Hrmph. "Log on locally" is nothing like a user account's machine "logon from" restriction. An OWA never needed "log on locally" to the Exchange server itself (unless you actually hosted OWA on the box itself rather than a FE). However, pre IIS6, any user authenticated via web services required "log on locally" rights to the IIS server - even the IUSR account for anonymous access. That was bad mojo. IIS6 has fixed all that noise. So there! t On 7/17/06 6:37 PM, "Greg Mulholland" <gmulholland@xxxxxxxxxxxx> spoketh to all: > same diff! almost.. > > sent via smtp > > ----- Original Message ----- > From: "Thor (Hammer of God)" <thor@xxxxxxxxxxxxxxx> > To: <isapros@xxxxxxxxxxxxx> > Sent: Tuesday, July 18, 2006 11:28 AM > Subject: [isapros] Re: Exch permissions Q > > >> No log on locally anymore. He actually limited the machine she could log >> on >> from.... >> >> T >> >> Sent from Entourage on OSX via VNC window from my XP box that I'm RDP'd >> into >> from my new Dell 2650's that I'm putting in the freaking laundry room. >> (Aincha jealous?) :-pppppppp >> >> >> t >> >> >> On 7/17/06 6:22 PM, "Greg Mulholland" <gmulholland@xxxxxxxxxxxx> spoketh >> to >> all: >> >>> so it was log on locally then? >>> >>> btw office 12 is good, vista i'll wait and see, so no not really :) >>> ----- Original Message ----- >>> From: "Jim Harrison" <Jim@xxxxxxxxxxxx> >>> To: <isapros@xxxxxxxxxxxxx> >>> Sent: Tuesday, July 18, 2006 11:17 AM >>> Subject: [isapros] Re: Exch permissions Q >>> >>> >>>> Got it. >>>> I had limited her machine logon rights to one machine. >>>> Once I gave her "all machines", she could get her mail. >>>> >>>> I guess this also stops impersonation <sigh>. >>>> >>>> Jim Harrison >>>> jim@xxxxxxxxxxxx >>>> www.isatools.org >>>> >>>> Sent using Vista Beta 2 and Office 12 Beta 2 (aincha jealous?) >>>> >>>> >>>> -----Original Message----- >>>> From: isapros-bounce@xxxxxxxxxxxxx [mailto:isapros-bounce@xxxxxxxxxxxxx] >>>> On Behalf Of Thomas W Shinder >>>> Sent: Monday, July 17, 2006 6:14 PM >>>> To: isapros@xxxxxxxxxxxxx >>>> Subject: [isapros] Re: Exch permissions Q >>>> >>>> OK, got it. >>>> >>>> Anything in the Event Viewer around the time you made the change? >>>> >>>> Thomas W Shinder, M.D. >>>> Site: www.isaserver.org >>>> Blog: http://blogs.isaserver.org/shinder/ >>>> Book: http://tinyurl.com/3xqb7 >>>> MVP -- ISA Firewalls >>>> >>>> >>>> >>>>> -----Original Message----- >>>>> From: isapros-bounce@xxxxxxxxxxxxx >>>>> [mailto:isapros-bounce@xxxxxxxxxxxxx] On Behalf Of Jim Harrison >>>>> Sent: Monday, July 17, 2006 8:08 PM >>>>> To: isapros@xxxxxxxxxxxxx >>>>> Subject: [isapros] Re: Exch permissions Q >>>>> >>>>> Exchange; it don't matter if ISA is involved or not. >>>>> >>>>> Jim Harrison >>>>> jim@xxxxxxxxxxxx >>>>> www.isatools.org >>>>> >>>>> Sent using Vista Beta 2 and Office 12 Beta 2 (aincha jealous?) >>>>> >>>>> -----Original Message----- >>>>> From: isapros-bounce@xxxxxxxxxxxxx >>>>> [mailto:isapros-bounce@xxxxxxxxxxxxx] >>>>> On Behalf Of Thomas W Shinder >>>>> Sent: Monday, July 17, 2006 5:03 PM >>>>> To: isapros@xxxxxxxxxxxxx >>>>> Subject: [isapros] Re: Exch permissions Q >>>>> >>>>> I'm just trying to figure out if it's an Exchange thang or an ISA >>>>> thang. >>>>> >>>>> Thomas W Shinder, M.D. >>>>> Site: www.isaserver.org >>>>> Blog: http://blogs.isaserver.org/shinder/ >>>>> Book: http://tinyurl.com/3xqb7 >>>>> MVP -- ISA Firewalls >>>>> >>>>> >>>>> >>>>>> -----Original Message----- >>>>>> From: isapros-bounce@xxxxxxxxxxxxx >>>>>> [mailto:isapros-bounce@xxxxxxxxxxxxx] On Behalf Of Jim Harrison >>>>>> Sent: Monday, July 17, 2006 7:01 PM >>>>>> To: isapros@xxxxxxxxxxxxx >>>>>> Subject: [isapros] Re: Exch permissions Q >>>>>> >>>>>> None of those deal in single-user problems. >>>>>> Neither me nor my wife have any problems with OWA - only my >>>>>> daughter... >>>>>> >>>>>> >>>>>> ------------------------------------------------------- >>>>>> Jim Harrison >>>>>> MCP(NT4, W2K), A+, Network+, PCG >>>>>> http://isaserver.org/Jim_Harrison/ >>>>>> http://isatools.org >>>>>> Read the help / books / articles! >>>>>> ------------------------------------------------------- >>>>>> >>>>>> >>>>>> -----Original Message----- >>>>>> From: isapros-bounce@xxxxxxxxxxxxx >>>>>> [mailto:isapros-bounce@xxxxxxxxxxxxx] On Behalf Of Greg Mulholland >>>>>> Sent: Monday, July 17, 2006 16:33 >>>>>> To: isapros@xxxxxxxxxxxxx >>>>>> Subject: [isapros] Re: Exch permissions Q >>>>>> >>>>>> seen this one jim? >>>>>> http://support.microsoft.com/kb/327843/en-us >>>>>> >>>>>> >>>>>> ----- Original Message ----- >>>>>> From: "Thomas W Shinder" <tshinder@xxxxxxxxxxx> >>>>>> To: <isapros@xxxxxxxxxxxxx> >>>>>> Sent: Tuesday, July 18, 2006 9:29 AM >>>>>> Subject: [isapros] Re: Exch permissions Q >>>>>> >>>>>> >>>>>> OK, it's not working internally and externally, and you've >>>>> configured >>>>>> a split DNS so that internal users aren't looping back through the >>>>>> external interface so that internal users are using Direct Access >>>>>> (just so that we remove the ISA firewall from the equation). >>>>>> >>>>>> >>>>>> >>>>>> Thomas W Shinder, M.D. >>>>>> Site: www.isaserver.org >>>>>> Blog: http://blogs.isaserver.org/shinder/ >>>>>> Book: http://tinyurl.com/3xqb7 >>>>>> MVP -- ISA Firewalls >>>>>> >>>>>> >>>>>> >>>>>>> -----Original Message----- >>>>>>> From: isapros-bounce@xxxxxxxxxxxxx >>>>>>> [mailto:isapros-bounce@xxxxxxxxxxxxx] On Behalf Of Jim Harrison >>>>>>> Sent: Monday, July 17, 2006 6:18 PM >>>>>>> To: isapros@xxxxxxxxxxxxx >>>>>>> Subject: [isapros] Re: Exch permissions Q >>>>>>> >>>>>>> That's what I thought I did, but checking Exch permissions, it's >>>>>>> enabled. >>>>>>> >>>>>>> >>>>>>> ------------------------------------------------------- >>>>>>> Jim Harrison >>>>>>> MCP(NT4, W2K), A+, Network+, PCG >>>>>>> http://isaserver.org/Jim_Harrison/ >>>>>>> http://isatools.org >>>>>>> Read the help / books / articles! >>>>>>> ------------------------------------------------------- >>>>>>> >>>>>>> >>>>>>> -----Original Message----- >>>>>>> From: isapros-bounce@xxxxxxxxxxxxx >>>>>>> [mailto:isapros-bounce@xxxxxxxxxxxxx] On Behalf Of Thomas >>>>> W Shinder >>>>>>> Sent: Monday, July 17, 2006 16:11 >>>>>>> To: isapros@xxxxxxxxxxxxx >>>>>>> Subject: [isapros] Re: Exch permissions Q >>>>>>> >>>>>>> OK, you might have turned off her account's access to OWA. >>>>>>> >>>>>>> Thomas W Shinder, M.D. >>>>>>> Site: www.isaserver.org >>>>>>> Blog: http://blogs.isaserver.org/shinder/ >>>>>>> Book: http://tinyurl.com/3xqb7 >>>>>>> MVP -- ISA Firewalls >>>>>>> >>>>>>> >>>>>>> >>>>>>>> -----Original Message----- >>>>>>>> From: isapros-bounce@xxxxxxxxxxxxx >>>>>>>> [mailto:isapros-bounce@xxxxxxxxxxxxx] On Behalf Of Jim Harrison >>>>>>>> Sent: Monday, July 17, 2006 6:10 PM >>>>>>>> To: isapros@xxxxxxxxxxxxx >>>>>>>> Subject: [isapros] Re: Exch permissions Q >>>>>>>> >>>>>>>> No; doesn't work from in or out, but MAPI works fine. >>>>>>>> >>>>>>>> >>>>>>>> ------------------------------------------------------- >>>>>>>> Jim Harrison >>>>>>>> MCP(NT4, W2K), A+, Network+, PCG >>>>>>>> http://isaserver.org/Jim_Harrison/ >>>>>>>> http://isatools.org >>>>>>>> Read the help / books / articles! >>>>>>>> ------------------------------------------------------- >>>>>>>> >>>>>>>> >>>>>>>> -----Original Message----- >>>>>>>> From: isapros-bounce@xxxxxxxxxxxxx >>>>>>>> [mailto:isapros-bounce@xxxxxxxxxxxxx] On Behalf Of Steve Moffat >>>>>>>> Sent: Monday, July 17, 2006 15:58 >>>>>>>> To: isapros@xxxxxxxxxxxxx >>>>>>>> Subject: [isapros] Re: Exch permissions Q >>>>>>>> >>>>>>>> She can log in from outlook internally?..did you disable >>>>>>> her mailbox? >>>>>>>> >>>>>>>> S >>>>>>>> >>>>>>>> -----Original Message----- >>>>>>>> From: isapros-bounce@xxxxxxxxxxxxx >>>>>>>> [mailto:isapros-bounce@xxxxxxxxxxxxx] On Behalf Of Jim Harrison >>>>>>>> Sent: Monday, July 17, 2006 7:06 PM >>>>>>>> To: isapros@xxxxxxxxxxxxx >>>>>>>> Subject: [isapros] Exch permissions Q >>>>>>>> >>>>>>>> My turn to ask... >>>>>>>> >>>>>>>> I disabled my daughter's OWA access while she was in >>>>>> school because >>>>>>>> the raging dumba$$3$ in your school let the kids veg on the >>>>>>> Internet >>>>>>>> all freakin' day (different issue). >>>>>>>> Now that she's actually gradumatated, I want to re-enable >>>>>> it, but I >>>>>>>> can't make it work. >>>>>>>> Of course, I don't know what I did, yasilly; or else I >>>>>> wouldn't be >>>>>>>> asking. >>>>>>>> ISA policies allow her to log in, but the OWA page keeps >>>>>>> regurgitating >>>>>>>> "401.1". >>>>>>>> 401.1 is supposed to be "invalid credentials", but I know the >>>>>>>> username/password are correct. >>>>>>>> >>>>>>>> I've checked her Exch permissions, and they seem fine >>>>>> (same as mine >>>>>>>> for her mailbox). >>>>>>>> >>>>>>>> ------------------------------------------------------- >>>>>>>> Jim Harrison >>>>>>>> MCP(NT4, W2K), A+, Network+, PCG >>>>>>>> http://isaserver.org/Jim_Harrison/ >>>>>>>> http://isatools.org >>>>>>>> Read the help / books / articles! >>>>>>>> ------------------------------------------------------- >>>>>>>> >>>>>>>> >>>>>>>> All mail to and from this domain is GFI-scanned. >>>>>>>> >>>>>>>> >>>>>>>> >>>>>>>> All mail to and from this domain is GFI-scanned. >>>>>>>> >>>>>>>> >>>>>>>> >>>>>>>> >>>>>>> >>>>>>> >>>>>>> All mail to and from this domain is GFI-scanned. >>>>>>> >>>>>>> >>>>>>> >>>>>>> >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> All mail to and from this domain is GFI-scanned. >>>>>> >>>>>> >>>>>> >>>>>> >>>>> >>>>> >>>>> All mail to and from this domain is GFI-scanned. >>>>> >>>>> >>>>> >>>>> >>>> >>>> >>>> All mail to and from this domain is GFI-scanned. >>>> >>>> >>>> >>> >>> >>> >> >> >> >> > > > >