Exchange 2007 autodiscover
Hi, Please can someone link me to the right direction. Autodiscover is not working for users in our childdomain. For user@domain.local it is fine - for user@sub.domain.local it is not. At the Test-Autokonfiguration I can see that he tries to connect to the right site but I get the error x800C8203. - The Exchange server is located in the root domain. - Access to https://ex.domain.local/autodiscover/auto.xml through the browser is fine. - There not cert conflicts - all server names are listed. - Ping is also fine... Do the user from the sub domain need special permissions? Any ideas? Viele Grüße Christian
January 27th, 2011 10:15am

Hold the "ctrl" key and hit press the outlook icon in your system tray. There should be a "test e-mail autoconfiguration" and select "use autodiscover." See the following link: http://msexchangeteam.com/archive/2007/04/30/438249.aspx.
Free Windows Admin Tool Kit Click here and download it now
January 27th, 2011 11:01am

Hi Jose, I still wrote the output from test-email-autoconfiguration: 0x800C8203 This normaly means: ERROR_INTERNET_NAME_NOT_RESOLVED but he can resolve this name... Viele Grüße Christian
January 28th, 2011 12:56am

Did you try this :) http://clintboessen.blogspot.com/2010/04/0x800c8203-autodiscover.htmlClint Boessen MVP - Exchange Server, MCSE, MCITPx4, Dip Network Engineering Perth, Western Australia Blog: http://clintboessen.blogspot.com/ Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
Free Windows Admin Tool Kit Click here and download it now
January 28th, 2011 3:14am

Hi again Clint, Client certificates will be still ignored and with root users I have no issues... THX Christian
January 28th, 2011 3:20am

Bang.... Here we GO.... Cause: ---------------- The reason is because the "Keywords" attribute is missing the AutoDiscoverServiceGuid "77378f46-2c66-4aa9-a6a6-3e7a48b19596" in Active Directory under CN=Configuration, CN=Microsoft Exchange, CN=<OrganizationName>, CN=Administrative Groups, CN= Exchange Administrative Group, CN= Servers, CN=<CAS_ServerName>, CN= HTTP,CN=Autodiscover,CN=<CAS_ServerName> Resolution: ------------------------- 1. Run Adsiedit.msc 2. Expand CN=Configuration, CN=Microsoft Exchange, CN=<OrganizationName>, CN=Administrative Groups, CN= Exchange Administrative Group, CN= Servers, CN=<CAS_ServerName>, CN= HTTP,CN=Autodiscover,CN=<CAS_ServerName> 3. Right-click over CN=<CAS_ServerName>, Select Properties 4. Edit the attribute Keywords 5. Add the following enttry 7378f46-2c66-4aa9-a6a6-3e7a48b19596 6. Run the cmdlet Get-ClientAccessServer <CAS_ServerName> | fl Post the result after running the command in step 6Gulab | Skype: gulab.mallah
Free Windows Admin Tool Kit Click here and download it now
January 28th, 2011 3:26am

Hi again Clint, Client certificates will be still ignored and with root users I have no issues... THX Christian This also might be a Cause- Due to Asp.net 3.5 SP1 autodiscover.xml was corrupted. To fix it you will have to Re-created Autodiscoer Virtual directory Gulab | Skype: gulab.mallah
January 28th, 2011 3:34am

I saw that post on Experts Exchange Gulab. I didnt think it would be an issue though - the AutoDiscoverServiceGuid is part of the configuration partition! All domain partitions use information from the configuration partition. He said one of his domains work! Test it anyway :)Clint Boessen MVP - Exchange Server, MCSE, MCITPx4, Dip Network Engineering Perth, Western Australia Blog: http://clintboessen.blogspot.com/ Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
Free Windows Admin Tool Kit Click here and download it now
January 28th, 2011 3:39am

Hey can you run the test-OutlookConnectivity with the verbose switch Christian :)Clint Boessen MVP - Exchange Server, MCSE, MCITPx4, Dip Network Engineering Perth, Western Australia Blog: http://clintboessen.blogspot.com/ Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
January 28th, 2011 3:43am

I saw that post on Experts Exchange Gulab. I didnt think it would be an issue though - the AutoDiscoverServiceGuid is part of the configuration partition! All domain partitions use information from the configuration partition. He said one of his domains work! Test it anyway :) Clint Boessen MVP - Exchange Server, MCSE, MCITPx4, Dip Network Engineering Perth, Western Australia Blog: http://clintboessen.blogspot.com/ Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread. hmmm...than it got to be what i am thinking....Gulab | Skype: gulab.mallah
Free Windows Admin Tool Kit Click here and download it now
January 28th, 2011 3:43am

First Get-ClientAccessServer|fl*auto* [PS] C:\Windows\System32>Get-ClientAccessServer|fl *auto* AutoDiscoverServiceCN : Ex07 AutoDiscoverServiceClassName : ms-Exchange-AutoDiscover-Service AutoDiscoverServiceInternalUri : https://ex07.tifi.net/Autodiscover/Autodiscover.xml AutoDiscoverServiceGuid : 77378f46-2c66-4aa9-a6a6-3e7a48b19596 AutoDiscoverSiteScope : {Hamburg} @Gulab: Keyword is set to 77378f46-2c66-4aa9-a6a6-3e7a48b19596 and site=Hamburg. Two entries... test-OutlookConnectivity is not available but Test-OutlookWebServices|fl (only AutoConnectivityService parts listed): Id : 1003 Type : Information Message : AutoConnectivity will be tested with E-Mail-Address Administrator@public.eu Id : 1007 Type : Information Message : Server Ex07.tifi.net with public name https://ex07.domain.net/EWS/Exchange.asmx will be testet Id : 1019 Type : Information Message : Found connection point for AutoConnectivityService. URL https://Ex07.tifi.net/Autodiscover/Autodiscover.xml. Id : 1006 Type : Information Message : Connection established for AutoConnectivityService at https://Ex07.tifi.net/Autodiscover/Autodiscover.xml Id : 1016 Type : Information Message : [EXPR]-'AS' not configured for the user. Id : 1015 Type : Success Message : [EXPR]-Success to Service 'OAB' bei . Die verstrichene Zeit betrug 0 Millisekunden. Id : 1006 Type : Success Message : Successfully tested AutoConnectivityService. I deleted some parts for UM/RPC... Do I have to add an AutoDiscoverScope for the other site? Thx and best regards Christian
January 28th, 2011 4:31am

But I believe it is not neccessary, only if I have multiple sites and I want to use a special site, or? http://blogs.msdn.com/b/brad_hughes/archive/2007/09/11/autodiscoversitescope-and-client-only-sites.aspx
Free Windows Admin Tool Kit Click here and download it now
January 28th, 2011 4:34am

Run Test-OutlookWebServices -ver |fl <3 Clint Boessen MVP - Exchange Server, MCSE, MCITPx4, Dip Network Engineering Perth, Western Australia Blog: http://clintboessen.blogspot.com/ Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
January 28th, 2011 4:36am

Agree, its not necessary...Gulab | Skype: gulab.mallah
Free Windows Admin Tool Kit Click here and download it now
January 28th, 2011 4:40am

Do I have to add an AutoDiscoverScope for the other site? Answer: No. When you ran Test-OutlookWebServices -ver |fl did you get any more information? I also think its time we bump up the logging! Get-EventLogLevel "MSExchange Autodiscover" | Set-EventLogLevel -Level Expert Clint Boessen MVP - Exchange Server, MCSE, MCITPx4, Dip Network Engineering Perth, Western Australia Blog: http://clintboessen.blogspot.com/ Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
January 28th, 2011 4:47am

I also think its time we bump up the logging. Get-EventLogLevel "MSExchange Autodiscover" | Set-EventLogLevel -level expert Perform this on both the working server and the server that does not work and compare the logs!Clint Boessen MVP - Exchange Server, MCSE, MCITPx4, Dip Network Engineering Perth, Western Australia Blog: http://clintboessen.blogspot.com/ Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
Free Windows Admin Tool Kit Click here and download it now
January 28th, 2011 4:53am

[PS] C:\Windows\System32>Test-OutlookWebServices -ver nicolas@sub.domain.net |fl AUSFÜHRLICH: Test-OutlookWebServices : Die Verarbeitung wird begonnen. AUSFÜHRLICH: Die Outlook-Webdienste werden getestet. Id : 1003 Type : Information Message : Die AutoErmittlung wird gleich mit E-Mail-Adresse nstylianides@public1.eu getestet. Id : 1006 Type : Information Message : Es wurde eine Verbindung mit dem AutoErmittlungsdienst bei https://Ex 07.domain.net/Autodiscover/Autodiscover.xml hergestellt. Id : 1016 Type : Success Message : [EXCH]-Erfolg beim Herstellen der Verbindung mit dem Dienst 'AS' bei https://ex07.domain.net/EWS/Exchange.asmx. Die verstrichene Zeit betrug 670 Millisekunden. Id : 1015 Type : Success Message : [EXCH]-Erfolg beim Herstellen der Verbindung mit dem Dienst 'OAB' bei https://ex07.domain.net/EWS/Exchange.asmx. Die verstrichene Zeit betru g 0 Millisekunden. Id : 1014 Type : Success Message : [EXCH]-Erfolg beim Herstellen der Verbindung mit dem Dienst 'UM' bei https://ex07.domain.net/UnifiedMessaging/Service.asmx. Die verstrichene Zeit betrug 15 Millisekunden. Id : 1016 Type : Information Message : [EXPR]-'AS' ist nicht für diesen Benutzer konfiguriert. Id : 1015 Type : Success Message : [EXPR]-Erfolg beim Herstellen der Verbindung mit dem Dienst 'OAB' bei . Die verstrichene Zeit betrug 0 Millisekunden. Id : 1014 Type : Information Message : [EXPR]-'UM' ist nicht für diesen Benutzer konfiguriert. Id : 1017 Type : Success Message : [EXPR]-Erfolg beim Herstellen der Verbindung mit dem Dienst 'RPC/HTTP ' bei https://ex.public.com/Rpc. Die verstrichene Zeit betrug 0 Millisekunden. Id : 1006 Type : Success Message : Der AutoErmittlungsdienst wurde erfolgreich getestet. AUSFÜHRLICH: Test-OutlookWebServices : Die Verarbeitung wird beendet. --------------------------- [PS] C:\Windows\System32>Test-OutlookWebServices -ver we@domain.net |fl AUSFÜHRLICH: Test-OutlookWebServices : Die Verarbeitung wird begonnen. AUSFÜHRLICH: Die Outlook-Webdienste werden getestet. Id : 1003 Type : Information Message : Die AutoErmittlung wird gleich mit E-Mail-Adresse C.Weihs@public.eu gete stet. Id : 1006 Type : Information Message : Es wurde eine Verbindung mit dem AutoErmittlungsdienst bei https://Ex 07.domain.net/Autodiscover/Autodiscover.xml hergestellt. Id : 1016 Type : Success Message : [EXCH]-Erfolg beim Herstellen der Verbindung mit dem Dienst 'AS' bei https://ex07.domain.net/EWS/Exchange.asmx. Die verstrichene Zeit betrug 280 Millisekunden. Id : 1015 Type : Success Message : [EXCH]-Erfolg beim Herstellen der Verbindung mit dem Dienst 'OAB' bei https://ex07.domain.net/EWS/Exchange.asmx. Die verstrichene Zeit betru g 0 Millisekunden. Id : 1014 Type : Success Message : [EXCH]-Erfolg beim Herstellen der Verbindung mit dem Dienst 'UM' bei https://ex07.domain.net/UnifiedMessaging/Service.asmx. Die verstrichene Zeit betrug 15 Millisekunden. Id : 1016 Type : Information Message : [EXPR]-'AS' ist nicht für diesen Benutzer konfiguriert. Id : 1015 Type : Success Message : [EXPR]-Erfolg beim Herstellen der Verbindung mit dem Dienst 'OAB' bei . Die verstrichene Zeit betrug 0 Millisekunden. Id : 1014 Type : Information Message : [EXPR]-'UM' ist nicht für diesen Benutzer konfiguriert. Id : 1017 Type : Success Message : [EXPR]-Erfolg beim Herstellen der Verbindung mit dem Dienst 'RPC/HTTP ' bei https://ex.public.com/Rpc. Die verstrichene Zeit betrug 0 Millisekunden. Id : 1006 Type : Success Message : Der AutoErmittlungsdienst wurde erfolgreich getestet. AUSFÜHRLICH: Test-OutlookWebServices : Die Verarbeitung wird beendet.
January 28th, 2011 5:35am

No error when I enable the "Get-EventLogLevel 'MSExchange Autodiscover' | Set-EventLogLevel -level expert". I see an information that the Autodiscover request processed successful. Informationen 28.01.2011 12:11:32 MSExchange Autodiscover 2004 Die Anforderung zur AutoErmittlung wurde erfolgreich verarbeitet, Benutzer-SID: "S-1-5-21-1756966931-3309897669-1823416043-1113", HostAddress: "192.168.10.52", HostName: "192.168.10.52". Test E-mail AutoConfiguration shows: - Autodiscover get settings begin - LegacyDN= - SMTP=Nicolas@child.domain.net Attempting URL https://ex07.domain.net/autodiscover/aut..xml found throgh SCP Autodiscover to https://ex07.domain.net/autodiscover/aut..xml starting Autodiscover to https://ex07.domain.net/autodiscover/aut..xml failed (0x800c8203) .... So it finds the URL but why 0x800c8203 grrrr
Free Windows Admin Tool Kit Click here and download it now
January 28th, 2011 6:39am

Ok, now I checked the IIS Its crazy. I got a success response but the sc-win32-status says 64. net helpmsg 64 says me that "The specified network name is no longer available". Lets see what google tells me to this issues Here are some log examples #Date: 2011-01-28 00:00:02 #Fields: date time s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs(User-Agent) sc-status sc-substatus sc-win32-status time-taken 2011-01-28 12:11:40 192.168.93.3 POST /Autodiscover/Autodiscover.xml - 443 Child\Nico 192.168.10.52 Microsoft+Office/12.0+(Windows+NT+5.1;+Microsoft+Office+Outlook+12.0.6545;+Pro) 200 0 64 93 2011-01-28 10:55:04 192.168.93.3 POST /Autodiscover/Autodiscover.xml - 443 Child\Acct2 192.168.10.48 Microsoft+Office/12.0+(Windows+NT+5.1;+Microsoft+Office+Outlook+12.0.6545;+Pro) 200 0 64 140 2011-01-28 13:02:29 192.168.93.3 POST /Autodiscover/Autodiscover.xml - 443 DOMAIN\CP 192.168.93.96 Microsoft+Office/14.0+(Windows+NT+6.1;+Microsoft+Outlook+14.0.5128;+Pro) 200 0 0 0 2011-01-28 11:03:28 192.168.93.3 POST /Autodiscover/Autodiscover.xml - 443 DOMAIN\Hit 192.168.93.182 Microsoft+Office/14.0+(Windows+NT+5.1;+Microsoft+Outlook+14.0.4760;+Pro) 200 0 0 15 2011-01-28 10:55:01 192.168.93.3 POST /Autodiscover/Autodiscover.xml - 443 DOMAIN\We 192.168.94.44 Microsoft+Office/14.0+(Windows+NT+6.1;+Microsoft+Outlook+14.0.4760;+Pro) 200 0 0 62 Any ideas? I will install a second CAS temporaly to see if it has the same issues... Viele Grüße Christian
January 29th, 2011 8:25am

you have to generate a new DNS record: _autodiscover._tcp.sub.domain.local pointing to the Cname of your Exchange Server regards Thomas Paetzold visit my blog on: http://susu42.wordpress.com
Free Windows Admin Tool Kit Click here and download it now
January 30th, 2011 1:29pm

I changed the autodiscover url configuration to ssl is not required and logged the traffic with wireshark. Result: The email address from child users could not resolved!: <?xml version="1.0" encoding="utf-8"?><Autodiscover xmlns="http://schemas.microsoft.com/exchange/autodiscover/outlook/requestschema/2006"><Request><EMailAddress>nicolas@aegispharma.eu</EMailAddress><AcceptableResponseSchema>http://schemas.microsoft.com/exchange/autodiscover/outlook/responseschema/2006a</AcceptableResponseSchema></Request></Autodiscover>HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Length: 374 Content-Type: text/html; charset=utf-8 Expires: -1 Server: Microsoft-IIS/7.0 X-AspNet-Version: 2.0.50727 X-Powered-By: ASP.NET Date: Mon, 31 Jan 2011 11:55:18 GMT <?xml version="1.0" encoding="utf-8"?> <Autodiscover xmlns="http://schemas.microsoft.com/exchange/autodiscover/responseschema/2006"> <Response> <Error Time="12:55:18.5735927" Id="3942132706"> <ErrorCode>500</ErrorCode> <Message>Die E-Mail-Adresse kann nicht gefunden werden.</Message> <DebugData /> </Error> </Response> </Autodiscover>
January 31st, 2011 9:00am

Have yu got an autodiscover entry in your DNS Server? The Autodiscover entry should be an Service Record. and looks like autodiscover._tcp.sub.domain.local pointing to the Cname of your Exchange Server Port 443 regards Thomas Paetzold visit my blog on: http://susu42.wordpress.com
Free Windows Admin Tool Kit Click here and download it now
February 1st, 2011 10:51am

Delegation, Stub Zones or Conditional Forwarders (whichever of the 3 you are using) are configured correctly i assume! You tried everything I would have - very strange. Maybe open a support case on this one - I would love to know the answer!Clint Boessen MVP - Exchange Server, MCSE, MCITPx4, Dip Network Engineering Perth, Western Australia Blog: http://clintboessen.blogspot.com/ Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
February 2nd, 2011 11:04am

Do you have RSA enabled on CAS server?Gulab | Skype: gulab.mallah
Free Windows Admin Tool Kit Click here and download it now
February 2nd, 2011 1:53pm

I configured a Stub Zone and no RSA is used. It's a shame but I did not recognize that the email address realy did not exist! For new user we create a smtp address which equates the upn. This is done by an email policy which was not configured for the child domain! So user@sub.domain.local does not work and primarysmtp@maildomain.eu works... maybe the whole time. Why does Outlook use the UPN and not the primary email address? http://social.technet.microsoft.com/Forums/en-US/exchangesvrclients/thread/7b7d27a9-ddd2-420c-8bd8-b3f7acc470f2/ Furtermore it is not clear why it the request was fine from time to time: 2011-02-02 14:17:01 SUB\Alek 200 64 2011-02-02 14:17:11 SUB\Alek 206 0 2011-02-02 14:17:12 SUB\Alek 206 0 2011-02-02 14:17:22 SUB\Alek 200 64 2011-02-02 14:17:33 SUB\Alek 200 64 2011-02-02 14:18:43 SUB\Alek 200 64 2011-02-02 14:18:45 SUB\Alek 200 64 2011-02-02 14:29:27 SUB\Alek 200 0 2011-02-02 14:29:45 SUB\Alek 200 0 To make sure that the request works in the future I created the UPN-SMTP-address manually. I will check the IIS tomorrow and give you a feedack! Best regards Christian
February 2nd, 2011 3:40pm

Hi Christian, Let us know what is the status of the issue?Gulab | Skype: gulab.mallah
Free Windows Admin Tool Kit Click here and download it now
February 3rd, 2011 1:06am

Hi Gulab, Hi Clint, Thanks for your assitance! The issues is causing by different updates and it is a known issues. A fix should be available soon... Best regards Christian
February 9th, 2011 1:05am

Autodiscover tries to use your computer joined domain first then email. When autodiscover first launches it does a directory function lookups to determine what domain you're joined into and tries that first. This is observable when doing migrations and your computer is joined in a different forest and mailbox is in another forest. Outlook will attempt autodiscover of the domain your computer is joined to.James Chong MCITP | EA | EMA; MCSE | M+, S+ Security+, Project+, ITIL msexchangetips.blogspot.com
Free Windows Admin Tool Kit Click here and download it now
February 9th, 2011 1:51pm

Hi everyone! Sorry for my late response! The problem occured as a result of problem with Hotfix KB2405793. The issues should be fixed in the next update... Thank you very much for your assistance! Christian ............... I finally got feedback from the next level of support. The current status is that it will be fixed in Outlook 2010 SP1 but there might also be a fix in a cumulative update. The ‘release deadline’ is currently set to the 23<sup>rd</sup> of this month (feb 2011), though this can change also. The current workaround is: Uninstall the KB2405793 Manually configure Profile
February 24th, 2011 1:02am

You can't be serious!!!!!!!!!!!! After so much of work, what is the resolution (work around) Manually configure the profile. I hope they get it fixed in RU3...Gulab | MCTS-MCITP: 2010 | MCTS-MCITP: 2007 | MCC | Skype: Gulab.Mallah
Free Windows Admin Tool Kit Click here and download it now
February 24th, 2011 1:11am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics