Announcement

Collapse
No announcement yet.

Outlook 2007 not connecting to New Exchange 2007 server

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • Outlook 2007 not connecting to New Exchange 2007 server

    I have an open thread regarding transition from Exchange 2003 to 2007 that is still in working progress. I thought I had better post this part separate.

    Outlook 2003 client connects fine to the new 07 server. However, when using Outlook 2007 client, it doesn't. A prompt comes up requesting the username and password, not forms pop up, and when you type in the domain\user and then appropriate password, it still will not connect. OWA on Exchange 2007 works for the mailbox and the mailbox is working fine from OUtlook 2003.

    Help and advice would be appriciated.

  • #2
    Re: Outlook 2007 not connecting to New Exchange 2007 server

    Authentication settings on one of the virtual directories I would suspect.
    Could also be caused by an issue with the SSL certificate.
    Have you done anything with the SSL certificate? Set the URLs on the virtual directories?

    Simon.
    --
    Simon Butler
    Exchange MVP

    Blog: http://blog.sembee.co.uk/
    More Exchange Content: http://exchange.sembee.info/
    Exchange Resources List: http://exbpa.com/
    In the UK? Hire me: http://www.sembee.co.uk/

    Sembee is a registered trademark, used here with permission.

    Comment


    • #3
      Re: Outlook 2007 not connecting to New Exchange 2007 server

      Thanks for the post Simon.

      Have left everything as defaults and not changed anything. I notice that I receive the certificate error using OWA due to the CA (OWA certificate) not being trusted.

      I take it there is a virtual server for Exchange 2007. I did read something regarding SSL and Outlook 2007. Which virtual directory should i look at?

      Comment


      • #4
        Re: Outlook 2007 not connecting to New Exchange 2007 server

        I would suggest that you sort out the SSL certificate to begin with.
        I outlined what was required in a blog posting earlier this year:
        http://www.sembee.co.uk/archive/2008/05/30/78.aspx

        Once you have the server setup correctly then you can deal with the issues. The SSL certificate that is installed on install is not designed for production use.

        Simon.
        --
        Simon Butler
        Exchange MVP

        Blog: http://blog.sembee.co.uk/
        More Exchange Content: http://exchange.sembee.info/
        Exchange Resources List: http://exbpa.com/
        In the UK? Hire me: http://www.sembee.co.uk/

        Sembee is a registered trademark, used here with permission.

        Comment


        • #5
          Re: Outlook 2007 not connecting to New Exchange 2007 server

          Thanks Simon. Will give it a go.

          Comment


          • #6
            Re: Outlook 2007 not connecting to New Exchange 2007 server

            I have gone to one company who have informed me that they have done Exchange 2007 certificates for other companies and they are wanting to charge 330.00 for it. I want to trial one before buying and I know the SSL provider mentioned in the blog doesn't offer that and doesn't seem to have a UK contact number.

            What name(s) do I need in the SSL certificate. We will only be using Outlook and OWA internally. There will be no public facing sites etc being used. Would using Microsoft's CA on Windows 2003 server R2 be ok?

            Comment


            • #7
              Re: Outlook 2007 not connecting to New Exchange 2007 server

              GoDaddy do SSL certificates that are suitable for US$60/year, that is about 30. When Exchange 2007 was released the only SAN/UC certificates that you could get were in that price bracket that you have posted, but things have changed significantly, and there is no need to pay 300+ for a certificate.

              I am not aware of any provider offering trial SAN/UC certificates. However I have deployed the GoDaddy certificates on every installation I have done to date with great success. They just work.

              If you aren't using the certificate externally though, then you will have to go through the headache of setting up the Microsoft CA and getting the certificates trusted. I can't help you with that as I haven't done it. However as every machine is under your control there is probably something you can do domain wise to get the certificate trusted.

              Simon.
              --
              Simon Butler
              Exchange MVP

              Blog: http://blog.sembee.co.uk/
              More Exchange Content: http://exchange.sembee.info/
              Exchange Resources List: http://exbpa.com/
              In the UK? Hire me: http://www.sembee.co.uk/

              Sembee is a registered trademark, used here with permission.

              Comment


              • #8
                Re: Outlook 2007 not connecting to New Exchange 2007 server

                Thanks Simon. The certificate recommended by the SSL provider included an external domain name and the internal names, so could be used for both scenarios and would then allow me to register the SSL.

                I have setup a CA before so I should be ok with that. I can roll out via Group Policy and set the trusts that way as well.

                What names should I use for the Certificates. Would it be machinename.domain.local only or would i need other names associating as well.

                Comment


                • #9
                  Re: Outlook 2007 not connecting to New Exchange 2007 server

                  Have set up the internal CA and OWA now doesn't come up with an error and I have added our Internal CA to all Domain computers and manually added the Root cert for a few we have in a Workgroup.

                  This article was useful for Internal CA setup.

                  http://technet.microsoft.com/en-us/l.../bb332063.aspx

                  I have carried out some tests and have found the following.

                  All clients connect ok except Outlook 2007.

                  Outlook 2007 clients that already have a profile configured on the old server do connect on the new server. This mapping is automatic. As soon as I try and configure a new user for Outlook 2007, it detects the correct setting but keeps password prompting. DomainName\Username logon with relevant network password is not accepted. This is on a machine that does not have the Certificate warning for OWA any longer.

                  The Outlook 2007 profile that does connect also seems to attempt to load the 'Tasks' section indefinately. This may be the fact I haven't as yet moved the OAB to Exchange 2007. Unless anyone has another explanation. I want to resolve these niggles before moving User's mailboxes.

                  Have you come across this before or know what can be done?
                  Last edited by Virtual; 28th August 2008, 17:19.

                  Comment


                  • #10
                    Re: Outlook 2007 not connecting to New Exchange 2007 server

                    You don't have to "Move" anything to Exchange 2007.
                    The OAB and Free/Busy information can be replicated across to the Exchange 2007 in the usual way using Public Folders. Therefore before you move any mailboxes move that content.

                    The repeating authentication prompts can be caused by authentication errors or SSL certificate issues - including not having the URLs set correctly. Use the Autodiscover diagnostics tool in Outlook 2007 (hold CTRL while right clicking on the Outlook icon) to see what URLs it is trying to connect to.

                    Simon.
                    --
                    Simon Butler
                    Exchange MVP

                    Blog: http://blog.sembee.co.uk/
                    More Exchange Content: http://exchange.sembee.info/
                    Exchange Resources List: http://exbpa.com/
                    In the UK? Hire me: http://www.sembee.co.uk/

                    Sembee is a registered trademark, used here with permission.

                    Comment


                    • #11
                      Re: Outlook 2007 not connecting to New Exchange 2007 server

                      I see. Will give that a go. The OAB is already replicated.
                      Last edited by Virtual; 29th August 2008, 12:49.

                      Comment


                      • #12
                        Re: Outlook 2007 not connecting to New Exchange 2007 server

                        I have just tried the test. The test will not work when logged on as the test user being created for the first time in Outlook 2007. Log on as my user account that was already in Outlook 2007 before the mailbox was moved from Exchange 2003 to 2007, and it works ok. The address it maps to is the same as the alternative paths I have specified on my certificate. 2k7Name.domain.local, which features on the certificate. There is a path specified after this so I assume it is set right. Also, do I need to put the full path on the certifcate: https://2k7name.domain.local/path/path etc etc. I haven't set it this way.

                        I also don't understand why my user account connects ok to the Exchange 2007 box but creating a new one doesn't. I suppose AD must have done the re-mapping on my behalf so authentication was successful.

                        Have looked at the XML settings given for each user account and the only difference is with AD setting. The account that works is given the secondary DC, which is a GC and hosts the CA. The test account is allocated the DC with all FSMO roles and is also a GC role holder.
                        Last edited by Virtual; 29th August 2008, 22:01.

                        Comment


                        • #13
                          Re: Outlook 2007 not connecting to New Exchange 2007 server

                          I have logged on to two computers with Outlook 2007 and attempted to connect as a user that has moved to Exchange 2007. Connection is ok on the User's logon profile previosly connected to Exchange 2003. When creating from scratch on the other machine, and I have noticed the same on the previous machine when attempting to create a new user, I get a Kerberos error 4 in the Event log.

                          Event Type: Error
                          Event Source: Kerberos
                          Event Category: None
                          Event ID: 4
                          Date: 30/08/2008
                          Time: 12:56:31
                          User: N/A
                          Computer: 0075
                          Description:
                          The kerberos client received a KRB_AP_ERR_MODIFIED error from the server host/DCwithFSMOroles.domain.local. This indicates that the password used to encrypt the kerberos service ticket is different than that on the target server. Commonly, this is due to identically named machine accounts in the target realm (DOMAIN.LOCAL), and the client realm. Please contact your system administrator.
                          For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

                          I have checked DNS and that is ok. This must be the cause of the authentication issues. Any ideas? I will post this on the Windows 2003 server Forum as well.
                          Last edited by Virtual; 31st August 2008, 13:58.

                          Comment


                          • #14
                            Re: Outlook 2007 not connecting to New Exchange 2007 server

                            Thanks for all your help Simon over the last few weeks. The transition is now complete. To resolve the issue in this Post, I reset the SPNs on the server to the GC and it then worked straight away.

                            I remembered that the server has been a DC and GC before I installed Exchange 2007. I did demote the server from being a DC and GC before installation but the SPNs were still pointing at itself for the GC.

                            Problem now resolved.

                            Comment

                            Working...
                            X