Cannot open archived message using OWA Add-in on Exchange Server 2003

Category: Troubleshooting & error messages
Date: August 2010
Product: Exchange Server Archiver

If you are using the Outlook Web Access (OWA) Add-in on Exchange Server 2003, and your User Archive Access (UAA) Service is not installed on the same computer as Exchange, your Exchange server must be configured to allow delegation of credentials to the UAA Service computer.

This is because the UAA Service requires the identity of the user who is attempting to access the message in order to authorize access to the archived mailbox.

If you do not allow delegation of credentials, when you try to view an archived message using the OWA Add-in, you will see the following message:

Cannot open archived message.

View placeholder.

To fix this, configure the Exchange server to allow delegation of credentials to the UAA Service computer.

Allowing delegation of credentials to the UAA Service

You must raise the functional level of the domain to Windows Server 2003 (or higher), and then constrain the delegation to calling the HTTP service on the UAA Service computer.

To configure the Exchange server to be trusted for delegation to the HTTP service on the UAA Service computer:

On the Domain Controller, open Active Directory Users and Computers.
Right-click the domain, and then click Raise Domain Functional Level.
Under Select an available domain functional level, select Windows Server 2003.
Click Raise.
Navigate to the name of the computer on which Exchange Server is installed.
Right-click the name, and then click Properties.
On the Delegation tab, select Trust this computer for delegation to specified services only, and Use any authentication protocol.
Click Add.
Specify the name of the UAA Service computer and click OK.
In the Add Services dialog box, from the list of Available Services, select http and click OK.
On the Properties dialog box, click OK.