Dropping Outlook Anywhere connections
Outlook Anywhere randomly drops for my users, and will come back after a unspecified period of time, or a server restart. OWA works fine during this time, as does Outlook on the Local Network. This is only Remote Outlook clients. No settings are changed on the clients, as a restart of the server will bring them back to working correctly. This is happening for multiple users across the board.
i am not sure where to start looking, no settings are ever changed, a restart is what makes it start working again.
Any suggestions on where to look or other information to gather would be excellent.
ThanksScotty
October 14th, 2009 7:23pm
When you say reboot, are you rebooting CAS server or the MBX server. My guess is CAS server. check for event IDs. Check for any event on RPCproxy and paste it over here.Raj
Free Windows Admin Tool Kit Click here and download it now
October 14th, 2009 10:57pm
There is only one server, with all Exchange 2007 roles installed...with the exception of Edge Transport. This is the server that is being restarted.
Previously we have looked in the Event viewer and not seen any, but I will definitely check again.Scotty
October 14th, 2009 10:59pm
Thanks for the help Rajnish.
There are no RPCprixy errors in the event viewer. I checked back for the entire day, including where the users experienced the drop and did not find any errors.
Scotty
Free Windows Admin Tool Kit Click here and download it now
October 16th, 2009 1:59am
Hi,When this issue reoccurs, please try to access the online testing tool to diagnose this issue:https://www.testexchangeconnectivity.com/Then post the information on the forum.ThanksAllen
October 16th, 2009 11:45am
Testing RPC/HTTP connectivity RPC/HTTP test failed Test Steps Attempting to test Autodiscover for EMAIL GONE Testing Autodiscover failed Test Steps Attempting each method of contacting the AutoDiscover Service Failed to contact the AutoDiscover service successfully by any method Test Steps Attempting to test potential AutoDiscover URL https://teampowerport.com/AutoDiscover/AutoDiscover.xml Failed testing this potential AutoDiscover URL Test Steps Attempting to resolve the host name teampowerport.com in DNS. Host successfully resolved Additional Details IP(s) returned: 64.26.31.195
Testing TCP Port 443 on host teampowerport.com to ensure it is listening and open. The port was opened successfully.Testing SSL Certificate for validity. The SSL Certificate failed one or more certificate validation checks. Tell me more about this issue and how to resolve it Additional Details A network error occurred while communicating with remote hostException Details:Message: Authentication failed because the remote party has closed the transport stream.Type: System.IO.IOExceptionStack Trace:at System.Net.Security.SslState.StartReadFrame(Byte[] buffer, Int32 readBytes, AsyncProtocolRequest asyncRequest)at System.Net.Security.SslState.StartReceiveBlob(Byte[] buffer, AsyncProtocolRequest asyncRequest)at System.Net.Security.SslState.CheckCompletionBeforeNextReceive(ProtocolToken message, AsyncProtocolRequest asyncRequest)at System.Net.Security.SslState.StartSendBlob(Byte[] incoming, Int32 count, AsyncProtocolRequest asyncRequest)at System.Net.Security.SslState.ForceAuthentication(Boolean receiveFirst, Byte[] buffer, AsyncProtocolRequest asyncRequest)at System.Net.Security.SslState.ProcessAuthentication(LazyAsyncResult lazyResult)at System.Net.Security.SslStream.AuthenticateAsClient(String targetHost, X509CertificateCollection clientCertificates, SslProtocols enabledSslProtocols, Boolean checkCertificateRevocation)at System.Net.Security.SslStream.AuthenticateAsClient(String targetHost)at Microsoft.Exchange.Tools.ExRca.Tests.SSLCertificateTest.PerformTestReally()
Attempting to test potential AutoDiscover URL https://autodiscover.teampowerport.com/AutoDiscover/AutoDiscover.xml Failed testing this potential AutoDiscover URL Test Steps Attempting to resolve the host name autodiscover.teampowerport.com in DNS. Host successfully resolved Additional Details IP(s) returned: 99.174.158.105
Testing TCP Port 443 on host autodiscover.teampowerport.com to ensure it is listening and open. The port was opened successfully.Testing SSL Certificate for validity. The SSL Certificate failed one or more certificate validation checks. Test Steps Validating certificate name Successfully validated the certificate name Additional Details Found hostname autodiscover.teampowerport.com in Certificate Subject Alternative Name entry
Validating certificate trust Certificate trust validation failed Additional Details Certificate chain could not be built. You may be missing required intermediate certificates.
Attempting to contact the AutoDiscover service using the HTTP redirect method. Failed to contact AutoDiscover using the HTTP Redirect method Test Steps Attempting to resolve the host name autodiscover.teampowerport.com in DNS. Host successfully resolved Additional Details IP(s) returned: 99.174.158.105
Testing TCP Port 80 on host autodiscover.teampowerport.com to ensure it is listening and open. The port was opened successfully.Checking Host autodiscover.teampowerport.com for an HTTP redirect to AutoDiscover Failed to get an HTTP redirect response for AutoDiscover Additional Details An HTTP 403 forbidden response was received. The response appears to have come from Unknown. Body is: You do not have permission to view this directory or page.
Attempting to contact the AutoDiscover service using the DNS SRV redirect method. Failed to contact AutoDiscover using the DNS SRV redirect method. Test Steps Attempting to locate SRV record _autodiscover._tcp.teampowerport.com in DNS. Failed to find AutoDiscover SRV record in DNS. Tell me more about this issue and how to resolve it--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------The above is the output from the Tool. Thanks Allen. From looking at this, it might be a DNS issue, but I will wait for further replies.Thanks for the help.Scotty
Free Windows Admin Tool Kit Click here and download it now
October 16th, 2009 5:39pm
Testing RPC/HTTP connectivity RPC/HTTP test failed Test Steps Attempting to resolve the host name mail.teampowerport.com in DNS. Host successfully resolved Additional Details IP(s) returned: 99.174.158.105
Testing TCP Port 443 on host mail.teampowerport.com to ensure it is listening and open. The port was opened successfully.Testing SSL Certificate for validity. The SSL Certificate failed one or more certificate validation checks. Test Steps Validating certificate name Successfully validated the certificate name Additional Details Found hostname mail.teampowerport.com in Certificate Subject Common name
Validating certificate trust Certificate trust validation failed Additional Details Certificate chain could not be built. You may be missing required intermediate certificates. ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------This is the same test performed as above, but without using autodiscover. So, it may not be a DNS issue, and may be a cert issue. again, I will wait for further replies.Scotty
October 16th, 2009 5:44pm
Looks like a cert issue. Can you try this command from shell.Set-outlookprovider EXPR -server $null -certprinicipalname $null. Then run the same command relacing EXPR with EXCH. and see if the situation improves.Raj
Free Windows Admin Tool Kit Click here and download it now
October 16th, 2009 10:54pm
Hi,Thank you for your information.From the log that you posted, I found that the Outlook client failed to connect Autodiscover URL due to the certificate issue.I would like to explain that the external Outlook clients need to connect Autodiscover service through two predefined URL by using DNS, that is https://domain.com or https://autodiscover.domain.comApparently, the two URL can be resolved successfully in DNS but failed to get the response due to the certificate validation check.Please let me know whether the autodiscover.domain.com is included in the Subject Alternative Names. If not, we need to make the certificate include the name.Exchange 2007 Autodiscover and certificateshttp://msexchangeteam.com/archive/2007/04/30/438249.aspxThanksAllen
October 19th, 2009 6:14am