Hi, I have 2 Exchange 2010 CAS servers in Windows NLB array. I have published OWA and Activesync via TMG server using a connector with FBA. I am however having endless trouble getting Outlook Anywhere to work on the same listener. Whenever I do a test on testexchangeconnectivity.com i get the following: RPC Proxy can't be pinged. Additional Details An HTTP 401 Unauthorized response was received from the remote Unknown server. This is usually the result of an incorrect username or password. If you are attempting to log onto an Office 365 service, ensure you are using your full User Principal Name (UPN). Below is a screenshot: I have run further tests such as us RPC Ping tests from client machines and servers on the network and the results are follows: rpcping -t ncacn_http -s webmail.domain.gov.za -o RpcProxy=webmail.domain.gov.za -P "user,domain,pass" -I "user,domain,pass" -H 2 -u 10 -a connect -F 3 -v 3 -E -R none RPCPing v2.12. Copyright (C) Microsoft Corporation, 2002 OS Version is: 6.1, Service Pack 1 RPCPinging proxy server webmail.domain.gov.za with Echo Request Packet Sending ping to server Response from server received: 200 Pinging successfully completed in 219 ms When the above test is run from a machine on the internet the result is as follows: Sending ping to server Response from server received: 401 Client is not authorized to ping RPC proxy Ping failed. Further PowerShell tests were run on both the CAS servers and results are below: Test-OutlookConnectivity -identity username@domain.gov.za -RpcProxyTestType:External -RpcTestType Server -MailboxCredential (Get-Credential domain\username) ClientAccessServer ServiceEndpoint Scenario Result Latency (MS) ------------------ --------------- -------- ------ ------- servername.domain... servername.domain.gov.za RpcProxy::VerifyRpcProxy. Success ...3.95 servername.domain... servername.domain.gov.za RFRI::GetReferral. Success 2449.26 servername.domain... servername.domain.gov.za NSPI::GetProfileDetails. Success 2433.66 servername.domain... servername.domain.gov.za Mailbox::Connect. Success 2386.86 servername.domain... servername.domain.gov.za Mailbox::Logon. Success 93.60 Test-OutlookConnectivity -identity username@domain.gov.za -RpcProxyTestType:Internal -RpcTestType Server -MailboxCredential (Get-Credential domain\username) ClientAccessServer ServiceEndpoint Scenario Result Latency (MS) ------------------ --------------- -------- ------ ------- servername.domain... servername.domain.gov.za RpcProxy::VerifyRpcProxy. Success 15.60 servername.domain... servername.domain.gov.za RFRI::GetReferral. Failure -1.00 servername.domain... servername.domain.gov.za NSPI::GetProfileDetails. Failure -1.00 servername.domain... servername.domain.gov.za Mailbox::Connect. Failure -1.00 servername.domain... servername.domain.gov.za Mailbox::Logon. Skipped -1.00 Test-OutlookConnectivity -Protocol HTTP -Identity username@domain.gov.za -MailboxCredential (Get-Credential domain\username) ClientAccessServer ServiceEndpoint Scenario Result Latency (MS) ------------------ --------------- -------- ------ ------- servername.domain... webmail.domain.gov.za Autodiscover: Web service request. Success 1591.24 servername.domain... exccas01.domain.gov.za RpcProxy::VerifyRpcProxy. Success 15.60 servername.domain... exccas01.domain.gov.za RFRI::GetReferral. Success ...5.95 servername.domain... exccas01.domain.gov.za NSPI::GetProfileDetails. Success 2371.26 servername.domain... exccas01.domain.gov.za Mailbox::Connect. Success 2340.06 servername.domain... exccas01.domain.gov.za Mailbox::Logon. Success 31.20 Test-OutlookConnectivity -identity username@domain.gov.za -RpcProxyTestType:External -RpcTestType Server -MailboxCredential (Get-Credential domain\username) ClientAccessServer ServiceEndpoint Scenario Result Latency (MS) ------------------ --------------- -------- ------ ------- servername.domain... servername.domain.gov.za RpcProxy::VerifyRpcProxy. Success 15.60 servername.domain... servername.domain.gov.za RFRI::GetReferral. Success 2386.80 servername.domain... servername.domain.gov.za NSPI::GetProfileDetails. Success 2355.60 servername.domain... servername.domain.gov.za Mailbox::Connect. Success 2340.00 servername.domain... servername.domain.gov.za Mailbox::Logon. Success 0.00 Test-OutlookConnectivity -identity username@domain.gov.za -RpcProxyTestType:Internal -RpcTestType Server -MailboxCredential (Get-Credential domain\username) ClientAccessServer ServiceEndpoint Scenario Result Latency (MS) ------------------ --------------- -------- ------ ------- servername.domain... servername.domain.gov.za RpcProxy::VerifyRpcProxy. Success 15.60 servername.domain... servername.domain.gov.za RFRI::GetReferral. Failure -1.00 servername.domain... servername.domain.gov.za NSPI::GetProfileDetails. Failure -1.00 servername.domain... servername.domain.gov.za Mailbox::Connect. Failure -1.00 servername.domain... servername.domain.gov.za Mailbox::Logon. Skipped -1.00 Test-OutlookConnectivity -Protocol HTTP -Identity username@domain.gov.za -MailboxCredential (Get-Credential domain\username) ClientAccessServer ServiceEndpoint Scenario Result Latency (MS) ------------------ --------------- -------- ------ ------- servername.domain... webmail.domain.gov.za Autodiscover: Web service request. Success 140.40 servername.domain... exccas01.domain.gov.za RpcProxy::VerifyRpcProxy. Success 0.00 servername.domain... exccas01.domain.gov.za RFRI::GetReferral. Success 2340.00 servername.domain... exccas01.domain.gov.za NSPI::GetProfileDetails. Success 2371.20 servername.domain... exccas01.domain.gov.za Mailbox::Connect. Success 2324.40 servername.domain... exccas01.domain.gov.za Mailbox::Logon. Success 15.60 While investigating the IIS logs I can across the following: RPC_IN_DATA /rpc/rpcproxy.dll exccas01.domain.gov.za:6002 443 - 10.36.98.235 MSRPC 401 2 64 15 RPC_OUT_DATA /rpc/rpcproxy.dll exccas01.domain.gov.za:6002 443 - 10.36.98.235 MSRPC 401 2 64 0 I have now spent more than 3 days trying to figure this out and I coming to my wits ends in trying to find a resolution. I would appreciate any assistance that will result in a resolution to my current dilema! Please help!!

Hello, Does Outlook Anywhere work in the internal environment? How about RPCping from a internal client to the CAS or RPCping from the CAS to MBX? Thanks, Simon Wu Exchange Forum Support Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com

Hello, Does Outlook Anywhere work in the internal environment? How about RPCping from a internal client to the CAS or RPCping from the CAS to MBX? Thanks, Simon Wu Exchange Forum Support Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com

Hi, Internally Outlook Anywhere works fine. The results above for the RPCping weredone from internal client to the CAS and from the CAS to MBX.

Hi, Internally Outlook Anywhere works fine. The results above for the RPCping weredone from internal client to the CAS and from the CAS to MBX.

Hello, Thanks for the reply. Then it seems to be some issues with the TMG. You may also post this issue to our TMG forum to get more professional and effective suggestions. http://technet.microsoft.com/en-us/forefront/ff395955.aspx Thanks, Simon

Hello, Thanks for the reply. Then it seems to be some issues with the TMG. You may also post this issue to our TMG forum to get more professional and effective suggestions. http://technet.microsoft.com/en-us/forefront/ff395955.aspx Thanks, Simon

Hi, I have 2 Exchange 2010 CAS servers in Windows NLB array. I have published OWA and Activesync via TMG server using a connector with FBA. I am however having endless trouble getting Outlook Anywhere to work on the same listener. Hi, Are you pointing your rule to the NLB IP/Name? If so, then I suggest that you create a Web Farm for your CAS Servers instead. That usually works best. Have you read the Whitepaper Publishing Exchange Server 2010 with Forefront TMG/UAG ? Martina Miskovic

Hi, I have 2 Exchange 2010 CAS servers in Windows NLB array. I have published OWA and Activesync via TMG server using a connector with FBA. I am however having endless trouble getting Outlook Anywhere to work on the same listener. Hi, Are you pointing your rule to the NLB IP/Name? If so, then I suggest that you create a Web Farm for your CAS Servers instead. That usually works best. Have you read the Whitepaper Publishing Exchange Server 2010 with Forefront TMG/UAG ? Martina Miskovic

Hello, Is there any update on this thread? Thanks, Simon Wu Exchange Forum Support Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com

Hello, Is there any update on this thread? Thanks, Simon Wu Exchange Forum Support Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com

Hi, Sorry was on leave and only got back to the office today. Will post this in the TMG forum and will also look at Martina's advise.

Hi, Sorry was on leave and only got back to the office today. Will post this in the TMG forum and will also look at Martina's advise.

Hi, When using Martina's advice and I create a server farm in TMG and test the rule i get the following: RPC Proxy can't be pinged. Additional Details An HTTP 500 response was returned from ISA.

Hi, When using Martina's advice and I create a server farm in TMG and test the rule i get the following: RPC Proxy can't be pinged. Additional Details An HTTP 500 response was returned from ISA.

Hello, You may need to contact a TMG support or ask the question on TMG forum via: http://social.technet.microsoft.com/Forums/en-US/Forefrontedgegeneral/threads Thanks, Simon

Hello, You may need to contact a TMG support or ask the question on TMG forum via: http://social.technet.microsoft.com/Forums/en-US/Forefrontedgegeneral/threads Thanks, Simon

I have resolved the issue by changing the authentication delegation on the publishing rule. Seems to be working fine now ... small issue will take it up in the ISA/TMG forum. Thanks guys.