How do clients know when to use Internal or external URL of virtual directories ?

Hi!

Quick question! Lets say I set outlookanywhere to:

InternalClientAuthenticationMethod: NTLM

InternalHostname: mail.domain.com

ExternalClientAuthenticationMethod: Basic

ExternalHostname: webmail.domain.com

How does the client determine what url and auth to use? Is it just trying with internal first and if its a successful connection it continues to use it? Is it based on Active directory sites ?

Thanks!

June 18th, 2015 10:02pm

Hi Samus,

all works by autodiscover.

Internally, Client locates a SCP that is in CAS server and receive the Autodiscover information

Externally, It cannot locate a SCP so It look for the following addresses..

https://<e-maildomain/autodiscover/autodiscover.xml
https://autodiscover.e-maildomain/autodiscover/autodiscover.xml

https://technet.microsoft.com/en-us/library/bb124251%28v=exchg.150%29.aspx?f=255&MSPPError=-2147217396

Best regards.

Carlos

Free Windows Admin Tool Kit Click here and download it now
June 18th, 2015 10:30pm

Sure it uses autodiscover to find the URLs for Outlook Anywhere, but how does it determine if it is internal or external?

If its able to use SCP, does it consider itself to be internal then? And using the internal URL?

Lets say the client is using VPN and can use SCP, will it use the internal URL then, even though the VPN site is note defined in active directory sites and service?


June 18th, 2015 11:07pm

If you are connected by VPN so you have an Internal IP, so you can locate a DC , any CAS so the SCP too.
Free Windows Admin Tool Kit Click here and download it now
June 19th, 2015 12:31am

Well! Thats not my question! :)

My question is regarding how the client choose between the internal or external url that it gets from Autodiscover.

What you are saying, If a client can connect using the internal URL of OA, it will? Otherwise it will fail over to External url ?


June 19th, 2015 12:45am

Sure it uses autodiscover to find the URLs for Outlook Anywhere, but how does it determine if it is internal or external?

If its able to use SCP, does it consider itself to be internal then? And using the internal URL?

Lets say the client is using VPN and can use SCP, will it use the internal URL then, even though the VPN site is note defined in active directory sites and service?


  • Edited by Samus-Aran Friday, June 19, 2015 3:05 AM
Free Windows Admin Tool Kit Click here and download it now
June 19th, 2015 3:04am

Sure it uses autodiscover to find the URLs for Outlook Anywhere, but how does it determine if it is internal or external?

If its able to use SCP, does it consider itself to be internal then? And using the internal URL?

Lets say the client is using VPN and can use SCP, will it use the internal URL then, even though the VPN site is note defined in active directory sites and service?


  • Edited by Samus-Aran Friday, June 19, 2015 3:05 AM
June 19th, 2015 3:04am

Well! Thats not my question! :)

My question is regarding how the client choose between the internal or external url that it gets from Autodiscover.

What you are saying, If a client can connect using the internal URL of OA, it will? Otherwise it will fail over to External url ?


  • Edited by Samus-Aran Friday, June 19, 2015 4:44 AM
Free Windows Admin Tool Kit Click here and download it now
June 19th, 2015 4:42am

Well! Thats not my question! :)

My question is regarding how the client choose between the internal or external url that it gets from Autodiscover.

What you are saying, If a client can connect using the internal URL of OA, it will? Otherwise it will fail over to External url ?


  • Edited by Samus-Aran Friday, June 19, 2015 4:44 AM
June 19th, 2015 4:42am

should try internal first (SCP) and external later (DNS).

Maybe this link can help.

http://blogs.technet.com/b/exchange/archive/2014/03/12/client-connectivity-in-an-exchange-2013-coexistence-environment.aspx

Regards.

Free Windows Admin Tool Kit Click here and download it now
June 20th, 2015 10:26am

should try internal first (SCP) and external later (DNS).

Maybe this link can help.

http://blogs.technet.com/b/exchange/archive/2014/03/12/client-connectivity-in-an-exchange-2013-coexistence-environment.aspx

Regards.

June 20th, 2015 10:26am

Hi!

Quick question! Lets say I set outlookanywhere to:

InternalClientAuthenticationMethod: NTLM

InternalHostname: mail.domain.com

ExternalClientAuthenticationMethod: Basic

ExternalHostname: webmail.domain.com

How does the client determine what url and auth to use? Is it just trying with internal first and if its a successful connection it continues to use it? Is it based on Active directory sites ?

Thanks!


The client will connect to whatever autodiscover gives it - and how that works depends if the client is domain joined or not:

https://technet.microsoft.com/en-us/library/bb124251%28v=exchg.150%29.aspx?f=255&MSPPError=-2147217396

In your specific Outlook Anywhere example above however, Outlook will attempt to connect the InternalHostname first. If it can resolve it ( even if the client is on the internet and not domain-joined), Outlook will use the internal hostname and auth. If it cant resolve the internal name, then it will attempt to access Exchange using the externalhostname and auth.

Free Windows Admin Tool Kit Click here and download it now
June 20th, 2015 11:45am

Hi!

Quick question! Lets say I set outlookanywhere to:

InternalClientAuthenticationMethod: NTLM

InternalHostname: mail.domain.com

ExternalClientAuthenticationMethod: Basic

ExternalHostname: webmail.domain.com

How does the client determine what url and auth to use? Is it just trying with internal first and if its a successful connection it continues to use it? Is it based on Active directory sites ?

Thanks!


The client will connect to whatever autodiscover gives it - and how that works depends if the client is domain joined or not:

https://technet.microsoft.com/en-us/library/bb124251%28v=exchg.150%29.aspx?f=255&MSPPError=-2147217396

In your specific Outlook Anywhere example above however, Outlook will attempt to connect the InternalHostname first. If it can resolve it ( even if the client is on the internet and not domain-joined), Outlook will use the internal hostname and auth. If it cant resolve the internal name, then it will attempt to access Exchange using the externalhostname and auth.

June 20th, 2015 11:45am

Thanks!
Free Windows Admin Tool Kit Click here and download it now
June 22nd, 2015 7:02am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics