RabbieBurns Posted January 26, 2011 Posted January 26, 2011 at work, all our laptops are now windows 7 and outlook 2010. Our exchange server is 2007. When these laptops are taken off campus, outlook still connects to exchange and works just as if it was connected locally. I have another place, with Exchange 2010 and Outlook 2010, and trying to get the same to work. The only other difference is the latter place is behind a NAT while the first has its own WAN IP. Port 443 is forwarded for OWA, is there anything else that needs done for this to work? At the moment Im having to connect to the VPN before outlook works.
vikpaw Posted January 26, 2011 Posted January 26, 2011 (edited) You can't use the 443 for connection to exchange. You'll need to open something else, either imap/smtp using tls, forget what it is 537 or something and imap is secured too. Not sure what you need for a direct exchange connection. Edit: this article mentions the ports for imap / smtp http://support.microsoft.com/kb/176466 maybe try those and set up an imap connection. Though for outlook to connect direct to exchange i think it's saying port 135. Not sure, i'm doing it via live@edu, and with the autodiscover cname entry, external client just works on iPhone and other devices. Edited January 26, 2011 by vikpaw edit : add link
RabbieBurns Posted January 26, 2011 Author Posted January 26, 2011 This setup is a bit tricky.. the mail email address is [email protected] but the actual website domain is webdomain.com so for OWA the login page is https://mail.webdomain.com and the local domain is somethingelse.local and the [email protected] is set as the primary address in Exchange. SMTP is already open and this is the way that it is currently used off site, but I want direct connection not pop/smtp or even IMAP.. Will have a read of your link and have a play, thanks
penfold_99 Posted January 26, 2011 Posted January 26, 2011 I have just gone through the process of setting up exchange to allow outlook anywhere. I found this tool very useful as it will pin point the issue that is causing the problem. https://www.testexchangeconnectivity.com/
RabbieBurns Posted January 26, 2011 Author Posted January 26, 2011 Running that, with the Outlook Anywehre test, fails using autodiscover, due to what I said abouve about the email address being different from the exchange domain etc. If I run the test again, and Manually specify server settings, it failed with ntlm authentication. If i run again with it set to basic, I get this: Testing RPC/HTTP connectivity. The RPC/HTTP test failed. Test Steps Attempting to resolve the host name mail.webdomain.co.uk in DNS. The host name resolved successfully. Additional Details IP addresses returned: xx.xx.xx.xx Testing TCP port 443 on host mail.webdomain.co.uk to ensure it's listening and open. The port was opened successfully. Testing the SSL certificate to make sure it's valid. The certificate passed all validation requirements. Test Steps Validating the certificate name. The certificate name was validated successfully. Additional Details Host name mail.webdomain.co.uk was found in the Certificate Subject Common name. Certificate trust is being validated. The test passed with some warnings encountered. Please expand the additional details. Additional Details ExRCA can only validate the certificate chain using the Root Certificate Update functionality from Windows Update. Your certificate may not be trusted on Windows if the "Update Root Certificates" feature isn't enabled. Testing the certificate date to confirm the certificate is valid. Date validation passed. The certificate hasn't expired. Additional Details The certificate is valid. NotBefore = 4/28/2010 3:57:42 PM, NotAfter = 4/30/2011 2:31:59 AM Checking the IIS configuration for client certificate authentication. Client certificate authentication wasn't detected. Additional Details Accept/Require Client Certificates isn't configured. Testing HTTP Authentication Methods for URL https://mail.webdomain.co.uk/rpc/rpcproxy.dll. The HTTP authentication methods are correct. Additional Details ExRCA found all expected authentication methods and no disallowed methods. Methods found: Basic Testing SSL mutual authentication with the RPC proxy server. Mutual authentication was verified successfully. Additional Details Certificate common name mail.webdomain.co.uk matches msstd:mail.webdomain.co.uk. Attempting to ping RPC proxy mail.webdomain.co.uk. RPC Proxy can't be pinged. Additional Details A Web exception occurred because an HTTP 440 - 440 response was received from Unknown.
penfold_99 Posted January 26, 2011 Posted January 26, 2011 Do you have autodiscover.webdomain.com setup and pointing at your email server ip address? Who is the provider your SSL certificate? You may need to install the intermediate root certificate on your server.
RabbieBurns Posted January 26, 2011 Author Posted January 26, 2011 StartCom LTD SSL profide the cert.. and yeh, theres an A record autodiscover.webdomain.com pointing to the server IP there isnt a record for autodiscover.emaildomain.com .. should there be?
penfold_99 Posted January 26, 2011 Posted January 26, 2011 autodiscover should be on the same domain as webdomain.com/owa I think the analyser is trying to validate the certificate against the one in windows trusted root but the certificate that forms the chain between the one on your machine and the root certificate is missing. To add the missing certificate have a look here. StartSSL
RabbieBurns Posted January 26, 2011 Author Posted January 26, 2011 but it is passing all the certificate stuff ? THis is where it fails: Attempting to ping RPC proxy mail.webdomain.co.uk. RPC Proxy can't be pinged. Additional Details A Web exception occurred because an HTTP 440 - 440 response was received from Unknown.
penfold_99 Posted January 26, 2011 Posted January 26, 2011 silly question but have you enable outlook anyhwere on your exchange server?
RabbieBurns Posted January 26, 2011 Author Posted January 26, 2011 yes it seems to be.. as theres an option to "disable outlook anywhere" anyway, 4am now.. ill take this up again tomorrow.. cheers for you rhelp
RabbieBurns Posted January 26, 2011 Author Posted January 26, 2011 I think I have fixed it! on the RPC vdir in IIS, the redirection had been ticked, and nothing was entered. Unticking the redirection fixed it. Found the answer here: Exchange 2010 Outlook Anywhere
RabbieBurns Posted January 26, 2011 Author Posted January 26, 2011 also had to reconfigure outlook too to enable the anywhere option
RabbieBurns Posted January 26, 2011 Author Posted January 26, 2011 You can't use the 443 for connection to exchange. You'll need to open something else, either imap/smtp using tls, forget what it is 537 or something and imap is secured too. Not sure what you need for a direct exchange connection. Edit: this article mentions the ports for imap / smtp TCP ports and Microsoft Exchange: In-depth discussion maybe try those and set up an imap connection. Though for outlook to connect direct to exchange i think it's saying port 135. Not sure, i'm doing it via live@edu, and with the autodiscover cname entry, external client just works on iPhone and other devices. by the way, it looks like outlook anywhere uses https (443) after all Configure Outlook Anywhere in Outlook 2010 1
vikpaw Posted January 26, 2011 Posted January 26, 2011 Good to know, it's the first i've heard of Outlook Anywhere. So just 443 and the right settings on dns. It uses the RPC over http. At least you can get some sleep now.
john Posted January 26, 2011 Posted January 26, 2011 Good to know, it's the first i've heard of Outlook Anywhere. So just 443 and the right settings on dns. It uses the RPC over http. At least you can get some sleep now. Really Vik? Its been in since Exchange 2003! Just not major publicised, I've been using it on my SBS 2003 box with a local charity since they got it, it was always known as RPC over HTTPS and the simple selling point was if you can access HTTPS for your webmail you can use outlook on the move just as you do in the office and they were right
vikpaw Posted January 26, 2011 Posted January 26, 2011 Really Vik? Its been in since Exchange 2003! Just not major publicised, I've been using it on my SBS 2003 box with a local charity since they got it, it was always known as RPC over HTTPS and the simple selling point was if you can access HTTPS for your webmail you can use outlook on the move just as you do in the office and they were right Seen the option for connect via https / rpc. but never needed the facility so not heard of the name. webmail was always fine as didn't have company laptops, and now the iPhone just works. Don't forget i live on the dark side of the world (with the MIS managers )
RabbieBurns Posted April 1, 2011 Author Posted April 1, 2011 Outlook Anywhere has stopped working for me, I haven't changed anything, except for applying windows updates. The event log i think is corresponding is this one: Log Name: Application Source: ASP.NET 2.0.50727.0 Date: 4/1/2011 1:16:57 AM Event ID: 1310 Task Category: Web Event Level: Warning Keywords: Classic User: N/A Computer: 2008R2.domain.co.uk Description: Event code: 3008 Event message: A configuration error has occurred. Event time: 4/1/2011 1:16:57 AM Event time (UTC): 4/1/2011 12:16:57 AM Event ID: 17461af9e0f94faf934da8f241065fa0 Event sequence: 757 Event occurrence: 757 Event detail code: 0 Application information: Application domain: /LM/W3SVC/1/ROOT/Rpc-10-129460078031941250 Trust level: Full Application Virtual Path: /Rpc Application Path: C:\Windows\System32\RpcProxy\ Machine name: 2008R2 Process information: Process ID: 4192 Process name: w3wp.exe Account name: IIS APPPOOL\DefaultAppPool Exception information: Exception type: ConfigurationErrorsException Exception message: Could not load file or assembly 'WindowsLiveID, Version=0.0.0.0, Culture=neutral, PublicKeyToken=283dd9fa4b2406c5' or one of its dependencies. The system cannot find the file specified. Request information: Request URL: https://mail.domain.co.uk:443/rpc/rpcproxy.dll?2008R2.domain.co.uk:6001 Request path: /rpc/rpcproxy.dll User host address: 118.x.x.46 User: Is authenticated: False Authentication Type: Thread account name: IIS APPPOOL\DefaultAppPool Thread information: Thread ID: 11 Thread account name: IIS APPPOOL\DefaultAppPool Is impersonating: False Stack trace: at System.Web.Configuration.ConfigUtil.GetType(String typeName, String propertyName, ConfigurationElement configElement, XmlNode node, Boolean checkAptcaBit, Boolean ignoreCase) at System.Web.Configuration.Common.ModulesEntry..ctor(String name, String typeName, String propertyName, ConfigurationElement configElement) at System.Web.HttpApplication.BuildIntegratedModuleCollection(List`1 moduleList) at System.Web.HttpApplication.GetModuleCollection(IntPtr appContext) at System.Web.HttpApplication.RegisterEventSubscriptionsWithIIS(IntPtr appContext, HttpContext context, MethodInfo[] handlers) at System.Web.HttpApplication.InitSpecial(HttpApplicationState state, MethodInfo[] handlers, IntPtr appContext, HttpContext context) at System.Web.HttpApplicationFactory.GetSpecialApplicationInstance(IntPtr appContext, HttpContext context) at System.Web.Hosting.PipelineRuntime.InitializeApplication(IntPtr appContext) Custom event details: Event Xml: 1310 3 3 0x80000000000000 173089 Application 2008R2.domain.co.uk 3008 A configuration error has occurred. 4/1/2011 1:16:57 AM 4/1/2011 12:16:57 AM 17461af9e0f94faf934da8f241065fa0 757 757 0 /LM/W3SVC/1/ROOT/Rpc-10-129460078031941250 Full /Rpc C:\Windows\System32\RpcProxy\ 2008R2 4192 w3wp.exe IIS APPPOOL\DefaultAppPool ConfigurationErrorsException Could not load file or assembly 'WindowsLiveID, Version=0.0.0.0, Culture=neutral, PublicKeyToken=283dd9fa4b2406c5' or one of its dependencies. The system cannot find the file specified. https://mail.domain.co.uk:443/rpc/rpcproxy.dll?2008R2.domain.co.uk:6001 /rpc/rpcproxy.dll 118.x.x.46 False IIS APPPOOL\DefaultAppPool 11 IIS APPPOOL\DefaultAppPool False at System.Web.Configuration.ConfigUtil.GetType(String typeName, String propertyName, ConfigurationElement configElement, XmlNode node, Boolean checkAptcaBit, Boolean ignoreCase) at System.Web.Configuration.Common.ModulesEntry..ctor(String name, String typeName, String propertyName, ConfigurationElement configElement) at System.Web.HttpApplication.BuildIntegratedModuleCollection(List`1 moduleList) at System.Web.HttpApplication.GetModuleCollection(IntPtr appContext) at System.Web.HttpApplication.RegisterEventSubscriptionsWithIIS(IntPtr appContext, HttpContext context, MethodInfo[] handlers) at System.Web.HttpApplication.InitSpecial(HttpApplicationState state, MethodInfo[] handlers, IntPtr appContext, HttpContext context) at System.Web.HttpApplicationFactory.GetSpecialApplicationInstance(IntPtr appContext, HttpContext context) at System.Web.Hosting.PipelineRuntime.InitializeApplication(IntPtr appContext) Google suggests that its to do with Negotiate being set in authentication method for Outlook Anywere in Outlook, and I found 1 machine has had that set, but Ive changed it back to NTLM but unsure how to fix it up in the server. Another google suggested it was to do with windows live part of IIS but I cant find any corresponding entry in IIs.. A bit stumped on this one.,.. Cheers
RabbieBurns Posted April 1, 2011 Author Posted April 1, 2011 just whatver windows updates have come down, and i installed the latest rollup as well. But ive also installed forefront for exchange as well... I cant quite pinpoinnt when it stopped working.. I managed to find a windowslive entry in the rpc settings of default web site, so i think im along the right lines with my googling, but nothing ive found so far seems to help..
sukh Posted April 1, 2011 Posted April 1, 2011 @Rabbie - Use Get-OutlookAnywhere -Server YourCASserver name |fl ClientAuthenticationMethod >c:\OA.txt and post/PM. Look for the authetication settings.
RabbieBurns Posted April 4, 2011 Author Posted April 4, 2011 Thanks for the reply, and sorry for the delay. ClientAuthenticationMethod : MaxValidValue is the only line in the OA.txt
sukh Posted April 4, 2011 Posted April 4, 2011 @Rabbie - can you run the same command but omit the ClientAuthticationMethod and post/PM Sukh
RabbieBurns Posted April 4, 2011 Author Posted April 4, 2011 RunspaceId : 9a762b74-5822-4cde-b10d-0c08d8cefd70 ServerName : 2008R2 SSLOffloading : True ExternalHostname : mail.domain.co.uk ClientAuthenticationMethod : MaxValidValue IISAuthenticationMethods : {MaxValidValue} XropUrl : MetabasePath : IIS://2008R2.domain.co.uk/W3SVC/1/ROOT/Rpc Path : C:\Windows\System32\RpcProxy ExtendedProtectionTokenChecking : None ExtendedProtectionFlags : {} ExtendedProtectionSPNList : {} Server : 2008R2 AdminDisplayName : ExchangeVersion : 0.10 (14.0.100.0) Name : Rpc (Default Web Site) DistinguishedName : CN=Rpc (Default Web Site),CN=HTTP,CN=Protocols,CN=2008R2,CN=Servers,CN=Exchange Admin istrative Group (FYDIBOHF23SPDLT),CN=Administrative Groups,CN=My Own Domain,C N=Microsoft Exchange,CN=Services,CN=Configuration,DC=domain,DC=co,DC=uk Identity : 2008R2\Rpc (Default Web Site) Guid : fac625dc-3a7f-4589-a98c-fbedbba168f9 ObjectCategory : domain.co.uk/Configuration/Schema/ms-Exch-Rpc-Http-Virtual-Directory ObjectClass : {top, msExchVirtualDirectory, msExchRpcHttpVirtualDirectory} WhenChanged : 3/22/2011 11:19:33 PM WhenCreated : 7/15/2010 6:22:16 AM WhenChangedUTC : 3/22/2011 11:19:33 PM WhenCreatedUTC : 7/15/2010 5:22:16 AM OrganizationId : OriginatingServer : DC1.domain.co.uk IsValid : True
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now