Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
?
Solved

Exchange and DNS settings for Outlook 2013 and 2016

Posted on 2018-01-12
28
High Priority
?
83 Views
Last Modified: 2018-01-15
Hi All Experts.

I've network with new Exchange 2013
Computers (Windows 10) with Outlook 2007 and 2010 (domain members or not) doesn't have any problem to connect to Exchange
Outlook 2013 and 2016 computers that are not part of domain (Windows 10 home edition) has problem to configure outlook.
For the first time when I try to connect new profile to Exchange Outlook is asking for Name, email and password, then is keep prompting for password all the time.

There is no way to connect.

I assume there is some problem with new way of authentication in new Outlook 2013 and 2016 but I can't figure out what I need to change in my network configuration to make this work.
0
Comment
Question by:Tom Cieslik
  • 12
  • 9
  • 3
  • +2
28 Comments
 
LVL 7

Expert Comment

by:Hello There
Have you checked Remember password? HERE

Close “Microsoft Outlook” >> Click on “Start” button >> type "Credential” in the search box >>you will then see ‘Credential Manager’ >> Click on “Credential Manager”.
Under “Generic Credentials”, you will most likely see an entry that has Outlook in the name.
Delete it. In fact, you can delete all the entries in Generic Credentials if you like.
Close Credential Manager Window and start “Microsoft Outlook”.
If it asks for a password, enter the password and check for it to remember the password.

More suggestion are HERE.
0
 
LVL 27

Author Comment

by:Tom Cieslik
I'm testing it on new laptop and there is nothing about outlook in Credentials Manager since profile was never created. Because of this problem Windows did not saved any information. Profile was never finished, so there is no information under Mail 32-bit in control panel to.
0
 
LVL 30

Expert Comment

by:Randy Downs
Your computers need to be on the domain or connected via VPN to use Exchange server. Since you have Home versions of Windows 10 that's not going to be an alternative.

As an alternative you may want to setup Outlook on the web.
0
Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

 
LVL 27

Author Comment

by:Tom Cieslik
Why ?
I have computer in home that is not part of domain and I can connect easily to our company Exchange server.
All I need to do is put password when I run Outlook, but this is Outlook 2010.
What Microsoft have changed in Outlook 2013 and 2016 with connection Exchange server ?
Why connection is not available for non-domain members ?
0
 
LVL 30

Expert Comment

by:Randy Downs
Is your computer at home connected via a VPN? Is it Win 10 home version?
0
 
LVL 30

Accepted Solution

by:
Randy Downs earned 1500 total points
Maybe this will help.

The key text being:

An option is set in the Domain Controller Group Policy to deny NTLM Authentication requests.  

The option is found in the  Domain Controller Group Policy under

  Policies

    Windows Settings

       Security Settings

         Local Policies

             Security Options

                 Network Security:Restrict NTLM:NTLM Authentication in this domain - Deny all

SOLUTION

Setting this Option to Disable will remove the restriction and things will begin to work normally.

Do not forget to run gpupdate on the servers if you want the change to be applied immediately.
0
 
LVL 27

Author Comment

by:Tom Cieslik
Randy Downs - VPN is not helping at all since computer can't connect from internal company network to.

I have changed settings for Computer configuration in GPO and updated policy on Domain Controller, then I've try to connect to Exchange from home without VPN and still no success
0
 
LVL 39

Expert Comment

by:Mahesh
do you have auto discover dns record published?
domain joined client find SCP in ad and can connect but workgroup machines not
publish auto discover record in dns, point machine to ad dns server and then try to configure outlook again
it's auto discover who provide server name to client to connect with
0
 
LVL 30

Expert Comment

by:Randy Downs
Try pinging the Exchange server by its name. Try again with the ip.

You may also want to look at ipconfig /all to see what you are using for DNS.
0
 
LVL 27

Author Comment

by:Tom Cieslik
I have autodiscover Forwar lookup zone

if I'll go to:  https://autodiscover.domain.com/autodiscove.xml, then OWA pops up
0
 
LVL 27

Author Comment

by:Tom Cieslik
Randy Downs - Outlook 2007 and 2010 working OK with no issues
0
 
LVL 27

Author Comment

by:Tom Cieslik
There is no address or autodiscover error, It must be something with authentication, If computer is not part of domain, there is no way to autheniticate using Outlook 2013 and above, but 2010 and lower versions working OK
0
 
LVL 30

Expert Comment

by:Randy Downs
Can you downgrade one of the problem computers to Outlook 2007 and 2010 to see if they will work? How many computers have issues?
0
 
LVL 30

Expert Comment

by:Randy Downs
proxy enabled that has your own domain listed as an exception?

proxy issue with Outlook 2013.

There are work arounds if you can't install the update.

To resolve this issue, install the February 10, 2015, update for Outlook 2013. For information about this update, click the following article number to view the article in the Microsoft Knowledge Base:
2956087  February 10, 2015, update for Outlook 2013 (KB2956087)
0
 
LVL 39

Assisted Solution

by:Mahesh
Mahesh earned 1500 total points
check authentication method with outlook anywhere on CAS server, it should be NTLM for external and internal both and same at client end as well
https://community.spiceworks.com/topic/1162161-exchange-2013-outlook-prompt-for-login
0
 
LVL 27

Author Comment

by:Tom Cieslik
[PS] C:\Windows\system32>Get-OutlookAnywhere -Server email | fl *Internal*


InternalHostname                   : email.domain.com
InternalClientAuthenticationMethod : Ntlm
InternalClientsRequireSsl          : True

[PS] C:\Windows\system32>

[PS] C:\Windows\system32>Get-OutlookAnywhere -Server email | fl *External*


InternalHostname                   : email.domain.com
InternalClientAuthenticationMethod : Ntlm
InternalClientsRequireSsl          : True

[PS] C:\Windows\system32>

Same authentication methods for Internal and External

I have 20 new out of the box laptops, all with Windows 10, and Office 2013. One has Office 2016. Fully patched.

It must be something with new Office, because If I'll uninstall Office 2013 and install Office 2010 on one laptop, then Outlook is connecting with no problem.

If I will upgrade Windows 10 home to Windows 10 Pro (I did it last night on one laptop) then Office 2013 is prompting for password and never finishing profile setup, but if I'll add computer to domain, there is no problem to configure Outlook 2013
0
 
LVL 27

Author Comment

by:Tom Cieslik
Get-OutlookAnywhere | FL Identity,*host*,*auth*


Identity                           : EMAIL\Rpc (Default Web Site)
ExternalHostname                   : email.domain.com
InternalHostname                   : email.domain.com
ExternalClientAuthenticationMethod : Ntlm
InternalClientAuthenticationMethod : Ntlm
IISAuthenticationMethods           : {Basic, Ntlm, Negotiate}
0
 
LVL 30

Expert Comment

by:Randy Downs
Maybe this tool will provide some insight.

Support and Recovery Assistant is a new tool that helps users troubleshoot and fix issues with various Office 365 apps and services. The app diagnoses common Outlook issues like account setup, connectivity issues, password issues, or Outlook stops responding or crashes. To identify the root cause of these issues, the app runs checks such as:
Checks licenses
Verifying users’ credentials and that Office 365 servers are reachable
Checks for updates to Outlook clients
Checks authentication
Network checks
Protocol checks
Depending on the test results, the tool can offer to automatically fix problems for users or provide instruction on recommended solutions. All the diagnostics results are saved in a log file for users to share with their Office 365 admin or support engineers for further investigation.

Because we are constantly improving it, we recommend running Support and Recovery Assistant whenever you have issues with Outlook or Office 365 for business.
0
 
LVL 27

Author Comment

by:Tom Cieslik
Randy Downs - thank you for link to Microsoft connectivity analyzer.
I know this website and did test many times.

Like I said again, there is no issue with Outlook 2010.
Outlook 2013 prompting for password again and again  from INSIDE company and OUTSIDE company if computer is not part of domain.
0
 
LVL 47

Expert Comment

by:Craig Beck
You don't NEED to be on a domain to authenticate to any version of Exchange. If you put the exchange server details in manually it should work fine.
0
 
LVL 30

Expert Comment

by:Randy Downs
Craig Beck brings up a good point. I assume you have tried entering credentials manually. Perhaps the user name needs to be entered in the format \domain\username
0
 
LVL 27

Author Comment

by:Tom Cieslik
It doesn't matter guys if I put server information manually. In auto mode it is finding server with no problem, then is attempting to log in, and is comming back asking for password.
It must be something wrong od different in authentication protocol in Outlook 2013
0
 
LVL 30

Expert Comment

by:Randy Downs
Does it make any difference if you turn off Outlook Anywhere?

Connection Tab - uncheck "Connect to Microsoft Exchange using HTTP"
0
 
LVL 47

Expert Comment

by:Craig Beck
Check the time/date on the failing clients.
0
 
LVL 27

Author Comment

by:Tom Cieslik
Randy Downs - I can't because many people using OWA from home.

Craig Beck - New computers out of the box, new patched windows, all settings are correct. I did updated one windows to pro and add it to domain and, no problem with Outlook.

So only Home Edition Windows can't set outlook correctly. It must be something with authentication
0
 
LVL 47

Expert Comment

by:Craig Beck
How are you entering the username?
0
 
LVL 27

Author Closing Comment

by:Tom Cieslik
Thank you guys.
Finally I was able to resolve issue. The problem was with authentication.
I had to make changes in GPO for whole domain and after restarting IIS I was able to configure Outlook.
Is not prompting for login and password anymore. Only once after first profile setup.

User name in Outlook wizard is in First and Last Name format and login popup in domain\username format, then outlook is replacing it as username@domain.com in login field.

It was a pain and I don't understand why Microsoft did not hard coded  any note for Exchange configuration in Outlook 2013 setup if they've changed authentication requirements.

Experience is a power :)
0
 
LVL 39

Expert Comment

by:Mahesh
what setting you altered in GPO, if you could please explain for information
0

Featured Post

[Webinar] Database Backup and Recovery

Does your company store data on premises, off site, in the cloud, or a combination of these? If you answered “yes”, you need a data backup recovery plan that fits each and every platform. Watch now as as Percona teaches us how to build agile data backup recovery plan.

Join & Write a Comment

You finally migrated Public Folders to Office 365, decommissioned the Public Folder mailbox database and since then, when you send an email from on-premise to mail-enabled Public Folders, you get the following error: "Misconfigured public folder mai…
There are literally thousands of Exchange recovery applications out there. So how do you end up picking one that’s ideal for your business & purpose? By carefully scouting the product’s features, the benefits it offers you, & reading ample reviews f…
Two types of users will appreciate AOMEI Backupper Pro: 1 - Those with PCIe drives (and haven't found cloning software that works on them). 2 - Those who want a fast clone of their boot drive (no re-boots needed) and it can clone your drive wh…
As many of you are aware about Scanpst.exe utility which is owned by Microsoft itself to repair inaccessible or damaged PST files, but the question is do you really think Scanpst.exe is capable to repair all sorts of PST related corruption issues?
Suggested Courses
Course of the Month14 days, 22 hours left to enroll

578 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question