How to customize OWA authentication logon in Exchange Server 2003

In Exchange Server 2003, Outlook Web Access (OWA) requires, by default, that users supply both a domain name and a username when logging in. This is done using the format <domain_name>\<login_name> in the logon dialog box. Unfortunately, users often forget to include the domain name when logging into OWA and are unable to log in successfully.

Although it is possible to log in to OWA with only a username and no domain name, it requires a little administrative work and some prerequisites. The Exchange server must be running on Windows Server 2003 SP1 or later, and the Exchange virtual directory in Internet Information Services (IIS) must be configured to accept only Basic authentication.

To customize the OWA logon page in Exchange Sever 2003:

1. Open Exchange System Manager (ESM).
2. Expand Administrative Groups -> <admin_group_name> (which will vary) -> Servers -> <server_name> -> Protocol -> HTTP -> Exchange Virtual Server.
3. Right click on Exchange and select Properties -> Access -> Authentication.
4. Select the Basic authentication checkbox and clear all other checkboxes.
5. Edit the Default domain box to contain only a single backslash (\).
6. Click OK to close the dialog boxes.
7. Right click on Public in Exchange Virtual Server and select Properties -> Access -> Authentication.
8. Repeat steps 4–6 here.
9. Repeat this procedure on all front-end and back-end Exchange servers that host OWA.

If you do this, there are several caveats to keep in mind:

• You should not attempt to customize the OWA logon page unless you're sure that you have unique usernames across all domains in your Exchange organization's forest.

  If you only have one domain, usernames automatically will be unique.

  More on Outlook Web Access (OWA) authentication: An OWA authentication anomaly OWA authentication issues when using a proxy server How enabling SSL for OWA affects bandwidth Recreating IIS virtual directories for OWA, OMA and Exchange ActiveSync OWA error: You are not authorized to view this page OWA user authentication tips and tutorials

  However, if you have more than one domain, you'll need to make sure that there are no duplicated usernames. If a username exists in more than one domain, IIS (which performs the actual name lookup) will search for a matching name and password in the local domain first.

• Because Basic authentication is inherently less secure than Integrated Windows authentication, you should configure it to work across a Secure Sockets Layer (SSL) connection for added security. This precaution is especially important if users routinely log on to OWA from outside the Exchange organization.
• If you're using Exchange ActiveSync clients, you'll need to reconfigure ActiveSync. Follow the Exchange ActiveSync configuration instructions for Method 2 in the Microsoft Knowledge Base article 817379, Exchange ActiveSync and Outlook Mobile Access errors occur when SSL or forms-based authentication is required for Exchange Server 2003.
• If you have to recreate the Exchange virtual directories automatically in IIS for any reason, they will no longer be configured to accept Basic authentication (by default), and you must repeat this procedure.

About the author: Serdar Yegulalp is editor of Windows Insight, a newsletter devoted to hints, tips, tricks, news and goodies for all flavors of Windows users.

Do you have comments on this tip? Let us know.

Please let others know how useful this tip was via the rating scale below. Do you know a helpful Exchange Server, Microsoft Outlook or SharePoint tip, timesaver or workaround? Email the editors to talk about writing for SearchExchange.com.

Rate this Tip To rate tips, you must be a member of SearchExchange.com. Register now to start rating these tips. Log in if you are already a member. Digg This!     StumbleUpon     Del.icio.us    RELATED CONTENT User Authentication for Microsoft Outlook and OWA How to improve Outlook Web Access (OWA) security Alleviate Outlook Web Access (OWA) email attachment security issues Automated redirects to OWA directories may fail when SSL is enforced Configure Windows Mobile devices to local wipe after failed logons How to set up an SSL certificate to encrypt OWA and ActiveSync traffic Error: 'The name of the security certificate is invalid or does not match the name of the site' Password authentication works for OWA but fails for Microsoft Outlook Adding self-signed root certificates to Windows mobile devices Eliminate username and password prompt when opening Microsoft Outlook Access public folder calendars published on the Internet without prompting for login Outlook Web Access How to improve Outlook Web Access (OWA) security Alleviate Outlook Web Access (OWA) email attachment security issues Customizing Outlook Web Access (OWA) in Exchange Server 2007 Fix OWA message size limit issue after Exchange 2007 SP1 upgrade Top 10 Microsoft Outlook and Outlook Web Access tips of 2007 Top 10 Exchange, Microsoft Outlook and OWA email security tips of 2007 Automated redirects to OWA directories may fail when SSL is enforced Can't send Outlook Web Access email after Internet Explorer 7 upgrade Troubleshoot Outlook Web Access (OWA) login error: 'Access denied' Be careful when copying Outlook Web Access (OWA) hyperlinks Microsoft Exchange Server 2003 Why Exchange ActiveSync fails with NAT firewalls Is it time to upgrade users' Windows Mobile devices? Top 10 Microsoft Exchange Server 2003 registry hacks Use Performance Monitor to detect Exchange 2003 message queue problems How to set up email disclaimers on a single, back-end Exchange server Can a deleted transaction log be restored in Exchange Server 2003? Improve Exchange 2003 Internet connectivity, mail flow and performance Can I selectively archive Exchange Server 2003 email messages? How to back up and restore Exchange data with recovery storage groups Troubleshoot Exchange 2003 email that gets stuck in the SMTP queue Microsoft Exchange Server 2003 Research RELATED GLOSSARY TERMS Terms from Whatis.com − the technology online dictionary Vouch by Reference (VBR)  (SearchExchange.com) RELATED RESOURCES 2020software.com, trial software downloads for accounting software, ERP software, CRM software and business software systems Search Bitpipe.com for the latest white papers and business webcasts Whatis.com, the online computer dictionary DISCLAIMER: Our Tips Exchange is a forum for you to share technical advice and expertise with your peers and to learn from other enterprise IT professionals. TechTarget provides the infrastructure to facilitate this sharing of information. However, we cannot guarantee the accuracy or validity of the material submitted. You agree that your use of the Ask The Expert services and your reliance on any questions, answers, information or other materials received through this Web site is at your own risk.