Outlook Web Access keeps prompting for a username/password

[adamf]

We have a Exchange 2003 Standard Server and most of the staff use OWA to check their e-mail. Just recently whenever we have to change a users password, it them refuses to accept the new password for logging onto OWA.

I've narrowed it done to some sort of DNS issue because it only fails when the user goes through the url http://mail.xxxx.org/exchange but it works fine for http://ipaddress/exchange

It works fine externally from school using the url http://mail.xxx.org/exchange

Just wondering if anyone else has come across this issue or knows how to fix it!

Adam.

[Ric_]

I've noticed that there can be a delay between changing a user's password and Exchange picking up that change... does the problem disappear after 15mins or so.

[adamf]

No it doesn't. I initally thought it was some sort of replication issue aswell.

Any other suggestions?

[Ric_]

Does it bork if the user changes their own password?

[adamf]

Yer!! Doesn't work if I change the password in AD or the user is prompted to change the password.

I've also tried changing the password on the Exchange Server (as it a DC) and the PDC neither make a difference.

[Ric_]

Are you sure that Exchange and AD are talking then? Perhaps run netdiag on the Exchange box... should point out any DNS problems if that is the case.

If you enter the old password for a user, does it allow authentication?

[adamf]

I'm prettu sure they are taking because it works:

a) when using the IP address of the server (http://ipaddress/exchange)

b) externally from school using either IP address or mail.xxx.org

I give netdiag a try.

It doesn't accept the old password either

[zag]

Try installing IE7, this is a known bug with IE 6

[fooby]

Have you made sure "Integrated Windows Authentication" is enabled for your OWA? Its in IIS Manager.

[adamf]

Have you made sure "Integrated Windows Authentication" is enabled for your OWA? Its in IIS Manager.

Yer Integrated Windows Authentication is enabled.

Try installing IE7, this is a known bug with IE 6

I'll give that a go.

[Lithium]

Don't know if it will help you, but we got stumped by a similar situtation - before I totally destroyed the proxy server at our site..

Anyway,

The solution we had was to use the internal domain name\username...

so something like mycollege\myuser.

[ageahr]

If the internal domain name\username thing works, then another way of doing it would be the users full email address...

something like myuser@mycollege.com

I found that it was easier to tell users to enter their full email address rather then explain which slash to use....