Outlook 2003 RPC over HTTPS

[lardum]

Starting a new thread about this.

I have 2 identical Windows XP computers. Both fully patched. Computer A is a member of the active directory that the exchange server is on. Computer B is on the internet.

Outlook configured to run on RPC over HTTPS works fine on Computer A both on the LAN and also when you connect it outside the firewall and on the internet. When i do the same thing with Computer B i receive the error message "The connection to the Microsoft Exchange Server is unavailable. Outlook must be online or connected to complete this action."

If i run OUTLOOK /RPCDIAG on Computer A i receive some results. On COmputer B it just does nothing. The FQDN of the Exchange server is shown but only as connecting. The same goes for Directory type.

Anyone has any ideas?

 

[Zelandakh]

Check the DNS settings for both machines.

 

[lardum]

Both computers have the exact same IP settings when they are connected to the internet since they recive the IP settings from the same DHCP server.

 

[58sniper]

Anything in the host or lmhosts files of the trouble machine?

Pat Richard, MCSE(2) MCSA:Messaging, CNA(2)

 

[lardum]

No, the trouble machine is a newly installed machine. I've also tried with several machines on the internet with failed results.

Does the end client need to have access to the Global Catalog server also? Or does Exchange communicate with the Global Catalog server? The Exchange Server doesn't have a Global Catalog.

 

[tekieVB]

Try this to see if you are getting thru your FW.

https://fqdn/rpc

you should get a 403.2 error (Access denied)

if you get a 404 error it is a DNS error.

Reply back with results.

 

[lardum]

No, i get a 401.3 error. Unauthorized: Access is denied due to an ACL set on the requested resource.

I get a login prompt when accessing

https://fqdn/rpc

and trying with both end user account and also administrator account gets this 401.3 error.

 

[tekieVB]

http://support.microsoft.com/?kbid=827330

See if the article above helps you.

 

[tekieVB]

Another thought - Ensure your WorkstationB authenticates with NTLM

Check Reg Key
HKLM/SYSTEM/CURRENTCONTROLSET/CONTROL/LSA LMCOMPATIBL... VALUE OF 3 (REG_DWORD)

 

[lardum]

I've tried with the article mentioned above (827330).

I've done all the steps until step 8. When i try from here i receive a new message now. It says:
"Unable to open your default e-mail folders. You must connect to your Microsoft Exchange Server computer with the current profile before you can synchronize your folders with your offline folder file."

Whats making me confused is the following:
I receive a login prompt from a different DNS name. Ie the real DNS name is MAIL.COMPANY.COM but the login prompt says: NETBIOSNAME.COMPANY.COM.

 

[tekieVB]

You must connect to the FQDN of whatever the SSL Certificate was created under or you will never get this to work.

 

[lardum]

I'm connecting to the FQDN which the SSL cert was created for. The outlook profile is configured to use mail.company.com but when the login prompt in outlook comes up it says "Connect to netbiosname.company.com"

And after that i recieve the above error message in Outlook.

 

[tekieVB]

Check to see if you have the exchange server in your local host file or lmhost.

The external ip address must resolve on your computer B to the exact name the certificate was created for.