Link to home
Start Free TrialLog in
Avatar of dogsnaps
dogsnapsFlag for Australia

asked on

Outlook Password Request

Hi

I have set up an exchange 2007 box on a server 2008 operating system on a 2003 server domain. There are two domain controllers and to gc servers. I have had pretty good success with this exchange server, until i enabled outlook anywhere. It is enabled, but not really working off site. On site every now an again outlook 2007 asks for a password for the internal domain name of the server. It is rather frustrating and seems to only have started when outlook anywere was enabled. I have reinstalled the client access server and have fiddled with teh permissions in iis7. Can someone tell me what the permissions should be on all the dirrectories in iis 7, so that i can rule out that as the issue, and what have i forgotten that is causing my password request issues. When outside the domain from home outlook is still asking for a password for the internal address and not the external outlook anywhere adress. Outlook Web Access works fine and we have no issues with it.

Thanks.
Avatar of LegendZM
LegendZM
Flag of United States of America image

Have you disabled IPv6 on the 2008 server? http://www.microsoft.com/technet/network/ipv6/ipv6faq.mspx

Give that a shot and see if the problem persists.
Avatar of dogsnaps

ASKER

hi, i had alredy followed that prompt but i had set the registry entry wrong. I will try this out for the next day or so and let you know.
hi initial results seem to suggest that this may have solved the internal problem, but the external problem is still apparent.
outlook is asking flat out (every 5 seconds) for a username and password, and I have tried every possible combination and it doesnt seem to work. autodiscover is working fine externally but nothing else seems to. The authentication box is asking for connect to internal fqdn.
So this solved the internal problem? But external clients (as in people connecting over RPC over https?)

I would try uninstalling the CAS role, and installing it again, leaving the settings as default.
hi legendzm

i only uninstalled and reinstalled the cas role last week. all that i have changed is the internal and external urls , as they were blank after reinstall, and the disabling of ipv6. Do you think it is really necessary to reinstall it again?
It can't hurt, and hopefully after the reinstall the urls won't be blank.  
This should guide you on setting up Outlook Anywhere: http://exchange-genie.blogspot.com/2007/07/autodiscover-ad-attribute.html
hi that link was to do with autodiscover, which is working fine both internally and externally.
You said it keeps prompting you for login/password when you connect. Can you post some pictures? It sounds to me like a problem with the client access server and outlook anywhere since you said externally you're unable to connect as it keeps prompting you for login credentials
hi here are 2 pics. one is of a login, and one is the autodiscover results from outside of our network.
Untitled-1.jpg
Untitled-2.jpg
So after you enter your credentials, it just continues to prompt you?

Or does it let you go to your email, and then when you relaunch outlook it prompts you again?
https://webmail.chcs.tas.edu.au/owa/

If you go to your OWA login page, you have the credentials set to username, not domain\username, so i'm wondering what happens if you try to login using your email address, jarnold@chcs.tas.edu.au  as your login, or just  jarnold and your password.

hi

it continues to prompt for username and pwd.
it seems that only chcs\jarnold is the best method. I have tried the other with no success.
When you simply type jarnold it comes back as chcs-ex01\jarnold, and with you type jarnold@chcs.tas.edu.au it comes back as jarnold@chcs.tas.edu.au asking for a password. I would assume that either chcs\jarnold and jarnold@chcs.tas.edu.au woudl work as they are both refering to the active directory.
can you paste the most recent logs from IIS?
here is the log file for this afternoon
logs.txt
hi that is a massive log file. i can upload it in a txt doc ifyou want. one thing i noticed is the appearance of our proxy server in there quite a bit. 192.168.10.207. I have since adjusted our group policy to bypass the proxy server for internal addresses, however this would not effect the external issues.
HI

I decided to make a new outlook profile that didnt auto discover and set everything manually to our external address for outlook anywhre. I managed to get the logs to show up this.

2008-06-24 05:31:36 192.168.10.204 RPC_IN_DATA /rpc/rpcproxy.dll CHCS-EX01:6004 443 - 58.171.193.80 MSRPC 401 1 2148074254 0
2008-06-24 05:31:48 192.168.10.204 RPC_OUT_DATA /rpc/rpcproxy.dll CHCS-EX01:6004 443 - 58.171.193.80 MSRPC 401 1 2148074254 0

however the computer said that it couldn't connect to the server.

It's throwing back error 401 which is Unauthorized, meaning the authentication wasn't valid.

Microsoft+Office/12.0+(Windows+NT+6.0;+Microsoft+Office+Outlook+12.0.6213;+Pro) 401 2 5 0
2008-06-24 02:47:46 192.168.10.204 POST /Autodiscover/Autodiscover.xml - 443 - 192.168.10.207 Microsoft+Office/12.0+(Windows+NT+6.0;+Microsoft+Office+Outlook+12.0.6213;+Pro) 401 1 2148074254 0

in this log: 2008-06-24 05:31:48 192.168.10.204 RPC_OUT_DATA /rpc/rpcproxy.dll CHCS-EX01:6004 443 - 58.171.193.80 MSRPC 401 1 2148074254 0


Open Exchange Management Console -> Expand Server Configuration -> Select Client Access and click the Outlook Web Access tab -> Select owa (Default Web Site) and click the Properties action -> Click the Authentication tab -> Under Use forms-based authentication, select Domain\User name -> Click OK -> Restart IIS

Then try and see if you're able to connect.


Take a look at this page: http://forums.microsoft.com/TechNet/ShowPost.aspx?PostID=1643987&SiteID=17&pageid=1

They seem to be having the same problem, and someone posted a solution that worked for them.
hi

I managed to get sick of outlook anywhere and removed it all together. everything seemed to work ok from then on. I then decided to re install it and all is working ok now. Thanks for your help.
ASKER CERTIFIED SOLUTION
Avatar of LegendZM
LegendZM
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial