RE: Change OWA log on page

  • From: "Mulnick, Al" <Al.Mulnick@xxxxxxxxxx>
  • To: "'[ExchangeList]'" <exchangelist@xxxxxxxxxxxxx>
  • Date: Wed, 12 May 2004 09:13:58 -0400

It's the other way around.  Using forms-based authentication is more
security not less.
 
For information about ISAPI filters, see the SDK for Exchange and for IIS.
If you need it faster or don't want to write it take a look at what Exchange
2003 upgrade can do for you or a third-party app that sits in front of
Exchange OWA.
 
 
Al
 
 

  _____  

From: NGUYEN HONG HA [mailto:HANH.EVNIT@xxxxxxxxxx] 
Sent: Tuesday, May 11, 2004 9:30 PM
To: [ExchangeList]
Subject: [exchangelist] RE: Change OWA log on page


http://www.MSExchange.org/

I know that using form-based authentication is less security, but I still
like to use it. Can you tell me more detail about how to change OWA log on
page through writing an ISAPI filter ?
Thank you very much.
Ha.
 
  _____  

From: Mulnick, Al [mailto:Al.Mulnick@xxxxxxxxxx] 
Sent: Tuesday, May 11, 2004 11:14 PM
To: [ExchangeList]
Subject: [exchangelist] RE: Change OWA log on page
 
http://www.MSExchange.org/
Although there is a way to do this, it's not recommended for performance and
reliability reasons.  This is a feature of the Exchange 2003 product
instead.  The way it was done in Exchange 2000, forms based authentication
(which sounds like the main portion of what you want) was done through
writing an ISAPI filter.
That's more for security reasons than convenience to the user.  Using
forms-based auth prevents the popup box which allows the user to cache their
credentials on potentially an unsafe machine (airport kiosk, friends home
pc, etc). It's actually very convenient for a user to cache their creds
using this box, so you'll really be losing some of the convenience they'd
like to see I'd guess.
 
As for making it easier to find the OWA web page, you can use CNAMEs and web
redirection to make it easier.  Something like https://mail.company.com
<https://mail.company.com>  which redirects to
https://mail.company.com/exchange <https://mail.company.com/exchange>
should be helpful in your users remembering only one web address for email.
 
I'd further redirect all requests for http://mail.company.com
<http://mail.company.com>  to https://mail.company.com/exchange
<https://mail.company.com/exchange>  myself, but that's me. 
 
 
Al
 
  _____  

From: NGUYEN HONG HA [mailto:HANH.EVNIT@xxxxxxxxxx] 
Sent: Tuesday, May 11, 2004 5:59 AM
To: [ExchangeList]
Subject: [exchangelist] Change OWA log on page
http://www.MSExchange.org/
Subject: Customize the logon page of MS Exchange 2000 as the yahoo's
 
As you know, each time you access the Exchange 2000 mailbox, you type its
link. For example http://10.1.0.3/exchange and the message box appears
asking you to enter your information. I think it is inconvenient for users,
so I would like to customize a logon web page just like Yahoo or Hotmail
logon page, just one web page for all information without the pop-up massage
box.
 
Can you show me how to customize a logon web page of Exchange 2000.
 
Thanks in advance
Ha
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp
Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 ISA Server Resource Site: http://www.isaserver.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp
Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 ISA Server Resource Site: http://www.isaserver.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------ 
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp
Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 ISA Server Resource Site: http://www.isaserver.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------ 

Other related posts: