|
Home > Archive > IIS Server Security > May 2005 > IIS / OWA
You are viewing an archived Text-only version of the thread.
To view this thread in it's original format and/or if you want to reply to
this thread please [click here]
|
|
| Andy Smith 2005-05-18, 6:03 pm |
| Hi there,
This is a carry on from my Sessions/Cookies post...
This is the setup I have:
IIS running on W2K3 - IISSERVER
Exchange 2003 - MAILSERVER
I have an internal web site running on the IIS server which requires users
to authenticate with their AD username/password. On this website is a link to
Outlook Web Access running on the Exchange 2003 Server. If they logon to the
website, and then click the OWA link, it asks them for their OWA
username/password (which is the same as it's using AD). I'm assuming this is
because they're on different servers.
Is there a way I can get OWA to use credentials that were used to logon to
the web site?
Thanks/...
| |
| Ken Schaefer 2005-05-18, 8:50 pm |
| You are correct in your assumption (that it's because the are on different
servers).
If you want the credentials for one server to carry across to another,
you're going to have to look at a SSO solution.
However, there may be another way around this. Internet Explorer, by
default, attempts to automatically login on the user's behalf for sites that
are in the local Intranet security zone. See this KB article for
requirements:
http://support.microsoft.com/?id=258063
So, if you add both the IIS Server and Exchange server's DNS names to the
user's Intranet zone (e.g. via a Group Policy Object), then they wouldn't
need to enter their credentials for either site.
Cheers
Ken
--
Blog: www.adopenstatic.com/cs/blogs/ken/
Web: www.adopenstatic.com
"Andy Smith" <AndySmith@discussions.microsoft.com> wrote in message
news:5FBB8D6A-31C4-405D-BB28-909371EDACBD@microsoft.com...
: Hi there,
:
: This is a carry on from my Sessions/Cookies post...
:
: This is the setup I have:
:
: IIS running on W2K3 - IISSERVER
: Exchange 2003 - MAILSERVER
:
: I have an internal web site running on the IIS server which requires users
: to authenticate with their AD username/password. On this website is a link
to
: Outlook Web Access running on the Exchange 2003 Server. If they logon to
the
: website, and then click the OWA link, it asks them for their OWA
: username/password (which is the same as it's using AD). I'm assuming this
is
: because they're on different servers.
:
: Is there a way I can get OWA to use credentials that were used to logon to
: the web site?
:
: Thanks/...
|
|
|
|
|