Exchange 2007/OWA - Authentication question

[Ben_Stanton]

Hi guys,

 

Internally, staff use OWA to access email. I am using integrated authentication so once they have logged onto the network, they do not need to retype their credentials when opening OWA.

 

I am also about to set up OWA for external access, but my testing has shown (obviously) that I have to type the FQDN and user details to access OWA (via standard login box, not OWA). This is obviously unacceptable.

 

My query is this, is there a way I can have integrated when internal, and forms based when external?

 

Thaanks in advance...

 

Ben

[matt40k]

I believe so. How I don't know.

 

Perhaps two sites, internal and external? Or enable annoymous access?

[Ben_Stanton]

Thanks matt40k,

 

I am trying the following command and using iisreset /noforce after running but external access still asking for FQDN... internal access to OWA fine and logging in automatically using inegrated auth.

 

set-owavirtualdirectory "owa (default web site)" externalauthentificationmethods fba

 

I am assuming it is fba for forms based... can't seem to find full paramaters

 

Ben

[powdarrmonkey]

You do indeed need two sites in IIS, one with integrated authentication switched on and one with just anonymous access. Not being at work though I can't tell you exactly what to do, but for us I think it Just Worked ™.

[Ben_Stanton]

Thanks powdarrmonkey,

 

I'll crack open IIS and have a looksie in a bit...

 

Surely it's not that simple...

[powdarrmonkey]

Ok, on closer investigation, you do need a second IIS site but don't create it using the IIS console. Use the Exchange shell and the New-OwaVirtualDirectory command.

[SYNACK]

Just posting this for completeness as I have just found it:

The Yam: Use both integrated and forms-based authentication in OWA 2007