• To create an Exchange Web client access publishing rule
  • Important
  • Users Receive Access Denied Error Message




    Download 1.65 Mb.
    bet142/147
    Sana21.03.2017
    Hajmi1.65 Mb.
    #1016
    1   ...   139   140   141   142   143   144   145   146   147

    Users Receive Access Denied Error Message


    When a user attempts to connect to a published Outlook Web Access site and does not add the /exchange suffix to the end of the URL, such as https://mail.contoso.com, instead of receiving the forms-based authentication logon screen, the user receives an "Access denied" error message. This error can be difficult to troubleshoot because ISA Server is behaving as expected.

    A workaround is to publish the root of the Exchange front-end server, with an action of Deny, and redirect users to the proper URL, such as https://mail.contoso.com/exchange.

    Perform the following procedure to automatically redirect users to the proper Outlook Web Access URL.

    To create an Exchange Web client access publishing rule


      1. In the console tree of ISA Server Management, click Firewall Policy:

       For ISA Server 2006 Standard Edition, expand Microsoft Internet Security and Acceleration Server 2006, expand Server_Name, and then click Firewall Policy.

       For ISA Server 2006 Enterprise Edition, expand Microsoft Internet Security and Acceleration Server 2006, expand Arrays, expand Array_Name, and then click Firewall Policy.



      2. On the Tasks tab, click Publish Web Sites. Use the wizard to create the rule as outlined in the following table.



    Page

    Field or property

    Setting

    Welcome

    Web publishing rule name

    Type a name for the rule, such as Exchange Redirect.

    Select Rule Action

    Action to take when rule conditions are met

    Select Deny.

    Publishing Type

    Select if this rule will publish a single Web site or external load balancer, a Web server farm, or multiple Web sites

    Select Publish a single Web site or load balancer.

    Server Connection Security

    Choose the type of connections ISA Server will establish with the published Web server or server farm

    Select Use SSL to connect to the published Web server or server farm.

    Note:

    A server certificate must be installed on the published Exchange front-end servers, and the root CA certificate must be installed on the ISA Server computer.



    Internal Publishing Details

    Internal site name

    Type the internal FQDN of the Exchange front-end server. For example: exchfe.corp.contoso.com.

    Important:

    The internal site name must match the name of the server certificate that is installed on the internal Exchange front-end server.



    Note:

    If you cannot properly resolve the internal site name, you can select Use a computer name or IP address to connect to the published server, and then type the required IP address or name that is resolvable by the ISA Server computer.



    Internal Publishing Details

    Path (optional)

    Type / in the Path box.

    Public Name Details

    Accept requests for

    Public name



    This domain name (type below)

    Type the domain name that you want ISA Server to accept connections for. For example, type mail.contoso.com.



    Select Web Listener

    Web listener

    Select the Web listener you created previously, such as Exchange FBA.

    Authentication Delegation

    Select the method used by ISA Server to authenticate to the published Web server

    Select Basic authentication.

    User Sets

    This rule applies to requests from the following user sets

    Select the user set approved to access this rule. This should be the same user set that you used in the Exchange publishing rule.

    Completing the New Web Publishing Rule Wizard

    Completing the New Web Publishing Rule Wizard

    Finish to complete the wizard.




    Download 1.65 Mb.
    1   ...   139   140   141   142   143   144   145   146   147




    Download 1.65 Mb.

    Bosh sahifa
    Aloqalar

        Bosh sahifa



    Users Receive Access Denied Error Message

    Download 1.65 Mb.