<% @ LANGUAGE=VBSCRIPT CODEPAGE = 1252 %> <HTML> <HEAD> <TITLE>Troubleshooting Guide for Microsoft Outlook Web Access</TITLE> </HEAD> <BODY LINK="#0000ff" VLINK="#800080" BGCOLOR="#FFFFFF"> <FONT FACE="Arial"> <CENTER><H1>Troubleshooting Guide <BR>for <BR>Microsoft® Outlook™ Web Access</H1></CENTER> <H2>Introduction</H2><P> This document is a guide for troubleshooting known issues with the Microsoft Outlook Web Access components that are included with Microsoft Exchange Server versions 5.0 and 5.5. It includes the following information: <UL> <LI>A <A HREF="#Server">Server Configuration Checklist</A> that contains configuration settings that you should set prior to using the Outlook Web Access components.</LI><P> <LI>The most common <A HREF="#Troubleshooting">Error Messages</A> that you might receive when connecting to and using your Microsoft® Exchange mailbox from a Web browser. These error messages include:<P> <UL> <LI><A HREF="#Inbox">Failed to get Inbox</A> occuring during log on</LI><P> <LI><A HREF="#Sorry">Sorry! The Exchange Server is Down or the HTTP Service has been disabled by an Administrator</A></LI><P> <LI><A HREF="#Access">Access Is Denied</A></LI><P> <LI><A HREF="#Connect">Failed to Connect to the Microsoft Exchange Server <I><servername></I></A></LI><P> <LI><A HREF="#VBScript">VBScript Error Accessing Outlook Web Access Server</A></LI><P> <LI>When you log in anonymously, you see no public folders or get <A HREF="#When">"Unable to get published folder list"</A></LI><P> <LI><A HREF="#Unable">Unable to Render View 424Object required</A></LI><P> <LI><A HREF="#Application">VBScript Runtime Error '800A01A8' Object Required: 'Application (...)' \exchange\USA\logon.asp, Line12</A></LI><P> <LI><A HREF="#HTTP">HTTP Error 401 401.1 Unauthorized: Login Failed</A></LI><P> </UL></LI><P> <LI>A description of the <A HREF="#Registry">Server and Registry Settings</A> used by Outlook Web Access components.</LI><P> <LI>A Windows NT® hotfix that must be applied to your Internet Information Server 3.0 computer from the <A HREF="#Additional">Exchange 5.5 Release Notes</A></LI>.<P> <LI><A HREF="#Installing">Installing Internet Explorer 4.0</A> after Installing Microsoft Exchange Server</LI><P> <LI><A HREF="#Web">Web Browser Exception Errors</A> when using 128-bit SSL authentication</LI><P> <LI><A HREF="#Outlook">Installing Microsoft Outlook Version 8.03</A> on an Exchange Server version 5.5 computer</LI><P> </UL> If the error message that you are receiving is not listed here, or you are still having problems with Outlook Web Access after reading this troubleshooting guide, please search for additional answers in the Microsoft Knowledge Base at <A HREF="http://support.microsoft.com/support/">http://support.microsoft.com/support.</A><P> <B>Note</B> To perform most of these procedures, you must have administrative privileges on either the Exchange Server computer or the Microsoft® Internet Information Server (IIS) computer. If you do not have these rights, please contact your administrator.<P> <A NAME="Server"></A> <H2>Server Configuration Checklist</H2><P> This sections covers basic settings to ensure proper configuration of the Outlook Web Access components on the Exchange or IIS server. Before troubleshooting a specific error message, you may wish to check this information for items that may be missing from your installation.<P> <UL> <LI><B>The 'Log on Locally' right</B> - Each Windows NT account that will be accessing Exchange Server through the Outlook Web Access client must have the <B>Log on Locally</B> right assigned on the IIS server. The administrator can assign this right to the <B>Everyone</B> group or to specific groups if access restriction is needed. To assign this right to an account, follow these steps:<P> <OL> <LI>Start <B>User Manager for Domains</B>.</LI><P> <LI>Click <B>User Rights</B> on the <B>Policies</B> menu.</LI><P> <LI>In the <B>Right</B> list, click <B>Log on Locally</B>.</LI><P> <LI>Click the <B>Add...</B> button.</LI><P> <LI>In the <B>Add Users and Groups</B> dialog box, click the <B>Show Users</B> button and choose one or more user or group accounts from the <B>Names</B> list.</LI><P> <LI>Click the <B>Add</B> button and click <B>OK</B> when you are finished.</LI><P> <LI>Click <B>OK</B> again and exit <B>User Manager for Domains</B>.</LI><P> </OL></LI><P> <B>Note</B> If the IIS computer is a Member server in a Windows NT domain, you must grant the <B>Log on locally</B> right to the appropriate Windows NT account using the local computer's accounts database, not the domain's accounts database. To do this, start <B>User Manager for Domains</B> in one of the following ways before you grant the <B>Log on Locally</B> right to the user account:<P> <UL> <LI>Log on to the IIS computer using the local computer's Administrator account and start <B>User Manager for Domains</B>.</LI><P> <LI>If you are logged on to the IIS computer with a domain account that is a member of the local Administrator's group, start <B>User Manager for Domains</B> and click <B>Select Domain</B> on the <B>User</B> menu. Enter the local computer's name as \\<<I>servername</I>>.</LI><P> <LI>Start <B>User Manager for Domains</B> using the following command line<P> <UL> usrmgr \\<<I>servername</I>><P> </UL> where <<I>servername</I>> is the name of the IIS computer. The end result is that the local computer's name will appear in the title bar of <B>User Manager for Domains</B>, instead of the domain name.</LI><P> </UL> <LI><B>Password Authentication Methods</B> - The WWW service on the IIS server must be configured for the appropriate password authentication method. This is dependent upon how you intend to setup your Exchange and IIS servers. If both Exchange and IIS are installed on the same computer, you can use any of the three supported authentication methods. If Exchange and IIS are on separate computers, <U>only</U> <B>Basic (Clear Text)</B> and <B>Anonymous</B> can be used. <B>Windows NT Challenge/Response</B> (also called <B>NTLM</B>) authentication cannot be used if a browser other than Internet Explorer will be used for Web Access. If you plan on using <B>Basic (Clear Text)</B> authentication and you wish to have a more secure environment, configure Secure Sockets Layer (SSL) support on the IIS server. For more information about setting up SSL, see your IIS documentation.</LI><P> <LI><B>Required Components</B> - The following components are required for a successful installation of Outlook Web Access:<P> <UL><B> <LI>Microsoft Windows NT 4.0</LI><P> <LI>Microsoft Windows NT 4.0 Service Pack 3 (SP3)</LI><P> <LI>Microsoft Internet Information Server (IIS)</LI><P></B> <UL>Exchange 5.0 is <U>only</U> supported with IIS 3.0 (regardless of the service pack);<BR> Exchange 5.5 is supported with IIS 3.0 or IIS 4.0.</UL><P> <LI><B>Active Server Pages</B><BR> <UL> ASP can be setup from the Windows NT 4.0 SP3 CD or you can download SP3 and the ASP components from <A HREF="http://www.microsoft.com/">http://www.microsoft.com</A>.</UL></LI><P> <LI><B>Active Server Components or Outlook Web Access components</B><BR> <UL> The Active Server Components are included with Exchange 5.0. It is recommended that you install Exchange 5.0 SP1 or Exchange 5.5, since they include the enhanced Outlook Web Access components.</UL></LI><P> <LI><B>Internet Browser (Use one of the following):</B> <UL> <LI>Internet Explorer 3.02 with RFC1867.EXE installed to allow attachments (available from <A HREF="http://www.microsoft.com/ie/">http://www.microsoft.com/ie</A>)</LI> <LI>Internet Explorer 4.0 or later</LI> <LI>Latest version of any other third-party Internet Browser software that supports frames, for example, Netscape Navigator</LI> </UL><P> </UL><P> <LI><B>The IUSR_<<I>ServerName</I>> Account</B> - Make sure that the <B>IUSR_<<I>ServerName</I>></B> account has been assigned the <B>Log on Locally</B> right on the IIS server. Also, make sure the password for this account is the same in both User Manager and the Internet Service Manager. These passwords can be changed independently and differences will cause access problems. By default, the <B>IUSR_<<I>ServerName</I>></B> account is given a random password when IIS is installed.</LI><P> <LI><B>Setting Up Anonymous Access to Public Folders</B><P> <P>Use the following steps to set up anonymous access:</P> <OL> <LI>On the Windows NT <B>Start</B> menu, click <B>Programs</B>.</LI><P> <LI>Select Microsoft Exchange, and then select Microsoft Exchange Administrator.</LI><P> <LI>Select the server you are configuring, and then open the Configuration container.</LI><P> <LI>Choose Protocols, and then double-click <B>HTTP (Web) Site Settings</B>.</LI><P> <LI>Select the <B>Allow anonymous users to access the anonymous public folders</B> check box.</LI><P> <LI>Click the <B>Folder Shortcuts</B> tab.</LI><P> <LI>Click <B>New</B> to add folders for anonymous viewing, and select an existing folder in the <B>Public Folders</B> dialog box.</LI><P> <LI>Click <B>OK</B>.</LI> </OL><P> Published folders must have at least <B>Read</B> permission granted to the Anonymous account. This is set in the <B>Permissions</B> tab for the specified folder. Folder permissions can be accessed from either the Microsoft Exchange Server Administrator program or from the client. To verify the permissions, use the following steps:<P> <OL> <LI>In the Microsoft Exchange Server Administrator program, browse to find the public folder for which you created a shortcut.</LI><P> <LI>On the <B>File</B> menu, click <B>Properties</B>.</LI><P> <LI>Click <B>Client Permissions</B>.</LI><P> <LI>In the box at the top of the <B>Client Permissions </B>dialog box, select <B>Anonymous</B>, and change its role from None to the desired level of access.</LI><P> <LI>If you want to publish all subfolders of this folder for anonymous access, select the <B>Propagate these properties to all subfolders</B> check box.</LI><P> <LI>Click <B>OK</B>.</LI><P> </OL></LI><P> </UL> </UL> <A NAME="Troubleshooting"></A> <H2>Troubleshooting Error Messages</H2> <A NAME="Inbox"></A> <H3>"Failed to Get Inbox" Error Message During Log On</H3> One of the most common error messages you may receive when you attempt to log on to a Microsoft Exchange mailbox using the Outlook Web Access client is the <B>Failed to Get Inbox</B> error message. Use the following steps to troubleshoot this error:<P> <OL> <LI>You may have typed the mailbox incorrectly. Try entering the alias again.</LI><P> <LI>Confirm that the mailbox alias name does not contain any spaces. If it does, rename the mailbox alias by removing the spaces.</LI><P> <LI>If you are prompted for a user name and password, enter the domain and user name in the NT Authentication dialog box as <B><<I>Domain</I>>\<<I>User Name</I>></B>.</LI><P> <LI>Access another Web page to ensure that the browser is not the problem.</LI><P> <LI>If you log on to a mailbox with one alias, log off and then try to log on to another mailbox, the <B>Failed to Get Inbox </B>error may occur because the browser has cached the previous user's credentials. Close the browser and try again.</LI><P> <LI>If you are logging in as an Anonymous user to access public folders, verify that you have given sufficient permissions for the Anonymous account to access public folders.</LI><P> <LI>Log on to the mailbox from an Exchange or Outlook client to verify that the mailbox is accessible. This may determine whether there is a problem with mailbox corruption or a problem specific to the Outlook Web Access components.</LI><P> <LI>Try to log on from another computer. If this works, the password file of the user on the original computer may be corrupted if this is a Windows 95 system. Try deleting your *.PWL file, log off, then log back in to Windows 95. This will create a new *.PWL file.</LI><P> <LI>To ensure that the IIS server that you are attempting to access your Exchange mailbox on is not the problem, try connecting to the default page of that server at <A HREF="HTTP://ntserver">http://<<I>servername</I>></A>.</LI><P> <LI>Create a new mailbox and Windows NT account. Try accessing this mailbox to ensure that there is no problem with a specific user's account.</LI><P> <LI>Check the password authentication method being used by the WWW service on the IIS server. To do this, follow these steps:<P> <OL TYPE="a"> <LI>Open <B>Internet Service Manager</B>.</LI><P> <LI>double-click the <B>WWW</B> Service.</LI><P> <LI>Under Password Authentication, make sure that:<P> <UL> <LI>The <B>Allow Anonymous</B> check box is selected.</LI><P> <LI>The <B>Basic (Clear Text)</B> check box is selected.</LI><P> <LI>The <B>Windows NT Challenge/Response</B> check box is <I>not</I> selected. <P> <B>Note</B> Windows NT Challenge/Response can be enabled if the Web Server is on the same computer as Exchange Server. The <B>Basic (Clear Text)</B> check box can be cleared if you will only be using Internet Explorer <I>and</I> your Web Server is on the same computer as Exchange Server.</LI><P> </UL> </LI> </OL> <LI>If you are using NTLM authentication on the IIS server, verify that the <B>Do not use Proxy server for local addresses</B> option has been enabled on the client's Web browser.</LI><P> <LI>If you are using NTLM authentication, verify that you are logged on to the domain with the Windows NT account that has permissions on the Exchange mailbox. If the user can log on from the IIS computer but not from a client workstation, then verify that the user has the <B>Log on locally</B> right assigned on the IIS server.<P> <B>Note</B> If the IIS computer is a Member server in a Windows NT domain, you must grant the <B>Log on locally</B> right to the appropriate Windows NT account using the local computer's accounts database, not the domain's accounts database. To do this, start <B>User Manager for Domains</B> in one of the following ways before you grant the <B>Log on Locally</B> right to the user account:<P> <UL> <LI>Log on to the IIS computer using the local computer's Administrator account and start <B>User Manager for Domains</B>.</LI><P> <LI>If you are logged on to the IIS computer with a domain account that is a member of the local Administrator's group, start <B>User Manager for Domains</B> and click <B>Select Domain</B> on the <B>User</B> menu. Enter the local computer's name as \\<<I>servername</I>>.</LI><P> <LI>Start <B>User Manager for Domains</B> using the following command line<P> <UL> usrmgr \\<<I>servername</I>><P> </UL> where <<I>servername</I>> is the name of the IIS computer. The end result is that the local computer's name will appear in the title bar of <B>User Manager for Domains</B>, instead of the domain name.</LI><P> </UL> <LI>If you are prompted with a dialog box requesting the user name and password when logging on to the mailbox, but you are still getting the "Failed to Get Inbox" error message, then enable <B>Allow Anonymous</B> and <B>Basic (Clear Text)</B> password authentication on the IIS server through IIS Manager.</LI><P> <LI>Verify the home server of the mailbox. If you are trying to log on to an Exchange Server computer other than your home server, be sure to allow adequate time for your mailbox to replicate to the server that you are trying to log on to.</LI><P> <LI>Verify that you can log on to Exchange through a Web browser located on the IIS server. If you are unable to log on from the IIS computer, check for a problem in that user's Windows NT account or password.</LI><P> <LI>If Exchange Server is on an NTFS partition, then share it out with the same name and give <B>Full Control</B> access to the <B>Everyone</B> group.</LI><P> <LI>If you are replicating directories between two recently connected sites, you must ensure that no two mailboxes contain the same alias name. If they do, you must either rename or remove the duplicate alias.</LI><P> </OL> <A NAME="Sorry"></A> <H3>Sorry! The Exchange Server Is Down or the HTTP Service Has Been Disabled by an Administrator</H3><P> This is another common error message that you may see when you log on to a mailbox. The following steps can be used to troubleshoot this error message:<P> <OL> <LI>The <B>HTTP</B> protocol may be disabled. Open the Microsoft Exchange Administrator program, select the <B>Protocols</B> container, and open the <B>HTTP (Web) Site Settings</B> object. Make sure that the <B>Enable Protocol</B> option is selected. Open the properties for the mailbox and click the <B>Protocols</B> tab. Select the <B>HTTP</B> protocol, and then click <B>Settings</B>. Make sure that <B>Enable HTTP for this recipient (HTTP is enabled on this server)</B> is selected.</LI><P> <LI>Anonymous access may be disabled in<B> LDAP.</B> Open the Exchange Administrator program, select the <B>Protocols</B> object and open the <B>LDAP (Directory) Site Defaults</B> object. Click the <B>Anonymous</B> tab and make sure that the <B>Allow anonymous access</B> option is selected.</LI><P> <LI>This error may also occur if the Anonymous access account defined in the <B>DS Site Configuration </B>object in the Microsoft Exchange Administrator program does not have Search permissions at the <B>Configuration</B> container level. This Search feature is only available in Exchange 5.5 or later.</LI><P> <LI>Verify that the Microsoft Exchange Information Store service on the Exchange Server computer is started.</LI><P> <LI>Verify that the <B>MSExchangeWeb</B> registry key shown below contains the correct values for the Organization, Site, and Server names of the Exchange Server computer to which you are connecting. Open the Microsoft Exchange Administrator program. Note the Organization, Site, and Server names displayed for the server to which you are connecting. Start Registry Editor (<B>Regedt32.exe</B>) on Microsoft Exchange Server, select the following registry key<P> <UL> <B>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services<BR>\MSExchangeWeb\Parameters</B><P> </UL> and verify that the following values match:<P> <UL> <LI>Enterprise - Must match the Organization name.</LI><P> <LI>Site - Must match the Site in which the Server is located.</LI><P> <LI>Server - Must match the Server to which you are connecting.</LI> </UL> <P>If any of the above values are incorrect, change them to match the names displayed in the Exchange Administrator. These values are not case sensitive.<P></LI> <LI>Verify that the <B>IUSR_<<I>ServerName</I>></B> account has at least Change permissions on the directory that contains the temporary .mmp files. This directory is specified in the following registry key:<P> <UL> <B>HKEY_LOCAL_MACHINE\Software\Microsoft<BR>\Windows Messaging Subsystem\ProfileDirectory</B> </UL><P> For more information about changing this key, see the <A HREF="#Connect"> Failed to Connect to the Microsoft Exchange Server <<I>servername</I>> error</A> section.</LI><P> </OL> <A NAME="Access"></A> <H3>Access Is Denied</H3><P> When logging on and trying to enter authentication credentials, you may be repeatedly prompted with NT Authentication dialogs, or you may get the immediate error message <B>"Access is Denied"</B>. Try the steps described below to troubleshoot this error message:<P> <OL> <LI>The password may have been typed incorrectly. Retype the password and double check the spelling, being sure to check capitalization and so forth.</LI><P> <LI>The username may have been typed incorrectly. Retype the user name, double checking capitalization, and so forth. Use the <B><I><Domain>\<Username></I></B> format.</LI><P> <LI>You may not have the <B>Log on Locally</B> right on the IIS server. To correct this, perform Step 1 in the "Server Configuration Checklist" section at the beginning of this document.</LI> </OL> <A NAME="Connect"></A> <H3>Failed to Connect to the Microsoft Exchange Server <<I>servername</I>></H3><P> This is another error message you may receive when you attempt to log on to a mailbox through the Outlook Web Access client. Use the following checklist to troubleshoot this error:<P> <UL> <LI>Check the permissions set on the <B><<I>WINNT</I>></B> directory and all of its subdirectories. Also, check the permissions on the <B><<I>Exchsrvr</I>>\Webdata</B> and <B><<I>Exchsrvr</I>>\Webtemp</B> directories and all of their sub-directories. If using Exchange Server version 5.0, the <B><<I>WINNT</I>></B> directory and all of its subdirectories must have <B>CHANGE</B> permissions set on them for the Domain Users group. The <<B><I>WINNT</I>>\SYSTEM32 </B>directory must have at least <B>READ</B> permissions set for the Domain Users group.</LI><P> <LI>When you use Microsoft Exchange Active Server components to access information on a computer running Microsoft Exchange Server, files with an .mmp extension are created in your <B><<I>WINNT</I>> </B>directory by default. The .mmp file is a temporary file used by Active Messaging to store certain profile information during the active session. This file should be deleted after the user logs off and the session is closed. Because these files must be created dynamically, the Microsoft Internet Information Server (IIS) Anonymous Log on account <B>IUSR_<<I>ServerName</I>></B> by default) needs to have <B>CHANGE</B> permissions on the <B><<I>WINNT</I>></B> directory.</LI><P> <LI>After you install Microsoft Exchange Server 5.0 Service Pack 1, you can change the directory in which the temporary .mmp files are created.</LI><P> <B>Warning:</B> Using Registry Editor incorrectly can cause serious problems that may require you to reinstall Windows 95. Microsoft cannot guarantee that problems resulting from the incorrect use of Registry Editor can be solved. Use Registry Editor at your own risk.<P> If the following registry key is present, the .mmp files will be created there instead of in the <B><<I>WINNT</I>></B> directory:<P> <UL> <B>HKEY_LOCAL_MACHINE\Software\Microsoft\Windows Messaging Subsystem</B><P> </UL> To create this registry entry, perform the following steps:<P> <OL> <LI>Start Registry Editor (<B>Regedt32.exe</B>) and go to the following key:<P> <UL> <B>HKEY_LOCAL_MACHINE\Software\Microsoft\Windows Messaging Subsystem<P></B> </UL> <LI>On the <B>Edit</B> menu, click <B>Add Value</B> and type the following values:<P> <UL> <LI>Value Name: ProfileDirectory</LI> <LI>Data Type: REG_SZ</LI> <LI>Value Data: Path to the directory in which the temporary files are created.<P> For example: C:\WEBTEMP)</LI> </UL><P> If the registry value is not present, the .mmp files are created in the <B><<I>WINNT</I>> </B>directory.<P> <B>Note</B> The IIS Anonymous Log on account (<B>IUSR_<<I>ServerName</I>></B> by default) must have <B>CHANGE</B> permissions for the directory specified for <B>ProfileDirectory</B>.<P> If using Exchange Server version 5.0 SP1 or higher, verify that the <B><WINNT></B> directory and all of its subdirectories have at least <B>READ</B> permissions set on them for Domain Users group. Verify that the <B><<I>WINNT</I>>\System32</B> directory has at least <B>READ</B> permissions set for the Domain User group. If you are using Exchange Server version 5.5 or higher, no special permissions have to be set on the <B><<I>WINNT</I>></B> directory.<P> You may need to change the permissions on the <B>Exchsrvr\Webdata</B> directory and all of its sub-directories to <B>READ</B>. Verify too that the <B>Exchsrvr\Webtemp</B> directory and all of its sub-directories are set to <B>CHANGE</B>.<P></LI> </OL> </LI> </UL><P> <A NAME="VBScript"></A> <H3>VBScript Error Accessing Outlook Web Access Server</H3><P> You may receive the following VBScript error on your Web Browser when you attempt to connect using Outlook Web Access. The script name and line number may not be identical, but the error code will remain the same.<P> <UL> Microsoft VBScript runtime error '800a03e3'<BR> Unknown runtime error<BR> /exchange/USA/lib/session.inc, line 300<P> </UL> This error may have more than one cause. To confirm the cause, check the following:<P> <UL> <LI>Anonymous access is not enabled on the <B>LDAP</B> protocol in the Exchange Administrator program and/or the anonymous account has not been assigned the correct permissions. Trying to connect to a mailbox that either doesnÆt exist or no longer exists will generate this error. Verify the mailbox alias to which you are trying to connect.</LI><P> <LI>Open the Exchange Administrator program to check the <B>LDAP</B> protocol and anonymous account permissions. View the properties of the <B>LDAP</B> protocol and ensure that <B>Allow Anonymous</B> is checked. View also the properties of the <B>DS Site Configuration </B>container and ensure the account designated for the anonymous access is correct and that the password for this account is correct. (Note that the <B>IUSR_<<I>ServerName</I>></B> account is normally used for anonymous access, however it is possible to use a different account name.)</LI><P> <LI>View the properties of the <B>Configuration</B> container and click the <B>Permissions</B> tab. Ensure that the <B>IUSR_<<I>ServerName</I>></B> or anonymous account has <B>Search</B> permissions.</LI><P> </UL> If changes are made to any of the above, you must stop and restart the World Wide Web Publishing service (WWW) through Control Panel Services or through IIS Manager.<P> This runtime error message can also occur when the server is very busy or when you try to connect to a mailbox that doesn't exist, but is authenticated as a real user. Also, this problem may occur if the incoming message is larger than the input buffer of the Internet Web Browser (usually around 16 KB). A hotfix for this problem is available.<P> <B>Note:</B> This should only be used in specific cases where installation of the hotfix is warranted. This hotfix is only for use with Exchange Server and IIS version 3.0. The hotfix is available on the Microsoft anonymous FTP server site <A HREF="ftp://ftp.microsoft.com/bussys/IIS/iis-public/fixes/usa/ASP/asp-memfix/">ftp://ftp.microsoft.com/bussys/IIS/iis-public/fixes/usa/ASP/asp-memfix/</A>.<P> <A NAME="When"></A> <H3>When you log in anonymously, you see no public folders or get "Unable to get published folder list"</H3><P> <UL> <LI>Verify that the IIS server's WWW service is running and handling ASP requests. This can be done by running some of the sample scripts available with IIS.</LI><P> <LI>If no public folders are published, go to the Microsoft Exchange Administrator program to confirm that the <B>HTTP</B> protocol is enabled and allows anonymous access to public folders. Use the following steps to confirm whether the protocol is enabled:<P> <OL> <LI>Open the Exchange Administrator program.</LI><P> <LI>Open the <B>Protocols</B> object.</LI><P> <LI>Double-click <B>HTTP</B> and click the <B>General</B> tab. Click the <B>Folder Shortcuts</B> tab. Verify that the folders for anonymous access are available in the <B>Public Folder Shortcuts</B> list.</LI><P> <LI><B>Note:</B> Including only the Public Folder tree object will not provide anonymous access to any of the top level public folders.</LI><P> </OL> <LI>Verify that access permissions for the folder are correctly set. Make sure that the default permissions for the anonymous account are set to a minimum of <B>Reviewer</B>.</LI><P> <LI>Verify that the Public Folders you are trying to open are available from the Microsoft Exchange or Outlook client. This should ensure that the public folder is accessible.</LI><P> <LI>Set up a test folder, add it to the list of public folders, and assign the appropriate permissions. Remember to exit and restart the browser before you attempt to access the test public folder.</LI><P> <LI>Make sure that the <B>IUSR_<<I>ServerName</I>></B> account has <B>Log on Locally</B> rights on the IIS server.</LI><P> <LI>Make sure that the <B>IUSR_<<I>ServerName</I>></B> account's password in User Manager is the same as in the Internet Service Manager.</LI><P> <LI>Check to ensure that the <B>Guest</B> account on Exchange Server has not been disabled. Perform these steps to confirm the information:<P> <OL> <LI>In Exchange Server, select <B>User Manager for Domains</B>. <LI>Select the <B>Guest</B> account and double-click to view the properties. <LI>Make sure that <B>Account Disabled</B> check box is cleared (not selected). </OL><P> </LI> </UL><P> <A NAME="Unable"></A> <H3>Unable to Render View 424Object Required</H3><P> This error message will occur if some of the Outlook Web Access files located on the Microsoft Exchange Server computer are corrupted or missing.<P> To correct this behavior, remove and reinstall the Outlook Web Access components from the Microsoft Exchange Server computer using the following steps:<P> <OL> <LI>Back up the \Exchsrvr\Webdata directory on the Microsoft Exchange Server computer.</LI><P> <LI>Run the Microsoft Exchange Server Setup program and choose the <B>Add/Remove</B> option.</LI><P> <LI>Cancel the selection of the Outlook Web Access component and continue with the Setup program to remove the Outlook Web Access component.</LI><P> <LI>Delete the \Webdata directory.</LI><P> <LI>Run the Setup program again and select the Outlook Web Access component.</LI><P> <LI>Continue with the Setup program to perform a clean installation of the Outlook Web Access components.</LI><P> </OL><P> <A NAME="Application"></A> <H3>VBScript Runtime Error '800A01A8' Object Required: 'Application (...)' \exchange\USA\logon.asp, Line12</H3><P> This runtime error may be caused by file corruption in the Exchange Active Server Components. A failed installation followed by a successful installation can also cause the errors. The failed installation can cause the reinstallation process to not proceed as expected.<P> Occasionally, when you try to remove the Active Server Components (ASC) from Exchange Server Setup using <B>Add/Remove</B>, the check box for this option cannot be cleared. You may not be able to uninstall just the <B>Active Server Components</B> option by using <B>Add/Remove</B>.<P> Modifying the related registry key will allow the <B>ASC</B> to be reinstalled. To make the correct modification, locate the following registry key <P> <UL> <B>\HKEY_LOCAL_MACHINE\Software\Microsoft\Exchange\Setup</B> </UL> and remove the <I>String Value</I> <B>Web Connector</B> from the key. This action will clear the <B>ASC</B> option from the Exchange Server CD Setup program. You should then be able to reinstall the ASC option.<P> <A NAME="HTTP"></A> <H3>HTTP Error 401 401.1 Unauthorized: Log On Failed</H3><P> This error will occur when you try to access your mailbox through the active server logon page if Internet Information Server (IIS) version 4.0 has been installed on a Microsoft Exchange 5.0 Web Access Server. Exchange Server version 5.0 Web Access is not supported with IIS version 4.0. The only alternative in this situation is to remove IIS version 4.0 and reinstall IIS verison 3.0.<P> <A NAME="Registry"></A> <H2>Server and Registry Settings</H2><P> <B>Setting the Session Timeout</B><P> Use the following steps to set timeout values:<P> <OL> <LI>Open the Exchsrvr\webdata\<lang>\lib\logon.inc file using a text editor such as Notepad.</LI><P> <LI>Search for the Session.Timeout string. The first occurrence is for authenticated access and the default value is 60 minutes. The second occurrence is for anonymous access and the default value is 20 minutes.</LI><P> <LI>Change either or both of the values as appropriate to your situation.</LI></P> </OL><P> <B>The MSExchangeWeb Registry Key</B><P> The Outlook Web Access settings are stored in the following registry key on the IIS server:<P> <UL> <B>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MSExchangeWeb</B><P> </UL> This registry key has four subkeys: AcceptLanguage, Applications, Parameters, and Performance.<P> <UL> <LI><B>AcceptLanguage</B> <P>Contains subkeys for all possible accepted languages and a default key. Every key points to United States settings by default unless you are running JPN, FRN, or GER setup, in which case the key for that language is localized. Each key contains the following values:<P> <UL> <B>CodePage</B> - The code page to use for this language.<P> <B>Directory</B> - The directory that the localized scripts are located in Webdata.<P> <B>LCID</B> - The locale ID, used for things like date format.<P> </UL> <LI><B>Applications</B> <P>Every subkey under Applications is the name of a virtual root that the Exchfilt.dll file uses to determine if it needs to insert a language directory into the URL.<P> <LI><B>Parameters</B> <P>This key contains the following values:<P> <UL> <B>Enterprise</B> - The enterprise of the computer running Exchange Server.<P> <B>HTMLQuoting</B> - Used by RTF-HTML. May not be in use.<P> <B>Language Pack Directory</B> - Tells Outlook Web Access where to search for langpack DLLs.<P> <B>RFC1867NoCleanupAtUnload</B> - Whether Exupload.dll should delete items in the SaveDirectory when it loads.<P> <B>RFC1867SaveDirectory</B> - Directory to save temporary files in when uploading.<P> <B>RFC1867Trace</B> - If 0 (zero), no trace. Else, put a trace of the form the browser submits when uploading a file. The trace goes in the SaveDirectory.<P> <B>Server</B> - The name of the Exchange Server computer.<P> <B>Site</B> - The site the Exchange Server computer is located in.<P> <B>Debug</B> - Adds debug information to JavaScript dialogs.<P> <B>AuthenticatedSessionTimeout</B> - Authenticated Session Timeout, in minutes.<P> <B>AnonymousSessionTimeout</B> - Anonymous Session Timeout, in minutes.<P> </UL> <LI><B>Performance</B> <P>This key contains standard Performance Monitor (PerfMon) counter information.<P> </UL> <A NAME="Additional"></A> <H2>Additional Information from Exchange 5.5 Release Notes</H2> <H3>Installing the Windows NT Hotfix for Outlook Web Access</H3><P> When installing Outlook Web Access, you should install the Windows NT hotfix that addresses problems with Secure Sockets Layer (SSL) and memory leaks. This hotfix is for use only with Exchage Server using IIS version 3.0. For more information, see the Microsoft Knowledge Base at the Microsoft Technical Support Web site (<A HREF="http://support.microsoft.com/support">http://support.microsoft.com/support</A>).<P> You can download the hotfix from the Microsoft anonymous FTP server:<P> <UL> <A HREF="ftp://ftp.microsoft.com/bussys/IIS/iis-public/fixes/usa/ASP/asp-memfix/">ftp://ftp.microsoft.com/bussys/IIS/iis-public/fixes/usa/ASP/asp-memfix</A><P> </UL> The self-extracting zip file is called ASP-MEMFIX.EXE.<P> <A NAME="Installing"></A> <H2>Installing Internet Explorer 4.0 After Installing Microsoft Exchange Server</H2> In many cases, you may wish to install IE 4.0 on your Exchange Outlook Web Access Server for troubleshooting and setup. If you need to run Internet Explorer and Microsoft Exchange Server on the same computer, it is strongly recommended that you install Internet Explorer 4.0 before installing Microsoft Exchange Server. If you install Internet Explorer 4.0 after installing Microsoft Exchange Server, Internet Explorer modifies the Multipurpose Internet Mail Extensions (MIME) registry database. This results in problems for international mail, especially mail with double-byte character content. If you installed Internet Explorer 4.0 after installing Microsoft Exchange Server, complete the following procedure to correct this problem. You can perform these steps without stopping any Microsoft Exchange Server services. <P> <B><P>Note</B> This procedure is <I>not</I> required if you installed Internet Explorer 4.0 before you installed Microsoft Exchange Server.<P> <OL> <LI>Copy the Reset.inf file in the Server\Support\Mimedb directory from the Microsoft Exchange Server compact disc to a local hard disk.</LI><P> <LI>Right-click the file name and click <B>Install</B>.</LI><P> </OL> <A NAME="Web"></A> <H2>Web Browser Exception Errors When Using 128-bit SSL Authentication</H2><P> When 128-bit SSL authentication is turned on for IIS, some Web browsers, such as Internet Explorer versions earlier than 3.02, build 1310, can quit because an exception error occurs when users access Web documents using Microsoft Outlook Web Access.<P> To eliminate these types of Web browser exception errors, you can add the following registry key to the IIS computer:<P> <UL> <B>HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\w3svc\asp\parameters\BufferingOn=1</B> </UL><P> <B>Note</B> The above registry key is one path; it has been wrapped for readability. <P> This turns buffering on for the IIS computer. When buffering is turned on, Active Server Pages are parsed completely before any data is sent to Web browsers. Buffering is off for servers by default.<P> In addition to modifying the registry, users can also control buffering on a per-page basis by inserting <B><%Response.Buffer = TRUE %></B> at the top of a page.<P> <STRONG><P>Caution</STRONG> With buffering turned on, more server memory is used to parse Active Server Pages and server performance is slower. Be sure to monitor the server to evaluate the impact of buffering on server performance. You may need to upgrade the server's processor or memory to maintain optimum performance.<P> For optimum performance of Outlook Web Access when using 128-bit SSL authentication, consider upgrading your users' Web browsers to versions which have the enhanced ability to handle 128-bit SSL authentication. Internet Explorer 3.02, build 1310 and later versions have enhanced 128-bit SSL authentication capability. For more information about obtaining the latest version of Internet Explorer, use your Web browser to visit <A HREF="http://www.microsoft.com/ie">http://www.microsoft.com/ie</A>.<P> <A NAME="Outlook"></A> <H2>Installing Microsoft Outlook Version 8.03 on a Microsoft Exchange Server Version 5.5 Computer</H2><P> If you install Outlook 8.03 on a Microsoft Exchange Server 5.5 computer, Outlook Web Access does not perform as expected. To solve this problem, run Regsvr32a.exe after installing Outlook. This utility resets the affected registry settings by re-registering Cdo.dll. You can download Regsvr32a.exe from the Microsoft Web site at:<P> <UL> <A HREF="http://premium.microsoft.com/support/downloads/dp2439.asp">http://premium.microsoft.com/support/downloads/dp2439.asp</A>.<P></UL> Run Regsvr32.exe from the command line using the full path to Cdo.dll as the argument. For example, the following command changes the registry settings by re-registering Cdo.dll<P> <UL>regsvr32.exe <I>systemroot</I>\system32\cdo.dll <P> </UL>where <I>systemroot</I> is your Windows NT directory. <BR> <BR> <BR> <BR> <BR> <BR> <BR> <BR> <BR> <BR> <BR> <FONT SIZE=2>COPYRIGHT NOTICE. Copyright © 1998 Microsoft and/or its suppliers, One Microsoft Way, Redmond, Washington 98052-6399 U.S.A. All rights reserved. <BR> <BR> TRADEMARKS. Microsoft, Windows, Windows NT, Outlook, and/or other Microsoft products referenced herein are either trademarks or registered trademarks of Microsoft. Other product and company names mentioned herein may be the trademarks of their respective owners. </FONT> </BODY> </HTML>