Comments on: Exchange 2007 Autodiscover Service Part 1

By: Laeeq Qazi

Laeeq Qazi — Tue, 26 Jan 2010 15:05:49 +0000

Hi,

I solved repeated password prompt issue for one of outlook 2007 user by assiging OfflineAddressBook using

set-mailbox user@domain -OfflineAddressBook UserOAB\n
This user had empty OfflineAddressBook attribute, and having repeated pwd prompts. When I set this attribute it never behaved like that and issue resolved.

Also this issue could be due to some permission denial. Check which security groups this user has as memberOf and whether it has any group who doesnt have read rights to the Offline Address Book.

Regards,
Laeeq Qazi

By: Outlook continually prompting for username and password « Demazter's Blog

Outlook continually prompting for username and password « Demazter's Blog — Wed, 20 Jan 2010 10:33:58 +0000

[...] If that doesn’t fix the repeated prompt for password then it could be down to the autodiscover if your using Outlook 2007 then you must configure autodiscover correctly. There are many articles out there that cover the correct way to configure autodiscover, one of the better ones I have found is this one: http://www.exchange-genie.com/2007/07/exchange-2007-autodiscover-service-part-1/ [...]

By: Demazter's Blog

Demazter's Blog — Wed, 20 Jan 2010 10:30:19 +0000

By: Chee

Chee — Tue, 19 Jan 2010 12:59:58 +0000

Getting the exact same error as Andrew a few posts above me. When using auto discover I get the asked to authenticate to autodiscover.domain.com and then for the servers internal FQDN. No matter what combination username/password I enter it just keeps asking for a password. I also get the same errors on the exch shell with test-outlookwebservices.

Strangely enough this is only happening for one of my users. All other users run with no problems.

All my users are external non-domain joined.

Regards

Chee

By: Matt

Matt — Tue, 12 Jan 2010 16:36:16 +0000

I have recently transistioned to 2007 all of my internal / external urls are set to https://mail.mydomain.com/apropriatefolder (OAB/OOF/AutoDiscover)
I have a single 3rd party SSL cert and an entry in DNS for mail. The problem is a second prompt when opening Outlook. Can this be avoided without using a SAN SSL cert? Everything works fine other than the test-outlookwebservices 1013 (401) error, no problems with syncing or autodiscover on the client machines.

P.S. Great blogs.
Thanks,

Matt

By: Liby

Liby — Tue, 12 Jan 2010 14:31:52 +0000

Admin,
I am not able to view the screenshots on thi page. What could be the issue. Anything specific to this site?

By: yasmad

yasmad — Tue, 12 Jan 2010 12:04:37 +0000

i had a similar issue with non-domain users not being able to resolve autodiscover, i ended up adding autodiscover.(user email domain)entry to hosts file on client machines which did the trick without adjusting the registry

By: Andrew

Andrew — Tue, 05 Jan 2010 20:01:22 +0000

I have the problem mostly resolved now:

I believe I’ve tracked the problems down to being cert related. The cert created by the windows installation did not include all of the required names in the cert.

I created a new cert with autodiscover.externaldomain.com, owasitename.domain.com, server’s internal fqdn and servername using the instructions located here:

http://exchangeninjas.com/cascert

NOTE: If you do not have the certificate web enrollment role installed you will have to do that.

Then I altered the EWS, OAB and UM virtual directory internal urls to use the internal server address instead of the external domain

I made sure under the autodiscover and ews virtual directories in IIS that basic authentication was enabled and domain set to internal domain and under windows authentication that enable kernel mode authentication was turned on in the advanced settings.

Applied the new cert to the SBS web applications site.

Autodiscover works internally now.

Out of Office works internally from outlook and both internally and externally from owa.

Test outlook authentication is now successful. (Hold down ctrl key and click on the outlook icon in the system tray and choose test outlook authentication)

When running test-outlookwebservices | fl still returns the following error:

Id : 1013
Type : Error
Message : When contacting https://external.domain.com/Rpc received the error The server committed a protocol violation. Section=ResponseStatusLine

Id : 1017
Type : Error
Message : [EXPR]-Error when contacting the RPC/HTTP service at https://external.domain.com/Rpc. The elapsed time was 10 milliseconds.

When I attempt to use autodiscover to configure outlook from an external client I am prompted for authentication from autodiscover.domain.com and then am prompted for authenticaiton from the server’s internal fqdn which never successfully authenticates obviously and the auto configuration fails.

Any thoughts?

By: Exchange Genie

Exchange Genie — Tue, 05 Jan 2010 02:56:02 +0000

Please take a look at this link http://technet.microsoft.com/en-us/library/cc411327(EXCHG.80).aspx

By: Cyril

Cyril — Mon, 04 Jan 2010 22:31:22 +0000

Hi Brian !

Wow great page. Did not find this info anywhere else !

i’m getting the same error as Andrew (two posts above)
error 1013 then 1017, RPC, The server commited a protocol violation…

Just installed a single SBS2008 box and I seems I need to fix the Autodiscovery Service for the Macs to access their emails with proper Exchange 2007 EWS.

also when I type
Get-WebServicesVirtualDirectory ¦ fl name,internalurl,externalurl
in the EMS I get this error in red :
Get-WebServicesVirtualDirectory : A parameter cannot be found that matches parameter name ‘fl’
any idea ?