I recently put in a brand new domain at my workplace using Server 2008 Standard and Exchange 2007 Standard. Everything was working well for the first few days, but this morning, Outlook began prompting users to enter their credentials. The strange thing is, the logon box's title indicates it is attempting to connect to our outside FQDN instead of the internal one. This seems strange, but it may have to do with my usage of SSL certificates, as the valid, signed cert is has the outside address as its CN.
I have checked all the Internal URL and External URL settings everywhere I can find, and according to Get-OutlookProvider, the server is the internal name. I have tried forcing the clients to use Kerberos or NTLM instead of negotiating the security, and I ensured that they were not using Outlook Anywhere (which some were). They are all now using a LAN connection to connect directly using MAPI.
The strangest thing is, sometimes, users can just click cancel and the connection gets established. Other times, though, even after typing the username and password correctly several times, it still will not connect to the server.
If anyone knows of anything I should look at, please let me know. This is really frustrating and I am new to Exchange 07. I appreciate any help you can give.
Posts: 4093
Joined: 17.Jan.2008
From: Somewhere near London, UK
Status: offline
What version of Outlook is this? If it is Outlook 2007 then you need to look at autodiscover configuration. You cannot ignore autodiscover, so you need to ensure that it is working correctly.
Yeah, it is Outlook 2007. I had a feeling it may be the Autodiscover settings, I will check those now...I don't really know how to set all that up but I'll give it a try.
Well I read through that and many pages of Microsoft documentation on the Autodiscover service, and I am no closer to a solution. What doesn't make sense is that, even with Outlook Anywhere disabled on both the client and server, this password dialog still appears every few minutes. If I just click cancel, it goes away and Outlook says "Need Password" in the lower-right corner, but no functionality is affected. I can still send and receive mail, edit my and other users' calendar events, etc.
Posts: 4093
Joined: 17.Jan.2008
From: Somewhere near London, UK
Status: offline
This has nothing to do with Outlook Anywhere.
It will be connected to the Offline Address Book download, which uses web services whether or not you are using Outlook Anywhere. The functionality that you haven't got is an updated Offline Address Book.
Exchange 2007 uses web services for many things with Outlook 2007 as Microsoft attempt to drop Public Folders (failing miserably, but never mind).
After pondering over your post for several hours, I think I figured out what the issue was. For some reason, Basic and NTLM authentication were turned off for the OAB directory in IIS. I am guessing that turning them on fixed the issue, as I haven't seen a prompt in a while. *Crosses Fingers*
Do you think that could have been it? I also had a similar issue with my terminal services gateway. "Windows Authentication" was turned on but neither Basic nor NTLM were enabled. Activating them seemed to take care of it there, so I am hoping it will do the same for Exchange.
Thanks for the input all! I really appreciate the expertise I find on these forums.
Posts: 4093
Joined: 17.Jan.2008
From: Somewhere near London, UK
Status: offline
Anonymous wouldn't have the relevant permissions to the raw data, so if that was enabled and no other authenticate types were, then that would cause a problem.
are your clients using outlook internally and outlook anywhere externally?
Don't have a solution for you but this sounds suspiciously like the same thng I am experincing (also new to Exchange 2007).
In my case, it seems that when I access email from home using outlook anywhere, the settings required (under "exchange proxy settings") remain and when I open Outlook from inside the office (connected to a domain) I get that username/password box. I then go into account settings and see that indeed, those settings have been applied (though not needed or wanted when using outlook internally).
Wonder if this is the same situation as you are experiencing
Okay, I thought I had this issue resolved, but apparently not. It seems that if anyone leaves Outlook open overnight, when they return in the morning, it is prompting them for their password to connect to Exchange (over TCP/IP MAPI). If they enter their password, it just reprompts and never connects. If, however, they close outlook and reopen it, it works fine with no password prompt.
Also, every few hours, Outlook still prompts for a password to download the OAB. If you leave Outlook closed for an extended period of time, the connection is establised correctly and everything downloads fine with no password prompts.
This is extremely frustrating, and I fail to see what is causing these authentication issues. I checked my authentication settings for the OAB directory in IIS again, and it is set to Basic (with default domain as my internal domain name) and Windows Authentication. Is this right? What do others have?
Does this perhaps have to do with IIS7 on Server 2008? I realize this is cutting-edge stuff, so I expect some bumps along the way, but this is just a pain. If anyone has any other suggestions, I would really appreciate it.
Posts: 4093
Joined: 17.Jan.2008
From: Somewhere near London, UK
Status: offline
I haven't seen this issue with Windows 2003/Exchange 2007 and I currently don't have a Windows 2008 system to test with. However that may well be the cause of the issue. If you have been playing around with the security settings then the only thing I can suggest is that you recreate the OWA, OAB etc virtual directories using PowerShell, which will get them back to the default state, and then leave them alone and see if the problem continues. You could also see if the web logs show anything - if access is being denied something should be logged.
I have the same problem but the solution did not work for me. I have a 2008 small business server with exchange server 2007 and all the clients are XP with outlook 2007. I have installed the server and the exchange 1 year ago, and i didnt have this specific problem, i suppose that it happened after downloading some update maybe IIS7, i dont know. I enabled the Windows Authentication and Digest Authentication, i restarted the server but the client pc's continues getting the dialog box for Microsoft Outlook login credentials. I am adding there the domain user credentials but after some time the same dialog box appears ???? in addition when i try to connect from a client pc to the https://sites/OAB I get the following error : server error 403 - forbidden: access is denien. you do not have eprmission to view this directoryor page using the credentials you have supplied. In addition under Exchange managemente console\server configuration\client access\pop3 & IMAP4 in the authentication tab the logon method selected is : Secure logon. a tsl connection is required for the client to authenticate to the server...
Posts: 4093
Joined: 17.Jan.2008
From: Somewhere near London, UK
Status: offline
This is a very common question in the last month for SBS 2008 users. It is resolved by approving rollup 9 for Exchange 2007 in Updates. Another option would be to install Exchange 2007 Sp2 as the wrapper for installation on SBS 2008 is now available.
Hello, i have Windows server 2008 and Exchange 2007 Sp2 and have the same problem. I have tried some of what you said but didn't work.What i did just to minimize this issue is to change a configuration on outlook 2007. I went to email configuration -> Send and Receive -> When outlook doesn´t have connection, and Uncheck the "Include this group on send and receive (F9)". This words may vary because I tried to translated from spanish to english.
This has reduced the times outlook prompts for credentials eventhough the problem still there.
There has been quite a lot of this recently and it seems to be down a recent update.
A resolution that has been working quite a bit is to do the following. In IIS Manager navigate to the website that contains your Exchange Virtual Directories (In Exchange 2007 this is Default website, in SBS2008 this is SBS Web Applications)
In turn highlight the following Virtual Directories:
AutoDiscover RPC EWS OAB
Once highlighted select Authentication, right click on Windows Authentication and select Advanced Settings and put a check in the enable kernel-mode authentication.
Do this for each directory.
This seems to resolve the problem, although not entirely sure why.
< Message edited by glenknight -- 15.Jan.2010 11:34:25 AM >
There has been quite a lot of this recently and it seems to be down a recent update.
A resolution that has been working quite a bit is to do the following. In IIS Manager navigate to the website that contains your Exchange Virtual Directories (In Exchange 2007 this is Default website, in SBS2008 this is SBS Web Applications)
In turn highlight the following Virtual Directories:
AutoDiscover RPC EWS OAB
Once highlighted select Authentication, right click on Windows Authentication and select Advanced Settings and put a check in the enable kernel-mode authentication.
Do this for each directory.
This seems to resolve the problem, although not entirely sure why.
We originally had a problem with the first release of KB973917 in December 2009. We uninstalled that update and our OWA and outlook prompts for password worked fine. We have remote offices that were being prompted for username and passwords when using outlook, and blackberry users that connect with the OWA login. This new release again stopped these connections.
The solution above by glenknight solved our problem with OWA and Outlook by remote users (outlook client on vpn connection, not OWA access).
|
My Subscription |
My Forums |
Address Book |
Member List |
Search |
FAQ |
Ticket List |
Log Out
Printable Version
All Forums >> [Microsoft Exchange 2007] >> General >> Outlook Prompting for Passwords to Connect to Exchange 
Outlook Prompting for Passwords to Connect to Exchange - 
RE: Outlook Prompting for Passwords to Connect to Exchange - 
New Messages
No New Messages
Hot Topic w/ New Messages
Hot Topic w/o New Messages
Locked w/ New Messages
Locked w/o New Messages
Post New Thread
