Very Computer

How do you successfully configure the system(s) to allow OWA to be accessed
using NT Challange / Response? We are using Exchange 5.5, Proxy 2.0, and NT
4.0. The configuration is as follows:

Domain A has Proxy, Exchange, and IIS installed. IIS is set to authenticate
users using Domain B.

THanks

Quote:>How do you successfully configure the system(s) to allow OWA to be accessed
>using NT Challange / Response? We are using Exchange 5.5, Proxy 2.0, and NT
>4.0. The configuration is as follows:

>Domain A has Proxy, Exchange, and IIS installed. IIS is set to authenticate
>users using Domain B.

Those changes are made in IIS on the "Directory Security" tab of the
virtual directory.

------------------
Rich Matheisen
MCSE+I, Exchange MVP
MS Exchange FAQ at http://www.swinc.com/resource/exch_faq.htm

Rich, Thanks. I know where the change is in IIS. However, when the change is
made, OWA does not work. Is there a white paper with exact permissions, etc.
for this to work somewhere?

There seems to be a lot of confusion about this in general. All
documentation that I have found indicates that it can be done, but no step
by step instructions. Perhaps someone who is experienced in this would
consider publishing a detailed document specifically on OWA and the various
configurations of it (or better yet, point me to such a document if it
already exist).

Thanks

Quote:>Rich, Thanks. I know where the change is in IIS. However, when the change is
>made, OWA does not work.

That's probably because you block NetBIOS ports at the firewall! To
use NTLM/NTCR requires that port 139 is open between the browser and
OWA server. This is /not/ a desireable situation. Further, there are
dificulties if there are three machines invloved (the browser, the
OWA/IIS server, and the Exchange server). While NTLM/NTCR will work
between the browser and OWA, OWA cannot use the credentials
authenticate with the Exchange server (because it doesn't have the
password). Stick with plain text authentication and use SSL or a VPN
for security.

Quote:>Is there a white paper with exact permissions, etc.
>for this to work somewhere?

There are several TechNet KB articles on this topic.

------------------
Rich Matheisen
MCSE+I, Exchange MVP
MS Exchange FAQ at http://www.swinc.com/resource/exch_faq.htm