KB ID 0001180
Problem
I had to visit a client who had recently gone through an Exchange migration, now his external mail clients were having a nightmare staying connected to Outlook Anywhere. I ran the Exchange connectivity tester and got this;
Additional details
Not all the required authentication methods were found
Methods Found: Basic
Methods Required: NTLM
Solution
Looks like an open and shut case, someone forgot to enable Windows Authentication on the ‘rpc’ virtual directory in Exchange, and when I looked, it wasn’t so I enabled it, like so;
Now I was feeling smug, and enjoying a coffee before I left site, when it went off again? As it happens, not only do you need to set it correctly in IIS, but if someone has set it incorrectly in Exchange, then Exchange wins! As you can see by my query below;
[PS] C:\Windows\system32>Get-OutlookAnywhere RunspaceId : a268959b-a2c9-435a-883e-97acef3ec828 ServerName : PNLMAIL03 SSLOffloading : False ExternalHostname : webmail.petenetlive.co.uk ClientAuthenticationMethod : Ntlm IISAuthenticationMethods : {Basic} << OOPS! :( XropUrl : MetabasePath : IIS://PNLMAIL03.PNL.local/W3SVC/1/ROOT/Rpc Path : C:\Windows\System32\RpcProxy ExtendedProtectionTokenChecking : None ExtendedProtectionFlags : {} ExtendedProtectionSPNList : {} Server : PNLMAIL03 AdminDisplayName : ExchangeVersion : 0.10 (14.0.100.0) Name : PNLMAIL03 DistinguishedName : CN=PNLMAIL03,CN=HTTP,CN=Protocols,CN=PNLMAIL03,CN=Servers,CN=Exchange Administrative Group (FYDIBOHF23SPDLT),CN=Administrative Groups,CN=PeteNetLive,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=PNL,DC=local Identity : PNLMAIL03\PNLMAIL03 Guid : 3403795b-af71-4687-ba81-da4c876ed7bc ObjectCategory : PNL.local/Configuration/Schema/ms-Exch-Rpc-Http-Virtual-Directory ObjectClass : {top, msExchVirtualDirectory, msExchRpcHttpVirtualDirectory} WhenChanged : 01/10/2015 13:34:26 WhenCreated : 14/06/2013 09:27:03 WhenChangedUTC : 01/10/2015 12:34:26 WhenCreatedUTC : 14/06/2013 08:27:03 OrganizationId : OriginatingServer : PNLDC01.PNL.local IsValid : True RunspaceId : a268959b-a2c9-435a-883e-97acef3ec828 ServerName : PNLMAIL02 SSLOffloading : False ExternalHostname : webmail.petenetlive.co.uk ClientAuthenticationMethod : Ntlm IISAuthenticationMethods : {Basic} XropUrl : MetabasePath : IIS://PNLMAIL02.PNL.local/W3SVC/1/ROOT/Rpc Path : C:\Windows\System32\RpcProxy ExtendedProtectionTokenChecking : None ExtendedProtectionFlags : {} ExtendedProtectionSPNList : {} Server : PNLMAIL02 AdminDisplayName : ExchangeVersion : 0.10 (14.0.100.0) Name : PNLMAIL02 DistinguishedName : CN=PNLMAIL02,CN=HTTP,CN=Protocols,CN=PNLMAIL02,CN=Servers,CN=Exchange Administrative Group (FYDIBOHF23SPDLT),CN=Administrative Groups,CN=PeteNetLive,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=PNL,DC=local Identity : PNLMAIL02\PNLMAIL02 Guid : 40ea303b-9c68-47ab-84fd-362c07f0a2db ObjectCategory : PNL.local/Configuration/Schema/ms-Exch-Rpc-Http-Virtual-Directory ObjectClass : {top, msExchVirtualDirectory, msExchRpcHttpVirtualDirectory} WhenChanged : 01/10/2015 13:34:37 WhenCreated : 14/06/2013 09:26:49 WhenChangedUTC : 01/10/2015 12:34:37 WhenCreatedUTC : 14/06/2013 08:26:49 OrganizationId : OriginatingServer : PNLDC01.PNL.local IsValid : True
Well that explains the error! To fix that;
[PS] C:\Windows\system32>get-outlookanywhere | set-outlookanywhere -iisauthentication ntlm, basic
Now let’s check again.
[PS] C:\Windows\system32>Get-OutlookAnywhere RunspaceId : a268959b-a2c9-435a-883e-97acef3ec828 ServerName : PNLMAIL03 SSLOffloading : False ExternalHostname : webmail.petenetlive.co.uk ClientAuthenticationMethod : Ntlm IISAuthenticationMethods : {Basic, Ntlm} << BOOM :) XropUrl : MetabasePath : IIS://PNLMAIL03.PNL.local/W3SVC/1/ROOT/Rpc Path : C:\Windows\System32\RpcProxy ExtendedProtectionTokenChecking : None ExtendedProtectionFlags : {} ExtendedProtectionSPNList : {} Server : PNLMAIL03 AdminDisplayName : ExchangeVersion : 0.10 (14.0.100.0) Name : PNLMAIL03 DistinguishedName : CN=PNLMAIL03,CN=HTTP,CN=Protocols,CN=PNLMAIL03,CN=Servers,CN=Exchange Administrative Group (FYDIBOHF23SPDLT),CN=Administrative Groups,CN=PeteNetLive,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=PNL,DC=local Identity : PNLMAIL03\PNLMAIL03 Guid : 3403795b-af71-4687-ba81-da4c876ed7bc ObjectCategory : PNL.local/Configuration/Schema/ms-Exch-Rpc-Http-Virtual-Directory ObjectClass : {top, msExchVirtualDirectory, msExchRpcHttpVirtualDirectory} WhenChanged : 02/10/2015 13:13:55 WhenCreated : 14/06/2013 09:27:03 WhenChangedUTC : 02/10/2015 12:13:55 WhenCreatedUTC : 14/06/2013 08:27:03 OrganizationId : OriginatingServer : PNLDC01.PNL.local IsValid : True RunspaceId : a268959b-a2c9-435a-883e-97acef3ec828 ServerName : PNLMAIL02 SSLOffloading : False ExternalHostname : webmail.petenetlive.co.uk ClientAuthenticationMethod : Ntlm IISAuthenticationMethods : {Basic, Ntlm} XropUrl : MetabasePath : IIS://PNLMAIL02.PNL.local/W3SVC/1/ROOT/Rpc Path : C:\Windows\System32\RpcProxy ExtendedProtectionTokenChecking : None ExtendedProtectionFlags : {} ExtendedProtectionSPNList : {} Server : PNLMAIL02 AdminDisplayName : ExchangeVersion : 0.10 (14.0.100.0) Name : PNLMAIL02 DistinguishedName : CN=PNLMAIL02,CN=HTTP,CN=Protocols,CN=PNLMAIL02,CN=Servers,CN=Exchange Administrative Group (FYDIBOHF23SPDLT),CN=Administrative Groups,CN=PeteNetLive,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=PNL,DC=local Identity : PNLMAIL02\PNLMAIL02 Guid : 40ea303b-9c68-47ab-84fd-362c07f0a2db ObjectCategory : PNL.local/Configuration/Schema/ms-Exch-Rpc-Http-Virtual-Directory ObjectClass : {top, msExchVirtualDirectory, msExchRpcHttpVirtualDirectory} WhenChanged : 02/10/2015 13:13:58 WhenCreated : 14/06/2013 09:26:49 WhenChangedUTC : 02/10/2015 12:13:58 WhenCreatedUTC : 14/06/2013 08:26:49 OrganizationId : OriginatingServer : PNLDC01.PNL.local IsValid : True
Related Articles, References, Credits, or External Links
NA
