Hi all, Last week I completed a full reinstall of my Exchange 2007, cleaning up my AD and getting rid of som old 5.5 connectors and other older references that has been bugging me the past 6 months. My Exchange 2007 is now up and running again, except for the OAB generation. I have searched around for this, but everyone seems to have another error reported in Outlook, then what I get. My setup: Exchange 2007 SP1 running on Windows Server 2003 x64 SP2 R2. CAS, MB, HT and MT is installed. MS ForeFront Client Security is installed. Exclaimer Mail Utilities 2007 is installed. Backup of the database and system state runs on weekdays at 22.00 with MS DPM2007. OAB Update Schedule is configured to run 4AM. Maintainance is custom configured, to run between 5AM and 7AM. AD running on 2 other boxes, Windows Server 2003 x64 SP2 R2 (one of them is virtual). I have 35 mailboxes running on this box, and I have configured the OAB for webbased distribution (no public folders). Autodiscover is setup, and running OK. Outlook anywhere (RPC over HTTPS) is setup and running OK I am using a public certificate called a power certificate for Exchange 2007. It has owa.domain.dk + ccmail2k7.domain.dk + autodiscover.domain.dk + mail.domain.dk on it, and has been working 100% for the past 6 months, for webmail and Windows Mobile syncronization. Outlookerrors: Outlook 2007 is reporting 0X80190194insyncronization. I have tried a manual send/recieve of the OAB with same result. Exchange Application EventLog errors: Type: Warning Time: 3:58:54AM ID: 1021 Source: MSExchangeFDS (occours every 8 hours) Process MSExchangeFDS.exe (PID=3468). Could not find directory \\CCMAIL2K7\ExchangeOAB\9b334529-6e52-4bb4-bbba-8dd519a46f3a. This is normal if the directory has never been generated. Otherwise, make sure this directory and share has read permission for the "Exchange Servers" group. Type: Information Time: 3:58:54AM ID: 1008 Source: MSExchangeFDS (occours every 8 hours) Process MSExchangeFDS.exe (PID=3468). Offline Address Book data synchronization task has completed successfully. OAB name: "CC Offline Address Book", Guid: 9b334529-6e52-4bb4-bbba-8dd519a46f3a Type: Error Time: 4:07:42AM ID: 9402 Source MSExchangeSA (occours every 24 hours) OALGen failed to read the objectGuid attribute from offline address book (OAB) object '/o=domain/cn=addrlists/cn=oabs/cn=CC Offline Address Book' in Active Direcotry. Please check security settings on this object. OAB generation will not be performed. Type: Error Time: 5:47:42AM ID: 9334 Source: MSExchangeSA (occours every 24 hours) OALGen encountered error ffffffff while initializing the offline address list generation process. No offline address lists have been generated. Please check the event log for more information. - /o=domain/cn=addrlists/cn=oabs/cn=CC Offline Address Book Test-OutlookWebServices: Id : 1003Type : InformationMessage : About to test AutoDiscover with the e-mail address kl@domain.dk. Id : 1007Type : InformationMessage : Testing server ccmail2k7.domain.dk with the published name https://ccmail2k7.domain.dk/EWS/Exchange.asmx & https://owa.domain.dk/ews/exchange.asmx. Id : 1019Type : InformationMessage : Found a valid AutoDiscover service connection point. The AutoDiscover URL on this object is https://ccmail2k7.domain.dk/Autodiscover/Autodiscover.xml. Id : 1006Type : InformationMessage : The Autodiscover service was contacted at https://ccmail2k7.domain.dk/Autodiscover/Autodiscover.xml. Id : 1016Type : SuccessMessage : [EXCH]-Successfully contacted the AS service at https://ccmail2k7.domain.dk/EWS/Exchange.asmx. The elapsed time was 390 milliseconds. Id : 1015Type : SuccessMessage : [EXCH]-Successfully contacted the OAB service at https://ccmail2k7.domain.dk/EWS/Exchange.asmx. The elapsed time was 0 milliseconds. Id : 1014Type : SuccessMessage : [EXCH]-Successfully contacted the UM service at https://ccmail2k7.domain.dk/UnifiedMessaging/Service.asmx. The elapsed time was 15 milliseconds. Id : 1013Type : ErrorMessage : When contacting https://owa.domain.dk/ews/exchange.asmx received the error The request failed with HTTP status 401: Unauthorized. Id : 1016Type : ErrorMessage : [EXPR]-Error when contacting the AS service at https://owa.domain.dk/ews/exchange.asmx. The elapsed time was 15 milliseconds. Id : 1015Type : SuccessMessage : [EXPR]-Successfully contacted the OAB service at https://owa.domain.dk/ews/exchange.asmx. The elapsed time was 0 milliseconds. Id : 1014Type : SuccessMessage : [EXPR]-Successfully contacted the UM service at https://owa.domain.dk/unifiedmessaging/service.asmx. The elapsed time was 0 milliseconds. Id : 1017Type : SuccessMessage : [EXPR]-Successfully contacted the RPC/HTTP service at https://owa.domain.dk/Rpc. The elapsed time was 0 milliseconds. Id : 1006Type : SuccessMessage : The Autodiscover service was tested successfully. Id : 1021Type : InformationMessage : The following web services generated errors. As in EXPR Please use the prior output to diagnose and correct the errors. Get-AutodiscoverVirtualDirectory | fl Name : Autodiscover (Default Web Site)InternalAuthenticationMethods : {Basic, Ntlm, WindowsIntegrated}ExternalAuthenticationMethods : {Basic, Ntlm, WindowsIntegrated}BasicAuthentication : TrueDigestAuthentication : FalseWindowsAuthentication : TrueMetabasePath : IIS://ccmail2k7.domain.dk/W3SVC/1/ROOT/AutodiscoverPath : C:\Program Files\Microsoft\Exchange Server\ClientAccess\AutodiscoverServer : CCMAIL2K7InternalUrl : https://ccmail2k7.domain.dk/ExternalUrl : https://autodiscover.domain.dk/AdminDisplayName :ExchangeVersion : 0.1 (8.0.535.0)DistinguishedName : CN=Autodiscover (Default Web Site),CN=HTTP,CN=Protocols,CN=CCMAIL2K7,CN=Servers,CN=Exchange Administrative Group (FYDIBOHF23SPDLT),CN=Administrative Groups,CN=Domain,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=domain,DC=dkIdentity : CCMAIL2K7\Autodiscover (Default Web Site)Guid : f9983bed-11c9-465b-8567-5a36a2e0be8bObjectCategory : domain.dk/Configuration/Schema/ms-Exch-Auto-Discover-Virtual-DirectoryObjectClass : {top, msExchVirtualDirectory, msExchAutoDiscoverVirtualDirectory}WhenChanged : 7/21/2008 8:44:11 AMWhenCreated : 7/16/2008 3:33:56 PMOriginatingServer : ccbackup.domain.dkIsValid : True If i rightclick my Outlook icon and choose connection status, I have 6 entries. 4 with addresslist as type, and they connect to the global catalog AD server. And 2 with post as type, and they connect to the Exchange box. When i start up Outlook.exe /rpcdiag, I get no errors. On my exchange box: C:\Program Files\Microsoft\Exchange Server\ClientAccess\OAB is empty - no files or folders. \\CCMAIL2K7\ExchangeOAB\9b334529-6e52-4bb4-bbba-8dd519a46f3a - there is no share on my Exchange box called ExchangeOAB, or 9b334529-6e52-4bb4-bbba-8dd519a46f3a I have tried alot of advice located on the internet, including this one: http://blogs.msdn.com/dgoldman/archive/2006/11/27/Error-0x80190194-when-using-an-outlook-2007-client-to-download-a-web-distribution-enabled-oab.aspx And still my OAB folder is empty. I hope one of you have a solution to this issue

Hi, Look at your offline address book configuration. Do you have an OAB named: "CC Offline Address Book"?? Leif

Hi Leif, And thanks for your quick responce Organization Configuration->Mailbox->Offline Address Book - I have a CC Offline Address Book, with Update Schedule set to 4AM, and I have included the default GAL only. Distribution is set to Outlook 2003 SP2 or later, and enabled web-based distribution, and I added the OAB (default web site) virtual directory. Public folder distribution is NOT enabled. Server Configuration->Mailbox - Mailbox database properties, under Client Settings I have browsed and selected the CC Offline Address Book.

Hi, Web based distribution works only with Outlook 2007 & Exchange 2007 environment if you have Outlook 2003 or earlier clients then you need to configure public folder base distribution for those clients. References: How to Create an Offline Address Book Offline Address Book Properties > Distribution Tab Web-based vs. Public Folder based OAB Distribution

There is no option to select Outlook 2007, only the 2003 SP2 or newer option. We do use Outlook 2007 only.

Ok, got it. Misunderstood it previously.

Hi, Please attempt the following method to troubleshoot the issue: Using ADSIEdit: 1. Navigate to the Default Global Address List object CN=Default Global Address List,CN=All Global Address Lists,CN=Address Lists Container,CN=First Organization,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=Domain,DC=local 2. Go to the properties of the Default Global Address List object3. Copy the distinguishedName attribute of the Default Global Address List. It should look similar to the one below. CN=Default Global Address List,CN=All Global Address Lists,CN=Address Lists Container,CN=First Organization,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=Domain,DC=local 4. Navigate to the Microsoft Exchange container. CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=Domain,DC=local 5. Go to properties of the Microsoft Exchange container6. Select the GlobalAddressList attribute and click Edit.7. Paste in the distinguishedName attribute of the Default Global Address List and click Add 8. Click OK twice to close out of the properties.9. Replicate domain controllers10. Rebuild the OAB again Update-offlineaddressbook CC Offline Address Book If the OAB still cannot be generated, please check the event log again to check whether the same event are logged. Mike

Hi Mike, Thanks for taking the time to look into this. 7. When clicking add i recieve this message: This value allready exists in the list. Do you want to add it anyway? I pressed yes and compared the two values, and they are identical. I had to remove one of them, before I could OK out of the properties, so I removed both and added a new one. Completed 8, 9, 10 and the update. No difference. No OAB and same event logs as in my first post.

Hi, The issue can also be caused by incorrect permission setting. Please check the following permission setting: Locate the Default Global Address List object, please ensure Authenticated Users has Read and Open Address List permission. After that, please reboot the System Attendant Service to check the result. If the issue still persists, please consider reboot GC to test the issue again. If the issue still cannot be solved, please help me gather the AD Permission of the Default Global Address List and CC Offline Address Book objects by using DSAcls tool. How to Use Dsacls.exe in Windows Server 2003 and Windows 2000 http://support.microsoft.com/kb/281146/en-us Mike

Hi Mike, Did all you suggested, even rebooted the GC and no change. I have been trying to figure out what command to use with the dsacls.exe, but i cant seem to get the right command to execute a succesful check.

I ended up opening a ticket with MS Partner Support, and got the following solution: Open ADSIedit on the GC, and delete the All address list and offline address list containers. Next run the setup.com /prepareSchema switch. (If this made errors, I was to mail the errors to the tech) If this completes successfully run the /prepareAD switch. Nextrun the /prepareDomain switch. Reboot the GC. Reboot the Exchange Server. It did not work right away! But after a day or so, the error in Outlook sync stopped, and when i checked the Exchange Server, I now haveafolder in the C:\Program Files\Microsoft\Exchange Server\ClientAccess\OAB folder. So this problem is solved for me now. Thanks for helping me, trying to find a solution.

I had same situation as described here, however I found that I had a simple issue with a hostname being specified in IIS on default web site under http binding. Once I removed the hostname, the error went away.