Exchange Server Forums

Outlook 07 ask for password and eventId 4625

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [Microsoft Exchange 2007] >> General >> Outlook 07 ask for password and eventId 4625

Page: [1]

Message

<< Older Topic Newer Topic >>

Outlook 07 ask for password and eventId 4625 - 10.Mar.2008 5:51:04 AM

petoulachi

Posts: 15
Joined: 21.Jan.2008
Status: offline

Hi

I've migrated to Exchange 2007 from 2003. No particular problem during the migration, everything works well.
I have a very boring problem with my users.
First, Outlook 2007 ask for password every 5 secondes minutes. On the Exchange server, I have a Security failed event ID 4625, but this event is not every 5 seconds, so I'm not sure that it's linked. I also have ONE user using Outlook 2003 and he doesn't have problem.

Second, At every launch of Outlook 2007, it displays a warning for the certificat I'm using for OWA/Outlook Anywhere. This certificat is the same as the older 2003 Exchange server.

The second problem is not very boring, the first is a real problem as my user can't use Outlook 2007.

Post #: 1

Featured Links*

RE: Outlook 07 ask for password and eventId 4625 - 10.Mar.2008 2:09:39 PM

petoulachi

Posts: 15
Joined: 21.Jan.2008
Status: offline

Okay I have resolved the certificate problem, but the password prompt is still there.
The weird things is that if I just canceled the prompt, every think works well (send, receive, public folders...). But I have a "Login required" or something like that on the outlook's connection status, unstead of having "Connected to Exchange Server".

(in reply to petoulachi)

Post #: 2

RE: Outlook 07 ask for password and eventId 4625 - 12.Mar.2008 10:32:41 AM

Zer0 G

Posts: 52
Joined: 12.Aug.2005
Status: offline

A quick wrk around as I am heading into a meeting is this.

Open the client

Tools>account settings>under the email tab select Change>then more Settings> Select the Connection Tab and deselect the option to use "Connect to microsoft Exchange using http"

(in reply to petoulachi)

Post #: 3

RE: Outlook 07 ask for password and eventId 4625 - 12.Mar.2008 10:40:44 AM

petoulachi

Posts: 15
Joined: 21.Jan.2008
Status: offline

I've tried this with no success.

The problem has disapeared the following day. Some people tells me that it could be linked with the OAB, as it is generate every night ?

(in reply to Zer0 G)

Post #: 4

RE: Outlook 07 ask for password and eventId 4625 - 12.Mar.2008 11:51:56 AM

Zer0 G

Posts: 52
Joined: 12.Aug.2005
Status: offline

Check out this page, I think you will find the information useful for your current situation.

http://www.shudnow.net/2007/08/10/outlook-2007-certificate-error/

I was fortunate in that I migrated an entire system from GroupWise 6.5 to Exchange 2k7 in 1 weekend. I ran into this exact problem and this article helped me out.

(in reply to petoulachi)

Post #: 5

RE: Outlook 07 ask for password and eventId 4625 - 12.Mar.2008 1:26:15 PM

petoulachi

Posts: 15
Joined: 21.Jan.2008
Status: offline

In fact I solved my certificate error with another solution. Unstead of modify my Exchange InternalUrl to be the same as the ExternalUrl, I have request a new certificate with multple name hosts, as recommanded by Microsoft here :
http://technet.microsoft.com/en-us/library/aa995942.aspx

(in reply to Zer0 G)

Post #: 6

RE: Outlook 07 ask for password and eventId 4625 - 13.Mar.2008 6:05:09 PM

Elan Shudnow

Posts: 897
Joined: 4.Jan.2007
From: Chicago, IL
Status: offline

Yep. That is definitely the recommended way. The only problem is some companies want to use their old certificate that does not contain ceritficate names. They don't want to spend the extra money, don't care about Autodiscover, etc... If that's the case, then you really need to modify the InternalURL and ExternalURL to be the same.

Even if you do use a UC/SAN certificate with multiple names, you still want to ensure the InternalURL and ExternalURLs are set appropriately. For example, for users internal to the network that have connectivity to AD, you might want them to use https://casnetbiosname/service and when they're outside of the network, they will use the ExternalURL name of https://mail.domain.com. Or even when using a UC/SAN cert, you might want to use both mail.domain.com/service when connecting from both the inside and outside.

So as you can see, my article still applies somewhat even if you are using a UC/SAN cert. Your URLs might still be improper and there's a much higher chance of it being so if you didn't include certain SAN names within your CSR Request.

Hope that helps.

_____________________________

Elan Shudnow
Exchange MVP
http://www.shudnow.net

(in reply to petoulachi)

Post #: 7

RE: Outlook 07 ask for password and eventId 4625 - 15.Mar.2008 7:42:00 AM

petoulachi

Posts: 15
Joined: 21.Jan.2008
Status: offline

Yes that's pretty clear. Talking about InternalUrl, is it possible to configure Exchange to have the url https://owa.domain.com to point directly to owa?
I had fixed it with a redirect on my ISA server, that's working great from outside. But inside my network, users need to go to https://owa.mydomain.com/owa to have OWA.

(in reply to Elan Shudnow)

Post #: 8

RE: Outlook 07 ask for password and eventId 4625 - 26.Mar.2008 4:37:48 PM

Elan Shudnow

Posts: 897
Joined: 4.Jan.2007
From: Chicago, IL
Status: offline

There's two things you can do:
1. Do IIS redirection on the Exchange box:
http://technet.microsoft.com/en-us/library/aa998359.aspx

2. Set ISA to listen on both Internal and External and point the internal A record to the internal adapter on ISA.

I would prefer #2 due to it giving users both the same experience when on the internal or external network. Resource utilization will of course have to be taken into consideration before making your choice.

_____________________________

Elan Shudnow
Exchange MVP
http://www.shudnow.net

(in reply to petoulachi)

Post #: 9