Thanks Genie for this post. I searched all over the net yesterday for why my EX2K7 server was having these errors, and I was about to pay for per-incedent support at MS to get it resolved. Turns out this was my problem - and it's not really a problem at all... so thanks again!
I am having a similar problem when I run test-outlookwebservices | fl. I have set my autodiscover on a seperate website with its own cert. I have removed the default autodiscover virtual directory. When I run the test, I get: Error 1013 "When Contacting https://autodiscover.domain.com/autodiscover/autodiscover.xml received the error The remote server returned an error: (401) Unauthorized."
If I open IE and try going to https://localhost/autodiscover/autodiscover.xml, I just get a "Page cannot be displayed". I have been searching for days and was happy to come across your blog but unfortunately, this doesn't seem to cure my problem. Any ideas which you would like to share?
Do you only have 1 server in your envrionment? Can you attempt to run the test from an alternate Exchange server? Take a look at exchange-experts I answer a lot questions there...
I have this exact issue! Thanks for the post, quick question though, I am a little hesitant to disable this security feature. Is there any other work around? When I run the test-outlookwebservices it shows that the AS is contacting the External URL. This is also confirmed from the Test Outlook Auto Configuration from an internal domain client, should it be using the external url for internal clients?
--- I reposted this so I did not have your email address listed
If you dont want to disable this feature full time, you can do it run your test then enable it back. I would not recommned leaving it unsecure..... The 2nd part of your question. A domain joined internal client should hit the internal url, now depending on how you have thing configured the url could be the same. We a domain join client start autodiscover - it contacts AD and get the SCP for the autodiscover service and now knows which url to connect if the client is not domain joined it will query dns for the autodiscover.domain.com or domain.com/autodiscover info... and xml file is pulled from this which states the url to use.
Hi Genie, thanks for charing your knowledge. I'm really greatful!
I have a similar problem with my Exchange 2007 environment. Environment 2 servers; edge transport server and the other server with cas, hub, store etc. Domain controller role is separated on a dedicated server for DC, DNS and DHCP.
Test-error When i run the test-OutlookWebServices I get the same problem as described. When I changed the DisableloopbackCheck some of the errors disappear, but one is still there: 1005 Error; When accessing https://"netbios CAS-server"/Autodiscover/Autodiscover.xml the error "RemoteCertificateNameMismatch:CN="external DNS name" ...
Autodiscover.xml The autodiscover.xml file has the following code: =================== xml version="1.0" encoding="utf-8" - Autodiscover xmlns="http://schemas.microsoft.com/exchange/autodiscover/responseschema/2006" - Response - Error Time="01:34:49.9053248" Id="331888869" ErrorCode 600 /ErrorCode Message Invalid Request /Message DebugData / /Error /Response /Autodiscover ===================
I'm not sure what steps to take from this point. Any ideas?
I have disabled the security check as you discribed, however I am still getting the 401 error with Rest-OutlookWebServices |fl, is there anything else that may cause this issue?
OWA works and Internal Autodiscover, but my Outlook Anywhere Clients simply keep asking for login credentials
please reference the autodiscover blog that I have http://exchange-genie.blogspot.com/2007/07/autodiscover-ad-attribute.html internal clients pull autodiscover from the scp and will then use web services to pull free busy info...
I actually used your autodiscover blog to setup my autodiscover. I've gone through that blog at least 3 times and triple checked all of my settings. The Test-OutlookWebServices is successful and the Test Email Auto Configuration in Outlook works fine. It's looking more and more like I need to call Microsoft on this one.
Thank you!!! Our spam filter was not working properly and we needed to resolve this problem asap. I am not certain why it just decided to fail, because the initial tests worked without issue...Regardless, thanks again for your help.
Posts
17 comments:
Thanks Genie for this post. I searched all over the net yesterday for why my EX2K7 server was having these errors, and I was about to pay for per-incedent support at MS to get it resolved. Turns out this was my problem - and it's not really a problem at all... so thanks again!
Dave,
I am glad I was able to save you some $$$
Brian
Brian, this was one of the many issues that you helped with me over the past few days.. I really appreciate your expertise and knowledge..
I love this blog and am delighted that people like you are so generous in sharing their knowledge and experiences..
Thank you once again,
Liam
Liam,
It was my pleasure to help!I am glad that I can provide assistance. I know how fustrating it can be to try and find solution!
Hi,
I am having a similar problem when I run test-outlookwebservices | fl.
I have set my autodiscover on a seperate website with its own cert. I have removed the default autodiscover virtual directory. When I run the test, I get: Error 1013 "When Contacting https://autodiscover.domain.com/autodiscover/autodiscover.xml received the error The remote server returned an error: (401) Unauthorized."
If I open IE and try going to https://localhost/autodiscover/autodiscover.xml, I just get a "Page cannot be displayed". I have been searching for days and was happy to come across your blog but unfortunately, this doesn't seem to cure my problem. Any ideas which you would like to share?
Do you only have 1 server in your envrionment?
Can you attempt to run the test from an alternate Exchange server?
Take a look at exchange-experts I answer a lot questions there...
should internal clients be using the external url for the AS? I don't see a config to specify an internal and external url for the AS?
I have this exact issue! Thanks for the post, quick question though, I am a little hesitant to disable this security feature. Is there any other work around? When I run the test-outlookwebservices it shows that the AS is contacting the External URL. This is also confirmed from the Test Outlook Auto Configuration from an internal domain client, should it be using the external url for internal clients?
--- I reposted this so I did not have your email address listed
Gmatteson......
If you dont want to disable this feature full time, you can do it run your test then enable it back. I would not recommned leaving it unsecure.....
The 2nd part of your question.
A domain joined internal client should hit the internal url, now depending on how you have thing configured the url could be the same.
We a domain join client start autodiscover - it contacts AD and get the SCP for the autodiscover service and now knows which url to connect if the client is not domain joined it will query dns for the autodiscover.domain.com or domain.com/autodiscover info... and xml file is pulled from this which states the url to use.
Hi Genie, thanks for charing your knowledge. I'm really greatful!
I have a similar problem with my Exchange 2007 environment.
Environment
2 servers; edge transport server and the other server with cas, hub, store etc. Domain controller role is separated on a dedicated server for DC, DNS and DHCP.
Test-error
When i run the test-OutlookWebServices I get the same problem as described. When I changed the DisableloopbackCheck some of the errors disappear, but one is still there:
1005 Error; When accessing https://"netbios CAS-server"/Autodiscover/Autodiscover.xml the error "RemoteCertificateNameMismatch:CN="external DNS name" ...
Autodiscover.xml
The autodiscover.xml file has the following code:
===================
xml version="1.0" encoding="utf-8"
- Autodiscover xmlns="http://schemas.microsoft.com/exchange/autodiscover/responseschema/2006"
- Response
- Error Time="01:34:49.9053248" Id="331888869"
ErrorCode 600 /ErrorCode
Message Invalid Request /Message
DebugData /
/Error
/Response
/Autodiscover
===================
I'm not sure what steps to take from this point. Any ideas?
Best Regards
isak
Have you read through my autodiscover blog, the error states that you have a mismatch of the cert name?
Domain joined client typicall get the autodiscover info from the SCP in AD this can be check with the get-clientaccessserver command
take a look over this
http://exchange-genie.blogspot.com/2007/07/autodiscover-ad-attribute.html
Hi Genie,
I have disabled the security check as you discribed, however I am still getting the 401 error with Rest-OutlookWebServices |fl, is there anything else that may cause this issue?
OWA works and Internal Autodiscover, but my Outlook Anywhere Clients simply keep asking for login credentials
Thanks
please reference the autodiscover blog that I have http://exchange-genie.blogspot.com/2007/07/autodiscover-ad-attribute.html internal clients pull autodiscover from the scp and will then use web services to pull free busy info...
I actually used your autodiscover blog to setup my autodiscover. I've gone through that blog at least 3 times and triple checked all of my settings. The Test-OutlookWebServices is successful and the Test Email Auto Configuration in Outlook works fine. It's looking more and more like I need to call Microsoft on this one.
You are the best!
Excellent solution.
Thank you so much!
Thank you!!! Our spam filter was not working properly and we needed to resolve this problem asap. I am not certain why it just decided to fail, because the initial tests worked without issue...Regardless, thanks again for your help.
Post a Comment