Out Of Office working for Admins But Not Users

Users are unable to enable their Out of Office via Exchange 2010/Outlook 2007 but Administrators can.

Test Email Autoconfiguration fails with 0x80072F78, and when you I web browse to the XML file it gets the correct Error Code 600 response.

Authenticated users have read and excecute, Read and List Folder contents rights to the Autodiscover folder.

All Test-Outlookwebservices -identity "<Normal User>" tests pass.

It seems like a permissions thing but can't think what.

Tried the solution to this one: http://social.technet.microsoft.com/Forums/en-US/exchange2010/thread/81ebc1de-c899-4097-b224-a0e4b33e4162/

But no such luck.
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

What URL are you getting the error code on? ensure your EWS VD is not redirecting in IIS

You may want to install the Feb2011 patch for outlook 2007/2010 and then test again
cntboysAuthor Commented:
The URL in question is https://exchange.Domain.local/Autodiscover/Autodiscover.xml, I've checked the EWS VD and there is no redirect in place.

I've checked the updates and I think that patch is installed, got it down as KB2412171
Can you post your autoconfig test log and hide your server names, but leave the .com or .local on the end?

Can you also check your VDs in IIS and under the SSL settings ensure Client Certificates=ignore

Is the "exchange.domain.local" name on your cert?
Determine the Perfect Price for Your IT Services

Do you wonder if your IT business is truly profitable or if you should raise your prices? Learn how to calculate your overhead burden with our free interactive tool and use it to determine the right price for your IT services. Download your free eBook now!

cntboysAuthor Commented:
Log attached.

All VDs apart from Powershell, RPC with Cert are set to ignore.

Exchange.local is on the Cert along with .co.uk and Autodiscover.local/.co.uk and domain.local.
 Autoconfig Log

Outlook 2010 Feb 2011 hotfix above, please install and test again
cntboysAuthor Commented:
Tried the Outlook 2007 version as this is what we have in production, still the same but with an addition of "GetLastError=12152; httpstatus=0"
Do you get the same error for an admin account test?
cntboysAuthor Commented:
Admin account succeeds with the following, "GetLastError=0; httpstatus=200."
cntboysAuthor Commented:
Inheritable permissions is set, tried unsetting and resetting and get the same
In IE go and set the proxy to bypass local server addresses and add mail.exchangedomain.com to the proxy exceptions.

The other thing you can also try if the above doesn't work is to set your autodiscover VD to not require SSL and then change your autodiscoverserviceinternaluri to http:// instead of https:// and see if that resolves the test issue.

If none of the above then you bypass SCP by adding an internal SRV record

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
As another test can you create a new test user with a mailbox and verify they get the same test result?
cntboysAuthor Commented:
Got it sorted, it was the Proxy.

It was set to Bypass local server addresses but just wasn't seeing it as a local address. Had to add an exception in their Proxy GPO.

Cheers for your help on this.
No problem, thanks for the update and the points.
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today

From novice to tech pro — start learning today.