Solved

Outlook 2007 Autodiscover security alert with Exchange 2003??? HELP!

Posted on 2009-04-09
4
572 Views
Last Modified: 2012-05-06
We recently upgraded to Office 2007 across the company.  Everything is working fine except that users get these Security Alerts for autodiscover.domain.com OCCASIONALLY when opening outlook and 100% of the time when creating a new mail profile.

We are running exchange 2003 and are not using autodiscover.  How do I fix this.

I assume Outlook 2007 is by default looking at domain.com and tacking on autodiscover.  This doesn't work however as we have a wildcard for domain.com as it is our web site.

Should I just create a forward looking zone for domain.com and add an A record for autodiscover pointing to our single exchange 2003 server?

What is the proper way to resolve these problems running in an outlook 2007/exchange 2003 environment?
0
Comment
Question by:NBF
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
4 Comments
 

Author Comment

by:NBF
ID: 24110355
Scratch that.  Creating a forward looking zone internally won't work as we already use that domain externally for our web sites.

Any other solutions to this?
0
 
LVL 8

Expert Comment

by:MrMintanet
ID: 24110457
Can we get a screen shot?
0
 

Author Comment

by:NBF
ID: 24110560
It is the standard Security alert for autodiscover feature of outlook 2007.  The specific error is that there is a name mismatch.  Our public domain name has a wildcard so outlook is looking at autodiscover.domain.com which is an external IP for a our website.  That is obviously not valid.

0
 
LVL 65

Accepted Solution

by:
Mestha earned 500 total points
ID: 24111521
The problem is the wildcard on your domain.
That means that autodiscover.example.com resolves and Outlook then starts the autodiscovery process.

So far the best compromise is to create a DNS record in your public DNS for autodiscover and set it to 127.0.0.2. Basically stops the name from resolving. To the best of my knowledge the autodiscover process cannot be disabled in Outlook, and Outlook 2007 has no way of knowing what version of Exchange is involved so will attempt to check the settings are correct at frequent intervals.

Simon.
0

Featured Post

Has Powershell sent you back into the Stone Age?

If managing Active Directory using Windows Powershell® is making you feel like you stepped back in time, you are not alone.  For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Read this checklist to learn more about the 15 things you should never include in an email signature.
If you troubleshoot Outlook for clients, you may want to know a bit more about the OST file before doing your next job. IMAP can cause a lot of drama if removed in the accounts without backing up.
To show how to generate a certificate request in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.:  First we need to log into the Exchange Admin Center. Navigate to the Servers >> Certificates…
Exchange organizations may use the Journaling Agent of the Transport Service to archive messages going through Exchange. However, if the Transport Service is integrated with some email content management application (such as an antispam), the admini…

734 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question