Issue with OWA and Outlook 2007 on new 2010 Exchange

I'm having issue with Outlook 2007, it asks for credentials when stated.
 
This doesn’t affect Outlook 2003 and 2010 users.
On the OWA side, when going into anything under “Options” like shown in the picture. It pops a new page and prompts for credentials.  After credentials are supplied, I’m having “bad request” error. I also tried resetting IE. In this case it will not prompt me for credentials for the first time and load the page but clicking on anything within the page will pop the error: “The session has expired. Please sign in and try again”.
 
I’m running Exchange 2010, which was migrated from 2003 about 1 month ago.
I did reset EWS directory using EMS followed by iisreset/noforce and also tried to enable Anonymous Authentication on EWS without positive result. I have valid SAN certificate from Digicert which covers both internal and external FQDN. Auto-discover works fine. Tested using "Test E-mail AutoConfiguration" feature in Outlook.
 

 
Any advice will be greatly appreciated.
 
Thank you

PomaH
owa-options.jpg
LVL 1
pomah1Asked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Dan ArseneauDevOps EngineerCommented:
Sounds a like Autodiscover.  Outlook 2003 doesn't use it, Outlook 2010 is more forgiving.
pomah1Author Commented:
Test E-mail Autoconfiguration Log:
SNTP=user@company.com
Attempting URL https://mail1.company.internal/autodiscover/autodiscover.xml found throug SCP
Autodiscover to https://mail1.company.internal/autodiscover/autodiscover.xml starting
GetLastError=12044; httpStatus=0
GetLastError=12015; httpStatus=401
GetLastError=0 httpStatus=401
GetLastError=0 httpStatus=200
Autodicover to https://mail1.company.internal/autodiscover/autodiscover.xml succeeded (0x00000000)
Dan ArseneauDevOps EngineerCommented:
Make sure IIS is set to ignore Client Certificates.
The 7 Worst Nightmares of a Sysadmin

Fear not! To defend your business’ IT systems we’re going to shine a light on the seven most sinister terrors that haunt sysadmins. That way you can be sure there’s nothing in your stack waiting to go bump in the night.

pomah1Author Commented:
Will this affect OWA in any way?
Dan ArseneauDevOps EngineerCommented:
No.  By default, the setting should be "Ignore".
pomah1Author Commented:
I have set to "accept"
Is this needs to be done for"default website" or any particular vDir?
Dan ArseneauDevOps EngineerCommented:
You shouldn't have any issues setting it to ignore for the entire site unless there is some other component on the Exchange server that set it.  Then a iisreset /noforce will be in order.

Edit: Please check the RpcWithCert site.  It should be set to Required but that's it.

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
pomah1Author Commented:
Thank you,

that took care of Outlook 2007 prompts for credentials. But issue with OWA where Options page wouldn't load still exists.



Pomah
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Exchange

From novice to tech pro — start learning today.