535
社区成员
发帖
与我相关
我的任务
分享为什么我的OWA中的选项/更改密码不能使用？
我的机器上安装了EXCHANGE2K，客户端可以正常使用OWA收发邮件，但是发现OWA快捷方式的“选项”中的“更改密码”不能使用，每次单击该按钮出现提示：
The page cannot be displayed
...............
Cannot find server or DNS Error
Internet Explorer
可是，我在打开OWA的时候用
http://servername/exchange/username的时候是可以正常访问的。
想问难道是我的DNS有错误吗？我的EXCHANGE2K安装在一台win2k server上，客户端机器安装的也是WIN2K SERVER,而且客户端机器是处在一个工作组中而不是该服务器的域中，不清楚该错误是否与此有关？可是这样也有一个问题，即如果网络环境中有2台以上的服务器时，我想让我的客户端加入另外一台文件服务器的域而不是该邮件服务器的域，那岂不是没法修改口令了？
我的问题是
（1）为什么我的OWA中的修改密码不能使用？
（2）如果不能用OWA修改邮箱口令，我只能用a.设置邮件账户第一次登录时必须修改口令b.从win98登录到该邮件服务器的域，修改口令。但这样的后果是，只能修改一次口令，而且必须从win98机器上登录，如果在win2k上就不能用此法了。
The page cannot be displayed
...............
Cannot find server or DNS Error
Internet Explorer
可是，我在打开OWA的时候用
http://servername/exchange/username的时候是可以正常访问的。
想问难道是我的DNS有错误吗？我的EXCHANGE2K安装在一台win2k server上，客户端机器安装的也是WIN2K SERVER,而且客户端机器是处在一个工作组中而不是该服务器的域中，不清楚该错误是否与此有关？可是这样也有一个问题，即如果网络环境中有2台以上的服务器时，我想让我的客户端加入另外一台文件服务器的域而不是该邮件服务器的域，那岂不是没法修改口令了？
我的问题是
（1）为什么我的OWA中的修改密码不能使用？
（2）如果不能用OWA修改邮箱口令，我只能用a.设置邮件账户第一次登录时必须修改口令b.从win98登录到该邮件服务器的域，修改口令。但这样的后果是，只能修改一次口令，而且必须从win98机器上登录，如果在win2k上就不能用此法了。
...全文
请发表友善的回复…
发表回复
paboys 2002-04-08
- 打赏
- 举报
koko可否回答完我的问题===>
http://www.csdn.net/expert/topic/606/606450.xml?temp=.3727533
http://www.csdn.net/expert/topic/606/606450.xml?temp=.3727533
ssss78 2002-04-04
- 打赏
- 举报
1. 在本机控制面板添加/删除程序→添加/删除WINDOWS组件→增加证书服务。安装证书服务。
2. 程序→管理工具→INTERNET服务器管理器→INTERNET信息服务界面
在默认WEB站点内，建立虚拟目录“IISADMPWD”，应一字不错，切记。选择路径：c:\winnt\system32\inetsrv\iisadmpwd 。如果你安装IIS没改目录的话，就是这个目录了。如果改了目录，你自己去找IISADMPWD目录吧。如果没有此目录，则你证书安装有问题。安装权限选择“读取、运行脚本”。在IISADMPWD目录上选属性--目录安全性—匿名访问和验证控制—编辑—勾选匿名访问，确定退出。
在默认WEB站点中，选属性--目录安全性--服务器证书--安装证书。注意，选择立即申请。安装好后，目录安全性中原查看证书按钮应为正常。
3. 在OWA中选项“更改密码”已经可以正常显示修改口令的页面了，输入域、账户、旧密码、新密码后“OK" 即可出现密码更改成功页面。
2. 程序→管理工具→INTERNET服务器管理器→INTERNET信息服务界面
在默认WEB站点内，建立虚拟目录“IISADMPWD”，应一字不错，切记。选择路径：c:\winnt\system32\inetsrv\iisadmpwd 。如果你安装IIS没改目录的话，就是这个目录了。如果改了目录，你自己去找IISADMPWD目录吧。如果没有此目录，则你证书安装有问题。安装权限选择“读取、运行脚本”。在IISADMPWD目录上选属性--目录安全性—匿名访问和验证控制—编辑—勾选匿名访问，确定退出。
在默认WEB站点中，选属性--目录安全性--服务器证书--安装证书。注意，选择立即申请。安装好后，目录安全性中原查看证书按钮应为正常。
3. 在OWA中选项“更改密码”已经可以正常显示修改口令的页面了，输入域、账户、旧密码、新密码后“OK" 即可出现密码更改成功页面。
一年级小学生 2002-04-04
- 打赏
- 举报
多谢各位。不过刚换新了一台机器了，正在重新安装系统。等确认后即给分。
scgqq 2002-04-03
- 打赏
- 举报
xch74(koko)，我按照你的方法作仍然不行，访问iisadmpwd时说禁止访问,为什么？
ssss78 2002-04-03
- 打赏
- 举报
要做证书，也要建iisadmpwd虚拟目录，设置很麻烦的
徐春华 2002-04-03
- 打赏
- 举报
这些*.htr文件位于iisadmpwd虚拟目录下，可以用写字板更新。
你可以先改一下aexp2b.htr试试，我已调试通过。
你可以先改一下aexp2b.htr试试，我已调试通过。
徐春华 2002-04-03
- 打赏
- 举报
你还要把你的exchange虚拟目录的登录方式设为基本验证就可以了！
因为否则服务知道你是谁，安全性如何保证！
因为否则服务知道你是谁，安全性如何保证！
徐春华 2002-04-02
- 打赏
- 举报
对不起，忘记了一点，你对那个相关的*.htr中的有关的https://
也要改成http://才行！
其他的我明天测一下再告诉你。
因为我们是自己写代码来实现这个功能。
也要改成http://才行！
其他的我明天测一下再告诉你。
因为我们是自己写代码来实现这个功能。
hopred 2002-04-01
- 打赏
- 举报
我想应该先安装CA才可以
一年级小学生 2002-04-01
- 打赏
- 举报
to xch74(koko) ( ):
你的方法好像已经对了一半了！:) Thank you.
我按照你说的方法修改了脚本文件，并设置了虚拟目录，这下在OWA中单机“更改密码”已经可以正常显示修改口令的页面了，但是输入域、账户、旧密码、新密码后“OK"时却又出现了"Cannot find server -- The page can not be displayed"错误提示。让我再check一下，如果依旧不能解决问题还请你再help！
你的方法好像已经对了一半了！:) Thank you.
我按照你说的方法修改了脚本文件，并设置了虚拟目录，这下在OWA中单机“更改密码”已经可以正常显示修改口令的页面了，但是输入域、账户、旧密码、新密码后“OK"时却又出现了"Cannot find server -- The page can not be displayed"错误提示。让我再check一下，如果依旧不能解决问题还请你再help！
global_boy 2002-03-31
- 打赏
- 举报
XWEB: How to Change OWA Passwords Through IIS (Q267596)
--------------------------------------------------------------------------------
The information in this article applies to:
Microsoft Exchange 2000 Server
Microsoft Internet Information Services version 5.0
--------------------------------------------------------------------------------
SUMMARY
This article describes how to change Outlook Web Access (OWA) passwords through Internet Information Services (IIS).
MORE INFORMATION
To enable users to change OWA passwords through IIS, use the following steps on each IIS server to which Exchange users are redirected:
Install and configure Secure Socket Layer (SSL) on the server.
Click Start , point to Programs , point to Administrative Tools , and then click Internet Services Manager .
Right-click the default Web site, point to New , and then click Virtual Directory .
In the Virtual Directory Creation Wizard, type IISADMPWD in the Alias box, and then click Next .
In the Directory box, type hard disk :\winnt\system32\inetsrv\iisadmpwd (where hard disk is your default hard disk), and then click Next .
Verify that only the read and run script check boxes are selected (such as the ASP check box), click Next , and then click Finish .
Verify that the Iisadmpwd folder has the Anonymous Access authentication method enabled. Note that you can select other authentication types, but you must also select the Anonymous Access authentication method.
NOTE : If you do not enable the Anonymous Access option, the client and server go into an endless loop when you attempt to authenticate users who are prompted to change an expired password. For example, if a user navigates to the site and is prompted for a password but their password has expired, the first page that they tried to access redirects them to the password expiry page. The password expiry page challenges the user, but because the user is not authenticated on the first page, the second page refuses the connection because the password has expired. When this occurs, the user is redirected back to first page, the first page redirects the user to the second page, and so on.
For additional information about a fix for this looping behavior, click the article number below to view the article in the Microsoft Knowledge Base:
Q275457 IIS 5.0 May Loop Infinitely When A User Is Forced to Change Their Password
Change the Metabase PasswordChangeFlags setting to zero ( 0 ). To do this, you must first change into the \inetpub\aminscriptsfolder on your hard drive.
At the command prompt type cd drive \:inetpub\AdminScripts , for example:
cd c\:inetpub\AdminScripts
At the drive \:inetpub\adminscripts> prompt, type the following command:
adsutil.vbs set w3svc/passwordchangeflags value
NOTE : The following values are options for the PasswordChangeFlags setting:
0: requires password change by SSL
1: allows password change by non-secure ports
2: disables password changes
4: disables advance notification of expiration
The following example shows how to change the Metabase PasswordChangeFlags setting to zero:
cd c\:inetpub\AdminScripts
>adsutil.vbs set w3svc/passwordchangeflags 0
Access the mailbox by using the following address (where server name is the server name and mailbox is the mailbox:
https:// server name /exchange/ mailbox
When you type the account information on the Aexp.htr page (or on the Aexp3.htr page if you are accessing it from an unsecured URL), you must type domain\username .
Note that because the IUSER was authenticated to the Aexp.htr page there is no way to populate the Account box with the domain\username unless you hard code the domain\computer name in the Aexp.htr file (or in the Aexp3.htr file for an unsecured URL).
--------------------------------------------------------------------------------
The information in this article applies to:
Microsoft Exchange 2000 Server
Microsoft Internet Information Services version 5.0
--------------------------------------------------------------------------------
SUMMARY
This article describes how to change Outlook Web Access (OWA) passwords through Internet Information Services (IIS).
MORE INFORMATION
To enable users to change OWA passwords through IIS, use the following steps on each IIS server to which Exchange users are redirected:
Install and configure Secure Socket Layer (SSL) on the server.
Click Start , point to Programs , point to Administrative Tools , and then click Internet Services Manager .
Right-click the default Web site, point to New , and then click Virtual Directory .
In the Virtual Directory Creation Wizard, type IISADMPWD in the Alias box, and then click Next .
In the Directory box, type hard disk :\winnt\system32\inetsrv\iisadmpwd (where hard disk is your default hard disk), and then click Next .
Verify that only the read and run script check boxes are selected (such as the ASP check box), click Next , and then click Finish .
Verify that the Iisadmpwd folder has the Anonymous Access authentication method enabled. Note that you can select other authentication types, but you must also select the Anonymous Access authentication method.
NOTE : If you do not enable the Anonymous Access option, the client and server go into an endless loop when you attempt to authenticate users who are prompted to change an expired password. For example, if a user navigates to the site and is prompted for a password but their password has expired, the first page that they tried to access redirects them to the password expiry page. The password expiry page challenges the user, but because the user is not authenticated on the first page, the second page refuses the connection because the password has expired. When this occurs, the user is redirected back to first page, the first page redirects the user to the second page, and so on.
For additional information about a fix for this looping behavior, click the article number below to view the article in the Microsoft Knowledge Base:
Q275457 IIS 5.0 May Loop Infinitely When A User Is Forced to Change Their Password
Change the Metabase PasswordChangeFlags setting to zero ( 0 ). To do this, you must first change into the \inetpub\aminscriptsfolder on your hard drive.
At the command prompt type cd drive \:inetpub\AdminScripts , for example:
cd c\:inetpub\AdminScripts
At the drive \:inetpub\adminscripts> prompt, type the following command:
adsutil.vbs set w3svc/passwordchangeflags value
NOTE : The following values are options for the PasswordChangeFlags setting:
0: requires password change by SSL
1: allows password change by non-secure ports
2: disables password changes
4: disables advance notification of expiration
The following example shows how to change the Metabase PasswordChangeFlags setting to zero:
cd c\:inetpub\AdminScripts
>adsutil.vbs set w3svc/passwordchangeflags 0
Access the mailbox by using the following address (where server name is the server name and mailbox is the mailbox:
https:// server name /exchange/ mailbox
When you type the account information on the Aexp.htr page (or on the Aexp3.htr page if you are accessing it from an unsecured URL), you must type domain\username .
Note that because the IUSER was authenticated to the Aexp.htr page there is no way to populate the Account box with the domain\username unless you hard code the domain\computer name in the Aexp.htr file (or in the Aexp3.htr file for an unsecured URL).
kodiak 2002-03-30
- 打赏
- 举报
http://support.microsoft.com/default.aspx?scid=kb;en-us;Q267596
「已注销」 2002-03-27
- 打赏
- 举报
我也正想问这个问题，我们探讨一下
徐春华 2002-03-27
- 打赏
- 举报
另外说一句，这个问题是因为这项功能出于安全性的考虑，微软是希望它用于SSL环境下的，一般IIS缺省是没有装SSL的，所以要进行以上的调整，以便的SSL环境下使用。
徐春华 2002-03-27
- 打赏
- 举报
这个问题主要是由于你没有配置好相关的网页。因为改变密码实际上是调用了一个网页来进行的，缺少状态是没有连上的。可以这样来做！
1）在你的服务器上有一个IIS 虚拟目录叫exchweb
在它的controls目录下有dlg_Options20.js文件；
2）用写字板打开这个文件，找以下这个函数：
function openChangePassword()
{
var objLocation = window.location;
var szServer = objLocation.host;
var szClose = g_szUserBase + "/?Cmd=close";
var szURL = "https://" + szServer + "/iisadmpwd/"+g_szPasswordPage+"?" + szClose;
var szOpts = "toolbar=0,location=0,directories=0,status=0,menubar=0,scrollbars=1,resizable=1,width=355,height=350";
window.open(szURL,0,szOpts)
}
3）将其中的
var szURL = "https://" + szServer + "/iisadmpwd/"+g_szPasswordPage+"?" + szClose;
改为
var szURL = "http://" + szServer + "/iisadmpwd/"+g_szPasswordPage+"?" + szClose;
4）将c:\winnt\system32\inetsrv\iisadmpwd目录发布为一个IIS虚拟目录，名称就叫iisadmpwd
5)OK?
1）在你的服务器上有一个IIS 虚拟目录叫exchweb
在它的controls目录下有dlg_Options20.js文件；
2）用写字板打开这个文件，找以下这个函数：
function openChangePassword()
{
var objLocation = window.location;
var szServer = objLocation.host;
var szClose = g_szUserBase + "/?Cmd=close";
var szURL = "https://" + szServer + "/iisadmpwd/"+g_szPasswordPage+"?" + szClose;
var szOpts = "toolbar=0,location=0,directories=0,status=0,menubar=0,scrollbars=1,resizable=1,width=355,height=350";
window.open(szURL,0,szOpts)
}
3）将其中的
var szURL = "https://" + szServer + "/iisadmpwd/"+g_szPasswordPage+"?" + szClose;
改为
var szURL = "http://" + szServer + "/iisadmpwd/"+g_szPasswordPage+"?" + szClose;
4）将c:\winnt\system32\inetsrv\iisadmpwd目录发布为一个IIS虚拟目录，名称就叫iisadmpwd
5)OK?
