Outlook Anywhere in Exchange 2007 configuration
Hi
In our organisation we have 2 transport hub servers (fsuhub01, fsuhub02) which also have the client access role and a mailbox server (fsumbx01). They all have Exchange 2007 SP3 and the windows platforms are Windows 2003 R2 64 Bit.
I am trying to install Outlook Anywhere alias RPC over HTTP.
Have installed the rpc over http service onto fsuhub02 and used exchange system manager to run the Outlook Anywhere wizard to enable it. So far so good.
Because we have a dual ISA server configuration, one ISA server in the DMZ and the outer on the trusted network.
I have created a firewall Exchange publishing rule on the DMZ located ISA server, setup the listener for https 443 and allowed traffic to flow from external to internal back to the fsuhub02 server which has the \RPC folder under default website.
I tested the publishing rule and it tests OK with a nice green light.
Now I try to configure an external computer using Outlook 2007 and this is where I strike the problems. I know how to configure the http proxy part of it but not sure what to insert under exchange server name. I know it has to resolve externally via
DNS but not sure what internal system I should resolve it to.
Has anyone got any bright ideas to help me here?
This is my first time trying to setup Outlook Anywhere.
Regards
ipnotech
March 27th, 2012 1:08am
Hi,
Do you load balance these servers using WNLB or in any other way?
Or where are you forwarding the traffic?
The external computer, is it domain joined?
Also try your setup using: https://www.testexchangeconnectivity.com/ and post the result in here
Here's an article for publishing Outlook Anywhere: http://www.isaserver.org/tutorials/Publishing-Exchange-2007-OWA-Exchange-ActiveSync-RPCHTTP-using-2006-ISA-Firewall-Part1.html
Jonas Andersson | Microsoft Community Contributor Award 2011 | MCITP: EMA 2007/2010 | Blog:
http://www.testlabs.se/blog | Follow me on twitter:
jonand82
Free Windows Admin Tool Kit Click here and download it now
March 27th, 2012 2:57pm
Try the external published name of OWA as it's just a sub directory under there. i.e mail.contoso.comSukh
March 27th, 2012 7:57pm
The external computer is just a workgroup windows 7 laptop for testing.
I just want to add more thing to my post.
When I try to access (on the server that has rpc over https) https://localhost/rpc, apart the certificate error I get because localhost name is not in my digital certificate, I get a logon dialog, supply correct credentials, but it keeps looping and not
accepting the administrator's username and password. After that(3 times) I get an access denied response.
Am I supposed to access this folder(RPC) for rpc over https to work properly?
In IIS6 admin the rpc and rpcwithcert folders (under default web site) are there.
I will be posting my results later with testexchangeconnectivity.com
Thanks and regards
Ipnotech
Free Windows Admin Tool Kit Click here and download it now
March 28th, 2012 1:23am
if you're using internal PKI solution, make sure that the client have the root certificate installed and intermediate if those are used
Check which authentication mecanism you are using and verify so that you are using the same on both Exchange and ISA/TMG
For testing, use a normal Domino User account
Ok, let's wait for your result :)Jonas Andersson | Microsoft Community Contributor Award 2011 | MCITP: EMA 2007/2010 | Blog:
http://www.testlabs.se/blog | Follow me on twitter:
jonand82
March 28th, 2012 5:27am