Incorrectly typing the URL for your Microsoft Outlook Web Access (OWA) page will result in an error message. Because users may mistakenly type HTTP instead of HTTPS to access OWA, Microsoft Exchange expert Brien Posey recommends creating an OWA redirection page that doesn't sacrifice secure sockets layer (SSL) security. This tip explains the steps to create your own secure OWA redirect page.
Although I'm familiar with Exchange Server and Microsoft Outlook Web Access (OWA), I sometimes forget to type HTTPS when accessing my OWA site. This causes my OWA server to generate a The Page Must Be Viewed Over A Secure Channel error message. When this happens, I simply enter the URL correctly and log on.
It occurred to me that there will always be a group of users who may also forget to type HTTPS. I came up with an easy way to help these users -- eliminating the need to type HTTPS without sacrificing SSL security.
To do this, I set up a redirection page. That way, if a user enters the OWA URL using the HTTP prefix (instead of HTTPS), he will be redirected to the OWA website (with SSL enabled), rather than receiving the error message. This should help reduce help desk calls.
The following steps apply to OWA 2007, but this technique will also work for OWA 2003 with slight modifications.
Keep in mind that trying to access OWA without typing HTTPS triggers an HTTP 403.4 error. This essentially denies access to the resource (OWA), because a policy states that SSL is required. The error message is actually just a Web page that has been linked to the 403.4
To continue reading for free, register below or login
To read more you must become a member of SearchExchange.com
error. To fix this, replace the error Web page with the page that we created earlier. To do so:
Although this technique works well, there are a couple of things to note.
Note: IIS can be particular about custom error pages. I have used this technique on multiple occasions. Most often, it works. However, sometimes IIS gives me a permissions error that I am unable to resolve. If this happens, I recommend editing the existing error message file (DO NOT replace it), so that it includes the new code.
This method won't work for all organizations, but if OWA is the only HTTPS-enabled site on your CAS, this technique might save users some frustration.
About the author: Brien M. Posey, MCSE, is a five-time recipient of Microsoft's Most Valuable Professional award for his work with Exchange Server, Windows Server, Internet Information Server (IIS) and File Systems and Storage. Brien has served as CIO for a nationwide chain of hospitals and was once responsible for the Department of Information Management at Fort Knox. As a freelance technical writer, Brien has written for Microsoft, TechTarget, CNET, ZDNet, MSD2D, Relevant Technologies and other technology companies. You can visit Brien's personal website at www.brienposey.com.
Do you have comments on this tip? Let us know.
Please let others know how useful this tip was via the rating scale below. Do you know a helpful Exchange Server, Microsoft Outlook or SharePoint tip, timesaver or workaround? Email the editors to talk about writing for SearchExchange.com.
