OWA/IIS Getting rid of domain\user

ethos

ethos

ethos

Soldato
Joined
5 May 2003
Posts
4,515
Location
UK
Alright chaps,

Sorting out OWA over https at work, managed to get it all up and running (bar sorting out some good ssl certs).

Been trying to get rid of the domain\username when logging in tho.

I've tried adding "\" "domain" "domain.local" "servername.domain.local" to IIS and system manager (obviously testing one at a time)... then stop / starting and it's still asking.

I'm sure it's something silly i'm doing wrong but I can't quite figure it out. Any other settings that would effect this? Can't find anything on google!

I'm changing the "Exchange" and "Public" folders.
 
I don't know the "proper" way to achieve this in Ex2003 but I cheated and edited the logon code :)

Code: 
<script Language=javascript>
<!--
function logonForm_onsubmit()
{
if (logonForm.username1.value.indexOf("@") !=-1)
{
return true;
}
logonForm.username.value = "domain_name\\" + logonForm.username1.value;
  return false;
}
//-->
</script>

Also

Code: 
<TD width="98%"><INPUT type="text" id="username1" name="username1" style="width:100%" size="25" maxlength="256"></TD>
<INPUT type="hidden" id="username" name="username" style="width:100%" size="25" maxlength="256">


Bit of a hack, but it works. Ex2007 has an option in PowerShell to customise this.
 
From your description it sounds like you have done the correct change. But to confirm....

You have the Authentication Methods on the Exchange virtual directory set to accept basic authenication and have the default domain set to your domains netbios name?

Is this Exchange 2003? Or SBS 2003?

When you get this sorted you might want to add these to OWA as well....

http://support.microsoft.com/kb/839357

http://support.microsoft.com/kb/319878
 
Yep and Exchange 2003.

Thanks for the links, I'm going to be hosting the https OWA and a "portal" website so shouldn't need to play with either of those. Make it nice and easy for the user :D
 
And when you look back in the Authentication Methods you stil see the netbios name set?

I'm assuming both Exchange and Windows are patched up to date?

The only time I've seen OWA not accept a username with the domain set was when the username matched (or closely matched the start of) a username. In that setup you had to use the full UPN or e-mail address to get in. Could this be the case for you?

Also try using netbios domain name followed by a star e.g DOMAIN* in the Authentication Methods.
 
Yep, if I go back into it the name is set, both patched up :)

Full upn/email address doesn't work either, tried that earlier. Obviously domain\username is working fine.

I'll give the "*" a go... thanks for the suggestions.
 
DOMAIN* Doesn't work.... :D

I'm changing this in IIS AND System manager by the way... not sure if that makes a difference.

Stopping and starting the exchange virtual server + default website is enough to make the changes valid?
 
Last edited:
With Exchange 2003 you should only be changing it within IIS (Exchange 2000 is different). I usually do an iisreset with the command prompt after changing.
 
So I should untick basic authentication on system manager and only change it in IIS?

I've tried this as well without much luck (restarting full iis now).

Why isn't anything ever easy? :D
 
The default settings for withing ESM are (after checking on a server!) only basic auth ticked and the domain set to \

I'd set it back to that but I'm not sure it will totally undo any changes that were made. Do you have System Attendent installed and running? This service takes the settings and writes it to the IIS metadata.

I'd give it a go first but if not I would rebuild OWA.

http://support.microsoft.com/?kbid=883380
 
Got this all done now with a ssl cert from rapidsll (very cheap and seems good).

Only problem I have, is after editing the logon.asp file I can't use firefox? The logon button doesn't do anythin! Not finding much on the tinternet either about it.

Ie works a treat... any ideas?

I used the guide from the website above :)
 
Last edited:
Yes, you need to undo the changes you made to the logon.asp. Form based authenication supports login without using a domain pre-fix post SP2.
 
You must log in or register to reply here.
Back
Top Bottom