OWA quit after W2K upgrade

We upgraded our domain to W2k AD and the OWA that had worked before, quit for all except those with domain admin. They get to the OWA logon screen, but will not allow a logon. If normal user is added to Admin group OWA works for them. Any ideas where the AD change access rights?