Troubleshooting Guide
for
Microsoft® Outlook" Web Access

Introduction

This document is a guide for troubleshooting known issues with the Microsoft Outlook Web Access components that are included with Microsoft Exchange Server versions 5.0 and 5.5. It includes the following information: asterpharmacy.com

If the error message that you are receiving is not listed here, or you are still having problems with Outlook Web Access after reading this troubleshooting guide, please search for additional answers in the Microsoft Knowledge Base at http://support.microsoft.com/support.

Note To perform most of these procedures, you must have administrative privileges on either the Exchange Server computer or the Microsoft® Internet Information Server (IIS) computer. If you do not have these rights, please contact your administrator.

Server Configuration Checklist

This sections covers basic settings to ensure proper configuration of the Outlook Web Access components on the Exchange or IIS server. Before troubleshooting a specific error message, you may wish to check this information for items that may be missing from your installation.

Troubleshooting Error Messages

"Failed to Get Inbox" Error Message During Log On

One of the most common error messages you may receive when you attempt to log on to a Microsoft Exchange mailbox using the Outlook Web Access client is the Failed to Get Inbox error message. Use the following steps to troubleshoot this error:

  1. You may have typed the mailbox incorrectly. Try entering the alias again.

  2. Confirm that the mailbox alias name does not contain any spaces. If it does, rename the mailbox alias by removing the spaces.

  3. If you are prompted for a user name and password, enter the domain and user name in the NT Authentication dialog box as Domain>\User Name>.

  4. Access another Web page to ensure that the browser is not the problem.

  5. If you log on to a mailbox with one alias, log off and then try to log on to another mailbox, the Failed to Get Inbox error may occur because the browser has cached the previous user's credentials. Close the browser and try again.

  6. If you are logging in as an Anonymous user to access public folders, verify that you have given sufficient permissions for the Anonymous account to access public folders.

  7. Log on to the mailbox from an Exchange or Outlook client to verify that the mailbox is accessible. This may determine whether there is a problem with mailbox corruption or a problem specific to the Outlook Web Access components.

  8. Try to log on from another computer. If this works, the password file of the user on the original computer may be corrupted if this is a Windows 95 system. Try deleting your *.PWL file, log off, then log back in to Windows 95. This will create a new *.PWL file.

  9. To ensure that the IIS server that you are attempting to access your Exchange mailbox on is not the problem, try connecting to the default page of that server at http://servername>.

  10. Create a new mailbox and Windows NT account. Try accessing this mailbox to ensure that there is no problem with a specific user's account.

  11. Check the password authentication method being used by the WWW service on the IIS server. To do this, follow these steps:

    1. Open Internet Service Manager.

    2. double-click the WWW Service.

    3. Under Password Authentication, make sure that:

      • The Allow Anonymous check box is selected.
      • The Basic (Clear Text) check box is selected.
      • The Windows NT Challenge/Response check box is not selected.

        Note Windows NT Challenge/Response can be enabled if the Web Server is on the same computer as Exchange Server. The Basic (Clear Text) check box can be cleared if you will only be using Internet Explorer and your Web Server is on the same computer as Exchange Server.

  12. If you are using NTLM authentication on the IIS server, verify that the Do not use Proxy server for local addresses option has been enabled on the client's Web browser.

  13. If you are using NTLM authentication, verify that you are logged on to the domain with the Windows NT account that has permissions on the Exchange mailbox. If the user can log on from the IIS computer but not from a client workstation, then verify that the user has the Log on locally right assigned on the IIS server.

    Note If the IIS computer is a Member server in a Windows NT domain, you must grant the Log on locally right to the appropriate Windows NT account using the local computer's accounts database, not the domain's accounts database. To do this, start User Manager for Domains in one of the following ways before you grant the Log on Locally right to the user account:

  14. If you are prompted with a dialog box requesting the user name and password when logging on to the mailbox, but you are still getting the "Failed to Get Inbox" error message, then enable Allow Anonymous and Basic (Clear Text) password authentication on the IIS server through IIS Manager.

  15. Verify the home server of the mailbox. If you are trying to log on to an Exchange Server computer other than your home server, be sure to allow adequate time for your mailbox to replicate to the server that you are trying to log on to.

  16. Verify that you can log on to Exchange through a Web browser located on the IIS server. If you are unable to log on from the IIS computer, check for a problem in that user's Windows NT account or password.

  17. If Exchange Server is on an NTFS partition, then share it out with the same name and give Full Control access to the Everyone group.

  18. If you are replicating directories between two recently connected sites, you must ensure that no two mailboxes contain the same alias name. If they do, you must either rename or remove the duplicate alias.

Sorry! The Exchange Server Is Down or the HTTP Service Has Been Disabled by an Administrator

This is another common error message that you may see when you log on to a mailbox. The following steps can be used to troubleshoot this error message:

  1. The HTTP protocol may be disabled. Open the Microsoft Exchange Administrator program, select the Protocols container, and open the HTTP (Web) Site Settings object. Make sure that the Enable Protocol option is selected. Open the properties for the mailbox and click the Protocols tab. Select the HTTP protocol, and then click Settings. Make sure that Enable HTTP for this recipient (HTTP is enabled on this server) is selected.

  2. Anonymous access may be disabled in LDAP. Open the Exchange Administrator program, select the Protocols object and open the LDAP (Directory) Site Defaults object. Click the Anonymous tab and make sure that the Allow anonymous access option is selected.

  3. This error may also occur if the Anonymous access account defined in the DS Site Configuration object in the Microsoft Exchange Administrator program does not have Search permissions at the Configuration container level. This Search feature is only available in Exchange 5.5 or later.

  4. Verify that the Microsoft Exchange Information Store service on the Exchange Server computer is started.

  5. Verify that the MSExchangeWeb registry key shown below contains the correct values for the Organization, Site, and Server names of the Exchange Server computer to which you are connecting. Open the Microsoft Exchange Administrator program. Note the Organization, Site, and Server names displayed for the server to which you are connecting. Start Registry Editor (Regedt32.exe) on Microsoft Exchange Server, select the following registry key

    and verify that the following values match:

    If any of the above values are incorrect, change them to match the names displayed in the Exchange Administrator. These values are not case sensitive.

  6. Verify that the IUSR_ServerName> account has at least Change permissions on the directory that contains the temporary .mmp files. This directory is specified in the following registry key:

    For more information about changing this key, see the Failed to Connect to the Microsoft Exchange Server servername> error section.

Access Is Denied

When logging on and trying to enter authentication credentials, you may be repeatedly prompted with NT Authentication dialogs, or you may get the immediate error message "Access is Denied". Try the steps described below to troubleshoot this error message:

  1. The password may have been typed incorrectly. Retype the password and double check the spelling, being sure to check capitalization and so forth.

  2. The username may have been typed incorrectly. Retype the user name, double checking capitalization, and so forth. Use the \ format.

  3. You may not have the Log on Locally right on the IIS server. To correct this, perform Step 1 in the "Server Configuration Checklist" section at the beginning of this document.

Failed to Connect to the Microsoft Exchange Server servername>

This is another error message you may receive when you attempt to log on to a mailbox through the Outlook Web Access client. Use the following checklist to troubleshoot this error:

  1. Start Registry Editor (Regedt32.exe) and go to the following key:

  2. On the Edit menu, click Add Value and type the following values:

    If the registry value is not present, the .mmp files are created in the WINNT> directory.

    Note The IIS Anonymous Log on account (IUSR_ServerName> by default) must have CHANGE permissions for the directory specified for ProfileDirectory.

    If using Exchange Server version 5.0 SP1 or higher, verify that the directory and all of its subdirectories have at least READ permissions set on them for Domain Users group. Verify that the WINNT>\System32 directory has at least READ permissions set for the Domain User group. If you are using Exchange Server version 5.5 or higher, no special permissions have to be set on the WINNT> directory.

    You may need to change the permissions on the Exchsrvr\Webdata directory and all of its sub-directories to READ. Verify too that the Exchsrvr\Webtemp directory and all of its sub-directories are set to CHANGE.

VBScript Error Accessing Outlook Web Access Server

You may receive the following VBScript error on your Web Browser when you attempt to connect using Outlook Web Access. The script name and line number may not be identical, but the error code will remain the same.

This error may have more than one cause. To confirm the cause, check the following:

If changes are made to any of the above, you must stop and restart the World Wide Web Publishing service (WWW) through Control Panel Services or through IIS Manager.

This runtime error message can also occur when the server is very busy or when you try to connect to a mailbox that doesn't exist, but is authenticated as a real user. Also, this problem may occur if the incoming message is larger than the input buffer of the Internet Web Browser (usually around 16 KB). A hotfix for this problem is available.

Note: This should only be used in specific cases where installation of the hotfix is warranted. This hotfix is only for use with Exchange Server and IIS version 3.0. The hotfix is available on the Microsoft anonymous FTP server site ftp://ftp.microsoft.com/bussys/IIS/iis-public/fixes/usa/ASP/asp-memfix/.

When you log in anonymously, you see no public folders or get "Unable to get published folder list"

Unable to Render View 424Object Required

This error message will occur if some of the Outlook Web Access files located on the Microsoft Exchange Server computer are corrupted or missing.

To correct this behavior, remove and reinstall the Outlook Web Access components from the Microsoft Exchange Server computer using the following steps:

  1. Back up the \Exchsrvr\Webdata directory on the Microsoft Exchange Server computer.

  2. Run the Microsoft Exchange Server Setup program and choose the Add/Remove option.

  3. Cancel the selection of the Outlook Web Access component and continue with the Setup program to remove the Outlook Web Access component.

  4. Delete the \Webdata directory.

  5. Run the Setup program again and select the Outlook Web Access component.

  6. Continue with the Setup program to perform a clean installation of the Outlook Web Access components.

VBScript Runtime Error '800A01A8' Object Required: 'Application (...)' \exchange\USA\logon.asp, Line12

This runtime error may be caused by file corruption in the Exchange Active Server Components. A failed installation followed by a successful installation can also cause the errors. The failed installation can cause the reinstallation process to not proceed as expected.

Occasionally, when you try to remove the Active Server Components (ASC) from Exchange Server Setup using Add/Remove, the check box for this option cannot be cleared. You may not be able to uninstall just the Active Server Components option by using Add/Remove.

Modifying the related registry key will allow the ASC to be reinstalled. To make the correct modification, locate the following registry key

and remove the String Value Web Connector from the key. This action will clear the ASC option from the Exchange Server CD Setup program. You should then be able to reinstall the ASC option.

HTTP Error 401 401.1 Unauthorized: Log On Failed

This error will occur when you try to access your mailbox through the active server logon page if Internet Information Server (IIS) version 4.0 has been installed on a Microsoft Exchange 5.0 Web Access Server. Exchange Server version 5.0 Web Access is not supported with IIS version 4.0. The only alternative in this situation is to remove IIS version 4.0 and reinstall IIS verison 3.0.

Server and Registry Settings

Setting the Session Timeout

Use the following steps to set timeout values:

  1. Open the Exchsrvr\webdata\\lib\logon.inc file using a text editor such as Notepad.

  2. Search for the Session.Timeout string. The first occurrence is for authenticated access and the default value is 60 minutes. The second occurrence is for anonymous access and the default value is 20 minutes.

  3. Change either or both of the values as appropriate to your situation.

The MSExchangeWeb Registry Key

The Outlook Web Access settings are stored in the following registry key on the IIS server:

This registry key has four subkeys: AcceptLanguage, Applications, Parameters, and Performance.

Additional Information from Exchange 5.5 Release Notes

Installing the Windows NT Hotfix for Outlook Web Access

When installing Outlook Web Access, you should install the Windows NT hotfix that addresses problems with Secure Sockets Layer (SSL) and memory leaks. This hotfix is for use only with Exchage Server using IIS version 3.0. For more information, see the Microsoft Knowledge Base at the Microsoft Technical Support Web site (http://support.microsoft.com/support).

You can download the hotfix from the Microsoft anonymous FTP server:

The self-extracting zip file is called ASP-MEMFIX.EXE.

Installing Internet Explorer 4.0 After Installing Microsoft Exchange Server

In many cases, you may wish to install IE 4.0 on your Exchange Outlook Web Access Server for troubleshooting and setup. If you need to run Internet Explorer and Microsoft Exchange Server on the same computer, it is strongly recommended that you install Internet Explorer 4.0 before installing Microsoft Exchange Server. If you install Internet Explorer 4.0 after installing Microsoft Exchange Server, Internet Explorer modifies the Multipurpose Internet Mail Extensions (MIME) registry database. This results in problems for international mail, especially mail with double-byte character content. If you installed Internet Explorer 4.0 after installing Microsoft Exchange Server, complete the following procedure to correct this problem. You can perform these steps without stopping any Microsoft Exchange Server services.

Note This procedure is not required if you installed Internet Explorer 4.0 before you installed Microsoft Exchange Server.

  1. Copy the Reset.inf file in the Server\Support\Mimedb directory from the Microsoft Exchange Server compact disc to a local hard disk.

  2. Right-click the file name and click Install.

Web Browser Exception Errors When Using 128-bit SSL Authentication

When 128-bit SSL authentication is turned on for IIS, some Web browsers, such as Internet Explorer versions earlier than 3.02, build 1310, can quit because an exception error occurs when users access Web documents using Microsoft Outlook Web Access.

To eliminate these types of Web browser exception errors, you can add the following registry key to the IIS computer:

Note The above registry key is one path; it has been wrapped for readability.

This turns buffering on for the IIS computer. When buffering is turned on, Active Server Pages are parsed completely before any data is sent to Web browsers. Buffering is off for servers by default.

In addition to modifying the registry, users can also control buffering on a per-page basis by inserting at the top of a page.

Caution With buffering turned on, more server memory is used to parse Active Server Pages and server performance is slower. Be sure to monitor the server to evaluate the impact of buffering on server performance. You may need to upgrade the server's processor or memory to maintain optimum performance.

For optimum performance of Outlook Web Access when using 128-bit SSL authentication, consider upgrading your users' Web browsers to versions which have the enhanced ability to handle 128-bit SSL authentication. Internet Explorer 3.02, build 1310 and later versions have enhanced 128-bit SSL authentication capability. For more information about obtaining the latest version of Internet Explorer, use your Web browser to visit http://www.microsoft.com/ie.

Installing Microsoft Outlook Version 8.03 on a Microsoft Exchange Server Version 5.5 Computer

If you install Outlook 8.03 on a Microsoft Exchange Server 5.5 computer, Outlook Web Access does not perform as expected. To solve this problem, run Regsvr32a.exe after installing Outlook. This utility resets the affected registry settings by re-registering Cdo.dll. You can download Regsvr32a.exe from the Microsoft Web site at:

Run Regsvr32.exe from the command line using the full path to Cdo.dll as the argument. For example, the following command changes the registry settings by re-registering Cdo.dll

where systemroot is your Windows NT directory.










COPYRIGHT NOTICE. Copyright © 1998 Microsoft and/or its suppliers, One Microsoft Way, Redmond, Washington 98052-6399 U.S.A. All rights reserved.

TRADEMARKS. Microsoft, Windows, Windows NT, Outlook, and/or other Microsoft products referenced herein are either trademarks or registered trademarks of Microsoft. Other product and company names mentioned herein may be the trademarks of their respective owners.