Exchange 2000 SP3 OWA "Access is denied" error

D

dnordgren

In our Exchange 2000 SP3 (with Post-Service Pack 3 Rollup Patch and
running on Windows 2000 SP4) environment (3 Exchange 2000 SP3 sites),
when accessing mail through OWA, when you select "Folders" everyone is
getting the following error:

"Access is denied. Your browser security settings will not allow
access to this folder from this page."

After clicking OK, users are able to access their folders but can't
access public folders and can't even see them. Interestingly, we only
receive this error from external clients. All internal clients are able
to open the "Folders" tab just fine and can access their folders as
well as access the public folders without getting any errors. And the
Exchange site that houses the Public Folders "tree structure" (each of
the three sites houses multiple public folders) does not have this
problem internal or external.

There are several Microsoft articles that discuss this particular
error:

http://support.microsoft.com/default.aspx?scid=kb;en-us;322259
http://support.microsoft.com/default.aspx?scid=kb;en-us;267569

After reading the proposed solutions and workarounds, we are still
unable to resolve this issue. Supposedly SP1 first resolved this known
issue however we are already on SP3. The workaround of configuring
Internet Explorer security settings that they suggest not only would be
a manual fix for all of our home PC users but would also be a nightmare
to implement. And after configuring our site as a Trusted Site like
they suggested, we don't get the error mentioned above but instead get
the error "Unknown Error 12029" and after clicking OK we still can't
access or even see the public folders. The other option as a
front-end/back-end solution is also not a viable solution for us.

It is my understanding that OWA will fail when you use a FQDN or IP
address (our external clients use http://public_IP_address/Exchange )
in the URL because of the way IE works. IE uses a period (.) in the URL
to determine if the address is on the Internet. In this situation,
because the IP address uses periods, Internet Explorer identifies the
URL as an external site, and does not attempt to initiate the
authentication session because "integrated Windows authentication" does
not work across a firewall (firewall in our instance) or proxy.
However, if we manually type in http://public_IP_address/Public we are
able to access the public folders just fine.

I have tried replacing the navbar.js file (downloaded from
http://www.exchange-mail.org/downloads.html) as mentioned in numerous
posts however the Exchange 2000 SP3 "navbar.js" file is newer and has
the exact same code. I did try anyhow and still experienced the same
error.

Any help would be greatly appreciated. Thanks.
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top