We have recently migrated over from 2007 to 2013. We were having problems with it asking for user credentials so we changed some certificate info and now whenever we try to setup a mailbox it says that Exchange is offline. The server is up and the store is running.   

Hello,

Make sure that you have all the required names in the certificate. Are you accessing the outlook over internet? Then the best tool would be www.testconnectivity.microsoft.com

Email works fine over OWA and with phone connected and on computers that already have a mailbox setup. Just on computers that are newly being setup. 

Can you check outlook connectivity test using www.testconnectivity.microsoft.com for the new account

Attempting to resolve the host name autodiscover.gccisd.net in DNS.
  The host name resolved successfully.
 
Additional Details
Testing TCP port 443 on host autodiscover.gccisd.net to ensure it's listening and open.
  The port was opened successfully.
 
Additional Details
Testing the SSL certificate to make sure it's valid.
  The certificate passed all validation requirements.
 
Additional Details
 
Test Steps
 
The Microsoft Connectivity Analyzer is attempting to obtain the SSL certificate from remote server autodiscover.gccisd.net on port 443.
  The Microsoft Connectivity Analyzer successfully obtained the remote SSL certificate.
 
Additional Details
Validating the certificate name.
  The certificate name was validated successfully.
 
Additional Details
Certificate trust is being validated.
  The certificate is trusted and all certificates are present in the chain.
 
Test Steps
Testing the certificate date to confirm the certificate is valid.
  Date validation passed. The certificate hasn't expired.
 
Additional Details
Checking the IIS configuration for client certificate authentication.
  Client certificate authentication wasn't detected.
 
Additional Details
Attempting to send an Autodiscover POST request to potential Autodiscover URLs.
  Autodiscover settings weren't obtained when the Autodiscover POST request was sent.
 
Additional Details
 
Elapsed Time: 400 ms.
 
Test Steps
 
The Microsoft Connectivity Analyzer is attempting to retrieve an XML Autodiscover response from URL https://autodiscover.gccisd.net:443/Autodiscover/Autodiscover.xml for user kevin.billings@gccisd.net.
  The Microsoft Connectivity Analyzer failed to obtain an Autodiscover XML response.
 
Additional Details

Hi,

Can you make sure that the default settings of IIS virtual directories are set correctly? https://technet.microsoft.com/en-us/library/gg247612(v=exchg.150).aspx

I guess, you are getting  https://autodiscover.gccisd.net:443/Autodiscover/Autodiscover.xml  when you run the cmdlet

Get-ClientAccessServer | fl

It does not have the port 443 at the end when I run the cmd

That's fine..But make sure that the virtual directories are assigned correctly

yes they are. i think it might be a certificate issue.

Hi,

The test results you shared doesn't shows any certificate issues. I suggest you to check autodiscover virtual directory settings (Frontend and Backend) only

Checked with IIS and don't see ant discrepancies?

Hi,

What is your outlook version?

Microsoft released the patch to solve outlook connectivity issue when mailbox moved to exchange 2013.

To resolve this issue, please apply the latest Outlook update:

For more detailed information, please refer to official article:

https://support.microsoft.com/en-us/kb/2934750?wa=wsignin1.0

If it doesnt work, please run the following command to check your certificate settings and autodiscover service in Exchange server:

Get-ExchangeCertificate | fl 

Get-ClientAccessServer | FL Identity,AutodiscoverServiceInternalUri

Best Regards,

David 

[PS] C:\Windows\system32>Get-ExchangeCertificate | fl


AccessRules        :
CertificateDomains : {x13-2, x13-2.gccisd.local}
HasPrivateKey      : True
IsSelfSigned       : True
Issuer             : CN=x13-2
NotAfter           : 6/18/2020 5:03:09 PM
NotBefore          : 6/18/2015 5:03:09 PM
PublicKeySize      : 2048
RootCAType         : Registry
SerialNumber       : 5392AB7E8E693CB547EF314223DB316D
Services           : IMAP, POP, IIS, SMTP
Status             : Valid
Subject            : CN=x13-2
Thumbprint         : 0DB3762D9ABAAB8FFA2B00E835E89D3CE18CCF77

AccessRules        :
CertificateDomains : {}
HasPrivateKey      : True
IsSelfSigned       : True
Issuer             : CN=Microsoft Exchange Server Auth Certificate
NotAfter           : 5/22/2020 12:30:28 PM
NotBefore          : 6/18/2015 12:30:28 PM
PublicKeySize      : 2048
RootCAType         : None
SerialNumber       : 22D9F01ADBE276AA4735840C1D53DC52
Services           : SMTP
Status             : Valid
Subject            : CN=Microsoft Exchange Server Auth Certificate
Thumbprint         : 4E8D03644CD60DB4BA2CE24DB7034A9A921BAD52



[PS] C:\Windows\system32>Get-ClientAccessServer | FL Identity,AutodiscoverServiceInternalUri


Identity                       : XCAS
AutoDiscoverServiceInternalUri : https://xcas.gccisd.net/Autodiscover/Autodiscover.xml

Identity                       : X13-CAS
AutoDiscoverServiceInternalUri : https://autodiscover.gccisd.net/autodiscover/autodiscover.xml



[PS] C:\Windows\system32>

Hi,

We can try to re-create a new profile to check if the issue persists on the problematic client side.

And uncheck the below highlight option.

Regards,

David 

Still did not help

I get to searching for a my name and then it stops and says it cannot connect to server, But OWA is still working. It is just on setting up new mailbox. 

Hi,

I have noticed the results in your post.

Identity                       : XCAS

AutoDiscoverServiceInternalUri : https://xcas.gccisd.net/Autodiscover/Autodiscover.xml

Identity                       : X13-CAS
AutoDiscoverServiceInternalUri : https://autodiscover.gccisd.net/autodiscover/autodiscover.xml

But on your certificates I can't find related name.

So please add these above names into your certificates.

Regards,

David

• Edited by David Wang_Microsoft contingent staff 22 hours 4 minutes ago