"Access Denied" Error Message When You Try to Use Outlook Web Access

Applies to: Microsoft Exchange Server 2003 Enterprise EditionMicrosoft Exchange Server 2003 Standard Edition


When users try to log on the Microsoft Outlook Web Access (OWA), they may receive one of the following error messages:
401.3 Access Denied by ACL on Resource - Internet Information Services
A Runtime Error has occurred.
Do you wish to Debug?
Line: 350
Error: Access is denied.


This issue occurs if the Authenticated Users group does not have access permissions to the Exchsrvr\exchweb folder.

To have us fix this problem for you, go to the "Fix it for me" section. If you would rather fix this problem yourself, go to the "Let me fix it myself" section.

Fix it for me

To fix this problem automatically, click the Fix this problem link. Then click Run in the File Download dialog box, and follow the steps in this wizard.

Note This wizard may be in English only; however, the automatic fix also works for other language versions of Windows.

Note If you are not on the computer that has the problem, you can save the automatic fix to a flash drive or to a CD, and then you can run it on the computer that has the problem.

Let me fix it myself

To resolve this issue yourself, follow these steps:
  1. Start Windows Explorer, right-click the drive:\Program Files\Exchsrvr folder, and then click Properties, where drive refers to the drive letter of your system drive (typically it is C).
  2. Click the Security tab, and then click to select the Allow inheritable permissions from parent to propagate to this object check box.
  3. Click Apply.
  4. Make sure that the Authenticated Users group has the following permissions in the Exchsrvr\exchweb folder:
    • Read & execute
    • List Folder Contents
    • Read
    If the Authenticated Users group does not have these permissions, set these permissions manually. Close the exchweb Properties dialog box.
  5. Repeat steps 1-4 on the C:\Program Files\Common Files\Microsoft Shared folder.
  6. Click Start, point to Programs, point to Administrative Tools, and then click Internet Services Manager.
  7. Right-click your server, and then click Restart IIS.
  8. In the What do you want IIS to do list, click Restart Internet Services on Server Name, and then click OK.
  9. Click Start, point to Programs, point to Administrative Tools, and then click Services to open the Services dialog box.
  10. Restart all Exchange services.
  11. Close the Services dialog box.