cntboys
asked on
Out Of Office working for Admins But Not Users
Users are unable to enable their Out of Office via Exchange 2010/Outlook 2007 but Administrators can.
Test Email Autoconfiguration fails with 0x80072F78, and when you I web browse to the XML file it gets the correct Error Code 600 response.
Authenticated users have read and excecute, Read and List Folder contents rights to the Autodiscover folder.
All Test-Outlookwebservices -identity "<Normal User>" tests pass.
It seems like a permissions thing but can't think what.
Tried the solution to this one: http://social.technet.microsoft.com/Forums/en-US/exchange2010/thread/81ebc1de-c899-4097-b224-a0e4b33e4162/
But no such luck.
Test Email Autoconfiguration fails with 0x80072F78, and when you I web browse to the XML file it gets the correct Error Code 600 response.
Authenticated users have read and excecute, Read and List Folder contents rights to the Autodiscover folder.
All Test-Outlookwebservices -identity "<Normal User>" tests pass.
It seems like a permissions thing but can't think what.
Tried the solution to this one: http://social.technet.microsoft.com/Forums/en-US/exchange2010/thread/81ebc1de-c899-4097-b224-a0e4b33e4162/
But no such luck.
ASKER
The URL in question is https://exchange.Domain.local/Autodiscover/Autodiscover.xml, I've checked the EWS VD and there is no redirect in place.
I've checked the updates and I think that patch is installed, got it down as KB2412171
I've checked the updates and I think that patch is installed, got it down as KB2412171
Can you post your autoconfig test log and hide your server names, but leave the .com or .local on the end?
Can you also check your VDs in IIS and under the SSL settings ensure Client Certificates=ignore
Is the "exchange.domain.local" name on your cert?
Can you also check your VDs in IIS and under the SSL settings ensure Client Certificates=ignore
Is the "exchange.domain.local" name on your cert?
ASKER
Log attached.
All VDs apart from Powershell, RPC with Cert are set to ignore.
Exchange.local is on the Cert along with .co.uk and Autodiscover.local/.co.uk and domain.local.
All VDs apart from Powershell, RPC with Cert are set to ignore.
Exchange.local is on the Cert along with .co.uk and Autodiscover.local/.co.uk and domain.local.
http://support.microsoft.com/kb/2475877
Outlook 2010 Feb 2011 hotfix above, please install and test again
Outlook 2010 Feb 2011 hotfix above, please install and test again
ASKER
Tried the Outlook 2007 version as this is what we have in production, still the same but with an addition of "GetLastError=12152; httpstatus=0"
Do you get the same error for an admin account test?
Try inheritable permissions on a user account:
https://www.experts-exchange.com/Software/Server_Software/Email_Servers/Exchange/A_2861-Activesync-Working-But-Only-For-Some-Users-On-Exchange-2007-2010.html
https://www.experts-exchange.com/Software/Server_Software/Email_Servers/Exchange/A_2861-Activesync-Working-But-Only-For-Some-Users-On-Exchange-2007-2010.html
ASKER
Admin account succeeds with the following, "GetLastError=0; httpstatus=200."
ASKER
Inheritable permissions is set, tried unsetting and resetting and get the same
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
As another test can you create a new test user with a mailbox and verify they get the same test result?
ASKER
Got it sorted, it was the Proxy.
It was set to Bypass local server addresses but just wasn't seeing it as a local address. Had to add an exception in their Proxy GPO.
Cheers for your help on this.
It was set to Bypass local server addresses but just wasn't seeing it as a local address. Had to add an exception in their Proxy GPO.
Cheers for your help on this.
No problem, thanks for the update and the points.
You may want to install the Feb2011 patch for outlook 2007/2010 and then test again