Exchange 2010 OWA

[Paul_Fielder]

Having just migrated from 2003 to 2010 our students accessed email via the owa, as they were on a domain pc they were not required to log in as they were using windows integrated authentication. If anyone accessed via webmail@... They were required to enter username and password.

I have looked at the settings for 2010 and I can't seem to have this facility in 2010; you can't have forms based and integrated auth on at the same time.

Am I missing a trick here? Any advice will be greatly received.

[sukh]

Hi

With Exchange 2010, you have the Internal and External Url's defined for the CAS servers, find these under the EMC console. These need to be set correctly as well as the virtual directories.

Sukh

[rh91uk]

As far as I am aware you can only use one type of authentication on each CAS. My solution: to have two CAS boxes ... although would be very interested to hear otherwise from anyone else!

[sukh]

@rh91uk - What was your setup for CAS. What was your goal?

Sukh

[rh91uk]

WFE (web front end) for the outside world - running on forms authentication. Another WFE for the students who use OWA internally for SSO purposes.

Cheers
Richard

[sukh]

@Richard - Which version of Exchange? you can do this.

Cheers
S

[rh91uk]

2010. Cheers

[sukh]

@Richard - Basically, you need to virtual directories one for External and one for Internal then set WI one and basic on the other. Then set your Internal and External URL for these direcotires.

Sukh

[Paul_Fielder]

Thanks for your advice, I will have a look next week, I have to say as we migrated from 2003 its been a real pain, May I PM you if I get stuck?

@Richard - Basically, you need to virtual directories one for External and one for Internal then set WI one and basic on the other. Then set your Internal and External URL for these direcotires.

Sukh

[sukh]

@paul - Sure, np.

BTW, have you got OWA setup now, internal and external.

Cheers
Sukh

[bodminman]

@Richard - Basically, you need to virtual directories one for External and one for Internal then set WI one and basic on the other. Then set your Internal and External URL for these direcotires.

Sukh

This is precisely what we have setup.

We did have the added complexity of having the staff and students on different domains so we had to create 'Linked' accounts for the students on the staff domain and then create mailboxes against the linked accounts.

All works a treat though!

[sukh]

@bodminman - different domains or forests? What verion of AD?

Cheers
Sukh

[Paul_Fielder]

I have extrnal working as I want, using SSL and forms Auth, internal is the same, the students click a link on the desktop and should go straight in but at the moment they need to log in using forms Auth also. the cookie remembers the login so if they close and reopen its fine for that session only.

However I know they will get hacked-off if they have to log in every session!

@paul - Sure, np.

BTW, have you got OWA setup now, internal and external.

Cheers
Sukh

[bodminman]

@bodminman - different domains or forests? What verion of AD?

Cheers
Sukh

Domains.

Admin domain is is all Server 2008 and the student domain is 2003.