We have 2 servers involved in evaluating/deploying EmailArchitect server 11.0.

Server 1 (public-facing Windows server 2012 standard, running IIS and company website - Internal machine name=SP04.private.local, publicly accessible as www.public.com).

Server 2 (private Windows server 2019 standard, running EmailArchitect Server - Internal machine name=EA01.private.local, private domain private.local).

Client 1 (android phone, Chrome browser).

Client 2 (RDP session on Windows 2012 standard member of domain private.local, Edge browser).

We went through the install of EmailArchitect on EA01, including enabling webmail. When accessing webmail via http://ea01.private.local/emailarchitect from EA01 desktop, we can login OK, create users, etc.

We added the DNS cname 'EAS' at GoDaddy to point to our public static IP address (EAS.public.com). We then setup a new website on SP04.private.local named EAS.public.com, and added a reverse proxy rule to point incoming traffic with header 'eas.public.com' to EA01.private.local. Initial test resulted in compression needing to be disabled on both SP04 and EA01.

From client 1(android phone), initiate Chrome browser for http://EAS.public.com, which DOES eventually send request to EA01, responding with login dialog. However, any attempt to enter email address or password fails, including logging in as 'system'. We get the same results when testing from Client 2.

Are there permissions on EmailArchitect datafiles/folders that need to change (eg, add user IUSR) to make this work?