The important one here is the permissions and authentication options on the AutoDiscover virtual directory, Check the *Auth* output
(This is from my blog post a few weeks ago: http://theessentialexchange.com/blogs/michael/archive/2014/09/09/reporting-on-client-access-server-configurations.aspx) $r = Get-AutodiscoverVirtualDirectory -server $server if( -not [String]::IsNullOrEmpty( $r.InternalUrl ) ) { Write-Warning "InternalUrl should be empty, instead is $($r.InternalUrl)" } if( -not [String]::IsNullOrEmpty( $r.ExternalUrl ) ) { Write-Warning "ExternalUrl should be empty, instead is $($r.ExternalUrl)" } $r | fl Server, Name, Identity, MetabasePath, Path, AdminDisplayVersion, ExchangeVersion, InternalUrl, InternalAuth*, ExternalUrl, ExternalAuth*, *Authentication, ExtendedPro* -----Original Message----- From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On Behalf Of Dave Lum Sent: Thursday, October 2, 2014 10:40 AM To: exchange@lists.myitforum.com Subject: Re: [Exchange] New blog post: Testing #MSExchange Autodiscover with #PowerShell My results of your script: Exception calling "UploadString" with "2" argument(s): "The remote server returned an error: (401) Unauthorized." Comparing my CAS server permissions with this list: http://blogs.technet.com/b/jribeiro/archive/2010/09/27/default-settings-for-exchange-related-virtual-directories-in-exchange-server-2010.aspx For /ECP and /OWA directories I also have Windows Authentication enabled, and for /RPC I have only basic an NOT Windows. Is there any reason I shouldn't I change these to match that list? Dave > New blog post: Testing #MSExchange Autodiscover with #PowerShell > http://theessentialexchange.com/blogs/michael/archive/2014/10/01/testi > ng-exchange-autodiscover-with-powershell.aspx > > >