Hi,

I am stuck trying to get Outlook 2011 to connect to my Exchange Server 2013.

After some days of debugging it seems that whatever is tried via EWS fails with HTTP error 401.

test-outlookwebservices commandlet, EWSeditor, Microsoft Remote Connectiviry Analyser and Outlook 2011 all hits the same issue: Meddelelse: HTTP error 401 - Unauthorized.

Environment:

Exchange Server 2013 fully patched. It was installed in a clean WS 2012 enviroment. No settings or data has been migrated. 

No other software is running on the Exchange Server.

The installed certificate is from GlobalSign is a plain domain certificate (not a SAN cert).

All internal and external URL's on the virtual directories are set to the same server (the external name) and we have split DNS to point to the Exchange servers internal/external IP address. 

DisableLoopbackCheck registry value has been set to 1.

OWA, Outlook 2014 and ActiveSync works fine.

Autodiscovery (DNS SRV redirect) works fine.

On the EWS VD anonymous, basic and Integrated Auth is enabled (both NTLM and Basic auth gives the same 401 error).

I'm stuck and looking forward to some inputs.

Is this the case for all accounts, or only specific ones? Have you checked the values for the EWS related parameters in Get-OrganizationConfig? Or on the get-casmailbox level if only specific mailboxes are affected?

I have tested with the default account for test-outlookwebservices as well as two other accounts. All the same.

Hi,

Generally, the Http 401 error is related to service Authentication issue. Please try the following settings in your IIS Manager:

1. Expand Exchange server name > Sites > Default Web Site > EWS.

2. Double-click SSL Settings, make sure Require SSL is checked there.

3. Back to /EWS Home, double-click Authentication, disable Basic Authentication.

4. Confirm that there is no HTTP Redirect configured for EWS.

5. Restart IIS service by running IISReset from a Command Prompt window.

Regards,

Hi,

Any updates?

Regards,

All tested - same problem.

Perhaps you can let me know why Basic Authentication cannot be enabled on the EWS folder?

Just curious...

See above.

I'd take one account that can successfully logon to OWA. Install Fiddler from this link on a domain joined machine then start it. Then start Outlook and look for the /EWS/Exchange.asmx request with a HTTP status code of 401 (this usually is initiated automatically by Outlook after it starts; to force it, simply open the Automatic Replies). Choose Inspectors then look at the headers corresponding to the Response. After WWW-Authenticate you'll see the authentication options  that the server considers in effect. It's possible there might be a discrepancy here.

• Marked as answer by Winnie LiangMicrosoft contingent staff, Moderator 9 hours 0 minutes ago

Sorry for the late reply.

I installed a new Exchange server and migrated the mailboxes, and the issue was resolved. 

Thank you all for your input. 

• Marked as answer by Winnie LiangMicrosoft contingent staff, Moderator 4 hours 8 minutes ago