Exchange 2010 - Outlook clients receiving an error stating "The name on the security certificate is invalid or does not match the name of the site"

I have an in house Exchange Server (Internal name DC01 - local IP 192.168.1.2) FQDN mail.mydomain.com
Remote users access the Server via Http and have no issues connecting and do not receive the certificate error. They have the following settings.
Server mail.mydomain.com
username  the user's ID
Proxy settings
https  mail.mydomain.com
msstd:mail.mydomain.com
basic auth

Internal users receive the error message with the following settings
server dc01.mydomain.local
username  user's ID
no proxy settings.

Internal DNS A record  mail.mydomain.com points to the IP address of the Exchange server 192.168.1.2.
Does anyone know how to resolve this issue with OL.

Thanks in advance
Ollie BrancheAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

MASEE Solution Guide - Technical Dept HeadCommented:
Please follow my article to resolve this issue.
Technet
EE
If not resolved please let me know
Ollie BrancheAuthor Commented:
Sorry for the long delay.
I followed the steps in the article and the issue still remains
MASEE Solution Guide - Technical Dept HeadCommented:
Can you post the error here?

Do you have autodiscover.emaildomain.com and mail.emaildomain.com in your certificate?
Can you see your common name(i.e. mail.emaildomain.com) in the results of the below command?
Get-clientAccessServer | fl Name,AutoDiscoverServiceInternalUri
Get-OabVirtualDirectory |  fl Server,Name,internalurl,externalurl
Get-WebServicesVirtualDirectory | fl name,internalurl,externalurl

Open in new window

Do you have below A records created which points to Exchange2010 server internal IP?
mail.emaildomain.com
autodiscover.emaildomain.com

If all these done you shoud not get certificate error
Big Business Goals? Which KPIs Will Help You

The most successful MSPs rely on metrics – known as key performance indicators (KPIs) – for making informed decisions that help their businesses thrive, rather than just survive. This eBook provides an overview of the most important KPIs used by top MSPs.

Ollie BrancheAuthor Commented:
No error messages. Outlook just pops a message stating The name on the security certificate is invalid or does not match the name of the site.
MASEE Solution Guide - Technical Dept HeadCommented:
Did you follow my article?

Did you try what I suggested in my last post?

After doing that please run the belwo commands in your Exchange powerShell and post the results. All these explained in my article in my first post.
1. Get-clientAccessServer | fl Name,AutoDiscoverServiceInternalUri
2. Get-OabVirtualDirectory |  fl Server,Name,internalurl,externalurl
3. Get-WebServicesVirtualDirectory | fl name,internalurl,externalurl

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
MASEE Solution Guide - Technical Dept HeadCommented:
You should select my first port as answer as all these explained in detail in my article which will help others in future
Thissitesucks tohellwithEECommented:
Hi MAS, I have the same issue, and get internal and external URLs for 2/3 of the powershell commands, the last one (Get-webservices) shows no external URL. I am getting errors for autodiscover.server.com and mail.server.com. Please advise.
Thissitesucks tohellwithEECommented:
Also, autodiscover has a host (a) that's using autodiscover.domain.com for it's FQDN. Is that correct? My error is twice-fold, mail.domain.com is showing a "name does not match" as well as autodiscover.domain.com showing the same error. Thanks in advance!
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Exchange

From novice to tech pro — start learning today.