Hi, I am in the process of buliding a DR Site for Exchange 2010 Organization. I would like to know is it safe to configure the Autodiscover Internalurl same as my Primay Site. Primary and DR Datacenter are is different Active Directory Site. I have configured the SAN certificate for my Exchange with webmail.domainname, Autodiscover.domainname.If this is not safe then what is the best method to follow. Below is my Exchange org. Primary Site: Active Directory Site 1 1. Two HUB & CAS 2. Two Mailbox server with DAG. Autodiscover url - Autodiscover.domainname DR Site: Active Directory Site 2 1. One HUB and CAS 2. One Mailbox with DAG member ship to primary datacenter. Autodiscover url= ? Thanks in advance.. Nagaraj N

This link might help you: Understanding Proxying and Redirection http://technet.microsoft.com/en-us/library/bb310763.aspx These will help you, when you move Active Mailboxes from Site A to Site B. Client will be redirected to second site. One CAS server will be internet facing others don’t, and will not have external url ! You would have problem only when both CAs&HUB server in Site A fail. Solution like TMG will help in these situations; others are manual, like editing DNS record, and fixing OWA url. I`m trying to setup dual proxying, but id does not work, jet.

Hi MaliStane, Thanks for your reply. The article has helped me vry much in understanding CAS proxy and redirection from Internet Active Directory Sites to Non Internet facing Active Directory Site. However I would like to know should i have to use commom Autodiscover url on the DR site CAS Server same as in Primary Site CAS server? Thanks in advance.Nagaraj N

Hi Nagaraj N, Per my known, you do not need use the common Autodiscoverserviceinternaluri on the DR site CAS server as the primary Site CAS server. By default, when you build the cas server in the DR site, it would has a default uri for the cas server, Assume the CAS server name is CAS2.domain.com, and the uri would be https://cas2.domain.com/autodiscover/autodiscover.xml , you could check it by: get-clientaccessserver -identity casservername |fl and the internal clients (outlook 2007 or oulook 2010) would search scp record through the DC and found it, because the client would use the CAS server which is in the same site as the client, and then everything would work well. As normal, there is also a parameter AutoDiscoverSiteScope which specifies the site for which the Autodiscover service is authoritative. For external user client, http://technet.microsoft.com/en-us/library/bb310763.aspx give good instruction for the scenario. Regards! Gavin

Hi Gavin-Zhang, Thanks for your reply. Do you mean to say that in my SAN certificate CAS2.domainname.com should also be there so that i wont get any certificate promt for my clients.. Thanks.Nagaraj N

With proper setup, you will only need one certificate, for Web services + autodiscovery, if one CAS&HUB is going to be internet facing and only one internet access point for web services, not geographically dispersed setup. But you will need one for smtp… Well you can go with SAN.

Hi Nagaraj N, Sure, you are right, you could do that. Regards! Gavin

For the internet, you have to publish SRV record for Autodiscovery. You do not need to publish like http://autodiscovery.domian.com