On Fri, 14 May 2010 00:11:01 -0700, Chris Palmer
>We are using SBS 2003 and OWA. It has worked in the past but after PCI
>complaince we don't seem to be able to logon any longer. We can still see the
>interface via the web and we are still presented with a logon page:
>Domain\username and also password entry. I have tried every conceivable
>variation for more than one user but the screen meerly refreshes and asks for
>us to logon once more. Of course the simple answer is to undo the compliance
>but that has other issues which are far more risky. I am all service packed
>up and have ran the remote wizard on the server, it makes no difference. One
>of the changes the compliance forced was changing the registry to only allow
>certain levels of SSL.
It sounds like you removed Anonymous on the default website? IIRC, it
needs that for the initial connection.
If not, what were the IIS changes done to make it compliant?
And as Cliff mentioned, I really didn't think SBS was complicantable
(is that a word?), so it really depends on what was changed. Maybe you
can back that portion out, otherwise, you need to remove everything
that was altered to IIS or to Exchange, for that matter.
This posting is provided "AS-IS" with no warranties or guarantees and confers no rights.
Please reply back to the newsgroup or forum for collaboration benefit among responding engineers, and to help others benefit from your resolution.
Ace Fekay, MVP, MCT, MCITP EA, MCTS Windows 2008 & Exchange 2007, MCSE & MCSA 2003/2000, MCSA Messaging 2003
Microsoft Certified Trainer
Microsoft MVP - Directory Services
If you feel this is an urgent issue and require immediate assistance, please contact Microsoft PSS directly. Please check http://support.microsoft.com
for regional support phone numbers.