OWA Security Problem

Open Internet Service Manager, either MMC or HTML version, under the Windows NT Option Pack\Microsoft Internet Information Server. Expand the Default Web Site folder, expand the Exchange folder, click on the Private folder, select default.asp (assuming Exchange web settings are not changed) and click properties. Goto to the security properties and click on the EDIT button under "Anonymous Access and Authentication Control", you will probably see a check box for Windows NT Challenge/Response, uncheck this box and make sure the other two boxes are checked (Allow Anonymous Access and Basic Authentication). This should get you to the OWA login page without first signing in.

Note: This option is less secure allowing anyone to have access to your OWA login page. Assuming you have all default settings, there is a link to the Public Folders that requires no authentication. Although there are no files displayed, one thing anyone can do is querey the address book. I would suggest getting rid of this link on the website. Reply if you have any other questions or need to know how to do this.