[id10t]

I'd be looking at client side DNS settings, esp if the OWA does a redirect to one of your domains for authentication.