• Login
• Become a member
• RSS
• Part of the TechTarget network

In Exchange Server 2003, Outlook Web Access (OWA) requires, by default, that users supply both a domain name and a username when logging in. This is done using the format <domain_name>\<login_name> in the logon dialog box. Unfortunately, users often forget to include the domain name when logging into OWA and are unable to log in successfully.

Although it is possible to log in to OWA with only a username and no domain name, it requires a little administrative work and some prerequisites. The Exchange server must be running on Windows Server 2003 SP1 or later, and the Exchange virtual directory in Internet Information Services (IIS) must be configured to accept only Basic authentication.

To customize the OWA logon page in Exchange Sever 2003:

1. Open Exchange System Manager (ESM).
2. Expand Administrative Groups -> <admin_group_name> (which will vary) -> Servers -> <server_name> -> Protocol -> HTTP -> Exchange Virtual Server.
3. Right click on Exchange and select Properties -> Access -> Authentication.
4. Select the Basic authentication checkbox and clear all other checkboxes.
5. Edit the Default domain box to contain only a single backslash (\).
6. Click OK to close the dialog boxes.
7. Right click on Public in Exchange Virtual Server and select Properties -> Access ->

1. Authentication.
2. Repeat steps 4–6 here.
3. Repeat this procedure on all front-end and back-end Exchange servers that host OWA.

If you do this, there are several caveats to keep in mind:

• You should not attempt to customize the OWA logon page unless you're sure that you have unique usernames across all domains in your Exchange organization's forest.

  If you only have one domain, usernames automatically will be unique.

  More on Outlook Web Access (OWA) authentication: An OWA authentication anomaly OWA authentication issues when using a proxy server How enabling SSL for OWA affects bandwidth Recreating IIS virtual directories for OWA, OMA and Exchange ActiveSync OWA error: You are not authorized to view this page OWA user authentication tips and tutorials

  However, if you have more than one domain, you'll need to make sure that there are no duplicated usernames. If a username exists in more than one domain, IIS (which performs the actual name lookup) will search for a matching name and password in the local domain first.
• Because Basic authentication is inherently less secure than Integrated Windows authentication, you should configure it to work across a Secure Sockets Layer (SSL) connection for added security. This precaution is especially important if users routinely log on to OWA from outside the Exchange organization.
• If you're using Exchange ActiveSync clients, you'll need to reconfigure ActiveSync. Follow the Exchange ActiveSync configuration instructions for Method 2 in the Microsoft Knowledge Base article 817379, Exchange ActiveSync and Outlook Mobile Access errors occur when SSL or forms-based authentication is required for Exchange Server 2003.
• If you have to recreate the Exchange virtual directories automatically in IIS for any reason, they will no longer be configured to accept Basic authentication (by default), and you must repeat this procedure.

About the author: Serdar Yegulalp is editor of Windows Insight, a newsletter devoted to hints, tips, tricks, news and goodies for all flavors of Windows users.

Do you have comments on this tip? Let us know.

Please let others know how useful this tip was via the rating scale below. Do you know a helpful Exchange Server, Microsoft Outlook or SharePoint tip, timesaver or workaround? Email the editors to talk about writing for SearchExchange.com.

Join the conversationComment

Disclaimer: Our Tips Exchange is a forum for you to share technical advice and expertise with your peers and to learn from other enterprise IT professionals. TechTarget provides the infrastructure to facilitate this sharing of information. However, we cannot guarantee the accuracy or validity of the material submitted. You agree that your use of the Ask The Expert services and your reliance on any questions, answers, information or other materials received through this Web site is at your own risk.