Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

OWA 2007 login prompt in IE8

28 views
Skip to first unread message

Dennis

unread,
Oct 11, 2009, 10:19:01 PM10/11/09
to
How can I suppress the second OWA 2007 login prompt?

Windows server 2003 STD SP2 terminal services
Exchange 2007 SP2 Enterprise
IIS 6
Internet Explorer 8
Outlook 2003
OWA 2007 single sign-on

OWA single sign-on worked correctly until Exchange SP2 was applied (skipped
SP1). Now OWA 2007 users are presented with an OWA login prompt in IE8 and
Firefox 3.5. Clicking the login command button without entering user
credentials lets the user past the prompt and opens OWA with the users
account.

Troubleshooting: Mostly steps suggested on EE and Google searches.
IE8: Set user authentication to use current user name and password
IE8: Deleted browsing history and cookies, set to delete browsing history
on exit
IE8: set default web page to blank to see if GPO is providing URL or IIS
Group Policy: URL forced from default domain policy = http://exchange/owa
IE8: opens with
http://exchange/owa/auth/logon.aspx?replaceCurrent=1&url=http%3a%2f%fexchange%2fowa%2f
Exchange Server: Disabled FBA and set to windows authentication
Works correctly for domain admin, but everyone else is prompted twice
Affects all users not an isolated group
All systems are running in VMWARE ESX 3.5 SP4

Dennis

a@tleederbyshired.0.tc.0.m Lee Derbyshire [MVP]

unread,
Oct 12, 2009, 11:57:53 AM10/12/09
to
"Dennis" <Den...@discussions.microsoft.com> wrote in message
news:F5B3C0D9-CCE3-49D6...@microsoft.com...

It will help to see the iis log file entries, so that we can see when the
server return a 401 a status, prompting the browser to ask the user to log
in.

Lee.

--
______________________________________

Outlook Web Access For PDA , OWA For WAP
www.leederbyshire.com
lee a.t leederbyshire d.o.t c.o.m
______________________________________


Dennis

unread,
Oct 13, 2009, 12:22:02 PM10/13/09
to
This is an excerpt from the log, it was too large to paste the entire
contents...
If you would like to see the entire log I can email it to you with the
results of running AuthDiag.exe

#Software: Microsoft Internet Information Services 6.0
#Version: 1.0
#Date: 2009-10-12 00:04:32
#Fields: date time s-sitename s-ip cs-method cs-uri-stem cs-uri-query s-port
cs-username c-ip cs(User-Agent) sc-status sc-substatus sc-win32-status

2009-10-12 10:36:30 W3SVC1 192.168.0.21 GET /owa/auth/logon.aspx
replaceCurrent=1&url=http%3a%2f%2fexchange%2fowa%2f 80 - 192.168.0.17
Mozilla/4.0+(compatible;+MSIE+7.0;+Windows+NT+5.2;+Trident/4.0;+GTB6;+.NET+CLR+1.1.4322;+.NET+CLR+2.0.50727;+.NET+CLR+3.0.04506.30;+.NET+CLR+3.0.04506.648;+.NET+CLR+3.0.4506.2152;+.NET+CLR+3.5.30729) 200 0 0
2009-10-12 10:36:35 W3SVC1 192.168.0.21 POST /owa/auth/owaauth.dll - 80 -
192.168.0.17
Mozilla/4.0+(compatible;+MSIE+7.0;+Windows+NT+5.2;+Trident/4.0;+GTB6;+.NET+CLR+1.1.4322;+.NET+CLR+2.0.50727;+.NET+CLR+3.0.04506.30;+.NET+CLR+3.0.04506.648;+.NET+CLR+3.0.4506.2152;+.NET+CLR+3.5.30729) 302 0 0
2009-10-12 10:36:35 W3SVC1 192.168.0.21 GET /owa/ - 80 - 192.168.0.17
Mozilla/4.0+(compatible;+MSIE+7.0;+Windows+NT+5.2;+Trident/4.0;+GTB6;+.NET+CLR+1.1.4322;+.NET+CLR+2.0.50727;+.NET+CLR+3.0.04506.30;+.NET+CLR+3.0.04506.648;+.NET+CLR+3.0.4506.2152;+.NET+CLR+3.5.30729) 401 2 2148074254
2009-10-12 10:36:35 W3SVC1 192.168.0.21 GET /owa/Default.aspx
&prfltncy=359&prfrpccnt=23&prfrpcltncy=281&prfldpcnt=2&prfldpltncy=15&prfavlcnt=0&prfavlltncy=0
80 USEMCO\dbirner 192.168.0.17
Mozilla/4.0+(compatible;+MSIE+7.0;+Windows+NT+5.2;+Trident/4.0;+GTB6;+.NET+CLR+1.1.4322;+.NET+CLR+2.0.50727;+.NET+CLR+3.0.04506.30;+.NET+CLR+3.0.04506.648;+.NET+CLR+3.0.4506.2152;+.NET+CLR+3.5.30729) 200 0 0
2009-10-12 10:36:35 W3SVC1 192.168.0.21 GET /owa/ ae=Folder&t=IPF.Note&a= 80
- 192.168.0.17
Mozilla/4.0+(compatible;+MSIE+7.0;+Windows+NT+5.2;+Trident/4.0;+GTB6;+.NET+CLR+1.1.4322;+.NET+CLR+2.0.50727;+.NET+CLR+3.0.04506.30;+.NET+CLR+3.0.04506.648;+.NET+CLR+3.0.4506.2152;+.NET+CLR+3.5.30729) 401 2 2148074254
2009-10-12 10:36:36 W3SVC1 192.168.0.21 GET /owa/Default.aspx
ae=Folder&t=IPF.Note&a=&prfltncy=315&prfrpccnt=11&prfrpcltncy=187&prfldpcnt=2&prfldpltncy=15&prfavlcnt=0&prfavlltncy=0
80 USEMCO\dbirner 192.168.0.17
Mozilla/4.0+(compatible;+MSIE+7.0;+Windows+NT+5.2;+Trident/4.0;+GTB6;+.NET+CLR+1.1.4322;+.NET+CLR+2.0.50727;+.NET+CLR+3.0.04506.30;+.NET+CLR+3.0.04506.648;+.NET+CLR+3.0.4506.2152;+.NET+CLR+3.5.30729) 200 0 0
2009-10-12 10:36:44 W3SVC1 192.168.0.21 GET /owa/
ae=Item&a=Open&t=IPM.Note&id=RgAAAAC8YdIvJS3mS5aTF8V%2f%2fAmQBwAr87DRlbmQRIL%2bulhs0%2feHAVJSVc27AAAr87DRlbmQRIL%2bulhs0%2feHAYWiHcU8AAAJ
80 - 192.168.0.17
Mozilla/4.0+(compatible;+MSIE+7.0;+Windows+NT+5.2;+Trident/4.0;+GTB6;+.NET+CLR+1.1.4322;+.NET+CLR+2.0.50727;+.NET+CLR+3.0.04506.30;+.NET+CLR+3.0.04506.648;+.NET+CLR+3.0.4506.2152;+.NET+CLR+3.5.30729) 401 2 2148074254
2009-10-12 10:36:44 W3SVC1 192.168.0.21 GET /owa/Default.aspx
ae=Item&a=Open&t=IPM.Note&id=RgAAAAC8YdIvJS3mS5aTF8V%2f%2fAmQBwAr87DRlbmQRIL%2bulhs0%2feHAVJSVc27AAAr87DRlbmQRIL%2bulhs0%2feHAYWiHcU8AAAJ&prfltncy=221&prfrpccnt=9&prfrpcltncy=171&prfldpcnt=1&prfldpltncy=0&prfavlcnt=0&prfavlltncy=0
80 USEMCO\dbirner 192.168.0.17
Mozilla/4.0+(compatible;+MSIE+7.0;+Windows+NT+5.2;+Trident/4.0;+GTB6;+.NET+CLR+1.1.4322;+.NET+CLR+2.0.50727;+.NET+CLR+3.0.04506.30;+.NET+CLR+3.0.04506.648;+.NET+CLR+3.0.4506.2152;+.NET+CLR+3.5.30729) 200 0 0
2009-10-12 10:36:49 W3SVC1 192.168.0.21 POST /owa/ev.owa
oeh=1&ns=ReadMessage&ev=Delete&prfltncy=195&prfrpccnt=6&prfrpcltncy=171&prfldpcnt=0&prfldpltncy=0&prfavlcnt=0&prfavlltncy=0
80 USEMCO\dbirner 192.168.0.17
Mozilla/4.0+(compatible;+MSIE+7.0;+Windows+NT+5.2;+Trident/4.0;+GTB6;+.NET+CLR+1.1.4322;+.NET+CLR+2.0.50727;+.NET+CLR+3.0.04506.30;+.NET+CLR+3.0.04506.648;+.NET+CLR+3.0.4506.2152;+.NET+CLR+3.5.30729) 200 0 0
2009-10-12 10:36:55 W3SVC1 192.168.0.21 GET /owa/
ae=Item&a=Open&t=IPM.Note&id=RgAAAAC8YdIvJS3mS5aTF8V%2f%2fAmQBwAr87DRlbmQRIL%2bulhs0%2feHAVJSVc27AAAr87DRlbmQRIL%2bulhs0%2feHAYWiHcU9AAAJ
80 - 192.168.0.17
Mozilla/4.0+(compatible;+MSIE+7.0;+Windows+NT+5.2;+Trident/4.0;+GTB6;+.NET+CLR+1.1.4322;+.NET+CLR+2.0.50727;+.NET+CLR+3.0.04506.30;+.NET+CLR+3.0.04506.648;+.NET+CLR+3.0.4506.2152;+.NET+CLR+3.5.30729) 401 2 2148074254
2009-10-12 10:36:55 W3SVC1 192.168.0.21 GET /owa/Default.aspx
ae=Item&a=Open&t=IPM.Note&id=RgAAAAC8YdIvJS3mS5aTF8V%2f%2fAmQBwAr87DRlbmQRIL%2bulhs0%2feHAVJSVc27AAAr87DRlbmQRIL%2bulhs0%2feHAYWiHcU9AAAJ&prfltncy=128&prfrpccnt=7&prfrpcltncy=31&prfldpcnt=1&prfldpltncy=0&prfavlcnt=0&prfavlltncy=0
80 USEMCO\dbirner 192.168.0.17
Mozilla/4.0+(compatible;+MSIE+7.0;+Windows+NT+5.2;+Trident/4.0;+GTB6;+.NET+CLR+1.1.4322;+.NET+CLR+2.0.50727;+.NET+CLR+3.0.04506.30;+.NET+CLR+3.0.04506.648;+.NET+CLR+3.0.4506.2152;+.NET+CLR+3.5.30729) 200 0 0
2009-10-12 10:36:55 W3SVC1 192.168.0.21 GET /owa/attachment.ashx
id=RgAAAAC8YdIvJS3mS5aTF8V%2f%2fAmQBwAr87DRlbmQRIL%2bulhs0%2feHAVJSVc27AAAr87DRlbmQRIL%2bulhs0%2feHAYWiHcU9AAAJ&attcnt=1&attid0=EAC276ra3PV6R75PWCA5K4w%2f
80 - 192.168.0.17
Mozilla/4.0+(compatible;+MSIE+7.0;+Windows+NT+5.2;+Trident/4.0;+GTB6;+.NET+CLR+1.1.4322;+.NET+CLR+2.0.50727;+.NET+CLR+3.0.04506.30;+.NET+CLR+3.0.04506.648;+.NET+CLR+3.0.4506.2152;+.NET+CLR+3.5.30729) 401 2 2148074254
2009-10-12 10:36:55 W3SVC1 192.168.0.21 GET /owa/attachment.ashx
id=RgAAAAC8YdIvJS3mS5aTF8V%2f%2fAmQBwAr87DRlbmQRIL%2bulhs0%2feHAVJSVc27AAAr87DRlbmQRIL%2bulhs0%2feHAYWiHcU9AAAJ&attcnt=1&attid0=EAC276ra3PV6R75PWCA5K4w%2f&prfltncy=181&prfrpccnt=6&prfrpcltncy=31&prfldpcnt=0&prfldpltncy=0&prfavlcnt=0&prfavlltncy=0
80 USEMCO\dbirner 192.168.0.17
Mozilla/4.0+(compatible;+MSIE+7.0;+Windows+NT+5.2;+Trident/4.0;+GTB6;+.NET+CLR+1.1.4322;+.NET+CLR+2.0.50727;+.NET+CLR+3.0.04506.30;+.NET+CLR+3.0.04506.648;+.NET+CLR+3.0.4506.2152;+.NET+CLR+3.5.30729) 200 0 0

Dennis

unread,
Oct 13, 2009, 1:55:24 PM10/13/09
to
Here is the excerpt with 401 errors.

#Software: Microsoft Internet Information Services 6.0
#Version: 1.0
#Date: 2009-10-12 00:04:32
#Fields: date time s-sitename s-ip cs-method cs-uri-stem cs-uri-query s-port
cs-username c-ip cs(User-Agent) sc-status sc-substatus sc-win32-status

2009-10-12 00:04:32 W3SVC1 192.168.0.21 POST /owa/ev.owa
oeh=1&ns=Notify&ev=Poll 80 - 192.168.0.21
Mozilla/4.0+(compatible;+MSIE+7.0;+Windows+NT+5.2;+WOW64;+Trident/4.0;+.NET+CLR+2.0.50727;+.NET+CLR+1.1.4322;+.NET+CLR+3.0.04506.30;+.NET+CLR+3.0.04506.648;+.NET+CLR+3.0.4506.2152;+.NET+CLR+3.5.30729) 401 1 0
2009-10-12 00:04:32 W3SVC1 192.168.0.21 POST /owa/ev.owa
oeh=1&ns=Notify&ev=Poll&prfltncy=1&prfrpccnt=0&prfrpcltncy=0&prfldpcnt=0&prfldpltncy=0&prfavlcnt=0&prfavlltncy=0
80 USEMCO\atomic-user 192.168.0.21
Mozilla/4.0+(compatible;+MSIE+7.0;+Windows+NT+5.2;+WOW64;+Trident/4.0;+.NET+CLR+2.0.50727;+.NET+CLR+1.1.4322;+.NET+CLR+3.0.04506.30;+.NET+CLR+3.0.04506.648;+.NET+CLR+3.0.4506.2152;+.NET+CLR+3.5.30729) 200 0 0
2009-10-12 00:05:22 W3SVC1 192.168.0.21 POST /EWS/Exchange.asmx - 443 -
67.223.71.158 Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.0) 401 2
2148074254
2009-10-12 00:05:22 W3SVC1 192.168.0.21 POST /EWS/Exchange.asmx - 443 -
67.223.71.158 Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.0) 401 1 0
2009-10-12 00:05:22 W3SVC1 192.168.0.21 POST /EWS/Exchange.asmx
SoapAction=GetFolder;Version=0;RpcC=7;RpcL=31;LdapC=4;LdapL=0; 443
USEMCO\rcarlson 67.223.71.158
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.0) 200 0 0
2009-10-12 00:05:22 W3SVC1 192.168.0.21 POST /EWS/Exchange.asmx - 443 -
67.223.71.158 Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.0) 401 2
2148074254
2009-10-12 00:05:24 W3SVC1 192.168.0.21 POST /EWS/Exchange.asmx - 443 -
67.223.71.158 Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.0) 401 1 0
2009-10-12 00:05:24 W3SVC1 192.168.0.21 POST /EWS/Exchange.asmx
SoapAction=FindItem;Version=0;RpcC=6;RpcL=0;LdapC=0;LdapL=0; 443
USEMCO\rcarlson 67.223.71.158
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.0) 200 0 0
2009-10-12 00:05:24 W3SVC1 192.168.0.21 POST /EWS/Exchange.asmx
SoapAction=FindItem;Version=0;RpcC=6;RpcL=0;LdapC=0;LdapL=0; 443
USEMCO\rcarlson 67.223.71.158
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.0) 200 0 0
2009-10-12 00:09:55 W3SVC1 192.168.0.21 POST /EWS/Exchange.asmx - 80 -
67.223.71.27 Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.0) 401 2
2148074254
2009-10-12 00:09:55 W3SVC1 192.168.0.21 POST /EWS/Exchange.asmx - 80 -
67.223.71.27 Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.0) 401 1 0
2009-10-12 00:09:55 W3SVC1 192.168.0.21 POST /EWS/Exchange.asmx
SoapAction=GetFolder;Version=0;RpcC=7;RpcL=0;LdapC=4;LdapL=0; 80
USEMCO\prezin 67.223.71.27 Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.0)
200 0 0
2009-10-12 00:09:55 W3SVC1 192.168.0.21 POST /EWS/Exchange.asmx - 80 -
67.223.71.27 Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.0) 401 2
2148074254
2009-10-12 00:09:55 W3SVC1 192.168.0.21 POST /EWS/Exchange.asmx - 80 -
67.223.71.27 Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.0) 401 1 0
2009-10-12 00:09:55 W3SVC1 192.168.0.21 POST /EWS/Exchange.asmx
SoapAction=FindItem;Version=0;RpcC=6;RpcL=0;LdapC=0;LdapL=0; 80 USEMCO\prezin
67.223.71.27 Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.0) 200 0 0
2009-10-12 00:09:55 W3SVC1 192.168.0.21 POST /EWS/Exchange.asmx
SoapAction=FindItem;Version=0;RpcC=6;RpcL=0;LdapC=0;LdapL=0; 80 USEMCO\prezin
67.223.71.27 Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.0) 200 0 0
2009-10-12 00:10:22 W3SVC1 192.168.0.21 POST /EWS/Exchange.asmx - 80 -
67.223.65.21 Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.0) 401 2
2148074254
2009-10-12 00:10:22 W3SVC1 192.168.0.21 POST /EWS/Exchange.asmx - 80 -
67.223.65.21 Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.0) 401 1 0
2009-10-12 00:10:22 W3SVC1 192.168.0.21 POST /EWS/Exchange.asmx
SoapAction=GetFolder;Version=0;RpcC=7;RpcL=31;LdapC=4;LdapL=15; 80
USEMCO\bruhling 67.223.65.21
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.0) 200 0 0
2009-10-12 00:10:22 W3SVC1 192.168.0.21 POST /EWS/Exchange.asmx - 80 -
67.223.65.21 Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.0) 401 2
2148074254
2009-10-12 00:10:22 W3SVC1 192.168.0.21 POST /EWS/Exchange.asmx - 80 -
67.223.65.21 Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.0) 401 1 0
--
Dennis

a@tleederbyshired.0.tc.0.m Lee Derbyshire [MVP]

unread,
Oct 13, 2009, 2:22:35 PM10/13/09
to
I'm not sure where all those POSTs to EWS come from. I'm not aware of any
OWA feature that uses EWS. Do you have any OWA addons installed?

"Dennis" <Den...@discussions.microsoft.com> wrote in message

news:66774E16-CB91-4F02...@microsoft.com...

Dennis

unread,
Oct 13, 2009, 4:20:01 PM10/13/09
to
No OWA add-ons.

a@tleederbyshired.0.tc.0.m Lee Derbyshire [MVP]

unread,
Oct 14, 2009, 10:54:41 AM10/14/09
to
To see if it's anything to do with EWS, make sure that the authentication
setting on the EWS VDir is the same as it is on OWA. I think you said that
you now have IWA enabled. Try setting the EWS VDir to that, too.

"Dennis" <Den...@discussions.microsoft.com> wrote in message

news:5622638C-87FF-47A1...@microsoft.com...

Dennis

unread,
Oct 15, 2009, 12:34:12 PM10/15/09
to
The EWS would be for BlackBerry users accessing the Exchange Server through
ActiveSync, using a product called AstraSync installed on the BlackBerry
devices.

a@tleederbyshired.0.tc.0.m Lee Derbyshire [MVP]

unread,
Oct 16, 2009, 9:56:33 AM10/16/09
to

Hm. Unfortunately, nearly all the log entries in that last post were for the
BB, then. Try logging into OWA again (when it's quiet, so there are fewer
log entries). Verify that you see two logons, wait a few minutes (so the
server can flush the entries), and then have another look at the log file.
Use the CS (client to server) IP address to eliminate entries that aren't
your own (you can even do this in Excel), and look for the 401s.

"Dennis" <Den...@discussions.microsoft.com> wrote in message

news:0C2A69EF-7946-4252...@microsoft.com...

0 new messages