Hi,

 I'm using FIM to create AD users and mailboxes. Exchange email notifications and distribution group management is not being used.

I'm running Exchange 2010 SP 2 (ht,cas and mbx on a single server) with FIM 2010 R2 (both Exchange and FIM are running on Windows 2008 R2).

The problem I have is that FIM is logging warnings in the event log (Cannot connect to Exchange web service).

On Exchange I've configured integrated windows and forms based authentication with SSL (these settings are required to publish OWA via TMG and allow users to change their password).

The FIM service account has a mailbox, which it can logon to. 

In Microsoft.ResourceManagement.Service.config.exe I have the mailserver key configured as:

<appsettings>
< add key="mailServer" value="https://email.contoso.com/ews/exchange.asmx" />
<add key="isExchange" value="1" />
<add key="SendAsAddress" value="svc-fim@contoso.com" />
<add key="synchronizationServerName" value="SvrFIM01" />
</appsettings>

On the FIM server, if I open IE by performing a runas using the FIM service account and browse to https://email.contoso.com/ews/exchange.asmx I'm prompted for logon credentials - once I've entered I and accepted the IE warning to "show all content" I'm presented with the Exchange XML information.

1. Is there a way to stop this warning from being logged? Presumably I would need to re-configure the OWA authentication settings (something I'm not keen to do).
2. If I'm not using email notifications, what impact does a failure to contact Exchange web services have?

Thanks 

• Edited by Aetius2012 Monday, January 26, 2015 11:50 AM

The Exchange cert has been installed and is trusted. The issue I'm getting when I try to browse using IE is that IE prompts for a login (even if iexplore.exe is running as the FIM service account). The certificate SAN matches.

The only IE related warning I'm receiving isn't certificate related (see below)

• Edited by Aetius2012 Monday, January 26, 2015 5:05 PM