Outlook Anywhere client on different domain from server keeps asking for password
Hello,
I have an Exchange 2007 sp1 installation. My clients all work out of their homes, so they are (mostly) using PC's that are not members of the Exchange Server's (or any other) domain. Most connect via POP3, but a few use Outlook Anywhere, and a few also use OWA. Most are using Outlook 2007, but there are several 2003 and 2010 clients as well. Basically, every possible client, in every possible configuration, is represented.
The server is configured correctly with a commercial certificate. The ONLY issue I have is when a user with a PC that is a member of another domain configures Outlook in Outlook Anywhere mode. In this situation, Outlook will work just fine...but a few minutes after successfully logging into their email, Outlook will display a login box asking them for their password again. Entering the password doesn't make it go away, but at the same time, Outlook does not stop working....the password prompt can be ignored altogether without any effect whatsoever.
I know that this is related to the fact that the PC is a member of a domain other than the one Outlook is connected to, and that the reason that the password isn't making the box go away is because it's the local domain asking for it! Of course, those credentials don't work on the local domain!
Quite some time back, I found an article on the web that had a registry fix which told the local PC to stop asking for authentication to the local domain. I believe that this had to do with an Outlook Autodiscover setting in the registry. I used that registry change to successfully fix this problem at that time, but now I have another client with the same issue and I cannot locate that article. I thought I saved that URL, but I cannot find it. Every search I make comes back with information that is not applicable to my problem.
If someone knows about the fix I'm referring to, I'd sure appreciate it if they'd give me a URL or KB number I can look at.
I have an Exchange 2007 sp1 installation. My clients all work out of their homes, so they are (mostly) using PC's that are not members of the Exchange Server's (or any other) domain. Most connect via POP3, but a few use Outlook Anywhere, and a few also use OWA. Most are using Outlook 2007, but there are several 2003 and 2010 clients as well. Basically, every possible client, in every possible configuration, is represented.
The server is configured correctly with a commercial certificate. The ONLY issue I have is when a user with a PC that is a member of another domain configures Outlook in Outlook Anywhere mode. In this situation, Outlook will work just fine...but a few minutes after successfully logging into their email, Outlook will display a login box asking them for their password again. Entering the password doesn't make it go away, but at the same time, Outlook does not stop working....the password prompt can be ignored altogether without any effect whatsoever.
I know that this is related to the fact that the PC is a member of a domain other than the one Outlook is connected to, and that the reason that the password isn't making the box go away is because it's the local domain asking for it! Of course, those credentials don't work on the local domain!
Quite some time back, I found an article on the web that had a registry fix which told the local PC to stop asking for authentication to the local domain. I believe that this had to do with an Outlook Autodiscover setting in the registry. I used that registry change to successfully fix this problem at that time, but now I have another client with the same issue and I cannot locate that article. I thought I saved that URL, but I cannot find it. Every search I make comes back with information that is not applicable to my problem.
If someone knows about the fix I'm referring to, I'd sure appreciate it if they'd give me a URL or KB number I can look at.
Brian Harrington
I'm not quite sure how to correct it, but it sounds as if it is passing a kerberos ticket from it's home domain.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Fred. that would fix this issue. It prevents the kerberos pass.
ASKER
I think that IS the document I was looking for. At first it didn't seem familiar, but as I read through it, it started to ring a few bells. At any rate, it seems to have fixed my issue, so thanks a lot!