Hi chris, We had quite the same problem, we have owa in the dmz and password change wasn't working, there littele information out there, but i got iit working after some time, this is wat i did. first you have to get an ssl certificate, becouse the password change request with sent to ads had to be encrypted for security reasons. i didn't managed to install the website on an member server, so we put it on an domain controller, but iam not sure whether it's nessecary. then we gave Read/exec,list permissions on the iisadminpwd directory in het system32 folder. in iis, we gave read permissions, and script and executable execture permissions in the default document specify aexp.htr as default document, diable anonymous access, and we put basic and intergrated on thats how it worked for me. we used it for an pilot, but because of the limitations and problems with different versions of i.e. and netscape, we stopped with passwordchange. I hope this helps a little, i have a link for more information included. http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnw2kmag01/html/passwords.asp greets Martijn Spelt Computer & Network Services Gemeentelijk Havenbedrijf Rotterdam Tel 010- 252 19 76 Fax 010- 252 19 57 E-mail m.spelt@xxxxxxxxxxxxxxxxx Internet www.portofrotterdam.com World Port Center Wilhelminakade 909 3072 AP Rotterdam Nederland -----Oorspronkelijk bericht----- Van: Chris Adams [mailto:chris.Adams@xxxxxxxxxxxxxxxx] Verzonden: donderdag 9 januari 2003 16:05 Aan: [ExchangeList] Onderwerp: [exchangelist] RE: Exchange Front End and OWA http://www.MSExchange.org/ Martijn, The situation we are currently in is this: We have an OWA Website that works perfectly on our "Default Web Site" Listening on an IP Address (w.x.y.z). We also have another Virtual Website created through Exchange System Manager called "Extranet Web Site" Listening on another IP Address (w.x.y.a) which is NAT'ed to an external IP in the firewall. If we swap the IP's round, so that the "Default Web Site" is serving the external requests, that, too, works perfectly. The problem appears to be the "Extranet Web SIte" created through Exchange System Manager. It appears that any virtual directories created in Internet Services Manager (especially an IISAdmPwd virtual directory to allow changing of passwords through OWA) are not being served, even though they appear perfectly in Internet Services Manager. All you get is a 404 not found, even though the /exchange/ and /exchweb/ virtual directories work perfectly. This is the same even if you create a new virtual directory (foo) pointing to some dummy content, (bar.htm). The questions, really, are: how can we get these virtual directories (Password changing etc...) working on both websites? Is there any reason we can't do this? Any help would be much appreciated. Chris. -----Original Message----- From: Spelt, Martijn [mailto:M.spelt@xxxxxxxxxxxxxxxxx] Sent: 09 January 2003 14:47 To: [ExchangeList] Subject: [exchangelist] RE: Exchange Front End and OWA http://www.MSExchange.org/ Hi, what kind of authentication do you use on the second site? with firewalls, ms-chap wouldn't work because on most firewalls the rpc channels are closed. greets Martijn Spelt Computer & Network Services Gemeentelijk Havenbedrijf Rotterdam Tel 010- 252 19 76 Fax 010- 252 19 57 E-mail m.spelt@xxxxxxxxxxxxxxxxx Internet www.portofrotterdam.com World Port Center Wilhelminakade 909 3072 AP Rotterdam Nederland -----Oorspronkelijk bericht----- Van: Kerman Jasavala [mailto:Kerman.Jasavala@xxxxxxxxxxxxxxxx] Verzonden: donderdag 9 januari 2003 14:56 Aan: [ExchangeList] Onderwerp: [exchangelist] Exchange Front End and OWA http://www.MSExchange.org/ Hi All I hope someone out there can help. We have recently installed a new Exchange 2000 server to act as a Front end server primarily for OWA. I need to make the OWA site available to two different networks that are protected by different firewalls, with two different names. Both sites need to be secure and provide the clients with the ability to change their passwords as well as accessing the mailboxes etc. I have carried out all the necessary steps and the default web site works fine. I then created a second site and copied the necessary configuration etc, however on the second site the change password facility does not work. I receive an HTTP 404 error. As a method of testing we have created a test html page under the iisadmpwd directory but we cannot access this either. Is there a setting that I've missed? Any help would be appreciated. Thanks Kerman ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ ISA Server Resource Site: http://www.isaserver.org Windows Security Resource Site: http://www.windowsecurity.com/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this MSExchange.org Discussion List as: m.spelt@xxxxxxxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub') ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ ISA Server Resource Site: http://www.isaserver.org Windows Security Resource Site: http://www.windowsecurity.com/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this MSExchange.org Discussion List as: chris.adams@xxxxxxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub') ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ ISA Server Resource Site: http://www.isaserver.org Windows Security Resource Site: http://www.windowsecurity.com/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this MSExchange.org Discussion List as: m.spelt@xxxxxxxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub')