troubleshooting Question

Unable to download Offline Address Book and/or Free Busy using Outlook 2007-2010

Avatar of dsuch107
dsuch107 asked on
7 Comments1 Solution942 ViewsLast Modified:
I've been beating my head against the wall for about 3 weeks trying to figure and rectify this problem.  First a quick rundown on our environment, we have the following mixed coexisting environment between Exchange2003 and Exchange 2010.

Client Access -- 2 servers configured in a CAS array assigned to the Default Site
MailboxBox  --- 4 servers are configured in a DAG
HubTransport  -- 2 servers (Currently configured with Internal routing group connector to and from the default 2003 bridgehead server)

OK for the actual problem:

We  migrated 10 mailboxes from 2003 to 2010 and have been using them for several months both with Outlook 2003 and 2007 clients without any issues. The problem occurs only when Outlook 2007-2010 clients are not joined to a domain. Clients that are not members of the domain are unable to successfully download the OAB and/or free Busy.

Clients just receive object not found error 0x8004010F while attempting to download the address book, it also doesn’t matter if they’re in cache mode on not.

I’ve tried numerous steps both on the client and server without a resolution to this issue.
I’ll start with the client side first.

Our local clients do not use a proxy server, so IE proxing does not need to be enabled for local sites.

1. Enabled Outlook logging, and found no relevant errors
2. Configured etc\host, added line for autodiscover, just incase the client wasn’t resolving correctly.
3. Configured the outlook client both with and without Exchange Proxy Settings, and still get the same error message.

AutoDiscover Results:

Protocol: Exchange RPC
Login Name: test
Availbility Service URL:
( OAB folder Matches with CAS OAB folder)
Auth Package: Unspecified   ( Tried with BASIC and NTLM)

Protocol: Exchange HTTP
Login Name: test
SSL: Yes
Mutual Authentication: Yes
Availbility Service URL:
( OAB folder Matches with CAS OAB folder)
Auth Package: NTLM  (Tried with BASIC and NTLM by –IISAuthenication on the CAS servers)
Certificate Principal Name:

Joining members to the domain resolves the OAB and FreeBusy issues however most of our end users logon using different credentials therefore joining each workstation to the domain is not a good solution for us.

I've tried and/or validated the following steps

DNS Configuration;

Validated Host Record  "mail" 172.17.x.x
Validated CNAME for autodisovery to resolve to
Validated SRV TCP port 443 record to resolve to mail

Autodiscover works both internally and externally without any issues.

CAS Configuration;

Validated Thawte SAN certificate with autodiscover, and mail was assigned and registered
Validated Get-mailboxdatabase | fl to ensure OAB and Public folders were assigned
Validated Get-clientAccessServer | fl  and ClientAccessArray

All internal and external URL's on the CAS point to "Exchange virtual directories respectively”

I originally thought the problem was caused because the Address book resided on a 2003 server and that web based distribution was disabled, however ended up mirror our production in a lab to rule out that theory. I successfully moved the address book from the 2003 to a 2010 mail server without any errors, and also removed and recreated the autodiscover and OAB distribution directories, along with disabling usekernel mode within IIS on both the CAS servers

Yes, Web based distribution is enabled along with recreating the default address book and re-assigning it to each mailbox store..  I’ve tried everything I could think of and now am just baffled.  Again, I have our entire production environment mirrored in a lab so sky is the limit with the changes that need to applied.


Join the community to see this answer!
Join our exclusive community to see this answer & millions of others.
Unlock 1 Answer and 7 Comments.
Join the Community
Learn from the best

Network and collaborate with thousands of CTOs, CISOs, and IT Pros rooting for you and your success.

Andrew Hancock - VMware vExpert
See if this solution works for you by signing up for a 7 day free trial.
Unlock 1 Answer and 7 Comments.
Try for 7 days

”The time we save is the biggest benefit of E-E to our team. What could take multiple guys 2 hours or more each to find is accessed in around 15 minutes on Experts Exchange.

-Mike Kapnisakis, Warner Bros