XP SP2 killed my ability to use secure OWA

[Jordan]

I have an Exchange 2003 server running OWA access with a simple script that
redirects a user coming in on port 80 to the https:// channel. This has been
working fine for the past 6 months and continues to work fine for all 9x,
2000, and XP clients except for XP SP2.

I just updated my personal Windows XP Pro computer to SP2 and now I can no
longer access my secure OWA even when I type https:// for the site. Here is
my owahttps.asp script that I got right off of the MS Knowledge base:

<%
If Request.ServerVariables("SERVER_PORT")=80 Then
Dim strSecureURL
strSecureURL = "https://www.mydomain.com/exchange"
Response.Redirect strSecureURL
End If
%>

I go to other sites like my online bank that redirects me from http to https
sites without any problem. Any ideas why I can't do this with Exchange OWA?

 

[Jordan]

Here is some more info that make me believe that it is some new security
zone setting in IE.

The Win 2003/Exchange 2003 server is behind a hardware firewall that
forwards ports 80 and 443 to it. This server is a member server on the LAN
with one nic in it. Prior to XP SP2 I could go to
http://www.mydomain.com/exchange and access the site without a problem. I
would only be prompted for my domain name and password. My 9x, 2000, and XP
SP1 clients all still work.

Internally I could to to http://servername/exchange and without even
prompting for a password (Because I was on the LAN) I would log into OWA
fine. I can still do this for some reason with my XP SP2 machine, but when
I am working remotely I hang at a blank IE window that shows an hour glass
in the status bar and shows "Done" even though the page is blank.

 

[Guest]

This is a question probably better asked in either the
Exchange or Outlook newsgroups as it seems to be a
problem with OWA recognising something on your SP2
machine. The experts there would have a far better idea
of how OWA and exchange behave.

 

[Jordan]

I have a post there as well. When a problem overlaps 2 products it is best
to see if you can find the answer in both news groups, not either/or.

 

[Gere]

Hi,

Some clients of mine has had problems with IE 6/sp2 and redirected
sites.
If you are using Custom Level security settings in IE, you should
check that META REFRESH option is enabled.
This has been solution in many of my cases.

Gere