Hi,
We set up an Exchange 2003 Server at work and it seems to work fine using OWA, as long as the user is an Administrator. If we remove the user from the Administrators' group, they get the following message in the browswer: "Local Security Authority Cannot Be Contacted". Of course, we can't make all users Administrators; is there another way to resolve this? It must have something to do with folder permissions, but I can't figure out what they are.
Software/Hardware used:
Exchange Server 2003 with OWA
ASKED:
July 27, 2011 6:54 PM
UPDATED:
March 31, 2012 7:52 PM
Windows 2000 Member Server
Click Start, point to Programs, point to Administrative Tools, and then click Local Security Policy.
Click Security Settings, click Local Policies, and then click User Rights Assignment.
In the Details pane, double-click Log on locally, remove the Everyone group, and then add the group or users who will have access to OWA.
Close the Local Security Policy window.
Click Start, click Run, type secedit /refreshpolicy machine_policy, and then click OK.
Windows 2000 Domain Controller
Click Start, point to Programs, point to Administrative Tools, and then click Domain Controller Security Policy.
Click Security Settings, click Local Policies, and then click User Rights Assignment.
In the Details pane, double-click Log on locally, remove the Everyone group, and then add the group or users who will have access to OWA.
Close the Domain Controller Security Policy window.
Click Start, click Run, type secedit /refreshpolicy machine policy, and then click OK.
Users or groups that have “Log on locally” permissions can log on to OWA. Users or groups that do not have “Log on locally” permissions are prompted for credentials after they enter their alias at the Logon screen. They will be prompted three times, and then get the “401.1 Unauthorized” error message. This behavior is by design.
http://social.technet.microsoft.com/Search/en-US?query=outlook%20web%20access%20local%20security%20policy%20permissions&beta=0&ac=3