Hi, Recently I had to do a restart to install some updates on the Exchange server. I restarted the server early in the morning before most users started work. The restart took place without any problems. During the day users started complaining about a pop up that kept coming up. The pop basically says that it is pointing to the autodiscover.xml file and asks the user to allow Outlook to connect if they trust the site. The exact message is - Allow this website to configure <email address> server settings? http://somesite.com//autodiscover/autodiscover.xml Your account was redirected to this website for settings. You should only allow settings from sources you know and trust Allow Cancel I asked users to select Allow. I have read up on Autodiscover and this is what Microsoft says (http://technet.microsoft.com/en-us/library/bb310764%28EXCHG.80%29.aspx)- "If you cannot use multiple Secure Sockets Layer (SSL) certificates for your Outlook Anywhere deployment, you can use Autodiscover redirection to redirect your Microsoft Office Outlook 2007 clients that are either not joined to your domain or do not have direct access to Active Directory." I haven't setup Exchange to use the Autodiscover redirection. Is this setup by default? Can I turn this off? All the users who saw this pop up (including myself) are on the domain and have direct access to one of three DCs. Should I be worried? Let me know if you need more info. Also please bear in mind that I am a newbie on Exchange. Thanks for reading.

Hi, This is not the correct behavior for the outlook on a domain joined machine. On domain joined machine outlook tries to get the SCP object from the AD for the CAS server which u can confirm using Get-ClientAccessServer yourCAS| FL AutoDiscoverServiceInternalUri You you must have something wrong with the CAS internal url. If outlook doesnt find it then it goes to other AutoDisocery Urls. Regards, Laeeq Qazi|Team Lead(Exchange + Sharepoint + BES + DynamicsCRM) www.HostingController.com

Hi Laeeq, Thanks for replying to my question. I agree that it is not the correct behaviour. What bothers me is that the pop-up is no longer showing. I ran the command and I get the correct uri. The uri on the pop up is actually different. Is there any checks I can do or look at any logs that will tell me why its looking at a different uri? I am also wondering if Outlook will start looking at other uri's if Outlook is still connected when the mail server is restarted? Do you think this could be the case? Regards.

Hi Laeeq, Thanks for replying to my question. I agree that it is not the correct behaviour. What bothers me is that the pop-up is no longer showing. I ran the command and I get the correct uri. The uri on the pop up is actually different. Is there any checks I can do or look at any logs that will tell me why its looking at a different uri? I am also wondering if Outlook will start looking at other uri's if Outlook is still connected when the mail server is restarted? Do you think this could be the case? Regards. I think AutoDiscover settings is not CAS server dependant in the sense that when CAS is down then outlook will look for other ADiscover URL. When you have this problem again then do check AutoDiscover settings in Outlook 2007 by going to the Outlook icon in the System Tray and select Test E-mail AutoConfiguration. Select the "AutoDisover" option, enter the email address and pwd and then test it. This is very nice feature if you want to check whether the AutoDiscover service still works as expected. Regards,Laeeq Qazi|Team Lead(Exchange + Sharepoint + BES + DynamicsCRM) www.HostingController.com

Have the outlook 2007 client patched with the latest update? For domain-joined client, SCP object is enough for them as Laeeq said. When looking up the AutoDiscover URL, there are the 5 methods in order that attempts to locate the Autodiscover service. There’s a possibility this could be coming from step 4 of the discovery process: 1. SCP object if domain attached 2. Attempt HTTPS against autodiscover.<smtpdomain> 3. Attempt HTTPS against <smtpdomain> 4. Look for redirect from HTTP of <smtpdomain> (This is where we’re the prompt is coming from) 5. Look for SRV Record through DNS By default, all the check will happen, which will delay the AutoDiscover when the clients stay in the domain. You can bypass the HTTP redirect check in the client machine (KB 948981), or do it via GPO Resources: Outlook Automatic Account Configuration Meeting requests with external from company recipients Allow websitte to configure (Similar case)James Luo TechNet Subscriber Support (http://technet.microsoft.com/en-us/subscriptions/ms788697.aspx) If you have any feedback on our support, please contact tngfb@microsoft.com