Hi, I hope you can help me with an autodiscover problem. We have an exchange server with the roles mailbox,cas,hub &unified. I works very well. On the default website with owa we installed an thirth pary ssl to connect from extern to the owa, but this gives a problem with the autodiscover. When a outlook client starts up they get an security message. To resolve this i've following the autodiscover whitepaper scenario 3 (2 single ssl) I create an autodiscover website, install on this an internal ssl. But when ik change the SCP to https://autodiscover.office.domain.eu/autodiscover/autodiscover.xml en test it with the powershell command test-outlookwebservices i get the following result: Id : 1003Type : InformationMessage : About to test AutoDiscover with the e-mail address postmaster@domain. eu. Id : 1007Type : InformationMessage : Testing server mailsrv.office.domain.eu with the published name ht tps://mailsrv.office.domain.eu/ews/exchange.asmx & . Id : 1019Type : InformationMessage : Found a valid AutoDiscover service connection point. The AutoDiscover URL on this object is https://autodiscover.office.domain.eu/autodiscover/autodiscover .xml. Id : 1013Type : ErrorMessage : When contacting https://autodiscover.office.domain.eu/autodiscover/autodiscover.xml re ceived the error The remote server returned an error: (401) Unauthori zed. Id : 1006Type : ErrorMessage : The Autodiscover service could not be contacted. When i turn back the autodiscover SCP to the default website te test succeed. On al client i can access https://autodiscover.office.domain.eu/autodiscover/autodiscover.xml Hopefully anyone can help me with this problem. Thanks.

Hi, Have a look at this forum post on MsExchange.org, the issue you have is that permissions are not correctly set. This can only fixed by using AdsiEdit. http://forums.msexchange.org/Exchange_2007_Autodiscovery_problems/m_1800457975/tm.htm Regards, Johan blog: www.johanveldhuis.nl

Hello Johan, Thanks for your answer. I've check the permission and they are correct. The checkbox was enabled. Is it an good idea to delete and create an new OAB?? With the migration from exchange 2003 to 2007 was the oab moved to exchange 2007 Regards, Halast

Halast, You could try it and have a look if it works. Regards, Johan

Hi Per your description, i summary the issue as follows: Issue description: when outlook access byoutlook anywherefrom external network, it will reports "securty warnning"; Troubleshooting steps: (1)pls run " get-exchangecertification | select "certificatedomains","isselfsigned","services","subject" ,then post it here; pls make sure one of any certifications which ismember of your production environmenthas included "autodiscover" server's FQDN; (2)pls run "get-autodiscovervirtualdirectory", then post it here; pls check its authenticaiton methods; hope it helps -jack

I disable the loopback on the windows 2003 server and i update the OAB. When i tested the autodiscover test works now and the clients starts without message (almost) But i have now only one problem, the urls for the autodiscover, ews, and um changes sometimes. Do anyone have an idea how i can correct this?? Is it possible that for each services two internal urls are configured??

pls read the link: http://support.microsoft.com/kb/940726/en-us -jack

I solved the problem to remove all virtual directories in the default website wich i created under the new website. After the AD replication it works fine now. Johan and Jack many thanks for your help