since we switched to web based addressbook distribution users are complaining that they are frequently asked to enter password - this is when using outlook anywhere.is this standard behavior - if not how can I find out why is this happening?we have one CCR cluster running e2k7 sp1 RU7 and two CAS servers

After enabling the web based oab distribution have you enable the Require SSL for Offline Address Book Distribution? How to Require SSL for Offline Address Book Distribution Vinod |CCNA|MCSE 2003 +Messaging|MCTS|ITIL V3|

no but not sure how is this relevantOAB URL is prefixed by https anyway

we have one CCR cluster running e2k7 sp1 RU7 and two CAS servers This could be related to Windows 2008 and kernel mode authentication. What is your output from this command:%systemroot%\system32\inetsrv\appcmd.exe list config /section:WindowsAuthenticationIf it shows useKernelMode="true", you should either upgrade to RU8 or later, or run this command:%systemroot%\system32\inetsrv\AppCmd.exe set config /section:system.webServer/security/authentication/windowsAuthentication /useKernelMode:falseIt was required to manually take the additional step to configure the CAS servers running Windows Server 2008 to disable kernel mode authentication. Starting this rollup, the installer will configure this for you. That is Rollup 8 fixes this issue:http://aspoc.net/archives/2009/05/20/update-exchange-2007-sp1-rollup-8/How to Enable Outlook Anywherehttp://technet.microsoft.com/en-us/library/bb123889.aspxOAB does not download with web-based distributionhttp://www.eggheadcafe.com/software/aspnet/34431641/oab-does-not-download-wit.aspx Jon-Alfred Smith MCTS: Messaging MCSE: S+M

I don't think it's related to Kernel Mode Authentication just because of the fact it only occured when they switched to Web Distribution for the OAB. If it was Kernel Mode Authentication, he would have had the issue always with Outlook Anywhere. But hey, you never know! What I think it probably is, is because now you're using web distribution, the OAB Virtual Directory has basic mode authentication on the Web Virtual Directory. Previously, before enabling the OAB for Web Distribution, clients would download it via their Outlook MAPI Connection using Public Folders. Now, your Outlook 2007 clients will be using the IIS OAB Virtual Directory. I would advise you to enable Integrated Authentication on your IIS OAB Virtual Directory. You could run the following command: Set-OABVirtualDirectory -Identity “CASServer\OAB (Default Web Site)" -WindowsAuthentication:$true As for Kernel Mode Authentication, that issue only occurs with Server 2008 which was fixed in Rollup 8 for Exchange 2007 SP1 and it looks like you're only on Rollup 7.MVP | MCSE:M | MCITP: Enterprise Messaging Administrator | MCTS: OCS + Voice Specialization | http://www.shudnow.net

Hi, Any update regarding the issue? By default, the SSL is not required for OAB virtual directory. If the OAB url is configured for https, please refer to article provided by Vinod to enable SSL on the OAB virtual directory. Default settings for Exchange-related virtual directories in Exchange Server 2007 http://msexchangeteam.com/archive/2008/02/01/447989.aspx In addition, please run get-oabvirtualdirectory |fl command and post result here. Please also let me know: 1. Whether the issue only occurs for Outlook Anywhere user? Whether the internal Outlook 2007 users encounter the same problem ? 2. After providing credential, whether Outlook is able to connect to Exchange Server with no problem? 3. Whether you are able to reproduce the issue? For example, if you click Download Address Book, whether the issue can be reproduced? ~~~~~~~~~~~~~~~~Mike Shen TechNet Subscriber Support in forum If you have any feedback on our support, please contact tngfb @ microsoft.com ~~~~~~~~~~~~~~~~

Hello,Same issue here, just updated from publicfolder to web OAB, happening internally and externally. Here is the output from "get-oabvirtualdirectory |fl" Name : OAB (Default Web Site)PollInterval : 480OfflineAddressBooks : {Exchange2007 OAB}RequireSSL : TrueMetabasePath : IIS://MADMSG012.PROMEGA.COM/W3SVC/1/ROOT/OABPath : D:\Program Files\Microsoft Exchange Server\Clie ntAccess\OABServer : MADMSG012InternalUrl : https://mobile.promega.com/OABInternalAuthenticationMethods : {WindowsIntegrated}ExternalUrl : https://mobile.promega.com/OABExternalAuthenticationMethods : {WindowsIntegrated}AdminDisplayName : ExchangeVersion : 0.1 (8.0.535.0)DistinguishedName : CN=OAB (Default Web Site),CN=HTTP,CN=Protocols, CN=MADMSG012,CN=Servers,CN=Exchange Administrat ive Group (FYDIBOHF23SPDLT),CN=Administrative G roups,CN=Promega,CN=Microsoft Exchange,CN=Servi ces,CN=Configuration,DC=PROMEGA,DC=comIdentity : MADMSG012\OAB (Default Web Site)Guid : 7e0f05d6-bd62-48df-af60-dfc102154adfObjectCategory : PROMEGA.com/Configuration/Schema/ms-Exch-OAB-Vi rtual-DirectoryObjectClass : {top, msExchVirtualDirectory, msExchOABVirtualD irectory}WhenChanged : 9/12/2008 8:31:53 AMWhenCreated : 6/17/2008 10:40:02 AMOriginatingServer : MADADC001.promega.comIsValid : True Name : OAB (Default Web Site)PollInterval : 480OfflineAddressBooks : {Exchange2007 OAB}RequireSSL : TrueMetabasePath : IIS://MADMSG011.PROMEGA.COM/W3SVC/1/ROOT/OABPath : D:\Program Files\Microsoft Exchange Server\Clie ntAccess\OABServer : MADMSG011InternalUrl : https://mobile.promega.com/OABInternalAuthenticationMethods : {WindowsIntegrated}ExternalUrl : https://mobile.promega.com/OABExternalAuthenticationMethods : {WindowsIntegrated}AdminDisplayName : ExchangeVersion : 0.1 (8.0.535.0)DistinguishedName : CN=OAB (Default Web Site),CN=HTTP,CN=Protocols, CN=MADMSG011,CN=Servers,CN=Exchange Administrat ive Group (FYDIBOHF23SPDLT),CN=Administrative G roups,CN=Promega,CN=Microsoft Exchange,CN=Servi ces,CN=Configuration,DC=PROMEGA,DC=comIdentity : MADMSG011\OAB (Default Web Site)Guid : be1637d3-252a-4214-bee7-9a52230f6a26ObjectCategory : PROMEGA.com/Configuration/Schema/ms-Exch-OAB-Vi rtual-DirectoryObjectClass : {top, msExchVirtualDirectory, msExchOABVirtualD irectory}WhenChanged : 9/12/2008 8:31:53 AMWhenCreated : 6/18/2008 8:07:49 PMOriginatingServer : MADADC001.promega.comIsValid : True