Avatar of Bianca
BiancaFlag for Australia

asked on 

Issue with autodiscover not returning all protocols externally

I have an exchange 2007 server issue with autodiscover.  On external tests I only receive the IMAP and SMTP protocols, but when run internally I get the expected Exchange RPC and Exchange HTTP.  This is causing an issue when trying to connect external clients via outlook, that outlook thinks its an IMAP account when using autodiscover to add the account.  It think it may also be related to some external clients losing their outlook anywhere settings intermittently.

Internal Results
<?xml version="1.0" encoding="utf-8"?>
<Autodiscover xmlns="http://schemas.microsoft.com/exchange/autodiscover/responseschema/2006">
  <Response xmlns="http://schemas.microsoft.com/exchange/autodiscover/outlook/responseschema/2006a">
    <User>
      <DisplayName>Matthew Young</DisplayName>
      <LegacyDN>/o=ftssvr/ou=Exchange Administrative Group (FYDIBOHF23SPDLT)/cn=Recipients/cn=user</LegacyDN>
      <DeploymentId>84ab4871-1fbd-49f9-80bd-92300a9ddd32</DeploymentId>
    </User>
    <Account>
      <AccountType>email</AccountType>
      <Action>settings</Action>
      <Protocol>
        <Type>EXCH</Type>
        <Server>xxxx.xxxx.local</Server>
        <ServerDN>/o=ftssvr/ou=Exchange Administrative Group (FYDIBOHF23SPDLT)/cn=Configuration/cn=Servers/cn=HTFSSVR</ServerDN>
        <ServerVersion>720280B0</ServerVersion>
        <MdbDN>/o=ftssvr/ou=Exchange Administrative Group (FYDIBOHF23SPDLT)/cn=Configuration/cn=Servers/cn=HTFSSVR/cn=Microsoft Private MDB</MdbDN>
        <PublicFolderServer>xxxx.xxxx.local</PublicFolderServer>
        <AD>htfssvr.Troon.local</AD>
        <ASUrl>https://mail.xxxx.com.au/ews/exchange.asmx</ASUrl>
        <EwsUrl>https://mail.xxxx.com.au/ews/exchange.asmx</EwsUrl>
        <OOFUrl>https://mail.xxxx.com.au/ews/exchange.asmx</OOFUrl>
        <UMUrl>https://xxxx.xxxx.local/UnifiedMessaging/Service.asmx</UMUrl>
        <OABUrl>https://mail.xxxx.com.au/oab/613b6969-f29e-4022-ac19-3f46b874be44/</OABUrl>
        <CertPrincipalName>msstd:mail.xxxx.com.au</CertPrincipalName>
      </Protocol>
      <Protocol>
        <Type>EXPR</Type>
        <Server>mail.xxxx.com.au</Server>
        <ASUrl>https://mail.xxxx.com.au/EWS/Exchange.asmx</ASUrl>
        <EwsUrl>https://mail.xxxx.com.au/EWS/Exchange.asmx</EwsUrl>
        <OOFUrl>https://mail.xxxx.com.au/EWS/Exchange.asmx</OOFUrl>
        <OABUrl>https://mail.xxxx.com.au/OAB/613b6969-f29e-4022-ac19-3f46b874be44/</OABUrl>
        <CertPrincipalName>msstd:mail.xxxx.com.au</CertPrincipalName>
      </Protocol>
      <Protocol>
        <Type>WEB</Type>
        <External>
          <OWAUrl AuthenticationMethod="Fba">https://mail.xxxx.com.au/OWA</OWAUrl>
          <Protocol>
            <Type>EXPR</Type>
            <ASUrl>https://mail.xxxx.com.au/EWS/Exchange.asmx</ASUrl>
          </Protocol>
        </External>
        <Internal>
          <OWAUrl AuthenticationMethod="Basic, Fba">https://mail.xxxx.com.au/owa</OWAUrl>
          <Protocol>
            <Type>EXCH</Type>
            <ASUrl>https://mail.xxxx.com.au/ews/exchange.asmx</ASUrl>
          </Protocol>
        </Internal>
      </Protocol>
    </Account>
  </Response>
</Autodiscover>

External Results
<Autodiscover xmlns="http://schemas.microsoft.com/exchange/autodiscover/responseschema/2006">
    <Response xmlns="http://schemas.microsoft.com/exchange/autodiscover/outlook/responseschema/2006a">
        <User>
            <DisplayName>user@xxxx.com.au</DisplayName>
        </User>
        <Account>
            <AccountType>email</AccountType>
            <Action>settings</Action>
            <Protocol>
                <Type>IMAP</Type>
                <Server>xxxx.com.au</Server>
                <Port>993</Port>
                <DomainRequired>off</DomainRequired>
                <SPA>off</SPA>
                <SSL>on</SSL>
                <AuthRequired>on</AuthRequired>
                <LoginName>user@xxxx.com.au</LoginName>
            </Protocol>
            <Protocol>
                <Type>SMTP</Type>
                <Server>xxxx.com.au</Server>
                <Port>465</Port>
                <DomainRequired>off</DomainRequired>
                <SPA>off</SPA>
                <SSL>on</SSL>
                <AuthRequired>on</AuthRequired>
                <LoginName>user@xxxx.com.au</LoginName>
            </Protocol>
        </Account>
    </Response>
</Autodiscover>

Everything else appears to be working fine without issue

Any assistancee would be appreciated.
Exchange

Avatar of undefined
Last Comment
Ganesh Anand
Avatar of Ganesh Anand
Ganesh Anand
Flag of Bahrain image

I would suggest to fix the virtual directories and then check with https://testconnectivity.microsoft.com to troubleshoot on the right direction.
Avatar of Bianca
Bianca
Flag of Australia image

ASKER

I have done the troubleshooting on https://testconnectivity.microsoft.com, and all tests succeed except the connectivity to outlook test.  The autodiscover tests all pass no issues.  Could it still be virtual directories?
Avatar of Ganesh Anand
Ganesh Anand
Flag of Bahrain image

What is the error it shows to the connectivity to the outlook test

Probably you need to allow ports 6001, 6002 & 6004 and check from internet firewall.
Avatar of Bianca
Bianca
Flag of Australia image

ASKER

@ganesh

Testing Outlook connectivity.
  The Outlook connectivity test failed.
 
 Additional Details
 
Elapsed Time: 2746 ms.  

 
 
 Test Steps
 
 The Microsoft Connectivity Analyzer is attempting to test Autodiscover for user@domain.com.au.
  Autodiscover was tested successfully.
 
 Additional Details
 
Elapsed Time: 2746 ms.  
 
 
 Test Steps
 
 Attempting each method of contacting the Autodiscover service.
  The Autodiscover service was tested successfully.
 
 Additional Details
 
Elapsed Time: 2746 ms.  
 
 
 Test Steps
 
 Attempting to test potential Autodiscover URL https://domain.com.au:443/Autodiscover/Autodiscover.xml 
  Testing of the Autodiscover URL was successful.
 
 Additional Details
 
 Test Steps
 
 Attempting to resolve the host name domain.com.au in DNS.
  The host name resolved successfully.
 
 Additional Details
 

 Testing TCP port 443 on host domain.com.au to ensure it's listening and open.
  The port was opened successfully.
 
 Additional Details
 
 Testing the SSL certificate to make sure it's valid.
  The certificate passed all validation requirements.
 
 Additional Details
 
Elapsed Time: 616 ms.  

 
 Test Steps
 
 The Microsoft Connectivity Analyzer is attempting to obtain the SSL certificate from remote server domain.com.au on port 443.
  The Microsoft Connectivity Analyzer successfully obtained the remote SSL certificate.
 
 Additional Details
 
Remote Certificate Subject: CN=domain.com.au, Issuer: CN="cPanel, Inc. Certification Authority", O="cPanel, Inc.", L=Houston, S=TX, C=US.

Elapsed Time: 577 ms.  

 

 Validating the certificate name.
  The certificate name was validated successfully.
 
 Additional Details
 
Host name domain.com.au was found in the Certificate Subject Common name.

Elapsed Time: 0 ms.  

 

 Certificate trust is being validated.
  The certificate is trusted and all certificates are present in the chain.
 
 Test Steps
 
 The Microsoft Connectivity Analyzer is attempting to build certificate chains for certificate CN=domain.com.au.
  One or more certificate chains were constructed successfully.
 
 Additional Details
 
 Analyzing the certificate chains for compatibility problems with versions of Windows.
  Potential compatibility problems were identified with some versions of Windows.
 
 Additional Details
 

 Testing the certificate date to confirm the certificate is valid.
  Date validation passed. The certificate hasn't expired.
 
 Additional Details
 
The certificate is valid. NotBefore = 8/28/2017 12:00:00 AM, NotAfter = 11/26/2017 11:59:59 PM

Elapsed Time: 0 ms.  

 Checking the IIS configuration for client certificate authentication.
  Client certificate authentication wasn't detected.
 
 Additional Details
 
Accept/Require Client Certificates isn't configured.

Elapsed Time: 834 ms.  

 

 Attempting to send an Autodiscover POST request to potential Autodiscover URLs.
  The Microsoft Connectivity Analyzer successfully retrieved Autodiscover settings by sending an Autodiscover POST.
 
 Additional Details
 
Elapsed Time: 803 ms.  

 
 
 Test Steps
 
 The Microsoft Connectivity Analyzer is attempting to retrieve an XML Autodiscover response from URL https://domain.com.au:443/Autodiscover/Autodiscover.xml for user user@domain.com.au.
  The Autodiscover XML response was successfully retrieved.
 
 Additional Details
 
Autodiscover Account Settings
XML response:
<?xml version="1.0"?>
<Autodiscover xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns="http://schemas.microsoft.com/exchange/autodiscover/responseschema/2006">
 <Response xmlns="http://schemas.microsoft.com/exchange/autodiscover/outlook/responseschema/2006a">
 <User>
 <DisplayName>user@domain.com.au</DisplayName>
 </User>
 <Account>
 <AccountType>email</AccountType>
 <Action>settings</Action>
 <Protocol>
 <Type>IMAP</Type>
 <Server>domain.com.au</Server>
 <Port>993</Port>
 <DirectoryPort>0</DirectoryPort>
 <ReferralPort>0</ReferralPort>
 <SSL>on</SSL>
 <DomainRequired>off</DomainRequired>
 <SPA>off</SPA>
 <AuthRequired>on</AuthRequired>
 <LoginName>user@domain.com.au</LoginName>
 </Protocol>
 <Protocol>
 <Type>SMTP</Type>
 <Server>domain.com.au</Server>
 <Port>465</Port>
 <DirectoryPort>0</DirectoryPort>
 <ReferralPort>0</ReferralPort>
 <SSL>on</SSL>
 <DomainRequired>off</DomainRequired>
 <SPA>off</SPA>
 <AuthRequired>on</AuthRequired>
 <LoginName>user@domain.com.au</LoginName>
 </Protocol>
 </Account>
 </Response>
</Autodiscover>
HTTP Response Headers:
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Length: 1206
Content-Type: application/xml; charset="UTF-8"
Date: Thu, 09 Nov 2017 09:30:18 GMT
Server: Apache/2.2.29 (Unix) mod_ssl/2.2.29 OpenSSL/1.0.1e-fips mod_bwlimited/1.4


Elapsed Time: 803 ms.  

 Autodiscover settings for Outlook connectivity are being validated.
  The Microsoft Connectivity Analyzer wasn't able to validate Outlook Autodiscover settings.
 
 Additional Details
 
No account settings were returned from the Autodiscover response.

Elapsed Time: 0 ms.
ASKER CERTIFIED SOLUTION
Avatar of Ganesh Anand
Ganesh Anand
Flag of Bahrain image

Blurred text
THIS SOLUTION IS ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
See Pricing Options
Start Free Trial
Exchange
Exchange

Exchange is the server side of a collaborative application product that is part of the Microsoft Server infrastructure. Exchange's major features include email, calendaring, contacts and tasks, support for mobile and web-based access to information, and support for data storage.

213K
Questions
--
Followers
--
Top Experts
Get a personalized solution from industry experts
Ask the experts
Read over 600 more reviews

TRUSTED BY

IBM logoIntel logoMicrosoft logoUbisoft logoSAP logo
Qualcomm logoCitrix Systems logoWorkday logoErnst & Young logo
High performer badgeUsers love us badge
LinkedIn logoFacebook logoX logoInstagram logoTikTok logoYouTube logo