all groups > iis smtp nntp > april 2005 >
You're in the

iis smtp nntp

group:

Removing SPA from POP3 service of Windows 2003 Server


Re: Removing SPA from POP3 service of Windows 2003 Server Ken Schaefer
4/16/2005 12:00:00 AM
iis smtp nntp: Hi,

If you wish to change the authentication type from "Local Accounts" to
"Encrypted Password File" you will need to delete the existing domains, and
start over.

However, to remove the SPA requirement shouldn't require that. "Require SPA"
is a checkbox that you can uncheck on the server. Open the POP3 MMC,
right-click on the server and bring up the properties. uncheck "Require
Secure Password Authentication". SPA affects the way that the client
(Outlook) sends the username/password to the server (basically it uses NTLM
authentication rather than sending usernames/passwords in the clear).

I think what you need to do is configure your Outlook accounts, and tell
Outlook that you want to use a different username/password for each account.

Cheers
Ken

--
Blog: www.adopenstatic.com/cs/blogs/ken/
Web: www.adopenstatic.com


[quoted text, click to view]
: I'm trying to use Outlook 2003 to access both my mailbox and the
postmaster
: mailbox and I think SPA is keeping me from doing it.
:
: I have two Windows 2003 Servers I set up to play with and a local domain
: (let's call it "myhome.com").
: On the other server I have POP3 running with two mailboxes (let's call it
: me@myhome.com and webmaster@myhome.com)
:
: I can configure two email accounts in Outlook 2003, one for each, they
both
: "test" in the configuration applet with no problem. However, when I try
to
: download email I only get the email for me@myhome.com (I'm logged in as
: "myhome\me"). If I login as myhome\webmaster, I can download the
webmaster
: email. So it would seem SPA is keeping me from accessing both accounts.
:
: Reading TechNet it says once you have a domain set up you can't change the
: authentication type!!!
:
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/library/ServerHelp/78efe4b5-cb59-445b-89d0-53037dd65ecb.mspx
:
: I'm afraid to delete the domains for fear I won't be able to get them
: working again for me@myhome.com without rebuilding my systems, which is
just
: beyond the pale.
:
: Is there any way to switch back to Encrypted Password File Authentication
: w/o deleting the domains? If I delete the domains, can I simply add them
: back after the change without loosing anything? And where would I delete
: the domains? IIS, DNS, or somewhere else?
:
: Better yet, is there another way using Win2k3 POP3 service to get email to
: my outlook from both me@myhome.com and webmaster@myhome.com? TIA.
:
: -Mike
: P.S. Please cc mikes@33ponce.org if you reply.
:
:
:

Re: Removing SPA from POP3 service of Windows 2003 Server Mike Schinkel
4/16/2005 12:00:00 AM
Thanks.

However when I try that the "Enter Network Password" dialog pops up in
Outlook for webmaster@myhome.com, and when I enter the password it doesn't
accept it and simply returns me to the "Enter Network Password" dialog.

I guess what I'm think the problem is that Authentication Method for the
POP3 server is configured to be "Active Directory Authenticated" and that
dropdown is greyed-out so I can't change it.

Any other ideas?

-Mike

[quoted text, click to view]

Removing SPA from POP3 service of Windows 2003 Server Mike Schinkel
4/16/2005 2:24:15 AM
I'm trying to use Outlook 2003 to access both my mailbox and the postmaster
mailbox and I think SPA is keeping me from doing it.

I have two Windows 2003 Servers I set up to play with and a local domain
(let's call it "myhome.com").
On the other server I have POP3 running with two mailboxes (let's call it
me@myhome.com and webmaster@myhome.com)

I can configure two email accounts in Outlook 2003, one for each, they both
"test" in the configuration applet with no problem. However, when I try to
download email I only get the email for me@myhome.com (I'm logged in as
"myhome\me"). If I login as myhome\webmaster, I can download the webmaster
email. So it would seem SPA is keeping me from accessing both accounts.

Reading TechNet it says once you have a domain set up you can't change the
authentication type!!!
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/library/ServerHelp/78efe4b5-cb59-445b-89d0-53037dd65ecb.mspx

I'm afraid to delete the domains for fear I won't be able to get them
working again for me@myhome.com without rebuilding my systems, which is just
beyond the pale.

Is there any way to switch back to Encrypted Password File Authentication
w/o deleting the domains? If I delete the domains, can I simply add them
back after the change without loosing anything? And where would I delete
the domains? IIS, DNS, or somewhere else?

Better yet, is there another way using Win2k3 POP3 service to get email to
my outlook from both me@myhome.com and webmaster@myhome.com? TIA.

-Mike
P.S. Please cc mikes@33ponce.org if you reply.


Re: Removing SPA from POP3 service of Windows 2003 Server Ken Schaefer
4/17/2005 12:00:00 AM
So you unchecked "Use SPA" on both the POP3 server and the Outlook client?

Then, in Outlook you create two email accounts, and for account one you
supply the username/password YourDomain\User1 + password and for the other
account you supply YourDomain\User2 + password

Cheers
Ken

--
Blog: www.adopenstatic.com/cs/blogs/ken/
Web: www.adopenstatic.com


[quoted text, click to view]
: Thanks.
:
: However when I try that the "Enter Network Password" dialog pops up in
: Outlook for webmaster@myhome.com, and when I enter the password it doesn't
: accept it and simply returns me to the "Enter Network Password" dialog.
:
: I guess what I'm think the problem is that Authentication Method for the
: POP3 server is configured to be "Active Directory Authenticated" and that
: dropdown is greyed-out so I can't change it.
:
: Any other ideas?
:
: -Mike
:
[quoted text, click to view]
: > Hi,
: >
: > If you wish to change the authentication type from "Local Accounts" to
: > "Encrypted Password File" you will need to delete the existing domains,
: > and
: > start over.
: >
: > However, to remove the SPA requirement shouldn't require that. "Require
: > SPA"
: > is a checkbox that you can uncheck on the server. Open the POP3 MMC,
: > right-click on the server and bring up the properties. uncheck "Require
: > Secure Password Authentication". SPA affects the way that the client
: > (Outlook) sends the username/password to the server (basically it uses
: > NTLM
: > authentication rather than sending usernames/passwords in the clear).
: >
: > I think what you need to do is configure your Outlook accounts, and tell
: > Outlook that you want to use a different username/password for each
: > account.
: >
: > Cheers
: > Ken
: >
: > --
: > Blog: www.adopenstatic.com/cs/blogs/ken/
: > Web: www.adopenstatic.com
: >
: >
[quoted text, click to view]
: > : I'm trying to use Outlook 2003 to access both my mailbox and the
: > postmaster
: > : mailbox and I think SPA is keeping me from doing it.
: > :
: > : I have two Windows 2003 Servers I set up to play with and a local
domain
: > : (let's call it "myhome.com").
: > : On the other server I have POP3 running with two mailboxes (let's call
: > it
: > : me@myhome.com and webmaster@myhome.com)
: > :
: > : I can configure two email accounts in Outlook 2003, one for each, they
: > both
: > : "test" in the configuration applet with no problem. However, when I
try
: > to
: > : download email I only get the email for me@myhome.com (I'm logged in
as
: > : "myhome\me"). If I login as myhome\webmaster, I can download the
: > webmaster
: > : email. So it would seem SPA is keeping me from accessing both
accounts.
: > :
: > : Reading TechNet it says once you have a domain set up you can't change
: > the
: > : authentication type!!!
: > :
: >
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/library/ServerHelp/78efe4b5-cb59-445b-89d0-53037dd65ecb.mspx
: > :
: > : I'm afraid to delete the domains for fear I won't be able to get them
: > : working again for me@myhome.com without rebuilding my systems, which
is
: > just
: > : beyond the pale.
: > :
: > : Is there any way to switch back to Encrypted Password File
: > Authentication
: > : w/o deleting the domains? If I delete the domains, can I simply add
: > them
: > : back after the change without loosing anything? And where would I
: > delete
: > : the domains? IIS, DNS, or somewhere else?
: > :
: > : Better yet, is there another way using Win2k3 POP3 service to get
email
: > to
: > : my outlook from both me@myhome.com and webmaster@myhome.com? TIA.
: > :
: > : -Mike
: > : P.S. Please cc mikes@33ponce.org if you reply.
: > :
: > :
: > :
: >
: >
:
:

AddThis Social Bookmark Button