Exchange 2007 – OWA Customization

Outlook Web Access Customization

This section addresses AMAT ‘s specific Outlook Customizations. The list below summarizes customizations contained within this document.

· Setting Forms-Based Authentication Time-Out

· OWA - Computer File Access Configuration

Setting Forms-Based Authentication Time-Out

This topic explains how to configure the cookie time-out values for public and private computers by using forms-based authentication on a Microsoft Outlook Web Access virtual directory that is on a Microsoft Exchange 2007 server that has the Client Access server role installed.

Permissions Required:

To perform the following procedures, the account you use must be delegated the Exchange Server Administrator role and membership in the local Administrators group for the target server.

Note: Default Time-Out Settings for Outlook Web Access are as follows:

· Public Computer Time-Out: 15 Minutes

· Private Computer Time-Out: 4 Hours

Modify Public Computer Time-Out Settings

This topic explains how to configure the cookie time-out values for public computers by using forms-based authentication on a Microsoft Outlook Web Access virtual directory that is on a Microsoft Exchange 2007 server that has the Client Access server role installed.

1. On the Client Access server, log on by using the Exchange administrator account, and then start Registry Editor (regedit).

2. In Registry Editor, locate the following registry key: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MSExchange OWA

3. On the Edit menu, point to New, and then click DWORD Value. In the details pane, name the new value PublicTimeout.

4. Right-click the PublicTimeout DWORD value, and then click Modify.

5. In Edit DWORD Value, under Base, click Decimal.

6. In the Value Data box, type a value in minutes between 1 and 43,200 for a maximum of 30 days. Click OK.

Note: You must restart Internet Information Services (IIS) by using the command iisreset/noforce for these changes to take effect

To Modify the Public Time-Out settings through Exchange Management Shell:

Note: This command is to modify the Time-Out settings once the key already exists

set-ItemProperty 'HKLM:\SYSTEM\CurrentControlSet\Services\MSExchange OWA' -name PublicTimeout -value <amount of time> -type dword

Run the following command to view the public computer cookie time-out value:

get-ItemProperty 'HKLM:\SYSTEM\CurrentControlSet\Services\MSExchange OWA' -name PublicTimeout

Modify Private Computer Time-Out Settings

This topic explains how to configure the cookie time-out values for private computers by using forms-based authentication on a Microsoft Outlook Web Access virtual directory in Microsoft Exchange Server 2007. Private computers are also known as trusted computers.

1. On the Exchange Client Access server, log on by using your Exchange administrator account, and then start Registry Editor (regedit).

2. In Registry Editor, locate the following registry key: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MSExchange OWA

3. On the Edit menu, point to New, and then click DWORD Value. In the details pane, name the new value PrivateTimeout.

4. Right-click the PrivateTimeout DWORD value, and then click Modify.

5. In Edit DWORD Value, under Base, click Decimal.

6. In the Value Data box, type a value in minutes between 1 and 43,200 for a maximum of 30 days. Click OK.

To Modify the Private Time-Out settings through Exchange Management Shell:

Note: This command is to modify the Time-Out settings once the key already exists

set-ItemProperty 'HKLM:\SYSTEM\CurrentControlSet\Services\MSExchange OWA' -name PrivateTimeout -value <amount of time> -type dword

Run the following command to view the private computer cookie time-out value:

get-ItemProperty 'HKLM:\SYSTEM\CurrentControlSet\Services\MSExchange OWA' -name PrivateTimeout

OWA - Computer File Access Configuration

By default, public computer direct file access is enabled for new installations and upgrades of Outlook Web Access. Therefore, when users in your organization select This is a public or shared computer or This is a private computer on the Outlook Web Access logon page, they will be able to access files that are attached to e-mail messages.

Public and Private File Computer Access Settings

1. In the Exchange Management Console, click Server Configuration, and then click Client Access.

2. In the action pane, in Outlook Web Access, click Properties.

3. On the Outlook Web Access Properties page, click either the Public Computer File Access tab or the Private Computer File Access tab.

4. Make modification to the File Access configurations based on your business/security requirements.

More Info: Web Ready Document Viewing

WebReady Document Viewing converts documents to HTML files and displays them in a Web browser. This enables Outlook Web Access users to view a document that is attached to a message even when the application that would ordinarily be used to open that document is not present on the computer that is being used.

If the Client Access server is running Exchange 2007 SP1, WebReady Document Viewing supports the following file types:

· Word (.doc, .dot, rtf, .docx)

· Excel (.xls, .xlsx)

· PowerPoint (.ppt, .pps, .pptx)

· Adobe Portable Document Format (.pdf)