Autodiscover - 404 error

[timlineuk]

OK, starting to get fed up with this now!

Autodiscover has been screwed up since i took over here and it's still being a pain and i'm starting to think i'm missing something obvious.

 

The urls for our site appear to be correct.

I've got an SRV record set up in DNS which points to mail.domain....

I've also got some A records pointing mail and autodiscover to our exchange server - this is something that I've read conflicting things on... some say not to have A records other say to create them...

I've recreated the virtual directory for autodiscover.

If i navigate to the autodiscover url i get a 404 error, outlook autoconfig test also gives the same error.

The MS remote connectivity analyzer also fails but things do appear to be working externally.

 

 

the system is an exchange 2010 CAS with a 2007 (don't ask!) edge transport.

 

Many thanks in advance

 

Tim

[Oaktech]

so it works externally, but not internally?

 

Can you navigate to autodiscover from the IIS console? Start there and work outwards!

[timlineuk]

It seems to yes but then again it's odd if the remote connectivity analyzer fails.

 

If i browse to https://localhost/Autodiscover/ from IIS it gives me the expected error code 600 XML screen

If i browse to https://autodiscover.domain.sch.uk/Autodiscover/autodiscover.xml from the exchange server i also get the expected XML

If i browse to https://autodiscover.domain.sch.uk/Autodiscover/autodiscover.xml from a client i get the 404 error

 

I'd assume DNS based on that but it looks correct to me... but that's not to say that it is

[Oaktech]

Ok, thanks, that helps...

 

Can you screenshot your DNS entries for it and we'll have a look. Feel free to obscure anything you need to.

[timlineuk]

Thanks buddy

 

[Oaktech]

I've just had a thought before we go digging around too much in DNS - which looks OK, in the autodiscover setup there should be lines for internalURL and externalURL are these set?

 

Configure External and Internal URL in Exchange 2013

[timlineuk]

Internal seems ok, but no entry in external...

 

[Oaktech]

Internal seems ok, but no entry in external...

 

[ATTACH=CONFIG]33755[/ATTACH]

 

Well that's not the way round I would I expect to see it given the issue you're seeing, but it's a possibility. Can you try setting both URI to the same location and see what happens. Given your internal and external domains are the same.

 

The other thing that crossed my mind is whether the Service Connection Point in AD sites and services is set correctly - have a read of this and see if it makes sense to you

 

Exchange Autodiscover :: Management & Administration :: Exchange 2010 Articles :: Articles & Tutorials :: MSExchange.org

[timlineuk]

I've just set the external uri in powershell but it just returns the same as the above image when i run the "Set-ClientAccessServer..." command.

 

The serviceBindingInformation attribute appears to be correctly set to our https://mail....autodiscover/autodiscover.xml address

[timlineuk]

Interestingly if i go to https://mail.domain.sch.uk/autodiscover/autodiscover.xml i get the IIS 404 error

 

[timlineuk]

Humm the files are indeed not in the physical path - that's probably the cause of the fault then...

[Oaktech]

Humm the files are indeed not in the physical path - that's probably the cause of the fault then...

 

That is certainly a good place to start looking...

[timlineuk]

 

Does there need to be any redirection or anything between webmail and the default web sites? or is this just incorrect entirely?

[timlineuk]

OK it looks like something fishy was going on with the bindings.

For whatever reason the server IP address was attached to "webmail". i've now switched the bindings to the default site and it seems to be happy and webmail is working still... so that begs the question - why is the webmail site there???

There are so many unapparent and messy things here! garr!

[Oaktech]

OK it looks like something fishy was going on with the bindings.

For whatever reason the server IP address was attached to "webmail". i've now switched the bindings to the default site and it seems to be happy and webmail is working still... so that begs the question - why is the webmail site there???

There are so many unapparent and messy things here! garr!

 

Ok, cool. Partially fixed.

 

Bindings was about to be my next line of enquiry!

[timlineuk]

Yes, fixed but "webmail" contain the active sync stuff so now mobile devices are not picking up email (i.e. my phone)

 

I've now reverted the settings until i can work out this part now!

 

I've noticed that there are two certificates available, a SAN cert and a specific on for webmail. (again i'm not entirely certain why as webmail. is included in the SAN cert).

 

To ditch that webmail site can i just recreate active sync and manually copy over the client access policy setting? does it exist for any other reason?

 

Many thanks for all of this, it's helping focus my view

Edited December 8, 2015 by timlineuk

[timlineuk]

So i'm now thinking there's an issue still with the bindings - addresses and other stuff was changed before my arrival and no records were kept so i think it's lost some crucial information!

 

these are the binding for the default web site:

 

 

these are bindings for "webmail"

 

 

SAN cert attached to both https bindings