Administrative Group (FYDIBOHF23SPDLT)/cn=Recipients/cn=promoteurs790
SMTP Address: [email protected]
OWA version: 14.3.195.1
Exception
Exception type: System.ArgumentNullException
Exception message: Value cannot be null. Parameter name: value
Call stack
Microsoft.Exchange.Clients.Owa.Core.Utilities.RenderDirectionEnhancedValue(TextWriter output, String value, Boolean isRtl)
Microsoft.Exchange.Clients.Owa.Core.LanguageSelection.RenderTimeZoneSelection()
ASP.languageselection_aspx.__Render__control1(HtmlTextWriter __w, Control parameterContainer)
System.Web.UI.Control.RenderChildrenInternal(HtmlTextWriter writer, ICollection children)
System.Web.UI.Page.Render(HtmlTextWriter writer)
System.Web.UI.Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint)
Hope that someone can help!
Alexandre

Hi,
I have seen this same error before. That issue resolved by Exchange 2010 SP3 RU7.
So please refer to KB 2961522
and install Update Rollup 7 for Exchange 2010 SP3 to solve this issue.
Best Regards.
Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact [email protected]
Lynn-Li
TechNet Community Support

/ecp /owa not work for different users, error 500, redirect/owa/auth.owa

installed Exchange 2013, upgrade to sp1 and clean as possible start use in production. All work fine for 2 weeks, when after last weekend go back to work and see what ecp and owa login broken.
1. it broke for some users, not all users. some users coud login.
2. it always after login redirect to error 500, domain.com/owa/auth.owa
3. i get other user login password, try from differet new pc. the same error.
4. with cache cleaning and add "?ExchClientVer=15" at the end i get to work two mailboxes, but cant get other to work.
IIS log:
2014-03-25 10:56:34 10.2.8.244 GET / - 443 - 10.2.8.101 Mozilla/5.0+(Windows+NT+6.3;+WOW64;+Trident/7.0;+rv:11.0)+like+Gecko - 200 0 0 0
2014-03-25 10:56:34 10.2.8.244 GET /owa/ &CorrelationID=<empty>;&cafeReqId=1289c5c9-fb04-4981-aa59-c3b7f30dde8a; 443 - 10.2.8.101 Mozilla/5.0+(Windows+NT+6.3;+WOW64;+Trident/7.0;+rv:11.0)+like+Gecko https://mail.domain.lv/
302 0 0 0
2014-03-25 10:56:34 10.2.8.244 GET /owa/auth/logon.aspx url=https%3a%2f%2fmail.domain.lv%2fowa%2f&reason=0&CorrelationID=<empty>;&cafeReqId=03257ee9-f71e-44f1-9f9b-4a7a3c688b5d; 443 - 10.2.8.101 Mozilla/5.0+(Windows+NT+6.3;+WOW64;+Trident/7.0;+rv:11.0)+like+Gecko
https://mail.domain.lv/ 200 0 0 15
2014-03-25 10:56:34 10.2.8.244 GET /owa/auth/logon.aspx replaceCurrent=1&url=https%3a%2f%2fmail.domain.lv%2fowa%2f&CorrelationID=<empty>;&cafeReqId=383c956b-19d9-425e-9c45-44a5a50b4bbe; 443 - 10.2.8.101 Mozilla/5.0+(Windows+NT+6.3;+WOW64;+Trident/7.0;+rv:11.0)+like+Gecko
- 200 0 0 0
2014-03-25 10:56:38 10.2.8.244 POST /owa/auth.owa &CorrelationID=<empty>;&cafeReqId=84bcf2b6-57cf-41df-92f9-9224b3e5a706; 443 username 10.2.8.101 Mozilla/5.0+(Windows+NT+6.3;+WOW64;+Trident/7.0;+rv:11.0)+like+Gecko
https://mail.domain.lv/owa/auth/logon.aspx?replaceCurrent=1&url=https%3a%2f%2fmail.domain.lv%2fowa%2f 500 0 64 0
2014-03-25 10:56:38 10.2.8.244 POST /owa/auth.owa &CorrelationID=<empty>;&cafeReqId=10cd2e1c-ecdc-4ec8-beda-4a1728a57b8f; 443 username 10.2.8.101 Mozilla/5.0+(Windows+NT+6.3;+WOW64;+Trident/7.0;+rv:11.0)+like+Gecko
https://mail.domain.lv/owa/auth/logon.aspx?replaceCurrent=1&url=https%3a%2f%2fmail.domain.lv%2fowa%2f 500 0 0 15
2
5. no event log errors, only about exchange performance counters.
all what i did:
*recreate owa. recreate ecp directories in default website and backend website also ecp pool, and add it back.
*check website biddings;
*remove and readd certificate.
*disable OWA cache option.
*check user language options.
*check running services.
*check owa proxy health
* check owa and ecp authentification settings
* check for correct internal external url settings for owa and ecp.
* try with ssl req checked in or checked out -not help.
* try with redirect options disabled or enabled- not help
So now im are at the start point, didn't help anything. in is not resolution for sitting and trying to clear user explorer caches to tray get work..

Hi,
Generally, the error was 500 which indicates some kind of authentication errors. To resolve the issue, please try the following checks:
1. Checked IIS, ensure that all of the authentication is set correctly and "Require SSL" is checked on the root of the default website.
2. Restart IIS service by running “IISReset /NoForce”.
3. If it fails, please try to start the “Microsoft Exchange Forms-Based Authentication” service on Exchange server.
Thanks,
Winnie Liang
TechNet Community Support

Calendar Free/Busy permissions being ignored for users migrated from Exchange 2003, fine for new users created on Exchange 2010

I have uncovered a situation where it seems the free/busy permissions are being ignored for users that were migrated from Exchange 2003 to Exchange 2010.
I have the default permissions set to only show Free/Busy Time, not Details. However if I look at the calendar for a users who was migrated from the old Exchange 2003 server, I can see details. If I look
at a newer user who was added directly to the Exchange 2010 server, I (correctly) only see the times and "Free" or "Busy", not the specific details.
I verified the permissions on the migrated mailboxes many different ways (Exfolders, cmdlets, etc) and all signs point to only allow showing Free/Busy Times, but alas, I can still see the Details as well.
My users are using Outlook 2010.

Hi,
Does this issue occur on Outlook only or both Outlook and OWA?
Since you have double checked the permissions via multiple methods, it seems there is nothing problem on permission. Please make sure the migration from Exchange 2003 server completed successfully.
If in OWA everything goes well (cannot see details), it should be an issue on the Outlook client side.
I suggest run Outlook under safe mode to avoid some AVs and add-ins.
I suggest re-create profile to refresh the caches.
Thanks
Mavis
Mavis Huang
TechNet Community Support

Outlook Anywhere Trouble for new users

Hello,
My client had Exchange 2010 SP3, lastest rollup. He has Outlook Anywhere enabled and all of his users, except a new one he created a few days ago, have no problem accessing their mailboxes.
This new user experiences a problem, once she goes home and tries to open her Outlook 2010, a User\Password prompt appears which does not go away even when you get it right. Eventually after 3 attempts usually, it goes away but outlook opens up disconnected.
There is this Error event - MSExchangeAL id 8364, on the exchange server, and it does correspond to our problem. although, no valid solution is given for it, wherever i've searched.
We've tried Changing authentication methods from Basic to NTLM to Negotiate and to Basic back again, tried disabling the "Encrypt data between Outlook and Exchange", We've tries online mode, it does not even open outlook. it gives us an error regarding
a bad ost file. If outlook does allow the user in, it's only in cached mode and it immeditaly changes status from "Trying to connect..." to "Disconnected". We've checked the checkbox of "On slow connections use....". OWA Works.
Any insight would be greatly appreciated. Thank you.

Hi,
According to your description, only one your user cannot use Outlook Anywhere to connect to the server. If I misunderstand your meaning, please feel free to let me know.
If yes, I recommend you firstly troubleshoot if the issue is related to the certain Outlook client:
Recreate a new profile for the problematic users or change another computer to reconfigure the account.
Additionally, you can also use ExRCA to check the Outlook Anywhere connectivity:
https://testconnectivity.microsoft.com/
If you have any question, please feel free to let me know.
Thanks,
Angela Shi
TechNet Community Support

Intermittent OWA authtication issue for new users on Exchange 2007

Similar Messages

Maybe you are looking for