Article ID: 269348 - View products that this article applies to.
This article was previously published under Q269348
When a user on a Microsoft Windows 2000-based computer uses Microsoft Internet Explorer 5 or later to gain access to Microsoft Outlook Web Access, the user may receive the following security warning message:
If the user clicks Yes, the user receives the following error message in one of the panes:
This page contains both secure and nonsecure items.
Do you want do display the nonsecure items?
The user may also receive the following error message:
The page cannot be displayed
Unable to display folder. An internal server error occurred.
This issue can occur if the Exchange 2000 Server virtual directory is set up to use Secure Sockets Layer (SSL) and Kerberos authentication (Integrated Windows authentication).
This method of authentication depends on time synchronization between the client and the server. The difference in the time on the two computers must be no more than a five minutes. Time zone differences do not affect this method of authentication, because these differences are already accounted for.
To resolve this issue, synchronize the time on the client computer with the time on the server. To do this automatically, set up an authoritative time server. For more information about how to set up an authoritative time server, click the following article number to view the article in the Microsoft Knowledge Base:
(http://support.microsoft.com/kb/216734/ )How to configure an authoritative time server in Windows 2000
To work around this issue, disable Integrated Windows authentication on the Exchange 2000 virtual directory by using Internet Services Manager. To do this, follow these steps:
This behavior is by design. This is a requirement of Kerberos authentication.
If a user on a Windows 2000-based computer uses Internet Explorer 5 or later to authenticate against a Microsoft Internet Information Service (IIS) 5.0 resource that has Integrated Windows authentication enabled, a negotiate procedure is performed, and Kerberos authentication is likely to be used. Kerberos authentication requires time synchronization as a method of protecting against replay attacks.