OK, I'm getting closer, IIS did not automatically redirect /exchange to the /exchange/bin/auth/owalogon.asp website, but if I go there directly things work.... with one exception. Now when you logon through OWA, it asks for authentication twice, then works. I have tried to change all the virtual directories to the same authentication access, digest and basic with domain as /. Any other ideas?