标题: [讨论]在群集环境下实施利用OWA更改用户密码 [打印本页] 作者: yinjie 时间: 2005-3-24 21:16 标题: [讨论]在群集环境下实施利用OWA更改用户密码 我们知道OWA是EXCHANGE 2000/2003的一个自带功能，它可以通过IE来访问用户邮箱。OWA还带有一个功能，那就是更改密码。尽管使用OWA更改密码需要配置证书服务和SSL，但仍是一个很不错的更改用户的密码的选择。在单机上实施OWA更改密码已经说的饿很多了，网上一找一大堆（本版的精华区也不止一篇文章讨论过），然而在群集环境下，这一简单的功能就不是那么好实现了。微软只提出过这样的一篇KB：<a target=_blank href=http://support.microsoft.com/Default.aspx?kbid=277908>http://support.microsoft.com/Default.aspx?kbid=277908</a>，然而这篇KB写的很不清楚。在这里展开讨论，望有实施过或知道具体做法的朋友参与讨论。谢谢（我按此方法实施的结果是会出现禁止访问），我也找了很多的资源网站（包括一些国外站点），没有得到确切的结果。<br>
<br>
有兴趣的可以直接联系我讨论作者: yinjie 时间: 2005-3-25 00:38 标题: re:初步判定原因为PF的权限问题，个人认为保... 初步*定原因为PF的权限问题，个人认为保持IISADMPWD在本机或某一SHARE目录也是一样的，测试中。以下资源供参考：<br>
<br>
RESOLUTION<br>
============<br>
Configure the Server with SSL<br>
Configure the Server with a Certificate <br>
Install the hotix 833734<br>
The virtual directory called “IISADMPWD” and point it to <br>
“c:\winnt\system32\inetsrv\iisadmpwd” <br> 作者: 钉子 时间: 2007-12-13 12:33
Change Password Over OWA In Exchange Cluster
This article describes how to implement to change domain user password over OWA in exchange server 2003 cluster environment by Jiang, Xiao-Shuai.The lab environment is composed of six vmware virtual machines running on my physical computer named Host.
-----------------------------------------------------------------
IP Configuration of Virtual PC & Physical PC and Topology:
-----------------------------------------------------------------
dc01.jzlld.org (OS: Windows.Server.2003.Enterprise.SP1 Role: DC/GC/DNS )
Local Connection Adapter switched to the vmnet1
IP: 10.0.0.1/8
DNS: 10.0.0.1
DG: 10.0.0.101
ca01.jzlld.org (OS: Windows.Server.2003. Enterprise.SP1 Role: CA)
Local Connection Adapter switched to the vmnet1
IP: 10.0.0.2/8
DNS: 10.0.0.1
DG: 10.0.0.101
ex01.jzlld.org (OS: Windows.Server.2003.Enterprise.SP1/Exchange.Server.Enterprise.2003+SP2 Role: Mail Server/Cluster node)
Public Adapter switched to the vmnet1
IP: 10.0.0.11/8
DNS: 10.0.0.1
DG: 10.0.0.101
Private Adapter switched to the vmnet2
IP: 20.0.0.11/8
DNS: null
DG: null
ex02.jzlld.org (OS: Windows.Server.2003.Enterprise.SP1/Exchange.Server.Enterprise.2003+SP2 Role: Mail Server/Cluster node)
Public Adapter switched to the vmnet1
IP: 10.0.0.12/8
DNS: 10.0.0.1
DG: 10.0.0.101
Private Adapter switched to the vmnet2
IP: 20.0.0.12/8
DNS: null
DG: null
---------------------------
cluster.jzlld.org
10.0.0.10/8
excluster.jzlld.org (EVS)
10.0.0.100/8
----------------------------
xp01.jzlld.org
Local Connection switched to the vmnet1
IP: 10.0.0.3/8
DNS: 10.0.0.1
DG: 10.0.0.101
isa-router
Internal Adapter switched to the vmnet1
IP: 10.0.0.101/8
DNS; null
DG: null
External Adapter switched to the vmnet0
IP: 192.168.0.2/24
DNS: null
DG: null
ADSL (pppoe) Connection
IP: auto
DNS: auto
DG: auto
-------------------------
Implementing Steps:
-------------------------
1、Firstly I deploy windows server 2003 cluster. Add the .vmx file of the two-nodes one entry :“disking.lock=false”.
2、Deploy the exchange two-nodes cluster, about setting up two-nodes exchange cluster you can refer to the processes in “Deploying Enterprise Level Virtual Microsoft Network” article that I wrote.About deploying SP2 for your exchange cluster; please refer to the processes in the “Deploying Enterprise Level Virtual Microsoft Network” article that I wrote.
3、After the exchange cluster is deployed successfully, stop respectively the Default Web Site of each node in IIS Management Console.
4、Shut down ex02.jzlld.org node, and then create the IISADMPWD Virtual Directory under the Exchange Virtual Server Web Site of the “ex01.jzlld.org” node.
5、Request a SSL certificate for the Exchange Virtual Server Web Site from the ca01.jzlld.org, and then install it on the exc01.jzlld.org.
6、Only enable SSL on the IISADMPWD Virtual Directory.
7、Configure the IISADMPWD Virtual Directory Default Document and modify the registry to show “change password” button in the OWA.
About changing password over OWA, please refer to the processes in the “Changing Domain User Password Over OWA ” article that I wrote.
8、Remove “C:\Program Files\Exchsrvr\bin\davex.dll” from the App Mappings tab on the IISADMPWD Virtual Directory. Otherwise you’ll receive the error “HTTP 503 Service Unavailable” when trying to change the user's password over OWA.
9、Shut down the ex01.jzlld.org,and then restart the ex02.jzlld.org(make sure that exchange cluster group has deliver to the ex02.jzlld.org ). Repeat 4-8 step on the ex02.jzlld.org. The name of certificate required of Exchange Virtual Server Web Site on the ex02.jzlld.org should be same with the ex01.jzlld.org.
10、Publish the OWA site of the exchange cluster on the isa-router. About how to publish the OWA site on the ISA Server 2004, Please refer to the article that Feng, Jian-Zi has written in the www.isacn.org site.
10、Try to access the OWA site to change domain user passowrd from the internet. It will be good work.
-------------------------------
Cause
-------------------------------
I find some information about the Davex.dll file from Microsoft :The OWA uses the Davex.dll file or Exprox.dll file (the Exprox.dll file for front-end servers and the Davex.dll file for back-end servers) to intercept requests to that Web Site and process those requests for the OWA.
By default, if you create a IISADMPWD Virtual Directory under the Exchange Virtual Server Web Site in the exchange cluster environment, that Virtual Directory inherits properties from the parent. One of the properties that the virtual directory inherits is the list of extensions. The list of extensions includes the Davex.dll or Exprox.dll file, depending on whether the server is a back-end server or a front-end server.
If you create the IISADMPWD Virtual Directory under a Default Web Site in non-exchange cluster environment, the Davex.dll will not appear in the App Mappings tab of the default Web Site. The Davex.dll will not inherit to IISADMPWD Virtual Directory, also. I think it is real reason to receive the error “HTTP 503 Service Unavailable” in the exchange cluster environment.
---------------------------------------------
Microsoft KB:
--------------------------------------------- http://support.microsoft.com/kb/282230/en-us http://support.microsoft.com/kb/328242/en-us作者: 钉子 时间: 2007-12-13 15:12 标题: 关于在Exchange Server 2003群集OWA中修改密码的方法（需要注意的地方） 转自：http://blog.sina.com.cn/s/blog_49972b95010006nk.html
作者：LingPing
