Link to home
Start Free TrialLog in
Avatar of jkeegan123
jkeegan123Flag for United States of America

asked on

Exchange 2010 - Outlook 2010 enabling CONNECT OVER HTTP by default at remote site

Hello,

I have an Exchange 2010 system installed at a client site, and there are (2) Active Directory sites configured.  The sites are configured as separate sites in Active Directory, with each site having a DC/GC, and each site having it's own separate CAS server and DATABASE server for Exchange:

NY SITE:
- DC/GC
- EXCH-NYCAS
- EXCH-NYDB

FL SITE:
- DC/GC
- EXCH-FLCAS
- EXCH-FLDB

Our INTERNET DOMAIN NAME (mydomain.com) is the same as my WINDOWS DOMAIN NAME (mydomain.com).

Exchange works and connects for all users in all sites automatically, no configuration necessary.  Autoconfigure does its thing...but I notice that all of the Outlook 2010 clients in the FL site are defaulting to "CONNECT TO EXCHANGE OVER HTTP"...we noticed this on an EXTREMELY LARGE MAILBOX USER because their mailbox was running more slowly than you would think....we investigated and shows that FOR CAS calls, ALL calls were going to the PUBLIC IP ADDRESS of the CAS, and the CAS was then making calls back over the VPN to the database server in the FL site.  

If we UNCHECK "CONNECT OVER HTTP..." it speeds things up AMAZINGLY!  However, the next time that I close and restart Outlook, the checkmark is back and it's connecting over OUTLOOK ANYWHERE again.

How can I change this in the remote site?  The main site is fine.
Thank you!
Avatar of Satyendra Sharma
Satyendra Sharma
Flag of United States of America image

So if i understand your scenario correctly NYC is your internet facing Exchange site?
And NYC is configured to proxy to FL over your site to site vpn?

Do all the clients in the FL site connect over HTTP or only this particular one?
Any GPO setting pushed for Outlook clients in the environment specifically related to outlook anywhere settings?
ASKER CERTIFIED SOLUTION
Avatar of Simon Butler (Sembee)
Simon Butler (Sembee)
Flag of United Kingdom of Great Britain and Northern Ireland image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of jkeegan123

ASKER

@Sharma:  Yes ALL FL users are doing this.
@Simon:  I am aware of everything that you said and after posting, I got to the configurations and ... let's just say it was messy to be nice.  

I ended up setting up SPLIT DNS because autodiscover was pointing to the internet record and the internet zone was NOT an internal split zone, I ended up having to create that.  Once I created that, created an "A" record for each physical site and their corresponding CAS and exported the certs to match (AMAZINGLY all of this was wrong but the certificates SAN's were correct...) and everything was shiny happy.

Points to Simon since that is what ended up resolving it.  Thanks!