RE: Outlook Anywhere - Externally
Hi James, If you want to use Integrated auth on the RPC/HTTP site, you'll need to configure the firewall to use Kerberos Constrained Delegation, since if you're using FBA at the firewall's Web listener you can't delegated NTLM, and fallback to basic on that listener will only support basic delegation. Check out: http://technet.microsoft.com/en-us/library/bb794858.aspx HTH, Tom TOM SHINDER | Sr. Consultant/Technical Writer 206.443.1117 | shin...@prowesscorp.com 5701 Sixth Avenue South | Seattle, WA 98108 PROWESS | WWW.PROWESSCORP.COM http://www.prowesscorp.com/ http://www.windows.com/ From: James Hill [mailto:james.h...@superamart.com.au] Sent: Thursday, June 04, 2009 12:16 AM To: MS-Exchange Admin Issues Subject: RE: Outlook Anywhere - Externally Ok. We have:- Two DC's running 2008 with SP2 in the same site as the exchange servers. Two exchange servers running 2007 sp1 update rollup 7. Exchange1 - CAS, Hub Transport Exchange2 - Mailbox using LCR. And as previously mentioned ISA is sitting in front of those for external access. Hope that helps! From: Joseph L. Casale [mailto:jcas...@activenetwerx.com] Sent: Thursday, 4 June 2009 2:33 PM To: MS-Exchange Admin Issues Subject: RE: Outlook Anywhere - Externally So how many DC's (GC's) etc as well, how many exchange server's (what roles are split on what physically different boxes etc) J From: James Hill [mailto:james.h...@superamart.com.au] Sent: Wednesday, June 03, 2009 8:48 PM To: MS-Exchange Admin Issues Subject: RE: Outlook Anywhere - Externally Windows Server 2008 and Exchange 2007 SP1 Update Rollup 7. From: Joseph L. Casale [mailto:jcas...@activenetwerx.com] Sent: Thursday, 4 June 2009 12:32 PM To: MS-Exchange Admin Issues Subject: RE: Outlook Anywhere - Externally Can you describe your topology like OS and Exchange SP/RU level? I sort of recently tore my hair out over this so I may have some ideas. Rpcping was the tool that led me to discover the fix (which was officially not required but required ;/). jlc From: James Hill [mailto:james.h...@superamart.com.au] Sent: Tuesday, June 02, 2009 3:13 AM To: MS-Exchange Admin Issues Subject: Outlook Anywhere - Externally I am using Outlook Autodiscover internally with no problems but I haven't had any luck getting Outlook Anywhere working externally. Running the test at https://www.testexchangeconnectivity.com fails at the last test:- Testing Http Authentication Methods for URL https://mydomain.com/rpc/rpcproxy.dll Http Authentication Test failed Tell me more about this issue and how to resolve it http://go.microsoft.com/fwlink/?LinkId=133210l=env=ExRCA.1id=8b5d0ae 9-fa46-498f-8d90-94e9195388c6 Additional Details Did not find all required authentication methods Methods Found: Basic Methods Required: NTLM I read through the article provided and Running Get-OutlookAnywhere on the CAS lists NTLM as being configured. NTLM is also set as the auth method on the Outlook client. I have ISA and an ASA sitting in front of the CAS but I don't think they are causing the issue. Not sure where else I should be looking? James. ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja~image002.pngimage003.png
RE: Outlook Anywhere - Externally
Can you describe your topology like OS and Exchange SP/RU level? I sort of recently tore my hair out over this so I may have some ideas. Rpcping was the tool that led me to discover the fix (which was officially not required but required ;/). jlc From: James Hill [mailto:james.h...@superamart.com.au] Sent: Tuesday, June 02, 2009 3:13 AM To: MS-Exchange Admin Issues Subject: Outlook Anywhere - Externally I am using Outlook Autodiscover internally with no problems but I haven't had any luck getting Outlook Anywhere working externally. Running the test at https://www.testexchangeconnectivity.com fails at the last test:- Testing Http Authentication Methods for URL https://mydomain.com/rpc/rpcproxy.dll Http Authentication Test failed [https://www.testexchangeconnectivity.com/Images/GreenRtArrow.jpg] Tell me more about this issue and how to resolve ithttp://go.microsoft.com/fwlink/?LinkId=133210l=env=ExRCA.1id=8b5d0ae9-fa46-498f-8d90-94e9195388c6 Additional Details Did not find all required authentication methods Methods Found: Basic Methods Required: NTLM I read through the article provided and Running Get-OutlookAnywhere on the CAS lists NTLM as being configured. NTLM is also set as the auth method on the Outlook client. I have ISA and an ASA sitting in front of the CAS but I don't think they are causing the issue. Not sure where else I should be looking? James. ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja~inline: image002.png
RE: Outlook Anywhere - Externally
Windows Server 2008 and Exchange 2007 SP1 Update Rollup 7. From: Joseph L. Casale [mailto:jcas...@activenetwerx.com] Sent: Thursday, 4 June 2009 12:32 PM To: MS-Exchange Admin Issues Subject: RE: Outlook Anywhere - Externally Can you describe your topology like OS and Exchange SP/RU level? I sort of recently tore my hair out over this so I may have some ideas. Rpcping was the tool that led me to discover the fix (which was officially not required but required ;/). jlc From: James Hill [mailto:james.h...@superamart.com.au] Sent: Tuesday, June 02, 2009 3:13 AM To: MS-Exchange Admin Issues Subject: Outlook Anywhere - Externally I am using Outlook Autodiscover internally with no problems but I haven't had any luck getting Outlook Anywhere working externally. Running the test at https://www.testexchangeconnectivity.com fails at the last test:- Testing Http Authentication Methods for URL https://mydomain.com/rpc/rpcproxy.dll Http Authentication Test failed [cid:image001.png@01C9E512.B6475530] Tell me more about this issue and how to resolve ithttp://go.microsoft.com/fwlink/?LinkId=133210l=env=ExRCA.1id=8b5d0ae9-fa46-498f-8d90-94e9195388c6 Additional Details Did not find all required authentication methods Methods Found: Basic Methods Required: NTLM I read through the article provided and Running Get-OutlookAnywhere on the CAS lists NTLM as being configured. NTLM is also set as the auth method on the Outlook client. I have ISA and an ASA sitting in front of the CAS but I don't think they are causing the issue. Not sure where else I should be looking? James. ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja~inline: image001.png
RE: Outlook Anywhere - Externally
Ok. We have:- Two DC's running 2008 with SP2 in the same site as the exchange servers. Two exchange servers running 2007 sp1 update rollup 7. Exchange1 - CAS, Hub Transport Exchange2 - Mailbox using LCR. And as previously mentioned ISA is sitting in front of those for external access. Hope that helps! From: Joseph L. Casale [mailto:jcas...@activenetwerx.com] Sent: Thursday, 4 June 2009 2:33 PM To: MS-Exchange Admin Issues Subject: RE: Outlook Anywhere - Externally So how many DC's (GC's) etc as well, how many exchange server's (what roles are split on what physically different boxes etc) :) From: James Hill [mailto:james.h...@superamart.com.au] Sent: Wednesday, June 03, 2009 8:48 PM To: MS-Exchange Admin Issues Subject: RE: Outlook Anywhere - Externally Windows Server 2008 and Exchange 2007 SP1 Update Rollup 7. From: Joseph L. Casale [mailto:jcas...@activenetwerx.com] Sent: Thursday, 4 June 2009 12:32 PM To: MS-Exchange Admin Issues Subject: RE: Outlook Anywhere - Externally Can you describe your topology like OS and Exchange SP/RU level? I sort of recently tore my hair out over this so I may have some ideas. Rpcping was the tool that led me to discover the fix (which was officially not required but required ;/). jlc From: James Hill [mailto:james.h...@superamart.com.au] Sent: Tuesday, June 02, 2009 3:13 AM To: MS-Exchange Admin Issues Subject: Outlook Anywhere - Externally I am using Outlook Autodiscover internally with no problems but I haven't had any luck getting Outlook Anywhere working externally. Running the test at https://www.testexchangeconnectivity.com fails at the last test:- Testing Http Authentication Methods for URL https://mydomain.com/rpc/rpcproxy.dll Http Authentication Test failed [cid:image001.png@01C9E527.63AE91C0] Tell me more about this issue and how to resolve ithttp://go.microsoft.com/fwlink/?LinkId=133210l=env=ExRCA.1id=8b5d0ae9-fa46-498f-8d90-94e9195388c6 Additional Details Did not find all required authentication methods Methods Found: Basic Methods Required: NTLM I read through the article provided and Running Get-OutlookAnywhere on the CAS lists NTLM as being configured. NTLM is also set as the auth method on the Outlook client. I have ISA and an ASA sitting in front of the CAS but I don't think they are causing the issue. Not sure where else I should be looking? James. ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja~inline: image001.png
