| Base de connaissance Microsoft - Q287921
ISA Server Configuration Options for Hotmail Access When You Use Outlook ExpressThe information in this article applies to: -
Microsoft Internet Security and Acceleration Server 2000
SYMPTOMS
When you try to configure Microsoft Outlook Express to retrieve e-mail messages from Microsoft MSN Hotmail through Internet Security and Acceleration (ISA) Server, you may receive one of the following error messages:
The server could not be found.
-or-
Unable to poll for new messages on your HTTP server. Account 'Hotmail', Server 'http://services.msn.com/svcs/hotmail/httpmail.asp', Protocol HTTPMail Server Response: 'Proxy Authentication Required' (The ISA Server requires authorization to fullfill the request. Access to the Web Proxy services is denied.)', Port 0, Secure(SSL): No, Error Number: 0x800CCC37
-or-
Unable to poll for new messages on your HTTP server. Account 'Hotmail', Server 'http://services.msn.com/svcs/hotmail/httpmail.asp', Protocol HTTPMail Server Response: 'Forbidden ( The ISA Server denies the specified Uniform Resource Locator (URL). )', Port 0, Secure(SSL): No, Error Number: 0x800CCC33
CAUSE
This issue occurs because Outlook Express might not be able to pass authentication credentials back to ISA Server if ISA Server is configured to allow access only to specific users.
WORKAROUND
To work around this issue, use one of the following methods.
Method 1-
On the client computer, configure Microsoft Internet Explorer so that the necessary sites are exceptions to the proxy settings:
-
In Internet Explorer, click
Internet Options on the
Tools menu, and then click the
Connections tab.
-
Click
LAN Settings, and then click
Advanced to display the
Proxy Settings dialog box.
-
Under
Exception, type the names or addresses of the necessary sites, separated by a semicolon (for example, *.hotmail.com;*.msn.com).
-
On the client computer, install and enable the ISA Server firewall client by using one of the following procedures:
-
On the computer that is running ISA Server, configure the HTTP redirector filter to send to the requested Web server:
-
Click
Start, point to
Programs, point to
Microsoft ISA Server, and then click
ISA Management.
-
Click the
plus sign that is next to
Extensions.
-
Click the
Application Filters folder.
-
Double-click
HTTP Redirector Filter.
-
Click the
Options tab, and then click Send to requested Web server.
Method 2-
On the client computer, configure Internet Explorer so that it does not use a proxy server:
-
In Internet Explorer, click
Internet Options on the
Tools menu, and then click the
Connections tab.
-
Click
LAN Settings, and then click to clear the Use a proxy server check box.
-
On the client computer, install and enable the ISA Server firewall client by using one of the following procedures:
-
On the computer that is running ISA Server, configure the HTTP redirector filter to send to the requested Web server:
-
Click
Start, point to
Programs, point to
Microsoft ISA Server, and then click
ISA Management
-
Click the
plus sign that is next to
Extensions.
-
Click the
Application Filters folder.
-
Double-click
HTTP Redirector Filter
-
Click the
Options tab, and then click Send to requested Web server.
Method 3-
On the client computer, configure Internet Explorer so that it does not use a proxy server:
-
In Internet Explorer, click
Internet Options on the
Tools menu, and then click the
Connections tab.
-
Click
LAN Settings, and then click to clear the Use a proxy server check box.
-
On the computer that is running ISA Server, configure protocol rules and site and content rules to apply to any request:
-
Click
Start, point to
Programs, point to
Microsoft ISA Server, and then click
ISA Management.
-
Click the
plus sign that is next to
Access Policy.
-
Click the appropriate folder: either
Site and Content Rules or
Protocol Rules.
-
Double-click the appropriate policy.
-
Click the Applies to tab, and then click
Any Request.
Method 4
This method will only work if you are running a Windows 2000 Domain. This will allow you to still force authentication at the ISA server and leave the http filter as is (so that Firewall and SecureNAT clients can take advantage of the cache). The reason that hotmail using Outlook Express fails from behind ISA if you are forcing authentication is that Outlook Express sends the hotmail credentials, not the Windows credentials. The following work around takes advantage of this fact. -
Go to AD Domains and Trusts, right click where it says "Active Directory Domains and Trusts" and choose properties. Add a new UPN suffix called hotmail.com.
-
Create a user with the same name and password as your hotmail account. Set the UPN for that account to the hotmail.com UPN created in the previous step.
This would need to be done for every client that accesses hotmail. It is recommended that the rights of these accounts be restricted, perhaps placing them in a special group. If you are using user/group access restrictions in ISA, make sure these users are granted access.
STATUS
Microsoft has confirmed that this is a problem in Outlook Express version 5.First Published: | Feb 1 2001 11:14AM | Keywords: | kbprb
OE
IE
fulfill |
|