I have an Exchange 2003 sp2 server and some subfolders in the public folders (ie users\data\restrictedfolder) where default and anonymous is set to none, and a restrictedusers group set for reviewer access. When a user who is a member of restrictedusers uses outlook, they can see the restrictedfolder and access it with no problems. When they use owa the folder does not appear in the navigation pane (they can see users\data though). However if they go to https://mailserver.domain.com/public/users/data/restrictedfolder directly they can access it.
In a related/similar problem, users with owa accessing documents that are dragged to public folders get a "
the website declined to show this webpage" or get bprompted 3 times for access and then get access denied. However this works fine with outlook. However if a new post is created and the document added to the post, then they can access the post and the document with no problems.
Also in a related issue, when a url of mms:// is entered into a posting/email, when this is viewed through owa, the link has a blank target and the description contains the url - the source will look like
but in outlook, the link will be correct. This problem exists with both public folders and in outlook (ie accessing an email)
The first problem is my biggest issue as I'm not sure what the work around is (apart from posting the full url to the restricted folders) , the second issue I can work around by ensuring posts are created.