Creating new outlook profile keeps asking for a password

When setting up a new profile on outlook 2013/2016/365 Outlook keeps asking for a password... When doing the same from Outlook 2010 no issues... anyone got an idea. I'm stuck with our migration from Exchange 2007 to Exchange 2013...
OWA and mobile access works fine...
LVL 2
Filip HeensAsked:
Who is Participating?
 
Filip HeensAuthor Commented:
Finally we where able to solve this.
It had to do with the SPN not being updated correctly and this resulted in a Kerberos error...
(System Event ID 4)
The Kerberos client received a KRB_AP_ERR_MODIFIED error from the server s1$. The target name used was HTTP/autodiscover.xxx.xxx.be. This indicates that the target server failed to decrypt the ticket provided by the client. This can occur when the target server principal name (SPN) is registered on an account other than the account the target service is using. Ensure that the target SPN is only registered on the account used by the server. This error can also happen if the target service account password is different than what is configured on the Kerberos Key Distribution Center for that target service. Ensure that the service on the server and the KDC are both configured to use the same password. If the server name is not fully qualified, and the target domain (xxx.LOCAL) is different from the client domain (xxx.LOCAL), check if there are identically named server accounts in these two domains, or use the fully-qualified name to identify the server.

I had to remove the SPN and then readd it and run the
.\RollAlternateServiceAccountPassword.ps1 -ToSpecificServer S1 -GenerateNewPasswordFor xxx\xxxASA$
.\RollAlternateServiceAccountPassword.ps1 -ToSpecificServer s2.xxx.local -CopyFrom s1. xxx.local
0
 
Sandeep KumarAssociate ConsultantCommented:
There could be some configuration problem that's why you are getting that error prompt. What is the status of Exchange Migration? Configure Outlook just after the completion of Exchange server migration with proper configurations.
0
 
Hello ThereSystem AdministratorCommented:
Go to Control Panel -> User Accounts -> Credential Manager -> Remove the password
Then open Outlook and make sure that the option 'Save/Remember password' is ticked.
You can find it under Outlook -> File tab -> Info -> Account Settings -> Account Settings... -> Double-click on your account -> Find the setting to store the password.
0
Has Powershell sent you back into the Stone Age?

If managing Active Directory using Windows Powershell® is making you feel like you stepped back in time, you are not alone.  For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why.

 
Filip HeensAuthor Commented:
Sandeep,
As far as I can see Exchange migration is finished (except the move of 1200 mailboxes).
We use new URL's for the remote (and internal) Connection to the exchange and keep the (old) URLs for the Exchange 2007 Connection...
Only autodiscover.domain.com is pointing to the new servers, the URL to the new server for all the other services (oab, owa, outlookanywhere, ecp, ...) is ex2013.domain.com
Everything works fine, an Outlook 2010 can create the profile without problems and work as it should... only Outlook 2013/2016/365 are having the issues...
Hello,
first I need to be able to create the profile, otherwise I can't change those options ;-) and the problem already arises when creating the profile...
0
 
J SSenior Systems AdministratorCommented:
I would start by reviewing  your migration and coexistence of Exchange 2007 to Exchange 2013. The newer versions of outlook rely heavily on autodiscover being properly configured.

These articles should help

https://blogs.technet.microsoft.com/meamcs/2013/07/25/part-1-step-by-step-exchange-2007-to-2013-migration/

https://vanhybrid.com/2012/10/09/exchange-2013-interoperability-with-legacy-exchange-versions/
1
 
Sara TeasdaleCommented:
You need to configure a certificate and autodiscover, whether internal or external or both to get things humming along.

Use the Exchange connectivity analyzer to check for connectivity and configuration problems in Exchange or see the links below for additional resources:

https://www.experts-exchange.com/articles/17339/Understanding-and-Setting-Up-AutoDiscover-for-Exchange-2010-2013.html

https://www.falconitservices.com/support/KB/Lists/Posts/Post.aspx?ID=209

https://technet.microsoft.com/en-us/library/hh529912(v=exchg.150).aspx
1
 
Filip HeensAuthor Commented:
We're looking with MS support onto this problem...
Even they can't find it at the moment... I did however made some progress on Friday/this weekend... remote it works fine now... Outlook 2013-2016-365 all connect fine now... Outlook 2010 still works (this was already working fine before).
Internally however, I still can't make a profile in Outlook 2013-2016-365 and there also Outlook 2010 has no issues...
Internally I have an old profile in Outlook 2013, where (earlier, before the problems started) I was able to setup a profile... That one keeps asking for a password, but I works fine without any issue for the rest, I only have the notification "password needed"... beside that notification, everything works, I can send and receive mail. And when I go check the Connection status in Outlook 2013 I have no errors...  really strange... (if/when I get it solved I'll update this, but in the meantime... has anybody has an idea???)
0
 
Filip HeensAuthor Commented:
Since I found this with MS Support, I'll use my comment as the best solution ;-)
Thanks everybody for helping
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.