How to setup Autodiscovery for .local internal domains with Exchange 2013

Hi,
I need to know about how i set autodiscovery in local domain.I have local domain eg
abc.local and domin which i received the emails externally is xyz.com.
I have deployed Exchange2013 recently with same above scenario inbound and outbound mails are working fine using OWA.But outlook clients cannot connect to Exchange server with in the LAN.
Please help me out how set auto discovery in local domain and another help i need how i configure the self sign certificate in this scenario.

You cannot use a self signed cert for RPC/HTTP connections (which is how the Outlook client is connecting exchange2013). Please check this http://social.technet.microsoft.com/Forums/exchange/en-US/aed4ede9-57c3-44c3-90b4-bdfb3a7f017d/exchange-2013-self-signed-certs-and-outlook-client-access?forum=exchangesvrgeneral
But you can use a certificate from an internal CA which you can install in your network issue a certificate for exchange. Please check this it will help you manage internal certificates for a PC and for a domain. http://technet.microsoft.com/en-us/library/cc754841.aspx
You dont need to configure autodiscover for internal domain added clients. If you have clients on the network which are not members of the domain, using Exchange, this could be Windows, MACs or mobile devices, then you should ensure that autodiscover.example.com
resolves internally to the Exchange server via a split DNS system. http://exchange.sembee.mobi/network/split-dns.asp
Please configure your external and internal URLs as well
http://www.mustbegeek.com/configure-external-and-internal-url-in-exchange-2013/
I recommend to buy a 3rd party certificate as it may create issue for external clients e.g.Outlook anywhere
Thanks, MAS
Please mark as helpful if you find my comment helpful or as an answer if it does answer your question. That will encourage me - and others - to take time out to help you.

Similar Messages

Creating a New Email address policy for users in another Domain with Exchange 2013 powershell?

Hi
Everyone
Is it possible to create a new-emailaddress policy with Exchange
2013 Powershell, for users within OU´s located on another different
domain/forest than where Exchange 2013 is installed?
There
is a Transitive, two way trust between the domain/forest where the users are
located - and the Exchange 2013, multi tenant domain.
Further
more, and if possible, I need to create linked mailboxes to all these users as
well.
Í have been struckling with this issue for weeks, so please anyone -
advice - and comment.
Best
Regards
Peter
A-ONE Solutions

Hi Siddharth
I want to create a new e-mailaaddress policy - and after that create linked mailboxes/users in my account domain with powershell.
Can you help me achieve that ?
I have a powershell CMDlet, but i doesn´t work. (Cannot fint user OU in my account domain)
CMDlet is as follows:
New-EmailAddressPolicy -Name $CustomerName -RecipientContainer "OU=$CustomerName, OU=kunder, DC=Domain, DC=local" -IncludedRecipients 'AllRecipients' -ConditionalCustomAttribute1 $CustomerName -Priority '1' -EnabledEmailAddressTemplates SMTP:%2g%1s@$AcceptedEmailDomain
Where $Customername = test.dk
and Account domain is = OU=kunder, DC=Domain, DC=local
But the command fails with:
New-EmailAddressPolicy : Couldn't find organizational unit "OU=Test.dk, OU=kunder, DC=Domain, DC=local". Make sure you have typed the name correctly.
At line:52 char:1
+ New-EmailAddressPolicy -Name $CustomerName -RecipientContainer "OU=$CustomerNa
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+ CategoryInfo : NotSpecified: (:) [New-EmailAddressPolicy], ManagementObjectNotFoundException
+ FullyQualifiedErrorId : [Server=HE-MBX03,RequestId=2cbe1b51-4af2-4c04-9f7e-e440000975e6,TimeStamp=24-03-2014 12:58:19] 2D00FD2A,Mi
crosoft.Exchange.Management.SystemConfigurationTasks.NewEmailAddressPolicy
So, I cannot find the OU on the Account forest/Domain, even though the OU do exists in the Account domain.
Verifying with this:
Get-ADOrganizationalUnit -Identity "OU=$CustomerName,OU=kunder,DC=Domain,DC=local" –Server ‘DC01.domain.local’| FL
This works fine, Can you please help/assist?
Peter

Renaming domain with Exchange 2013 installed in AD

Hello,
We installed Exchange 2013 into a Windows 2003 Domain (Forest and Domain are Native 2003). The internal FQDN is for example internal.local and the external FQDN is external.com.
We created a certificate request in exchange that included both the internal and external FQDN’s for a 5 domain UCC certificate from godaddy.com. When requesting the cert all
of the .local addresses were removed (was 10 domain names but who wants to pay more). When we install the certificate on the exchange server and assign services to the certificate, OWA works externally without issue but internally OWA and outlook do
not work (certificate errors).
Is the following our only course of action or do we have another option?
Un-install Exchange (we’ll backup the user mailboxes via pst file as there are less than 10 mailboxes)
Rename the domain
Install Exchange 2013 again
Re-build the mailboxes

As others mentioned, it would not be a good idea here to rename your domain. It would be better to review the DNS names used internally to make sure that they are in the scope of the used certificate. You might consider using a split-DNS setup for internal
users if the certificate you use contains only external DNS domains.
For renaming an AD domain, you can refer to that: http://technet.microsoft.com/en-us/library/cc738208(v=ws.10).aspx
This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.
Get Active Directory User Last Logon
Create an Active Directory test domain similar to the production one
Management of test accounts in an Active Directory production domain - Part I
Management of test accounts in an Active Directory production domain - Part II
Management of test accounts in an Active Directory production domain - Part III
Reset Active Directory user password

How to setup EWA for non-ABAP system with SM 4.0 ?

Hi, we are running SM 4.0 with the support-stack 06. I have set-up a solution for monitoring which includes a NW04 WebAS 6.40 Java only system. Has anyone set-up EWA reports for this type of non_ABAP system who can advise of the steps necessary for this ?
It seems like you need to define RFC destinations for where the monitored system data should be collected from , but there doesn't appear to be anywhere to do this for non-ABAP systems ?
I have looked at Note 738676 - Service Data Download for Non-ABAP Components but it hasn't helped and it seems to be SDCC specific, rather than SDCCN.
Thanks.

Hi Andrew,
we are just developing it, at the moment you have the following option, your java system has to send by ccms agends its data to an ABAP 640 system or higher, there you can see its alerts in ccms, then you have to make both system available in SMSY. Then important you have to assign the java system as a system component, then we collect also the java data and shows them in the EWA of the ABAP system. There for go to the main instance tab and set a java main instance to relevant and assign your java system.
This is the old, available standard solution. At the moment we develop it also for java stand alone.
I think it will be available with the new ST-SER in autumn
Regards,
uDo

How to use OneDrive for Business mobile app with SharePoint 2013 on-premise?

Hi All,
I have a SharePoint 2013 (with latest December updates) that host a dedicated personal web site for users.
The OneDrive portal works fine and users are able to sync their files with the OneDrive client for Windows.
Now I want to test the OneDrive for Business mobile app on Android, but there is no option to specify the "personal" portal URL.
It asks only for domain credentials.
Does I need to configure specific records on my public DNS to allow mobile users to sync their files?
Thanks

I can confirm that with iOS you can connect to your SharePoint server through the advanced options.
But the very strange thing is that the OneDrive version for Windows Phone 8.1 is limited as the Android version.
This has no sense.
Why does Microsoft should limit the Business functions on its mobile operating system, and not on iOS?
Another strange thing is that configuring my Exchange account, Windows Phone 8.1 informed me that it has connected OneDrive for business (but is a fake information).
See attached image.
If I open the built-in OneDrive app, it give me the option to add a OneDrive for business account, but is only for Office 365 users (like with the Android version).
I thing that Microsoft should let at least to Windows Phone users to connect to on-premise SharePoint sites.

How to set password for Local are connection?

How to set password for Local are connection?

do you mean the 802.1x authentication?
check out links below:
http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst2950/software/release/12-1_9_ea1/configuration/guide/scg/Sw8021x.html
http://technet.microsoft.com/en-us/network/bb545365.aspx
Every second counts..make use of it. Disclaimer: This posting is provided AS IS with no warranties or guarantees and confers no rights.
IT Stuff Quick Bytes

How to setup variants for webdynpro report in ABAP? Help!

Hi Experts,
I have a webdynpro for ABAP report with selection screen.
How to setup variants for webdynpro report in ABAP?
Thanks
Gopal

Hi Gopal,
There is no concept of Variant in Webdynpro ABAP. But in our project we have some tool to do that. Its not release to the client I think. In my scenarieo, We create the Screen variant and program name will be supplied to the tool that will generate the ouput in PDF and Selection screen in One view. But the same is not avilable .
If you want the same concept in Webdynpro ABAP, you need to go for Dynamic programming only. This is the only option is avilable.
Warm Regards,
Vijay

How to setup dreamweaver for synchronizing website?

Hi, I'm trying to setup dreamweaver 8 in a way that mimics my
online website. The problem I am having is that on my real sites'
server I have placed most of the files outsite the public root
(security reasons), and I'm not sure how to setup dreamweaver so I
can synchronize with this. I am running a WAMP configuration for my
test / development machine.
Online website structure:
some_folder
-source code
- includes files etc..
public_html (document root)
- html files
-images
-css
An example of how my apache virtual host is setup
Document Root: C:\mysite\public_html //This works fine...
If I setup a site in dreamweaver that uses C:\mysite as the
root, the setup resembles the online one. But there is a problem
with this because it uses C:\mysite as the "document root" whereas
the folder C:\mysite\public_html should be the document root. Now
if I change my document root to C:\mysite\public_html then I don't
have access to any of the files above this directory... I'm kind of
screwed with each option I take...

Here are the email server settings that work for me on iMac or iPad using Mac Mail program.
Verizon changed to different email server.
Make sure password for account is correct by resetting password:
Reset password by clicking "I cannot access my account link" on page or login below
https://login.yahoo.com/config/login?.intl=us&.partner=vz-acs&&.lang=en-US&.intl =US&.done=http://hom...
Enter username here to reset password :https://signin.verizon.com/sso/forgotflows
Passwords must match for verizon yahoo & verizon account.
email server settings:
Example
Name: john smith
email address:[email protected]
user name: john smith (Do not use full email address here)
Incoming Mail Server: incoming.yahoo.verizon.net
SSL: on (Port 995)
Authentication: Password
Outgoing Mail Server: outgoing.yahoo.verizon.net
SSL: on (Port 465)
Authentication: Password
user name:johnsmith
Password: current password for account
Save all settings and check for new email. Good luck.

Server 2012 - Can't access external website from internal domain with same name. Tried everything.

Hello All.
I have read loads of forums and tried numerous fixes and configurations, but nothing seems to work and I am extremely frustrated at this point.
I have a client where I setup Server 2012 Standard with Exchange 2013. After reading best practice documentation for DNS naming and reasons not to use ".LOCAL" I opted to use ".com.na" in which case the Internal Domain Name and Internet
Website now has the same name.
When attempting to open the extarnal website eg. "www.company.com.na" from a client PC within the internal "company.com.na" Domain, I keep getting error "403 - Forbidden: Access is denied. You do not have permission to view this
directory or page using the credentials that you supplied."
I should also mention, the website is hosted by an ISP and not locally.
I added a "www" Host record in the Forward Lookup Zone, I have added the url and ip address to the Hosts file on a client pc (Windows 7) and even tried setting up Split-Brains DNS. Nothing seems to work.
Running a Tracert takes me to the correct public ip address of the website, but I keep getting this 403 error.
I am so sick and tired of this issue that iI am at the point of backing up the Exchange and re-rolling the entire server with the ".local" DNS domain name. I have a mirror setup in a VMWare environment and simply using "rendom" to rename
the domain seems to cause new issues with Exchange connectivity.
Any pointers and help will be greatly appreciated.
Thanks in advance.
Hentie Loots

I opted to use ".com.na" in which case the Internal Domain Name and Internet Website
now has the same name.
This ends up with a split-DNS stup for internal and external resolution which requires extra administration tasks and attention from the administrators.
When attempting to open the extarnal website eg. "www.company.com.na" from a client PC within the internal "company.com.na" Domain, I keep getting error "403 - Forbidden: Access is denied. You do not have permission to view
this directory or page using the credentials that you supplied."
I should also mention, the website is hosted by an ISP and not locally.
I added a "www" Host record in the Forward Lookup Zone, I have added the url and ip address to the Hosts file on a client pc (Windows 7) and even tried setting up Split-Brains DNS. Nothing seems to work.
Running a Tracert takes me to the correct public ip address of the website, but I keep getting this 403 error.
This means that you are able to reach the Website but it is responding with the access denied error message. That should be checked on the middleware level so if this is IIS running then I would recommend asking them in IIS forum: http://forums.iis.net/
If this is a Website that is completely managed by your ISP then I would recommend checking with them.
This posting is provided AS IS with no warranties or guarantees , and confers no rights.
Ahmed MALEK
My Website Link
My Linkedin Profile
My MVP Profile

HT204053 How Do I Pay For More ICloud Storage with my Itunes Account.

How Do I Pay For More ICloud Storage with my ITunes Account Balance?

You can refer to this article for help.
iCloud: Purchasing iCloud Storage and Billing

How to setup PCG Flow Rule Process flow with Business Event subscription

Hi,
How to setup PCG Flow Rule Process flow with Business Event subscription type?
When should Business Events be used?
The latest user guide does not provide ay information on this functionality of Flow rules.
Thanks

You should find it's usage noted in the new PCG user guide on page 3-26 under the heading "Configuring Workflow/Event Rules". This way you can have a Flow Rule call a business event component or a workflow. This would be kicked off within a process flow as one of the steps.
I hope that helps.

How do you copy, for example I work with blue prints and I want to copy a section and copy into another new page?

How do you copy, for example I work with blue prints and I want to copy a section and copy into another new page?

Forgot to add that it would be an adjustment layer with some kind of mask on it already. The mask is uncentered when copy and pasted which throws it off.
I guess the same question would go towards doing the same for an object. How to copy and paste it over to a new doc, keeping its position within the document? is this possible?

How to Generate 997 for different trading partner with different Interchang

How to Generate 997 for different trading partner with different InterchangIDS
We are planning to use same working “ABC -> XYZ (Host)” 850 “ecs” file even for “EFG -> XYZ (Host)” 850 Transaction. And we have successfully implemented without any issues.
We wanted to send 997 Acknowledgement in case of “EFG -> XYZ (Host)” 850 transaction.
In this case also we would like to use same “ecs” file which has been used for “XYZ (Host) -> ABC”.
After adding the 997 capabilities to Stanley I don’t see any extra capability added to “XYZ (Host)” trading partner.
The generated 997 for Stanely EDI file doesn’t reflect the “XYZ (Host)” trading partner Interchange ID. It is getting reflected the previous 997 Transaction “XYZ (Host)” Intercahnge ID.
We use following Interchange ID’s
ABC = 005381447
XYZ (Host) = 049894764
EFZ = SWEOT30013
XYZ (Host) = 5273851T
The 997 which is generated has the InterchangeID as this “049894764” instead of “5273851T”
Regards
Ravi

Hi Ravi,
You have to have the two Delivery Channels under Host TP's communication capability. One host delivery channel should be used with one TP only and will have specific values to that TP.
Go to the Exchange Protocol Parameters of Host TP (XYZ) delivery channel (which you are using in the agreement with EFZ) and provide the required values here. Revalidate and redeploy the agreements and run a test. Let us know if you still face issue.
Regards,
Anuj

Internal outlook client connectivity in exchange 2010 when coexist with exchange 2013

Hi all ,
on my side i would like to clarify few queries.
Say for instance i am coexisting exchange 2010 with exchange 2013 .Unfortunately if all of my exchange 2013 servers goes down .
Q1 .On that time will the internal outlook users having their mailboxes on exchange 2010 can be able to connect mailboxes without any issues ? In case if they face any issues what kind of issues will they be? Because why i am asking is we should have pointed
the autodiscover service to exchange 2013 during coexistence.
When an user closes and reopens the outlook after whole exchange 2013 environment failure ,outlook will first query the autodiscover service for the profile changes to get it updated on users outlook profile.In such case autodiscover service will not be
reachable and i wanted to know will that affects the internal client connectivity for outlook users having their mailboxes on exchange 2010.
Q2. Apart from outlook internal users connectivity ,what kind of exchange services(i.e owa,active sync,pop,external OA and imap) will get affected when whole exchange 2013 environment goes down during coexistence ?
I have read the below mentioned statement on this awesome blog but still i wanted to clarify with you all on my scenario.
http://blogs.technet.com/b/exchange/archive/2014/03/12/client-connectivity-in-an-exchange-2013-coexistence-environment.aspx<o:p></o:p>
Internal Outlook Connectivity
For internal Outlook clients using RPC/TCP connectivity whose mailboxes exist on Exchange 2010, they will still connect to the Exchange 2010 RPC Client Access array endpoint.
For internal Outlook clients using RPC/TCP connectivity whose mailboxes exist on Exchange 2007, they will still connect directly to the Exchange 2007 Mailbox server instance hosting the mailbox.
Please share me your suggestions and that would help me a lot .
Regards
S.Nithyanandham

Hi Winnie Liang ,
Thanks a lot for your reply.
Scenario 1 : for internal outlook connectivity
We have below settings for exchange 2010 autodiscover.
mail.domain.com - will be the namespace for internal autodiscover URI for all the exchange 2010 cas serves
We are going to have below settings for exchange 2013 autodiscover.
mail.domain.com - will be the namespace for internal autodiscover URI for all the exchange 2013 cas serves
During coexistence mail.domain.com will be pointed to exchange 2013 cas servers . I mean to say if we try to resolve the mail.domain.com it will get resolved in to the exchange 2013 cas servers.
So on such case if anything happened wrong to the new environment or else if entire environment goes down .Do we face any issues while outlook users connect to existing mailboxes in exchange 2010 ?
Because why i am asking is ,on the below mentioned article i have read all the autodiscover request will go via exchange 2013 cas servers during coexistence.That means all the existing mailboxes in exchange 2010 will also have to query exchange 2013 cas
servers for autodiscover request.During the whole exchange 2013 environemnt failure whenever the user tries to close and open outlook .Outlook will first queries the autodiscover service for any changes happened on that particular mailbox and it will try to
get it updated on user profile.
http://blogs.technet.com/b/exchange/archive/2014/03/12/client-connectivity-in-an-exchange-2013-coexistence-environment.aspx
Would it be possible to make the exchange 2010 mailbox users to query only the scp points which belongs to the exchange 2010 cas servers for autodiscover request ?
Scenario 2: For exchange services
mail.domain.com - will be the namespace for all the exchange 2010 services (i.e owa,activesync,external outlook anywhere,pop,imap)
mail.domain.com - will be the namespace for all the exchange 2013 services (i.e owa,activesync,external outlook anywhere,pop,imap)
What about the above services will it get affected during whole exchange 2013 environment failure ?
Note : We are not facing this issue , i hope everything goes well in my environment while doing coexistence i am just asking this question on my own interest?
Regards
S.Nithyanandham
Thanks S.Nithyanandham

Support for TLS 1.2 over Exchange 2013 on Server 2012?

Greetings,
We're trying to roll out TLS 1.2 in our test environment and can't seem to get Exchange to work with the protocol.
We've been using this method to enable TLS 1.2 (and disable the other protocols - TLS1.0, SSL2.0, SSL3.0, PCT1.0): http://www.adminhorror.com/2011/10/enable-tls-11-and-tls-12-on-windows_1853.html
We originally tried using Exchange 2010 on 2008 R2, but then I ran across this article saying that it is not supported: http://support.microsoft.com/kb/2709167/en-us
We've since tried to set it up with Exchange 2013 on Server 2012. Still no luck. The only time Exchange wants to work is when TLS1.0 is enabled.
I suspect that TLS1.1 and TLS 1.2 are also not supported on Exchange 2013, or that I'm changing the wrong registry keys, but I wanted to find confirmation. I've searched extensively and can't find any documentation leading me to believe one way or the other
if it's supported.
Any help or insight would be greatly appreciated. Thanks!
--Aric

hi All,
Even i have tried enabling TLS 1.2 on Exchange 2013 from registry. i followed the below article.
http://jackstromberg.com/2013/09/enabling-tls-1-2-on-iis-7-5-for-256-bit-cipher-strength/
When i check OWA in chrome and check the connection information it says "The connection uses TLS 1.2.
However when i run the below command to check for TLS 1.2 i get the following O/P.
Command: java -jar TestSSLServer.jar ns-ex13.gtestexchange.com 443
O/P:
Supported versions: SSLv3 TLSv1.0 TLSv1.1
Deflate compression: no
Supported cipher suites (ORDER IS NOT SIGNIFICANT):
SSLv3
RSA_WITH_RC4_128_MD5
RSA_WITH_RC4_128_SHA
RSA_WITH_3DES_EDE_CBC_SHA
TLSv1.0
RSA_WITH_RC4_128_MD5
RSA_WITH_RC4_128_SHA
RSA_WITH_3DES_EDE_CBC_SHA
RSA_WITH_AES_128_CBC_SHA
RSA_WITH_AES_256_CBC_SHA
TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA
TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA
(TLSv1.1: idem)
Server certificate(s):
1979e6bdbd9b8e197d00c45534959eaba82b6f40: CN=ex10.gtestexchange.com, OU=Domain
Control Validated
Minimal encryption strength: strong encryption (96-bit or more)
Achievable encryption strength: strong encryption (96-bit or more)
BEAST status: vulnerable
CRIME status: protected
===================================================
It doesnt says anything about TLS 1.2.
Any suggestions from your side?

How to setup Autodiscovery for .local internal domains with Exchange 2013

Similar Messages

Maybe you are looking for