Exchange 2010 OWA authentication using email address (not UPN)

Question

I've set up a new Exchange 2010 server and have OWA working. However, we're having trouble using email addresses as the user name.

Our AD domain is company.local, but our email addresses are company.com. When I set OWA to authenticate using UPN I'm able to log in with [email protected] but not [email protected].

Is there any way to allow Exchange to use email addresses as the user name or to set Active Directory to authenticate with both company.local and company.com?

Solution 1

You can set the UPN to be the same as their email addresses, by adding company.com as a UPN suffix:

Adding a UPN Suffix to a Forest

• Open Active Directory Domains and Trusts.
• Right-click Active Directory Domains and Trusts in the Tree window pane, and then click Properties.
• On the UPN Suffixes tab, type the new UPN suffix that you would like to add to the forrest.
• Click Add, and then click OK.

Now when you add users to the forest, you can select the new UPN suffix to complete the user's logon name.

Source: KB243629

Solution 2

Is the part before @ the same as their AD login (ie. Domain login is [email protected] and email address is [email protected])? If so (or honestly even it is isn't), why mess with confusing them? Just let them login with their Windows userID (ie. joe) and their password.

Assumption: you only have the single domain that holds Exchange users.

Comments

[joeqwerty]

An email address isn't a UPN. If you want them to logon with their email address then you'll need to create a UPN for company.com.

[rrahl]

My concern with doing this was that users wouldn't be able to log in with their company.local accounts, but I've done some testing and that doesn't appear to be the case. Thanks for the suggestion.