Read time: 5 minutes
Sometimes, when the user tries to log in to OWA, an issue occurs with the cookie set_pback. This happens because the authentication cookies get blocked or disabled. It is a warning related to OWA that stops the account from opening.
The PBack is a session cookie that OWA should issue after a successful login. If the cookie is not issued, then it will be a login failure. So, before logging in to OWA account, users must manually enable cookies in web browser. This guide explains the different ways to enable cookies in Outlook, and the best practices to avoid this error in the future.
How to Enable Cookies in Web Browser to Fix the Cookie Issue During OWA Login?
Here is how you can manually enable cookies in web browsers:
Note: Before trying to enable cookies in different web browsers, clear all the accumulated cached data and take a backup of your mailbox to a safe location. Simply export Office 365 to PST format to create a copy of your data for easy recovery.
In Mozilla Firefox
- In Mozilla Firefox, click three horizontal lines to open the menu and then choose Options.
- Go to the Privacy tab; inside the History tab, choose ‘Use custom settings for history.’
- Click the checkbox to select ‘Accept cookies from sites.’ Also, change the ‘Accept third-party cookies’ option to Always.
- Click OK.
In Microsoft Edge
- In Microsoft Edge, click three dots (More), click Settings, and View Advanced Settings.
- Go to cookies and choose the option Don’t block cookies.
In Google Chrome
- In Google Chrome menu, click Settings>>Show advanced settings. Go to the Privacy tab and go to Content Settings.
- There is a cookies option in Content Settings; choose ‘Allow local data to be set (recommended).’
- Click Done.
In Mac Safari
- On your Mac computer, open Safari, then choose Preferences>>Privacy.
- Allow the option to ‘Cookies and website data.’ Click Close and restart the browser.
In Internet Explorer
- In Internet Explorer, click Tools, then choose Internet Options>>Privacy>>Advanced.
- Choose Accept under First-party cookies and click Access under third-party cookies.
- Choose OK.
Check the Authentication Settings in IIS Server
If you have enabled cookies in the web browser and cannot log in to Office 365, there may be a more severe authentication problem in the Exchange Online server. So, here is what you can do:
- Open Internet Service Manager and right-click on the OWA website. Choose its Properties.
- Go to the Directory Security tab under Outlook Web App main site’s property wizard.
- Click Edit to ‘Anonymous Access and Authentication Control’ option.
- In the authentication method dialog box, check if Anonymous Access is not checked.
- In the authentication access section, verify that the Basic Authentication option is selected.
- Click the Edit button and make sure that the Connect authentication domain is selected.
- Click OK, then close all the opened wizards.
- Then, log in to OWA with the help of saved settings.
Best Practices to Secure Exchange Online Data
There are some useful methods to protect your Exchange Online account from unauthorized access or DOS attacks that you should always use.
- Use strong passwords to protect your accounts. The Exchange Administrator can set the terms and conditions to secure the password. Some strong tactics are account lockout after 5 wrong attempts, triggering a wait time to log in after 30 minutes and reset account lock after 60 minutes.
- You can enable CAPTCHA to strengthen the login process. The user will need to fill the CAPTCHA after providing the login details.
- Use the multi-factor login methods. It requires a mobile phone number and an additional step before entering the account. After providing the login details, the user will get an SMS or a call with a password. After inputting the password, the account will allow to log in.
- Block the user using geo-blocking based on their locations. Often, the attacks happen from various countries, and hackers use VPN to mask their identity. If you know your user base and their location, then you can use the geo-blocking feature to block users from other countries.
Conclusion
In most cases, the cookie issue During OWA Login is resolved as soon as users enable cookies in their web browser and clear the cached data. But still, sometimes the issue is not so easily resolved, resulting in downtime and loss of productivity. Organizations often create multiple backup copies with the help of a trusted Office 365 backup software to avoid this and safeguard their data.
Frequently Asked Questions
A. Outlook Web App requires cookies during login for authentication purposes mainly. These cookies help OWA to verify your identity.
A. Yes, third-party extensions with strict security settings can prevent OWA authenticating login requests.
A. Yes, OWA may cause issues during login in some browsers because the cookies get automatically deleted.
A. If your Outlook prompts for Office 365 credentials repeatedly, it means that the authentication cookies aren’t being saved by the browser. Make sure that you’ve selected the enable cookies in web browser setting to avoid this issue.
