Johnny Yao WorkSpace

  1. Keywords Autodiscover Outlook Provider MSSTD mutual autentication disable mutual authentication exchange 2010   2. Question http://social.technet.microsoft.com/Forums/en-US/exchange2010/thread/25d2188c-37eb-4d72-952a-2f8ca9e461bd http://www.agileit.com/Blog/Lists/Posts/Post.aspx?List=c12b6877-9140-4536-b226-b3e11ff929a3&ID=278&RootFolder=%2A&Web=b8624129-0cec-4b70-9743-b27ca84c4802   What you need to do is to configure the Outlookprovider EXPR. Set-OutlookProvider EXPR -CertPrincipalName msstd:bleum.com You can also set the CertPrincipleName to a value of none to disable mutual autentication, but I really don't recommend that. Example: Set-OutlookProvider EXPR -CertPrincipalName none When that has been done, recycle the applicationpool MSExchangeAutodiscoverAppPool in IIS 3. Before recycle IIS Pool   4. Recycle IIS Pool   5. EXRCA after recycle IIS pool ...

  Exchange 2010 Set-OutlookProvider http://technet.microsoft.com/en-us/library/bb123683.aspx The Set-OutlookProvider cmdlet creates the global settings for the Autodiscover service. It sets the AutoDiscoverConfig object under the Global Settings object in Active Directory and sets the attributes specified in the parameters listed in the Parameters section. The Autodiscover Service and Outlook Providers - how does this stuff work? http://blogs.technet.com/b/exchange/archive/2008/09/26/3406344.aspx By default three Outlook Providers are used to configure settings individually for Exchange RPC protocol or internal clients ( EXCH ), Outlook Anywhere ( EXPR ) and WEB . The EXCH setting references the Exchange RPC protocol that is used internally. This setting includes port settings and the internal URLs for the Exchange services that you have enabled. The EXPR setting references the Exchange HTTP protocol that is used by Outlook Anywher...

Outlook 2007 feature matrix based on Exchange Server version Autodiscover The Autodiscover service is automatically installed and configured when the Client Access Server role is added to any Exchange 2007 server. During the configuration, an Autodiscover virtual directory is created under the default Web site and a Service Connection Point (SCP) object is created in Active Directory. The virtual directory and SCP object are essential elements of your Exchange environment as they allow Outlook 2007 clients to quickly find and communicate with the Client Access Server. Depending on your client location, Outlook uses one of the following methods for communicating with the Client Access Server. SCP object - If you are logged into the domain, Outlook 2007 searches Active Directory for the SCP information. The SCP contains the URL to the Autodiscover service, which is then used by Outlook to contact the Client Access Server. DNS - If you are not logged into the domain, o...

  1. 瞭解自動探索服務 SCP 物件會包含樹系之自動探索服務 URL 的授權清單。您可使用 Set-ClientAccessServer 指令程式更新 SCP 物件 在執行 Set-ClientAccessServer 指令程式前，請確定用戶端存取伺服器上已驗證的使用者帳戶，具有該 SCP 物件的讀取權限。如果使用者的權限不正確，將無法搜尋及讀取項目。 2. Configuring Exchange 2007 Autodiscover Site Affinity Internal Clients who are domain joined will first try to contact Active Directory for Service Connection Point (SCP) information.  Each time a CAS is installed into your Forest, that CAS will create an SCP in AD which provides a mean for Outlook 2007 clients to figure out the URL it should access Autodiscover.  This SCP is created in the following location: CN=Autodiscover,CN=Protocols,CN=<CASServer>,CN=Servers,CN=Exchange Administrative Group,CN=Administrative Groups,CN=First Organization,CN=Microsoft Exchange,CN=Services To manually configure the SCP, you can run the following command: Set-ClientAccessServer -Identity CASServer -AutoDiscoverServiceInternalUri https://affinityUS.shudnow.net/Autodiscover...

    Uncovering the New Outlook 2007 AutoDiscover Service Configuring the AutoDiscover Service on the Client Access Server Before we’re ready to move on and configure our Outlook 2007 clients using the AutoDiscover service, we also need to specify which CAS server is to be used by the msExchOutlookProvider attribute on the msExchDiscoverConfig object in Active Directory . Because the Exchange Server 2007 build I use in this article doesn’t have an option for configuring the Outlook Provider Configuration settings in the Exchange Management Console, we need to do so using the OutlookProvider CMDlet via the Exchange Management Shell instead. So let’s fire up the Exchange Management Shell then type the below command and hit Enter : Set-OutlookProvider –id exch –server: Configuring Outlook 2007 with Exchange Server 2007 Set-OutlookProvider   [PS] C:\Windows\system32>Get-OutlookProvider | fl RunspaceId     ...

  在 DNS 中找不到自動探索服務位置 (SRV) 記錄 Microsoft Exchange Analyzer 工具需要 DNS 判斷是否有任何自動探索服務位置 (SRV) 記錄。此 DNS 服務位置記錄查詢的格式為 「_autodiscover._tcp.<smtpDomain>」 ，其中 <smtpDomain> 是使用者主要 SMTP 位址的右側。如果 Exchange Remote Connectivity Analyzer 在該命名空間中找不到自動探索的任何 SRV 記錄，則會顯示下列錯誤訊息： 「在 DNS 中找不到自動探索服務位置記錄。」 Microsoft Office Outlook 2007 用戶端會嘗試使用 4 種方法連線至自動探索服務。當方法失敗時，請依照下列順序嘗試下一種方法： 使用 Active Directory 中的服務連線點 (SCP) 物件 使用 DNS 使用 HTTP 重新導向 使用 SRV 記錄 只有在您想要設定環境，讓 Client Access Server 中的自動探索虛擬目錄能夠透過使用 SRV 記錄找到時，才應將此視為錯誤。     Blog Extended Reading More Information & Reference 1.  在 DNS 中找不到自動探索服務位置 (SRV) 記錄

  您啟動 Microsoft Office Outlook 2007 並連接到執行 Microsoft Exchange Server 2007 或 Microsoft Exchange Server 2010 之伺服器的信箱。在此情況下，您收到下列安全性警告： 安全性憑證名稱錯誤或與網站名稱不符。 注意 此情況只適用於從內部區域網路連接到 Exchange 的 Outlook 用戶端 ，不適用於使用 Outlook Anywhere 連接到 Exchange 的遠端 Outlook 用戶端。   當下列情況成立時，就會發生這個問題： 您使用了不同的憑證來取代預設之自我簽署的 Exchange Server 2007 或 Exchange Server 2010 憑證。 注意 安裝 Exchange Server 2007 或 Exchange Server 2010 時，Exchange Server 2007 或 Exchange Server 2010 中的安裝程式會建立預設的自我簽署憑證。 替代憑證上的一般名稱與儲存在下列物件中之 URL 的完整網域名稱 (FQDN) 不符： Autodiscover 服務的「服務連接點」物件 Exchange 2007 Web Service (EWS) 的 InternalUrl 屬性 「離線通訊錄」Web 服務的 InternalUrl 屬性 Exchange 整合通訊 (UM) Web 服務的 InternalUrl 屬性 預設情況下，儲存在這些物件中的 URL 會參考伺服器上的 NetBIOS 名稱。例如，會儲存類似下列的 URL： https:// NetBIOS_name .contoso.com/autodiscover/autodiscover.xml 這可能與替代憑證的 FQDN 使用的主機名稱不同。例如，替代憑證可能有類似下列的 FQDN： mail.contoso.com 這個問題會造成名稱不符的錯誤。因此，當您嘗試連接到 Outlook 2007 的信箱時就會收到安全性警告訊息。 如果要解決這個問題，請修改...

    1. 若存取 E2K7 internal OWA link ex: http://bqt-mb07/exchange 會自動重導到E14 CAS https://bqt-e14cas1.MSFT.corp.com/owa/auth/logon.aspx?replaceCurrent=1&url=https%3a%2f%2fbqt-e14cas1.MSFT.corp.com%2fowa%2f   2. 無法透過E14 CAS internal URL 存取 E2K7 的mailbox Request Url: https://bqt-e14cas1.MSFT.corp.com:443/owa/auth/error.aspx User host address: 10.82.131.188 OWA version: 14.0.639.11   3. Autodiscover 也自動先透過E14 CAS 來查詢 E2K3 的server   Blog Extended Reading More Information & Reference Understanding Proxying and Redirection    

          Blog Extended Reading More Information & Reference  

  Get-OutlookProvider exch/ expr/ web | fl   [PS] C:\Documents and Settings\exchadm\Desktop> Get-OutlookProvider Name                Server              CertPrincipalName   TTL ----                ------              -----------------   --- EXCH                                                        1 EXPR              ...

    On E2K7 [PS] C:\Documents and Settings\exchadm\Desktop>Test-OutlookWebServices | fl Id      : 1003 Type    : Information Message : About to test AutoDiscover with the e-mail address exchadm@msft.com. Id      : 1007 Type    : Information Message : Testing server BQT-CA07.msft.corp.com with the published name https:/           /bqt-ca07.msft.corp.com/EWS/Exchange.asmx & https://oaw.msft.com/ews/           exchange.asmx. Id      : 1019 Type    : Information Message : Found a valid AutoDiscover service connection point. The AutoDiscover            URL on this object is https://BQT-CA07.msft.corp.com/Autodiscover/Au           todi...

    NO External OOF URL (EWS web site)       Blog Extended Reading More Information & Reference