i can not see mail tips when i connect from outside the network looks like an auto discover problem - i found the below from a Microsoft article Is the problem limited to Outlook clients? If MailTips in Outlook Web App work as expected, but Outlook 2010 is not showing MailTips, the problem might be related to Autodiscover. Outlook uses Autodiscover to find the URL for Exchange Web Services; EWS is used to retrieve MailTips. If Autodiscover isn't working, or if the EWS URL provided by Autodiscover is incorrect, then Outlook will not be able to contact the MailTips web service. and when i ran Test-OutlookWebServices -identity:user@domain.com | ft * -AutoSize -Wrap i got this error 1104 Error The certificate for the URL https://server.domain/autodiscover/autodiscover.xml is incorrect. ForSSL to work, the certificate needs to have a subject of server.domain, but the subject that was found is mail.domain Consider correcting service discovery, or installing a correct SSL certificate. also - i have a 3rd party cert working fine my question is i still have the self signed cert on the cas servers and also it is on the iis - do i need to remove that will it solve the issue this is the command i ran to configure the autodiscover Set-WebServicesVirtualDirectory -identity "aljs022\EWS (Default Web Site)" -externalurl https://mail.sasref.com.sa/EWS/Exchange.asmx -BasicAuthentication:$True i have 2 cas/hub servers aljs022 and aljs023 so i ran the same command from the same server twice once with aljs022 and the other with aljs023 i have also a cas array and the 3rd party cert is having the SAN for it

Leave the self-signed certificate enabled for SMTP only. Enable all services (including SMTP as well) to the third-party certificate. Is your third-party certificate a SAN certificate with the right hostnames in it?Ed Crowley MVP "There are seldom good technological solutions to behavioral problems."

opps i already removed the self signed cert - i believe the 3rd party is enough and i though it might be the reason for the error - it is not because when i ran the command again the same cert error is there hope removing the self-signed cert wont harm regarding my cert SAN DNS Name=mail.sasref.com.sa DNS Name=aljs-cas.intra.sasref.com.sa DNS Name=autodiscover.sasref.com.sa DNS Name=legacy.sasref.com.sa

Running New-ExchangeCertificate with no parameters should re-create the self-signed certificate. You will need this certificate if you have more than hub transport server. Make sure you have all the virtual directories properly configured with the right URLs containing hostnames that are in the certificate. See Set-ClientAccessServer -AutoDiscoverServiceExternalUri. Check Set-OutlookAnywhere -ExternalHostName. Also see the -ExternalUrl and -InternalUrl properties of Set-OwaVirtualDirecotry, Set-WebServicesVirtualDirectory, Set-AutodiscoverVirtualDirectory, Set-ActiveSyncVirtualDirectory, Set-EcpVirtualDirectory, and Set-OabVirtualDirectory.Ed Crowley MVP "There are seldom good technological solutions to behavioral problems."

i can not create a new cert with no parameters it will not allow for example i have to define the exchange configuration and then the certificate configuration see i mentioned an example above in my post on how i configured the auto discovery can you please explain more on how to check all these commands u sent - i need to know how can i check if these are configured correctly

Hello, When you use Test E-mail Autoconfiguration to test AutoDiscover, what error did you get? Thanks, Evan Evan Liu TechNet Community Support

you mean this cmdlet Test-OutlookWebServices

No, test with Outlook (choose use autodiscover). Thanks, Evan Evan Liu TechNet Community Support

sometimes it fails but at the button i shows success also i want to note that users can use the OAW and web app and active sync normally only the mail tips shows error "MailTips could not be retrieved". also running the remote connectivity alyzer i get this Attempting to resolve the host name blabla.com in DNS The host name couldn't be resolved. - so do i need to create this in isp dns also Attempting to resolve the host name autodiscoverblabla.com in DNS The host name resolved successfully. 

Hello, From your picture, I think your autodiscover works well. When you use that same user to configure Mailtip in OWA, will it work or not? Thanks, Evan Evan Liu TechNet Community Support

Uncheck the two Guessmart checkboxes when running that test.Ed Crowley MVP "There are seldom good technological solutions to behavioral problems."

To the contrary, the pictures do not show anything from Autodiscover.Ed Crowley MVP "There are seldom good technological solutions to behavioral problems."

thank you Ed i think i should run this test from outside the network as well - over the internet because as mentioned earlier i only face this problem when i am connecting from outside within my network it is workig just fine - so do you agree that i should run the test from outside also when i run the remote connectivity analyzer i get an error that is is not able to resolve my domain name 123.com wail it can resolve my mail mx record on the internet - mail.123.com i also want to mention that i have some issues from the ISP side - could this also be a reason for this problem for example when i shifted my mail link to the new exchange HUB/CAS IP and did the firewall changes my OWA was not opening from different places over the internet, hence different countries and locations (even we waited for 24 hours to populate the changes) - we called them and then it was fixed

You know, that's the kind of information that would be useful for us to know at the beginning of the thread. You should use http://exrca.com to test from the outside. Yes, your ISP could be contributing to the problem, as could your firewall, any reverse web proxy you might be using, your DNS entries or anything like that.Ed Crowley MVP "There are seldom good technological solutions to behavioral problems."

Any updates on this issue? What is the result when you test from outside? Thanks, EvanEvan Liu TechNet Community Support

thank you Ed / Evan actually i am checking with my network guys and the ISP 1st to make sure everything is ok - it will take a wail

thank you Ed / Evan actually i am checking with my network guys and the ISP 1st to make sure everything is ok - it will take a wail