Link to home
Start Free TrialLog in
Avatar of magapie
magapieFlag for United States of America

asked on

outlook https connectivity fails

My outlook clients randomly disconnect. I verify the server is working by using outlook web app. When I go into mail properties and check the https connection it puts a * for the host name (eg *.domain.com). so the host name becomes unresolvable.  If I click ok to the screen it says invalid configuration error. I have to change it to the fqdn to ok.

If I change it and reopen outlook it connects. When I close outlook and reopen again it does not connect. it goes back to the same configuration.
Avatar of Leon Fester
Leon Fester
Flag of South Africa image

Use this link to test you Configuration:
https://www.testexchangeconnectivity.com/

It sounds like your configuration is not being saved when you make changes.
Open the profile and check that you've got the correct settings.
Just double check that somebody didn't save the configuration with the wildcard character.
run "get-outlookanywhere | fl external*"
post the results
You should have your fqdn in there instead of *

Close outlook
Start run
Outlook /rpcdiag

See if the connection state says established
If its just one workstation and you want to get past the error

Go here
C / windows / system32/drivers/etc

Right click on hosts
Open with notepad

Go to the endof the file and
Enter the ip address of your fqdn followed by fqdn

Like
1.2.3.4. Mail.google.com

Thanks
Avatar of magapie

ASKER

I already did that it works.
please post the results from
get-outlookanywhere | fl exter*
Avatar of magapie

ASKER

Its an outlook configuration issue not dns. The system works but outlook keeps changing the rpc/http config. I can't use a host file I have too many laptops.
You are having name resolution issues if it connects first and then fails

You should also test using rpcping
This is the command from workstation
Fill out appropriate parts and try it

Start run command
RPCPing.exe -t ncacn_http -o RpcProxy=fqdn.yourdomain.com -P "testuser,yourdomain,testpassword" -I "testuser,yourdomain,testpassword" -H 1 -u 10 -a connect -F 3 -E -v -3 -R none -q    
Avatar of magapie

ASKER

This is part of my problem. I still cannot figure out how to remove this botched installation.

[PS] C:\Windows\system32>get-outlookanywhere | fl exter*
The task wasn't able to connect to IIS on the server 'WIN-2XBACKUP.blumelectric.com'. Make sure that the server exists
and can be reached from this computer: The RPC server is unavailable.
    + CategoryInfo          : ReadError: (WIN-2XBACKUP\Rpc (Default Web Site):ADObjectId) [Get-OutlookAnywhere], IISNo
   tReachableException
    + FullyQualifiedErrorId : B4F80054,Microsoft.Exchange.Management.SystemConfigurationTasks.GetRpcHttp
remove rpc over http proxy
reinstall rpc over http proxy
enable outlook anywhere again
Avatar of magapie

ASKER

am I doing something wrong?

RPCPing v6.0. Copyright (C) Microsoft Corporation, 2002-2006
 RPCPing set Activity ID:  {2cee4ecd-043a-4a27-8d27-9efc5b790243}
 RPCPinging proxy server carparray.blumelectric.com with Echo Request Packet
 Setting autologon policy to high
 WinHttpSetCredentials for target server called
 Error 87 : The parameter is incorrect.
 returned in WinHttpSetCredentials
 Ping failed
Start run
Control useraccountpasswords2

Go to advanced tab
In the servername
Enter your exchange servername

Try rpcping too and see if that gives you a response.
I am in a tr
Avatar of magapie

ASKER

that command doesn't work. I'm running windows 7 not sure if it matters. Like I said before, it works. It's just that the client side changes. If it is configured correctly it works. Let me reinstall rpc/http and see what happens.
Ok - I am with reinstallation of rpcproxy.
I remember this domain - it has been floating arounf ee for a while

Reinstall rpc proxy

Check http to https redirect requests in iis worker process

Start run inetmgr
Go to your servername
On the right pane click worker process
Click default website / sbs default website (under which you have your rpc virdir)

Now run testexchangeconnectivity rpc/ https tests
See if any httpto https redirect requests start popping up in iis above

I am in a train. Can't get you screenshots / kb :(
Avatar of magapie

ASKER

Now that is what I call service. I'm trying all this now.
Your error says iis not reachable for get outlookanywhere

Did you restart iis after that / restart server if possible

 CategoryInfo          : ReadError: (WIN-2XBACKUP\Rpc (Default Web Site):ADObjectId) [Get-OutlookAnywhere], IISNo   tReachableException    + FullyQualifiedErrorId : B4F80054,Microsoft.Exchange.Management.SystemConfigurationTasks.GetRpcHttp    
@sunnyc7 - i tried to suggest it earlier

let me know if you need any articles, i can provide since sunny is traveling
There is one from msexchangeteam about httptohttpsredirect

Thanks man @endital
Avatar of magapie

ASKER

after reinstalling it does not connect at all. If I run rpcdiag it connects tcp/ip in the office even with the boxes checked to connect https.
Avatar of magapie

ASKER

I restarted the server. The win2x backup server no longer exists and I don't know how to remove it.
Avatar of magapie

ASKER

owa is down also.
go into adsiedit
configuration - services - microsoft exchange - org name - administatrive groups - exchange admin group... - servers

if the server no longer exists (offline, wiped) then delete from under servers
Avatar of magapie

ASKER

That fixes the rogue server name. But now owa nor outlook anywhere will connect.
make sure you default web site is running
From your exchange serverstart > run > inetmgrClick on server name > on right panel > go to Worker ProcessClick on Default App PoolCheck if you are getting any Begin Request for http to https redirect, like the screenshot herehttp://blogs.technet.com/blogfiles/sbs/WindowsLiveWriter/SlowConnectivityforOutlookAnywhereandSit_D110/clip_image006_2.jpg
I am out. Won't be available for sometime
Avatar of magapie

ASKER

I see three things that says msexchange in them and they all say running. Nothing like the screen shot. The process for owa was stopped. Now it is working.

But still no https/rpc access.
Avatar of magapie

ASKER

It's the same thing. It changes the name back to *.blumelectric.com
did you re-enable outlookanywhere?
Avatar of magapie

ASKER

Yes. Went through the wizard.

[PS] C:\Windows\system32>get-outlookanywhere | fl exter*


ExternalHostname : carparray.blumelectric.com
is your certificate a wildcard certificate
Avatar of magapie

ASKER

UCC cert. All of this has been working before. owa works also.
Avatar of magapie

ASKER

At this point outlook anywhere does not work at all.
post the results for
get-outlookprovider | fl
Avatar of magapie

ASKER

When I run test echange connectivity it only works if I take out the mutual authetication section.
Avatar of magapie

ASKER

I see the star in there. How do I get it out?

[PS] C:\Windows\system32>get-outlookprovider | fl


RunspaceId           : 94742aee-67a6-4929-b721-02c978653158
CertPrincipalName    :
Server               :
TTL                  : 1
OutlookProviderFlags : None
AdminDisplayName     :
ExchangeVersion      : 0.1 (8.0.535.0)
Name                 : EXCH
DistinguishedName    : CN=EXCH,CN=Outlook,CN=AutoDiscover,CN=Client Access,CN=Blum Electric,CN=Microsoft Exchange,CN=Se
                       rvices,CN=Configuration,DC=blumelectric,DC=com
Identity             : EXCH
Guid                 : f1df6d21-3846-4be7-9de4-954cc5de046e
ObjectCategory       : blumelectric.com/Configuration/Schema/ms-Exch-Auto-Discover-Config
ObjectClass          : {top, msExchAutoDiscoverConfig}
WhenChanged          : 7/19/2010 5:09:39 PM
WhenCreated          : 7/19/2010 5:09:39 PM
WhenChangedUTC       : 7/20/2010 12:09:39 AM
WhenCreatedUTC       : 7/20/2010 12:09:39 AM
OrganizationId       :
OriginatingServer    : FRONTOFFICE.blumelectric.com
IsValid              : True

RunspaceId           : 94742aee-67a6-4929-b721-02c978653158
CertPrincipalName    : msstd:carparray.blumelectric.com
Server               : *.blumelectric.com
TTL                  : 1
OutlookProviderFlags : None
AdminDisplayName     :
ExchangeVersion      : 0.1 (8.0.535.0)
Name                 : EXPR
DistinguishedName    : CN=EXPR,CN=Outlook,CN=AutoDiscover,CN=Client Access,CN=Blum Electric,CN=Microsoft Exchange,CN=Se
                       rvices,CN=Configuration,DC=blumelectric,DC=com
Identity             : EXPR
Guid                 : 94d425f6-fad9-46c1-9a2b-b765e358d4b8
ObjectCategory       : blumelectric.com/Configuration/Schema/ms-Exch-Auto-Discover-Config
ObjectClass          : {top, msExchAutoDiscoverConfig}
WhenChanged          : 9/17/2010 7:39:49 AM
WhenCreated          : 7/19/2010 5:09:40 PM
WhenChangedUTC       : 9/17/2010 2:39:49 PM
WhenCreatedUTC       : 7/20/2010 12:09:40 AM
OrganizationId       :
OriginatingServer    : FRONTOFFICE.blumelectric.com
IsValid              : True

RunspaceId           : 94742aee-67a6-4929-b721-02c978653158
CertPrincipalName    :
Server               :
TTL                  : 1
OutlookProviderFlags : None
AdminDisplayName     :
ExchangeVersion      : 0.1 (8.0.535.0)
Name                 : WEB
DistinguishedName    : CN=WEB,CN=Outlook,CN=AutoDiscover,CN=Client Access,CN=Blum Electric,CN=Microsoft Exchange,CN=Ser
                       vices,CN=Configuration,DC=blumelectric,DC=com
Identity             : WEB
Guid                 : 3bcbf598-855b-4300-a9ca-3d207164b4ad
ObjectCategory       : blumelectric.com/Configuration/Schema/ms-Exch-Auto-Discover-Config
ObjectClass          : {top, msExchAutoDiscoverConfig}
WhenChanged          : 7/19/2010 5:09:41 PM
WhenCreated          : 7/19/2010 5:09:41 PM
WhenChangedUTC       : 7/20/2010 12:09:41 AM
WhenCreatedUTC       : 7/20/2010 12:09:41 AM
OrganizationId       :
OriginatingServer    : FRONTOFFICE.blumelectric.com
IsValid              : True




ASKER CERTIFIED SOLUTION
Avatar of endital1097
endital1097
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of magapie

ASKER

I think that fixed it. When I tell you that you are awesome you are a true genius! Hopefully this closes the book on this server.
Avatar of magapie

ASKER

Once again another problem solved.