Michael, Apologise for the delayed response as I could not get a change control approved for sunday. :(
I ran the following commands to set the value back to null *Set-OutlookProvider EXPR -Server $null -CertPrincipalName $null* *Set-OutlookProvider WEB -Server $null -CertPrincipalName $null* *Report as requested below.* Attempting the Autodiscover and Exchange ActiveSync test (if requested). Testing of Autodiscover for Exchange ActiveSync failed. Test Steps Attempting each method of contacting the Autodiscover service. The Autodiscover service couldn't be contacted successfully by any method. Test Steps Attempting to test potential Autodiscover URL https://abc.co.uk/AutoDiscover/AutoDiscover.xml Testing of this potential Autodiscover URL failed. Test Steps Attempting to resolve the host name abc.co.uk in DNS. The host name resolved successfully. Additional Details IP addresses returned: 7.7.7.1 Testing TCP port 443 on host abc.co.uk to ensure it's listening and open. The port was opened successfully. Testing the SSL certificate to make sure it's valid. The SSL certificate failed one or more certificate validation checks. Test Steps ExRCA is attempting to obtain the SSL certificate from remote server abc.co.uk on port 443. ExRCA successfully obtained the remote SSL certificate. Additional Details Remote Certificate Subject: CN=*.websitewelcome.com, OU=Comodo PremiumSSL Wildcard, OU=websitewelcome.com, O=websitewelcome.com, STREET=1333 Stemmons Freeway, STREET=Suite 110, L=Dallas, S=TX, PostalCode=75207, C=US, Issuer: CN=UTN-USERFirst-Hardware, OU=http://www.usertrust.com, O=The USERTRUST Network, L=Salt Lake City, S=UT, C=US. Validating the certificate name. Certificate name validation failed. Tell me more about this issue and how to resolve it Additional Details Host name abc.co.uk doesn't match any name found on the server certificate CN=*.websitewelcome.com, OU=Comodo PremiumSSL Wildcard, OU= websitewelcome.com, O=websitewelcome.com, STREET=1333 Stemmons Freeway, STREET=Suite 110, L=Dallas, S=TX, PostalCode=75207, C=US. Attempting to test potential Autodiscover URL https://autodiscover.abc.co.uk/AutoDiscover/AutoDiscover.xml Testing of this potential Autodiscover URL failed. Test Steps Attempting to resolve the host name autodiscover.abc.co.uk in DNS. The host name resolved successfully. Additional Details IP addresses returned: 2.4.4.9 Testing TCP port 443 on host autodiscover.abc.co.uk to ensure it's listening and open. The port was opened successfully. Testing the SSL certificate to make sure it's valid. The certificate passed all validation requirements. Test Steps ExRCA is attempting to obtain the SSL certificate from remote server autodiscover.abc.co.uk on port 443. ExRCA successfully obtained the remote SSL certificate. Additional Details Remote Certificate Subject: CN=OUTLOOK.abc.co.uk, OU="Member, VeriSign Trust Network", OU=Authenticated by VeriSign, OU=Terms of use at www.verisign.co.uk/rpa (c)05, OU=IT, O=Louis Berger (UK) LTD, L=Hammersmith, S=London, C=GB, Issuer: CN=VeriSign Class 3 Secure Server CA - G3, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US. Validating the certificate name. The certificate name was validated successfully. Additional Details Host name autodiscover.abc.co.uk was found in the Certificate Subject Alternative Name entry. Certificate trust is being validated. The certificate is trusted and all certificates are present in the chain. Test Steps ExRCA is attempting to build certificate chains for certificate CN= OUTLOOK.abc.co.uk, OU="Member, VeriSign Trust Network", OU=Authenticated by VeriSign, OU=Terms of use at www.verisign.co.uk/rpa (c)05, OU=IT, O=ABC (UK) LTD, L=Hammersmith, S=London, C=GB. One or more certificate chains were constructed successfully. Additional Details A total of 1 chains were built. The highest quality chain ends in root certificate CN=VeriSign Class 3 Public Primary Certification Authority - G5, OU="(c) 2006 VeriSign, Inc. - For authorized use only", OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US. Analyzing the certificate chains for compatibility problems with versions of Windows. Potential compatibility problems were identified with some versions of Windows. Additional Details ExRCA can only validate the certificate chain using the Root Certificate Update functionality from Windows Update. Your certificate may not be trusted on Windows if the "Update Root Certificates" feature isn't enabled. Testing the certificate date to confirm the certificate is valid. Date validation passed. The certificate hasn't expired. Additional Details The certificate is valid. NotBefore = 11/16/2011 12:00:00 AM, NotAfter = 11/16/2017 11:59:59 PM Checking the IIS configuration for client certificate authentication. Client certificate authentication wasn't detected. Additional Details Accept/Require Client Certificates isn't configured. Attempting to send an Autodiscover POST request to potential Autodiscover URLs. Autodiscover settings weren't obtained when the Autodiscover POST request was sent. Test Steps ExRCA is attempting to retrieve an XML Autodiscover response from URL https://autodiscover.abc.co.uk/AutoDiscover/AutoDiscover.xml for user test.u...@abc.co.uk. ExRCA failed to obtain an Autodiscover XML response. Additional Details None of the expected XML elements were found in the XML response. Attempting to contact the Autodiscover service using the HTTP redirect method. The attempt to contact Autodiscover using the HTTP Redirect method failed. Test Steps Attempting to resolve the host name autodiscover.abc.co.uk in DNS. The host name resolved successfully. Additional Details IP addresses returned: 2.4.4.9 Testing TCP port 80 on host autodiscover.abc.co.uk to ensure it's listening and open. The specified port is either blocked, not listening, or not producing the expected response. Tell me more about this issue and how to resolve it Additional Details A network error occurred while communicating with the remote host. Attempting to contact the Autodiscover service using the DNS SRV redirect method. ExRCA failed to contact the Autodiscover service using the DNS SRV redirect method. Test Steps Attempting to locate SRV record _autodiscover._tcp.abc.co.uk in DNS. The Autodiscover SRV record wasn't found in DNS. Tell me more about this issue and how to resolve it cheers Andy On 22 November 2011 09:42, helpdesk UK <uk.helpd...@gmail.com> wrote: > Apologies for delayed response. > > You are correct that our cert in question is not a wild card cert. But it > did not work with value $null either hence the try to be honest. > > I will run the report once I have set the values back to $null and post > the results. I need to agree with office staff before making any changes on > the system while in production. > > cheers > Andy > > > On 21 November 2011 01:34, Michael B. Smith <mich...@smithcons.com> wrote: > >> You need to set the outlookproviders back to $null. That’s only for >> wildcard certificates.**** >> >> ** ** >> >> Was there anything in the document returned? It would be a whole lot >> easier if you went ahead and posted the full set of responses from ExRCA. >> **** >> >> ** ** >> >> Regards,**** >> >> ** ** >> >> Michael B. Smith**** >> >> Consultant and Exchange MVP**** >> >> http://TheEssentialExchange.com**** >> >> ** ** >> >> *From:* helpdesk UK [mailto:uk.helpd...@gmail.com] >> *Sent:* Saturday, November 19, 2011 10:35 AM >> *To:* MS-Exchange Admin Issues >> *Subject:* Outlook anywhere - Exchange 2010 help**** >> >> ** ** >> >> A brief summary of the problem.....**** >> >> **** >> >> Internal names >> ============== >> abc.local ( AD Domain ) >> abc-cas-01.abc.local ( FQDN )**** >> >> **** >> >> External Names >> ============== >> abc.co.uk >> outlook.abc.co.uk A ( External ip = 12.12.12.12 ) >> autodiscover.abc.co.uk A ( External ip = 12.12.12.12 )**** >> >> **** >> >> user = t...@abc.co.uk**** >> >> **** >> >> SAN certificate from Verisign ( covers the following names ) we tried >> various combinations no joy !!! >> ============================= >> outlook.abc.co.uk ( Common name ) >> abc.local >> abc-cas-01.abc.local >> abc.co.uk >> autodiscover.abc.co.uk**** >> >> >> I am trying to configure Outlook Anywhere on a single Exchange 2010 >> server. Outlook keeps prompting for user name password....**** >> >> **** >> >> Went online and ran a test with help off >> https://www.testexchangeconnectivity.com**** >> >> **** >> >> One of the errors I noticed was pointing towards.... >> https://abc.co.uk/AutoDiscover/AutoDiscover.xml**** >> >> **** >> >> The above URL is not correct as the website of the company abc.co.uk is >> hosted externally on a server and**** >> >> abc.co.uk >> www.abc.co.uk**** >> >> **** >> >> the above names point to a different ip address entirely so not sure why >> it was looking for this URL.**** >> >> **** >> >> Than it tries the correct url**** >> >> https://autodiscover.abc.co.uk/AutoDiscover/AutoDiscover.xml**** >> >> ===================================================================== >> ExRCA is attempting to retrieve an XML Autodiscover response from URL >> https://autodiscover.abc.co.uk/AutoDiscover/AutoDiscover.xml for user >> t...@abc.co.uk. >> ExRCA failed to obtain an Autodiscover XML response. >> Additional Details >> None of the expected XML elements were found in the XML response. >> =====================================================================**** >> >> Than it tries.......... Attempting to contact the Autodiscover service >> using the HTTP redirect method.**** >> >> **** >> >> It fails as the ASA firewall does not have port 80 open and it does not >> need it either ????**** >> >> **** >> >> So I than configured the settings below to see if it makes any difference >> but no joy. Initially the Outlook Provider was configured with no values >> i.e. null an than I configured the settings below. **** >> >> If I run get-outlookprovider now it does show the settings below. **** >> >> **** >> >> Set-OutlookProvider EXPR -Server $null -CertPrincipalName msstd: >> outlook.abc.co.uk >> Set-OutlookProvider WEB -Server $null -CertPrincipalName msstd: >> outlook.abc.co.uk**** >> >> **** >> >> I did run a iisreset after applying the above commands.**** >> >> **** >> >> But unfortunately it has not resolved my problem. Please can someone >> point me in the right direction.**** >> >> **** >> >> any help much appreciated.**** >> >> **** >> >> cheers**** >> >> Andy**** >> >> **** >> >> --- >> To manage subscriptions click here: >> http://lyris.sunbelt-software.com/read/my_forums/ >> or send an email to listmana...@lyris.sunbeltsoftware.com >> with the body: unsubscribe exchangelist**** >> >> --- >> To manage subscriptions click here: >> http://lyris.sunbelt-software.com/read/my_forums/ >> or send an email to listmana...@lyris.sunbeltsoftware.com >> with the body: unsubscribe exchangelist >> > > --- > To manage subscriptions click here: > http://lyris.sunbelt-software.com/read/my_forums/ > or send an email to listmana...@lyris.sunbeltsoftware.com > with the body: unsubscribe exchangelist > --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist
