Still celebrating National IT Professionals Day with 3 months of free Premium Membership. Use Code ITDAY17


Installed UCC Cert for Exchange 2007, now Outlook Anywhere not working

Posted on 2011-03-03
Medium Priority
Last Modified: 2012-05-11
As the title suggests, I've installed a UCC certificate for Exchange 2007, replacing a wild card cert.  My internal and external webmail work fine, and ActiveSync clients are connecting with no problems.  But I can't get an Outlook Anywhere client to connect.  I keep getting prompted for a username/password and it won't accept anything.  I've tried fiddling around with every different setting, and at this point I'm at my wits end and need this resolved ASAP.  

Any suggestions, things to try, I've done some research on here and also other exchange forums but I'm stuck.  Thank you.
Question by:Sma11T0wnITGuy
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 4
  • 4
LVL 11

Expert Comment

ID: 35029872
Hi there,

what type of authentication have you set for Outlook Anywhere?

You can view the settings with Get-OutlookAnywhere from the shell.


Author Comment

ID: 35029920
Output from Get-OutlookAnywhere command:

ServerName                      : LSIEXCHANGE
SSLOffloading                   : False
ExternalHostname                :
ClientAuthenticationMethod      : Ntlm
IISAuthenticationMethods        : {Ntlm}
MetabasePath                    : IIS://
Path                            : C:\Windows\System32\RpcProxy
ExtendedProtectionTokenChecking : None
ExtendedProtectionFlags         : {}
ExtendedProtectionSPNList       : {}
Server                          : LSIEXCHANGE
AdminDisplayName                :
ExchangeVersion                 : 0.1 (8.0.535.0)
Name                            : Rpc (Default Web Site)
DistinguishedName               : CN=Rpc (Default Web Site),CN=HTTP,CN=Protocol
                                  s,CN=LSIEXCHANGE,CN=Servers,CN=Exchange Admin
                                  istrative Group (FYDIBOHF23SPDLT),CN=Administ
                                  rative Groups,CN=LSI Solutions Inc,CN=Microso
                                  ft Exchange,CN=Services,CN=Configuration,DC=l
Identity                        : LSIEXCHANGE\Rpc (Default Web Site)
Guid                            : e07a7d60-fb53-4b20-b535-56ced82af173
ObjectCategory                  :
ObjectClass                     : {top, msExchVirtualDirectory, msExchRpcHttpVi
WhenChanged                     : 3/3/2011 12:41:12 PM
WhenCreated                     : 7/21/2010 9:54:00 AM
OriginatingServer               :
IsValid                         : True

LVL 11

Expert Comment

ID: 35030273
Can you change the authentication from NTLM to basic please?
Introducing the WatchGuard 420 Access Point

WatchGuard's newest access point includes an 802.11ac Wave 2 chipset, providing the fastest speeds for VoIP, video and music streaming, and large data file transfers. Additionally, enjoy the benefits of strong security as the 3rd radio delivers dedicated WIPS protection!

LVL 20

Expert Comment

by:Satya Pathak
ID: 35030280
did u rty to ran the and check it .

Author Comment

ID: 35030450
Michael-Changing the authentication level does not help

Satya-The test is fine until the final step, Testing SSL mutual authentication with the RPC proxy server.  

The certificate common name doesn't validate against the mutual authentication string that was provided: msstd:*
LVL 11

Accepted Solution

MichaelVH earned 2000 total points
ID: 35030525
Your outlook still represents the config for the wildcard cert you had before. You should first of all change the Outlookprovider

first check the Outlookprovider "EXPR" to see what setting it has for the certprincipalname. (probably "*.etc")

You should (if it's set to "*.etc") change it like this:

Set-OutlookProvider -Identity EXPR -CertPrincipalName



Author Comment

ID: 35030666

I just ran that command, and it looks like I'm able to connect now.  I will try a few other clients as well. is going through now as well.

Author Closing Comment

ID: 35036719

Great work, that fixed it up.  My remotes need to VPN in once to get the settings, but its working beyond that.  Thank you again.
LVL 11

Expert Comment

ID: 35042111
You're most welcome.

I'm glad you got it working again.



Featured Post

 [eBook] Windows Nano Server

Download this FREE eBook and learn all you need to get started with Windows Nano Server, including deployment options, remote management
and troubleshooting tips and tricks

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article lists the top 5 free OST to PST Converter Tools. These tools save a lot of time for users when they want to convert OST to PST after their exchange server is no longer available or some other critical issue with exchange server or impor…
Check out this step-by-step guide for using the newly updated Experts Exchange mobile app—released on May 30.
To show how to generate a certificate request in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.:  First we need to log into the Exchange Admin Center. Navigate to the Servers >> Certificates…
This video shows how to quickly and easily add an email signature for all users on Exchange 2016. The resulting signature is applied on a server level by Exchange Online. The email signature template has been downloaded from: www.mail-signatures…
Suggested Courses

722 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question