Windows 7 workstations.
Outlook 2010.
SBS/Exchange 2003

SBS ActiveDirectory domain is [MyDomain].local. E-mail domain & website are [MyDomain].com, hosted at Bluehost. I ran a batch of Windows updates this morning (a bit overdue, too many to list, so trying to go through them all to pinpoint the culprit is not an option; however, if a particular one is suspect, I could easily find out if it was installed last night).

Now users are receiving an auto-discover message in Outlook--to a URL at BlueHost, where the internet/website domain is hosted, not to the internal Exchange server, which hosts the internal ActiveDirectory domain and e-mail. This is on the four or five computers at this business.

Here is the message:

 Allow this website to configure [UserName]@[MyDomain].com server settings?
 https://autodiscover.bluehost.com/autodiscover/autodiscover.xml.

Why is Outlook assuming it should even look at BlueHost just because that is where the internet domain is hosted? Domain MX records point inbound e-mail to their McAfee hosted spam-filtering service which, in turn, forwards clean message to their in-house Exchange 2003 server. That is, BlueHost will have no idea where e-mail actually resides or even that McAfee forwards messages to the in-house Exchange server. The most BlueHost can do is identify the MX records. But, of course, I am not focused on BlueHost here; something in Outlook is deriving the URL above somewhere, even though it is completely irrlevant to the e-mail server configuration, which has already been fully configured for these clients.

The MAPI profiles are already configured to use their Exchange server. I can understand why, on first setup, the Outlook dialog offers to attempt to auto-setup the account (which has never worked in my world, and which I always forego in favor of manual setup), but why, for existing Outlook accounts, are they now getting this popup?

More importantly, what are the implications of users clicking Allow or Cancel? I certainly do not want Outlook even thinking it needs to be aware of anything on the internet domain since that has nothing to do with e-mail storage or retrieval on their local Exchange server.