Sma11T0wnITGuy
asked on
Installed UCC Cert for Exchange 2007, now Outlook Anywhere not working
As the title suggests, I've installed a UCC certificate for Exchange 2007, replacing a wild card cert. My internal and external webmail work fine, and ActiveSync clients are connecting with no problems. But I can't get an Outlook Anywhere client to connect. I keep getting prompted for a username/password and it won't accept anything. I've tried fiddling around with every different setting, and at this point I'm at my wits end and need this resolved ASAP.
Any suggestions, things to try, I've done some research on here and also other exchange forums but I'm stuck. Thank you.
Any suggestions, things to try, I've done some research on here and also other exchange forums but I'm stuck. Thank you.
ASKER
Output from Get-OutlookAnywhere command:
ServerName : LSIEXCHANGE
SSLOffloading : False
ExternalHostname : getmymail.lsisolutions.com
ClientAuthenticationMethod : Ntlm
IISAuthenticationMethods : {Ntlm}
MetabasePath : IIS://LSIEXCHANGE.lsisolut ions.com/W 3SVC/1/RO
OT/Rpc
Path : C:\Windows\System32\RpcPro xy
ExtendedProtectionTokenChe cking : None
ExtendedProtectionFlags : {}
ExtendedProtectionSPNList : {}
Server : LSIEXCHANGE
AdminDisplayName :
ExchangeVersion : 0.1 (8.0.535.0)
Name : Rpc (Default Web Site)
DistinguishedName : CN=Rpc (Default Web Site),CN=HTTP,CN=Protocol
s,CN=LSIEXCHANGE,CN=Server s,CN=Excha nge Admin
istrative Group (FYDIBOHF23SPDLT),CN=Admin ist
rative Groups,CN=LSI Solutions Inc,CN=Microso
ft Exchange,CN=Services,CN=Co nfiguratio n,DC=l
sisolutions,DC=com
Identity : LSIEXCHANGE\Rpc (Default Web Site)
Guid : e07a7d60-fb53-4b20-b535-56 ced82af173
ObjectCategory : lsisolutions.com/Configura tion/Schem a/ms-Exch
-Rpc-Http-Virtual-Director y
ObjectClass : {top, msExchVirtualDirectory, msExchRpcHttpVi
rtualDirectory}
WhenChanged : 3/3/2011 12:41:12 PM
WhenCreated : 7/21/2010 9:54:00 AM
OriginatingServer : lsiadc02.lsisolutions.com
IsValid : True
ServerName : LSIEXCHANGE
SSLOffloading : False
ExternalHostname : getmymail.lsisolutions.com
ClientAuthenticationMethod
IISAuthenticationMethods : {Ntlm}
MetabasePath : IIS://LSIEXCHANGE.lsisolut
OT/Rpc
Path : C:\Windows\System32\RpcPro
ExtendedProtectionTokenChe
ExtendedProtectionFlags : {}
ExtendedProtectionSPNList : {}
Server : LSIEXCHANGE
AdminDisplayName :
ExchangeVersion : 0.1 (8.0.535.0)
Name : Rpc (Default Web Site)
DistinguishedName : CN=Rpc (Default Web Site),CN=HTTP,CN=Protocol
s,CN=LSIEXCHANGE,CN=Server
istrative Group (FYDIBOHF23SPDLT),CN=Admin
rative Groups,CN=LSI Solutions Inc,CN=Microso
ft Exchange,CN=Services,CN=Co
sisolutions,DC=com
Identity : LSIEXCHANGE\Rpc (Default Web Site)
Guid : e07a7d60-fb53-4b20-b535-56
ObjectCategory : lsisolutions.com/Configura
-Rpc-Http-Virtual-Director
ObjectClass : {top, msExchVirtualDirectory, msExchRpcHttpVi
rtualDirectory}
WhenChanged : 3/3/2011 12:41:12 PM
WhenCreated : 7/21/2010 9:54:00 AM
OriginatingServer : lsiadc02.lsisolutions.com
IsValid : True
Can you change the authentication from NTLM to basic please?
did u rty to ran the https://www.testexchangeconnectivity.com/ and check it .
ASKER
Michael-Changing the authentication level does not help
Satya-The test is fine until the final step, Testing SSL mutual authentication with the RPC proxy server.
The certificate common name lsiexchange.lsisolutions.c om doesn't validate against the mutual authentication string that was provided: msstd:*.lsisolutions.com
Satya-The test is fine until the final step, Testing SSL mutual authentication with the RPC proxy server.
The certificate common name lsiexchange.lsisolutions.c
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Michael,
I just ran that command, and it looks like I'm able to connect now. I will try a few other clients as well. testexchangeconnectivity.c om is going through now as well.
I just ran that command, and it looks like I'm able to connect now. I will try a few other clients as well. testexchangeconnectivity.c
ASKER
Michael,
Great work, that fixed it up. My remotes need to VPN in once to get the settings, but its working beyond that. Thank you again.
Great work, that fixed it up. My remotes need to VPN in once to get the settings, but its working beyond that. Thank you again.
You're most welcome.
I'm glad you got it working again.
Grts,
Michael
I'm glad you got it working again.
Grts,
Michael
what type of authentication have you set for Outlook Anywhere?
You can view the settings with Get-OutlookAnywhere from the shell.
Michael