Outlook 2013 getting certificate error when starting - Outlook Anywhere missing?

Outlook 2013 connecting to an Exchange 2016 server and getting a certificate error. The hostname it has an issue with is the internal name of the server 'mail01.domain.local' We have a legit cert for mail.domain.com and it is the only certificate in Exchange. All the URLs in Exchange are pointed to mail.domain.com. Been through all the vdirs in ECP multiple times. I don't see mail01.domain.local in there anywhere.

Where is it picking up mail01.domain.local from in Outlook?

One thing I noticed when looking at the settings on the client is that is does not appear to be using Outlook Anywhere to connect. I don't see the option to connect via RPC over HTTP. If I try and manually set up Outlook Anywhere/RPC over HTTP, it works....but seems to drop the RPC over HTTP after a subsequent close/open of Outlook. There is still an Exchange 2010 server in the environment, but should be going away next weekend. I'm hoping there is not total fallout on the clients when the old Exchange server is decommissioned.

Funny thing is the Microsoft Remote Connectivity Analyzer says Outlook Anywhere is good.
LVL 2
mvalpredaAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Kash2nd Line EngineerCommented:
once outlook is open, CTRL or SHIFT click and it should give you option to test config. Test and post the results here.

what if you manually add the account using MSSTD
0
BembiCEOCommented:
Reading your post would lead me to a split DNS configuration...
Where is mail.domain.com pointing too from the internal perspective? The new server, old server or an external gateway?

Looking on Kash's hint, do you see any connection to the local machine name in the Test-Email AutoConfiguration dialog?

If you click on CTRL- Outlook Icon (tray icon), which connections do you see in the Microsoft Exchange Connection Status? Especially if the issue occur?

By the way, testing your decommissioning of your old server is very easy. Just shut it down if there are no mailboxes anymore. If everything is fine, nothing happens. Otherwise you may have found a possible reason.
0
mvalpredaAuthor Commented:
Is there a list of all the PowerShell commands for all the URLs? I feel like I am missing one maybe. Or is there a service I should recycle after making changes so I know they are taking effect?
0
Ultimate Tool Kit for Technology Solution Provider

Broken down into practical pointers and step-by-step instructions, the IT Service Excellence Tool Kit delivers expert advice for technology solution providers. Get your free copy now.

MAS (MVE)EE Solution GuideCommented:
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
BembiCEOCommented:
Possibly it has to do with the autodiscover process (which may work different on different Outlook versions). Several options are tried until a working option is found.

The recommendation for the cert is to have the alias, autodicover and the root inside, so i.e.
mail.mydomain.tld
autodiscover.domain.tld
domain.tld

The client tries to connect to autodiscover.domain.tld. If this name is not in the certificate, it may produce an error if requested via SSL.
0
SamiKarhulaCommented:
I had same problem. I checked URL many times those are right. I checked with ps and Management console. still my test Outlook 2016 gets cert error server shows local address exserver.domain.local. But cert properties shows *.domain.com. Any ideas what to check with EX2016 configurations.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Exchange

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.