CJ27
asked on
Office 2007 Security certificate warning (certificate invalid or does not match.)
Recently upgraded one of my users pc's to MS office 2007. Now when he opens outlook he recieves a windows security box that states "The name on the security certificate is invalid or does not match the name on the site". This is an Exchange 2007 Environment.
ASKER
Could you please give me a little more detail in how to do this? I'm not an exchange expert, I just recently inherited it when another admin left the company. Yes there is a commercial certificate on the Exchange server.
It has nothing to do with Exchange. It is name resolution.
You need to check where autodiscover.example.com resolves to inside the network. Ping will do that. If you ping autodiscover.example.com and get a response from an external IP address then that may well be your problem.
It usually caused by a wild card DNS entry in your DNS, pointing to your web site, which is probably hosting another SSL site.
Simon.
You need to check where autodiscover.example.com resolves to inside the network. Ping will do that. If you ping autodiscover.example.com and get a response from an external IP address then that may well be your problem.
It usually caused by a wild card DNS entry in your DNS, pointing to your web site, which is probably hosting another SSL site.
Simon.
ASKER
I tried to ping autodiscover.mydomainname.
Have you looked at the certificate that comes up? See what it is issued to?
Simon.
Simon.
In our case, the users who got this message were using "open these additional mailboxes" with a mailbox that no longer existed. The message was not widespread.
However, in researching this issue, I found this Microsoft knowledge base article: http://support.microsoft.com/kb/940726.
However, in researching this issue, I found this Microsoft knowledge base article: http://support.microsoft.com/kb/940726.
In other cases, our users who had not been viewing additional mailboxes would not receive this prompt after we went to Send\Receive in Outlook 2007, Download Address Book.., choose Global Address List, and clicked Ok.
ASKER
"Have you looked at the certificate that comes up? See what it is issued to?"
Yes, the name is different which I suspect is the problem. But, How would I fix this?
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
It is probably autodiscover doing its thing.
Check whether autodiscover.example.com resolves internally to an external host (where example.com is the domain on the email address). That can cause this error.
Simon.