Solved

Downloading Address book & updating members error in Outook 2007 - 0x8004010f error

Posted on 2011-09-27
8
942 Views
Last Modified: 2012-05-12
I have Exchange 2003 and Exchange 2010 both in my environments. The users on Exchange 2010 are having issues downloading an updated address book and adjusting members in a distriubtion list through Outlook 2007. When attempting to download the address book, the Exchange 2010 user receives the 0x8004010F error. Also, when the user attempts to modify members of a distribution list that they have permission, they get the message 'Changes to the distribution list membership cannot be saved. You do not have sufficient permission to perform this operation on this object'.

As a test, I deleted the oab files for a user and then an update address book shows but the oab files never get re-created on the machine. I read some support pages on the 0x8004010f but none of the resolutions seem to work yet.
0
Comment
Question by:gregurl
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 5
  • 2
8 Comments
 
LVL 6

Expert Comment

by:CanusRufus
ID: 36712272
How are you downloading the address book?
Are you exporting?
File --> open --> import --> export to file --> outlook data file .pst --> choose contacts
0
 
LVL 76

Expert Comment

by:Alan Hardisty
ID: 36712328
The message you are getting is a classic "I cannot find" message and suggests that you have not configured Autodiscover for your Exchange 2010 server, not configured an A record in DNS called Autodiscover that points to the IP address of your Exchange 2010 server, or your SSL Cert installed on Exchange isn't a SAN / UCC certificate including the minimum following names:

mail.externaldomain.com
autodiscover.externaldomain.com
internalservername.internaldomain.local
internalservername

Once Exchane is configured properly, your issues will go away.
0
 
LVL 2

Author Comment

by:gregurl
ID: 36893507
I have the SSL that is a UCC with the proper domain names. I try updating by going to Tools > Send & Receive > Download Address Book.

Since I have currently have a hybrid 2003/2010 environment, I have the OAB generated on the 2003 server. Can a 2010 users update to the public folder or do they require the web-based distribution?
0
Does Powershell have you tied up in knots?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

 
LVL 76

Expert Comment

by:Alan Hardisty
ID: 36893520
Did you create the Autodiscover A record in external DNS?
0
 
LVL 2

Author Comment

by:gregurl
ID: 36894159
Yes. The autodiscover DNS record is created.

For SSL, if I am using a CAS array would the SSL need the sub-domain of the CAS Array name?
0
 
LVL 2

Author Comment

by:gregurl
ID: 36894467
I did a ctrl click on the Outlook to run Test Email Autoconfiguration. The last results was succeeded for autodiscover.xml.
0
 
LVL 2

Accepted Solution

by:
gregurl earned 0 total points
ID: 37594111
After further work with consultants and Microsoft, this was my final resolution to the issue.

1) The address book generation was moved from Exchange 2003 to Exchange 2010.
2) The OAB folder on the CAS server in IIS was updated to allow authenticated users read permissions.
3) The .oab files were not being copied to the CAS servers after a day. I ran the command Update-FileDistributionService -Identity <ServerIdParameter>. This created the GUID folder and .oab files in the directory. At this time, I was able download the address books after replication of AD completed.
3b) I changed .oab on the CAS\IIS to not require SSL. (don't know if that was required)
4) To get more current address books updated, I changed the polling rate of distrubtion Get-OabVirtualDirectory| Set-OabVirtualDirectory -pollinterval 60 and made the address books create 4 times a day.

The Exchange 2003 users are still working as before.
0
 
LVL 2

Author Closing Comment

by:gregurl
ID: 37615796
This procedure resolved my issue.
0

Featured Post

Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

A list of top three free exchange EDB viewers that helps the user to extract a mailbox from an unmounted .edb file and get a clear preview of all emails & other items with just a single click on mailboxes.
After hours on line I found a solution which pointed to the inherited Active Directory permissions . You have to give/allow permissions to the "Exchange trusted subsystem" for the user in the Active Directory...
To show how to generate a certificate request in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.:  First we need to log into the Exchange Admin Center. Navigate to the Servers >> Certificates…
A short tutorial showing how to set up an email signature in Outlook on the Web (previously known as OWA). For free email signatures designs, visit https://www.mail-signatures.com/articles/signature-templates/?sts=6651 If you want to manage em…

739 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question