Monday, April 2, 2012

"Your request couldn't be completed" when accessing OWA

I encountered the following error when implementing Exchange 2010 for a large organization during the test phase. Their infrastructure have a lot of servers with CAS arrays and at this point is running on Exchange 2010 SP2 with Rollup Update 2.


The error appeared when clicked to compose a new mail, when browsing through old emails or trying to other things in OWA. Since this was quite a large implementation we had to find a quick fix.
We  notice that this error was showing only when accessing OWA without using SSL. Normally the users will access OWA only by SSL via a hardware load balancer solution for CAS servers but for sure the technical personnel will try to access each CAS server individually with no encryption as SSL offloading is configured on each of the balanced servers.
Searching through Microsoft articles I found one that is talking about "Simplify the Outlook Web App URL" and especially when no SSL is needed -  http://technet.microsoft.com/en-us/library/aa998359.aspx.
It seems that Exchange 2010 SP2 has introduced a new option that needs to be configured in order to use OWA without SSL.
To solve the problem, you need to modify the Outlook Web App Web.config file on the Client Access server. The default location is \Program Files\Microsoft\Exchange Server\\ClientAccess\Owa as follows:
1.       Make a backup for web.config file
2.       Using notepad open the original file and find the line that contains httpCookies httpOnlyCookies="false" requireSSL="true" domain=""
3.       Change the requireSSL option to false and save the file
4.       From command line run iisreset /noforce /timeout:120 and wait for the IIS reset to be completed
This should solve the problem and you should be able to access OWA without using SSL without any error. Pay attention that this should not be used for external access as it is not secured J.

1 comment:

  1. I had this problem prior to SP2, I installed SP2; tried this fix and nothing changed.

    ReplyDelete