Downloading Address book & updating members error in Outook 2007 - 0x8004010f error

I have Exchange 2003 and Exchange 2010 both in my environments. The users on Exchange 2010 are having issues downloading an updated address book and adjusting members in a distriubtion list through Outlook 2007. When attempting to download the address book, the Exchange 2010 user receives the 0x8004010F error. Also, when the user attempts to modify members of a distribution list that they have permission, they get the message 'Changes to the distribution list membership cannot be saved. You do not have sufficient permission to perform this operation on this object'.

As a test, I deleted the oab files for a user and then an update address book shows but the oab files never get re-created on the machine. I read some support pages on the 0x8004010f but none of the resolutions seem to work yet.
LVL 2
gregurlAsked:
Who is Participating?
 
gregurlConnect With a Mentor Author Commented:
After further work with consultants and Microsoft, this was my final resolution to the issue.

1) The address book generation was moved from Exchange 2003 to Exchange 2010.
2) The OAB folder on the CAS server in IIS was updated to allow authenticated users read permissions.
3) The .oab files were not being copied to the CAS servers after a day. I ran the command Update-FileDistributionService -Identity <ServerIdParameter>. This created the GUID folder and .oab files in the directory. At this time, I was able download the address books after replication of AD completed.
3b) I changed .oab on the CAS\IIS to not require SSL. (don't know if that was required)
4) To get more current address books updated, I changed the polling rate of distrubtion Get-OabVirtualDirectory| Set-OabVirtualDirectory -pollinterval 60 and made the address books create 4 times a day.

The Exchange 2003 users are still working as before.
0
 
CanusRufusCommented:
How are you downloading the address book?
Are you exporting?
File --> open --> import --> export to file --> outlook data file .pst --> choose contacts
0
 
Alan HardistyCo-OwnerCommented:
The message you are getting is a classic "I cannot find" message and suggests that you have not configured Autodiscover for your Exchange 2010 server, not configured an A record in DNS called Autodiscover that points to the IP address of your Exchange 2010 server, or your SSL Cert installed on Exchange isn't a SAN / UCC certificate including the minimum following names:

mail.externaldomain.com
autodiscover.externaldomain.com
internalservername.internaldomain.local
internalservername

Once Exchane is configured properly, your issues will go away.
0
Has Powershell sent you back into the Stone Age?

If managing Active Directory using Windows Powershell® is making you feel like you stepped back in time, you are not alone.  For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why.

 
gregurlAuthor Commented:
I have the SSL that is a UCC with the proper domain names. I try updating by going to Tools > Send & Receive > Download Address Book.

Since I have currently have a hybrid 2003/2010 environment, I have the OAB generated on the 2003 server. Can a 2010 users update to the public folder or do they require the web-based distribution?
0
 
Alan HardistyCo-OwnerCommented:
Did you create the Autodiscover A record in external DNS?
0
 
gregurlAuthor Commented:
Yes. The autodiscover DNS record is created.

For SSL, if I am using a CAS array would the SSL need the sub-domain of the CAS Array name?
0
 
gregurlAuthor Commented:
I did a ctrl click on the Outlook to run Test Email Autoconfiguration. The last results was succeeded for autodiscover.xml.
0
 
gregurlAuthor Commented:
This procedure resolved my issue.
0
All Courses

From novice to tech pro — start learning today.