Notice: This website is an unofficial Microsoft Knowledge Base (hereinafter KB) archive and is intended to provide a reliable access to deleted content from Microsoft KB. All KB articles are owned by Microsoft Corporation. Read full disclaimer for more details.

Error 401.3 when configuring RPC over HTTP on Exchange 2003 after installing Windows Server 2003 SP1


Author: Daniel Petri MVP

View products that this article applies to.

Summary

When testing the initial setup of the RPC Proxy component in Windows Server 2003 SP1, you do not get the expected behavior as outlined in KB 833401. Instead, you get an HTTP error 401.3.

↑ Back to the top


Symptoms

RPC over HTTP/S is a method for connecting Outlook 2003 clients to the corporate Exchange Server 2003 from the Internet or WAN, without the need to establish a VPN session to the corporate LAN and/or needing to open many ports on your corporate firewall. The only ports you'll need to open on your firewall are TCP 80 and, if using SSL, TCP 443.

When installing and configuring RPC over HTTP/S, one of the first steps that needs to be followed is to install the RPC Proxy component on the Exchange server or on a different�dedicated server. After installing the RPC Proxy component one needs to perform some changes on the RPC virtual directory in IIS, and then to configure the default web site to use a Digital Certificate.

After performing these steps you should�check the availability of the connection by connecting to the RPC virtual directory with Internet Explorer (by going the the https://servername/RPC url), logging on as one of the domain users, and waiting to receive a "normal" error message. The "normal" error message described below is supposed to be an indication that the RPC Proxy is indeed functioning correctly:

HTTP Error 403.2 - Forbidden: Read access is denied.

It seems that Windows Server 2003 Service Pack 1 (SP1) changes something in how the RPC Proxy mechanism is integrated with IIS. One of the visual signs for this change is the fact that when you now try to connect to the RPC virtual directory you cannot seem to be able to log on.
��
When�you get the logon pop-up box and you enter the right username and password in the format of

domain\username

your credentials are denied by the system, and you receive the same logon pop-up box 3 times in a row. After the 3rd try (which all fail, no matter what username you're using, not even the administrator's credentials), you receive the following HTTP error:

HTTP Error 401.3 - Unauthorized: Access is denied due to an ACL set on the requested resource.

The RPC Proxy check, as described in KB 833401, fails.

↑ Back to the top


Resolution

It seems that this error message does not prevent you from successfully configuring RPC over HTTP/S, and if you follow the outlined procedures found in KB 833401 you will be able to connect your Outlook 2003 client to your Exchange Server 2003 server successfully.

↑ Back to the top


More information

Exchange Server 2003 RPC over HTTP Deployment Scenarios:
http://www.microsoft.com/technet/prodtechnol/exchange/2003/library/ex2k3rpc.mspx

How to configure RPC over HTTP on a single server in Exchange Server 2003:
http://support.microsoft.com/?kbid=833401

↑ Back to the top


Community solutions content disclaimer

Microsoft corporation and/or its respective suppliers make no representations about the suitability, reliability, or accuracy of the information and related graphics contained herein. All such information and related graphics are provided "as is" without warranty of any kind. Microsoft and/or its respective suppliers hereby disclaim all warranties and conditions with regard to this information and related graphics, including all implied warranties and conditions of merchantability, fitness for a particular purpose, workmanlike effort, title and non-infringement. You specifically agree that in no event shall Microsoft and/or its suppliers be liable for any direct, indirect, punitive, incidental, special, consequential damages or any damages whatsoever including, without limitation, damages for loss of use, data or profits, arising out of or in any way connected with the use of or inability to use the information and related graphics contained herein, whether based on contract, tort, negligence, strict liability or otherwise, even if Microsoft or any of its suppliers has been advised of the possibility of damages.

↑ Back to the top


Keywords: KB555316, kbhowto, kbpubtypecca, kbpubmvp

↑ Back to the top

Article Info
Article ID : 555316
Revision : 1
Created on : 5/18/2005
Published on : 5/18/2005
Exists online : False
Views : 495