Outlook anywhere authentication behavior when Outlook connecting through Internet (Domain Computer)

Hi Guys,

Please help if the behavior is normal with the configuration. I need to figure out why a domain computer when connecting from the Internet Outlook password saved to Credential Manager is cleared out/removed after reboot.

ExchangeVersion                    : 0.20 (15.0.0.0)
SSLOffloading                      : False
ExternalClientAuthenticationMethod : Negotiate
InternalClientAuthenticationMethod : Negotiate
IISAuthenticationMethods           : {Basic, Ntlm, Negotiate}
ExternalClientsRequireSsl          : True
InternalClientsRequireSsl          : True


DOMAIN Computer (Domain Account)

Outlook Connecting from INTERNET
- Saved Outlook account/password to Credential Manager all gets cleared out on every reboot. Need to enter again the password again to use Outlook.

Outlook Connecting from LAN
- Password is saved to Crendential Manager even after every reboot. No need to enter the password to use Outlook.


NON-DOMAIN Computer (Local Account)

Outlook Connecting from INTERNET
-Password is saved to Credential Manager even after every reboot. No need to enter again the password to use Outlook.

Outlook Connecting from LAN
-Password is saved to Credential Manager even after every reboot. No need to enter again the password to use Outlook.

Thanks and BR,

Uddan


  • Edited by Uddan Wednesday, March 25, 2015 1:10 AM
March 24th, 2015 12:15am

Hi Uddan,

It depends on which authentication types are you selected in outlook anywhere connection settings,

Exchange offers three authentication types for Outlook Anywhere:

Basic authentication: If you select this authentication type, Outlook will prompt for username and password while attempting a connection with Exchange.

NTLM authentication: If you select this authentication type, exchange does not prompt users for a user name and password. The current Windows user information on the client computer is supplied by the browser through a cryptographic exchange involving hashing with the Web server. If the authentication exchange initially fails to identify the user, the browser will prompt the user for a Windows user account user name and password. So, when Outlook is trying to connect to Exchange and if the machine is domain joined, there isnt a need to provide password.

Negotiate authentication: Enabled by default in Exchange 2013. This is a combination of Windows integrated authentication and Kerberos authentication. If we employ negotiate authentication, exchange will authenticate the client using NTLM authentication type and if unable to verify authenticity, will challenge the client to authenticate using a username and password.

I recommend you check your outlook anywhere settings with the following steps:

In Account Information> Account Settings > More Settings > Connection -> Exchange Proxy settings, you may see the authentication settings.

For increased security, we recommend that you select the NTLM Authentication.

Best regards,


Free Windows Admin Tool Kit Click here and download it now
March 26th, 2015 6:07am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics