Comments on: Configuring Exchange 2007 Autodiscover Site Affinity

By: Elan Shudnow

Elan Shudnow — Fri, 16 Dec 2011 19:54:56 +0000

Well on the DomainA Exchange certs, make sure the autodiscover.domain.com names are on the cert as well as any of the InternalURL,ExternalURL, and the FQDN that is assigned to the AutodiscoverserviceInternalURI parameters on *-ClientAccessServer.

By: Scott

Scott — Thu, 15 Dec 2011 17:54:37 +0000

Sorry, no… Domaiin A has servers and certs…. domain B has just linked mailbox users from a different @smtpdomain.

I dont have any internal URL's on the cert…. I have a load balanced array with the public name on the cert.

By: Elan Shudnow

Elan Shudnow — Thu, 15 Dec 2011 17:35:07 +0000

Ah so domainB has the mail servers. Make sure the autodiscover.domain.com is on the certfificate as well as any EWS/OWA/OAB/etc. names for both InternalURLs and ExternalURLs.

By: Scott

Scott — Thu, 15 Dec 2011 17:26:32 +0000

I dont have the error in front of me, but it states that the name doesnt match the name on the certificate….I am assuming its something with Autodiscover?

The only Autodiscover info on Domain B is the detail I imported. They dont have any mail servers and its an older domain (2003 .vs 2008 in Domian A).

When I am logged into the domain B mailbox, I test auto configuration and I am prompted for credentials. (even after just using OA to log into the mailbox).

By: Elan Shudnow

Elan Shudnow — Thu, 15 Dec 2011 16:47:20 +0000

You shouldn't need to put it on Domain A's certificate. The reason why is that the DomainB user is obtaining the SCP from AD which should point to the Autodiscover Service in DomainB. So when the client makes an HTTPS connection, it should be to the Autodiscover service in DomainB. There's probably something else going on.

By: Scott

Scott — Thu, 15 Dec 2011 13:09:51 +0000

HI –

I have a scenario where I have 2 CAS servers in Site A with users on @domaina.com and users from a trusted AD forest using linked mailboxes in Site B with @domainb.com. Internally, I exported my SCP info and imported into their AD and all is well. When users from DomainB test autodiscover from home, they experience issues with the cert I have in place for Domain A, the FQDN doesnt match their @domainb.com domain. (I do not have it on the cert)

Is it as easy as adding autodiscover.domainb.com to my autodiscover.domaina.com SAN cert I have in place? Effectively, domainA receives all mail for DomainA and DomainB but obviously with different SMTP domains.

Thanks,

Scott

By: Elan Shudnow

Elan Shudnow — Mon, 17 Oct 2011 11:53:22 +0000

Well the -AutodiscoverSiteScope is where you put any site where there are clients. You're telling these sites to hand out the URL specified in AutodiscoverServiceInternalURI. So you need to make sure the sites in -AutodiscoversiteScope can resolve the AutodiscoverServiceInternalURI. That's minimal. I would recommend making sure each site can resolve each other's AutodiscoverServiceInternalURI in case some of your CAS Servers go down you can still fail over to the URI's in another location.

By: Devang Patel

Devang Patel — Sat, 15 Oct 2011 13:03:48 +0000

As you have mentioned that nine records to be created in DNS. i dont understand which records and at which site dns server it should be entered.

Regards,
Devang

By: Elan Shudnow

Elan Shudnow — Thu, 29 Sep 2011 03:27:42 +0000

http://blogs.msdn.com/b/brad_hughes/archive/2007/...

By: Steve

Steve — Wed, 28 Sep 2011 13:18:43 +0000

I have client machines in a resource forest and the exchange servers in the account domains. Which AD site name is used? Do I use the one in the resource or account forest?