Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I've setup Exchange 2010 thru TMG and everything seems to work fine except that when accessing OWA there are 2 screens where you have to enter login and pass. The first one looks exactly the same as the normal one but it says Security: Microsoft Forefront Threat Management Gateway. If i give wrong password on the first screen it says Can't login to Forefront TMG so it seems like this is double verification... Is this normally expected or just misconfiguration of TMG?

share|improve this question
up vote 2 down vote accepted

It means your publishing rule is set up (correctly!) to only allow authorized users.

When you connect to the OWA server the TMG first needs to find out who you are to work out what you are allowed to do with respect to the firewall e.g. what publishing rules apply etc.

Once that is done the request is passed on to Exchange Server which then shows you the standard login page.

If you want to you can set up TMG to forward the credentials to Exchange so you only get asked once but its not a simple thing to enable and configure as there are many variables to consider in terms of authentication methods etc.

share|improve this answer
Do you know some links that could explain how to forward credentials as I believe having 2 times authentication will be just a bit too much security? – MadBoy Nov 4 '11 at 14:23
This is correct for the most part. You'll want to enable SSO, and make sure you match the Authentication Delegation to what you're using on your OWA vdir in the CAS Array. – Tatas Nov 4 '11 at 15:25
@Tatas got some good documentation on that ? – MadBoy Nov 28 '11 at 18:06
The TMG whitepaper from MS should have that in it. Also check technet, that should have it as well. I'll try and find the link. – Tatas Nov 29 '11 at 18:39
The following document is an excellent resource for setting up Exchange 2010 with TMG. – Tatas Nov 30 '11 at 21:17

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.