Exchange 2010 mailbox prompts for authentication to Exchange 2013 mailbox
I am in the process of a 2010 to 2013 migration. The only issue I can't seem to manage is an authentication issue with Outlook 2010. My Outlook profile consists of my Exchange 2013 mailbox and a shared mailbox on Exchange 2010. Initially, Outlook was prompting
for authentication to the Exchange 2010 mailbox. Regardless of whether I entered the correct credentials or simply cancelled the prompt, I still had full access to both mailboxes (including Public Folders on 2010). The authentication prompt was removed with
the following command:
Get-OutlookAnywhere -Server my2013exchserver | Set-OutlookAnywhere -InternalClientsRequireSsl $true
The second issue I now have is the reverse of the above: an Exchange 2010 user is prompted for authentication to an Exchange 2013 mailbox. How do I begin to troubleshoot this problem - should I run the same command (above) on 2010? I don't quite understand
how Outlook communicates with Exchange but I am thinking there is an incorrect setting on one of the Virtual Directories(?).
Many thanks.
Hi Dennis,
Please open Outlook - press CTRL key - right click on the Outlook icon from right bottom corner taskbar –Connection Status to check the connection for your Exchange 2010 mailbox with shared 2013 mailbox. The following example in my test results:
Please check your connection authentication. We can run the following command to set your Outlook Anywhere for Exchange 2013:
Set-OutlookAnywhere -Identity "E15-01\Rpc (Default Web Site)" -InternalClientAuthenticationMethod Ntlm -ExternalClientAuthenticationMethod Basic -ExternalClientsRequireSsl $True -InternalClientsRequireSsl $true
In Outlook side, please ensure the following settings in Account Settings:
In Security tab, make sure Always prompt for logon credentials is unchecked and Logon network security is set to Negotiate Authentication.
Regards,
Winnie Liang
TechNet Community Support
Similar Messages
-
Outlook 2013 / Exchange 2010 constantly prompting for password
I as well as many users keep getting prompted for User/pass in outlook. This usually happens when I go from LAN to WIFI or from office to home. For example, If I close my laptop (not shut down) and head home then log back in and connect to my
VPN I usually get prompted for my user/pass for outlook. I type the correct user/pass but it does not accept and immeadiatly prompts for me to re enter. If I close down Outlook and re open the issue is fixed however this is not fixing this issue
and the owner of the company is receiving this error as well. I would like to find a solution so that either it does not prompt and automatically updates once it is reconnected with the network via VPN.
Any suggestions?
Thank you
I as well as many users keep getting prompted for User/pass in outlook. This usually happens when I go from LAN to WIFI or from office to home. For example, If I close my laptop (not shut down) and head home then log back in and connect to my
VPN I usually get prompted for my user/pass for outlook. I type the correct user/pass but it does not accept and immeadiatly prompts for me to re enter. If I close down Outlook and re open the issue is fixed however this is not fixing this issue
and the owner of the company is receiving this error as well. I would like to find a solution so that either it does not prompt and automatically updates once it is reconnected with the network via VPN.
Any suggestions?
Thank you
Outlook is simply not good at that with the existing protocols in Exchange 2010. Exchange 2013 uses MAPI over HTTP which may make that experience better.
Switching networks with Outlook open is typically not a good user experience.
Twitter!: Please Note: My Posts are provided “AS IS” without warranty of any kind, either expressed or implied. -
Outlook 2010 keeps prompting for password
Hi,
We use Exchange 2008 and Outlook 2010. For some reason, Outlook 2010 keeps prompting for password. My use entered the password and checked "Remember Password" box, but next morning when he logged in, he still got the prompt.
I removed the Outlook credential for Outlook listed under Password Credential in Control Panel, but still no help.
Please advise!
Thanks in advance!
GraceHi Grace
1. Open Outlook 2010. Click File>Account Settings>Account Settings.
2. Click the E-mail tab, click the Exchange Online mailbox, click Change…
3. Click More Settings…. Click the Security tab, make sure the Always prompt for logon credentials box is unchecked.
Please mark it answer if it helps you solving your problem
Amit Kotha -
Problem with Windows 7 802.1x prompted for authentication multiple times
I have setup a WLAN for users to bring in their own devices (devices are not on the domain). It is setup for WPA2-Enterprise/AES and it doesn't require certificates. We authenticate with a Cisco Secure Access Server 5.1.44 (setup with Active Directory).
I have configure dthe Windows 7 wireless client:
WPA-Enterprise/AES
PEAP - removed "Validate server certificate"
EAPMSCHAPv2 properties disabled "Automatically use my Windows login name and password
Advanced settings 802.1x - ticked for "user authentication"
My problem is when I connect to the WLAN, I'm prompted for authentication multiple times (x2). On the second login prompt everything logs in OK. No errors are received after the first login attempt.
ThanksThis doesn't have anything to do with eap settings?
Are the current defaults the recommended settings:
EAP-Identity-Request Timeout (seconds)........... 30
EAP-Identity-Request Max Retries................. 2
EAP Key-Index for Dynamic WEP.................... 0
EAP Max-Login Ignore Identity Response........... enable
EAP-Request Timeout (seconds).................... 30
EAP-Request Max Retries.......................... 2
EAPOL-Key Timeout (milliseconds)................. 1000
EAPOL-Key Max Retries............................ 2
EAP-Broadcast Key Interval....................... 3600
I have seen this multiple times on varying drivers and systems. The first time you login until it is cached.
Thanks,
Andrew -
Regression in 7u55+ prompts for authentication dialogs (JDK-8046211)
I'm tracking issue JDK-8046211 and noticed today it was resolved as "won't
fix" without any comment
Our situation: We have a Java applet consisting of 4 jar files and a JNLP
file. These files are served over HTTPS from a public webserver (no
authentication required). The applet contains an up-to-date manifest with
all the entries required since the new Java security baseline. The
applet/JNLP file is accessed from a web application using Javascript
(deployJava.js). All interaction with the applet is through Javascript.
The web application itself runs on a different server and is protected
using client certificates (2-way SSL) and basic authentication.
Now until Java 7u55 everything worked fine. When loading the applet only
one popup was displayed asking the user to trust the applet (which is
properly signed) and that was all.
However since 7u55 (also 7u60) things have changed: the applet loads fine
but as soon as we call a method on the applet (though LiveConnect) the Java
VM displays a popup asking the user to select a client certificate and
thereafter asks the user to authenticate using BasicAuth.
Important note: the user doesn't actually has to select a valid certificate
or enter any credentials. If the user cancels any of the dialogs the applet
continues to function properly. Logging shows the applet is using the same
cookie as the browser so authentication against the server isn't actually
taking place. Basically the Java VM is prompting for authentication dialogs
for no good reason because the user is already authenticated with a browser
cookie.
Prior to 7u55 we didn't experience this issue (we have users with 7u40,
7u45 and 7u51). Altogether it appears we encountered JDK-8046211, which has
the characteristics of a regression issue.
I'm curious if more people have experienced these issues (I know applets aren't the hottest tech out there....)Yes the problem is due to an extra HTTP call fired from the Java plugin (only under IE, no issues in Firefox) to the page that embeds the applet. So it's different from JDK-8046211 although the result is the same.
We eventually implemented a workaround: we intercept the extra HTTP request in our frontend proxy server (Apache) and always return 200 OK prior to doing BasicAuth. Here's our mod_rewrite config implementing this workaround:
RewriteEngine On
RewriteLog /var/log/apache2/java_issue_rewrite.log
RewriteLogLevel 0
RewriteCond %{REQUEST_METHOD} =GET
RewriteCond %{HTTP_USER_AGENT} Java/1.[7-8]
RewriteRule ^/path/to/page/embedding/java/applet /dummy.html [R=200,L] -
Use Exchange 2010 Hybrid Edition for SMTP relay
Thanks guys.
hmmm.
I did try and telnet on port 25 to the hybrid and get the welcome, when i enter the mail from command and enter a valid email address, i get "530 5.7.1 Client was not authenticated"
I have exchange 2003 admin experiance and and learning my way around the 365 environment still
Hi all,
we recently moved our Exchange 2003 to Office 365 using a Hybrid Exchange 2010 to migrate the users.
the migration is complete and we have kept the Exchange 2010 Hybrid Edition running to enable us to mail enable new AD users after the DirSync has synchronized the user to the tenant.
has anyone used this limited version of Exchange as an smtp relay for network devices, copiers etc?
This topic first appeared in the Spiceworks Community -
Exchange 2010 public folder not showing on exchange 20003 mailbox
Hi,
I have public folder on exchange 2003 and separate public folder on exchange 2010. On exchange 2010 user mailbox, I can see both 2003 and 2010 public folders. On exchange 2003 user mailbox, I can only see 2003 public folders. It is not the permission issue
as I have given the user "owner" right and see not able 2010 public folder inless i move 2003 user mailbox to 2010 exchange.
Appreciate if anyone could help me if to point me to directions or any hotfix I can run?
Thank you very much.
PwintAre you using OWA or Outlook to view the public folders?
If you're using OWA, the reason you can't see the folders is that OWA in Exchange 2003 uses WebDAV, which is no longer present in Exchange 2010.
If you're using Outlook, you'll need to use the troubleshooting logs to determine the cause of the problems.
It could be related to Outlook trying to connect directly to 2010 mailbox server instead of CAS. Because normally the mailbox server is installed without the CAS role, it does not allow a direct Outlook connection. Or it could be something else,
like authentication. -
Outlook 2010 + Exchange 2010 keeps asking for credentials - Please Help!
Hello All,
Recently after a Windows Update + restart of my Exchange Server I'm having an issue with Outlook 2010 where it continually asks for credentials. Every 5 minutes or so the credentials popup appears and either typing your password or clicking cancel will make
Outlook work as expected again until the next popup, frequency of popups is about 2-5 minutes give or take. I am using Exchange 2010 on Server 2008 R2 and aside from the popup everything is working as expected. This seems to be effecting almost all users.
Some things I've tried already include:
- Removing any saved credentials on computer
- Removing and recreating Outlook Mail Profiles
- Running "Set-AutodiscoverVirtualDirectory -Identity 'autodiscover (default Web site)' -WindowsAuthentication $true -BasicAuthentication $false" in shell to disable basic authentication for autodiscover
- Running "get-outlookanyhwere | set-outlookanywhere -ClientAuthenticationMethod NTLM -IISAuthenticationMethods NTLM" in shell to ensure that outlook anywhere and IIS are using NTLM authentication
- Ensuring that the OAB folder permissions are set to allow Authenticated Users to Read/Execute
Anyways, if anybody has additional suggestions for me I'd very much appreciate them. Many users are using the Web App for the time being (with no issues) since the credentials popup is too annoying for them.So I made sure that all of my authentication methods match the settings you linked me and then recycled the app pool you mentioned but am still having the issue.
One thing I noticed is that if a user experiencing the problem types their password into the credentials popup it will keep popping up continuously but if they hit cancel it says "Needs Password" where it would normally say "Connected to Microsoft Exchange"
and if they simply click once where it says "Needs Password" then all of a sudden it switches to "Connected to Microsoft Exchange" again and they no longer see the popup until Outlook is restarted.
Just to verify I have the proper settings now this is what shell returns:
[PS] C:\Windows\system32>Get-WebServicesVirtualDirectory | fl *auth*
CertificateAuthentication :
InternalAuthenticationMethods : {Ntlm, WindowsIntegrated, WSSecurity}
ExternalAuthenticationMethods : {Ntlm, WindowsIntegrated, WSSecurity}
LiveIdSpNegoAuthentication : False
WSSecurityAuthentication : True
LiveIdBasicAuthentication : False
BasicAuthentication : False
DigestAuthentication : False
WindowsAuthentication : True
[PS] C:\Windows\system32>Get-AutodiscoverVirtualDirectory | fl *auth*
InternalAuthenticationMethods : {Basic, Ntlm, WindowsIntegrated, WSSecurity}
ExternalAuthenticationMethods : {Basic, Ntlm, WindowsIntegrated, WSSecurity}
LiveIdSpNegoAuthentication : False
WSSecurityAuthentication : True
LiveIdBasicAuthentication : False
BasicAuthentication : True
DigestAuthentication : False
WindowsAuthentication : True
Do you have any additional suggestions that I can try? From what I can tell my authentication methods all match the default settings now.
Edit: As soon as I changed EWA to just Basic Authentication as it says in the linked default settings I would get an error when trying to browse to the EWA that said "Outlook failed to initialize" and re-adding the Windows Authentication, then running iisreset
fixed the issue. Therefore EWA is the only service with non-default authentication methods now. -
Users with mailboxes on exchange 2010 cant proxy to OWA on exchange 2013
We are in the process of migrating from 2010 to 2013. Users with mailboxes on exchange 2010 can't proxy to the owa on Exchange 2013 - there is no error - just receiving a message "Still working on it"
alex serdyukovHi Alex,
As the above suggestion mentioned, you can try to upgrade the Exchange 2013 to CU8 and check if any helps:
Cumulative Update 8 for Exchange Server 2013
Best regards,
Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact [email protected]
Niko Cheng
TechNet Community Support -
Exchange Management Shell prompt for connection credentials?
Some time ago I came across an article where a couple of modifications to the shortcut to the EMS would allow a connection to a specific server and then prompt for credentials for that connection.
Removing the -auto and replacing with -serverFQDN [servername] covers the 1st part, but I can't recall what allowed the prompt for credentials to the other machine.
I'm looking do do this from a Win7 machine, where I must login with one account but another account has Exchange permissions.
It's driving me nuts, because I had it working and lost the shortcut in a machine reload and can't recall what I had done.Slightly modified, but nothing important was removed.
C:\Users\[loginid]>C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe -ver sion 2.0 -noexit -command ". 'C:\Program Files\Microsoft\Exchange Server\V14\bin \RemoteExchange.ps1'; Connect-ExchangeServer -ServerFQDN [servername] -Credential (Get-Credential)"
Welcome to the Exchange Management Shell!
<tip snipped>
cmdlet Get-Credential at command pipeline position 1 Supply values for the following parameters:
Credential
VERBOSE: Connecting to [servername]
[servername] Connecting to remote server failed with the following error message : Access is denied. For more informati on, see the about_Remote_Troubleshooting Help topic.
+ CategoryInfo
: OpenError: (System.Manageme....RemoteRunspace:RemoteRunspace) [], PSRemotingTransportExc
eption
+ FullyQualifiedErrorId : PSSessionOpenFailed Failed to connect to an Exchange server in the current site.
Enter the server FQDN where you want to connect.:
Doing a New-PSSessoin using the same credentials is successful.
$UserCredential = Get-Credential
$Session = New-PSSession -ConfigurationName Microsoft.Exchange -ConnectionUri
http://[servername]/PowerShell/ -Authentication Kerberos -Credential $UserCredential import-pssession $Session
cmdlet Get-Credential at command pipeline position 1 Supply values for the following parameters:
Credential
WARNING: Some imported command names include unapproved verbs which might make them less discoverable.
Use the Verbose parameter for more detail or type Get-Verb to see the list of approved verbs.
ModuleType Name
ExportedCommands
Script tmp_e9ed0738-3c62-458b-bdc8-7451...
PS C:\
Using CAC login, or domain/username/password produces the same results. -
I'm trying to remove Exchange 2007 from an SBS 2008 server
(Server 2008 Standard FE). My ultimate goal is to completely remove the SBS 2008 Server from the network environment.
We have an Exchange 2010 Coexistence Scenario and Mailboxes/Public Folders/etc have been moved over to the 2010 mail server, on Server 2008 R2.
I have moved all Shares, FSMO roles, DHCP, DNS, etc over to their respective servers. We have two full blown DC's in the environment.
I'm ready to remove Exchange 2007 from SBS 2008 and DCPROMO the server. I can NOT seem to find a TechNet article that shows me how
to proceed in this kind of scenario. I am trying to use the TechNet article:
http://technet.microsoft.com/en-us/library/dd728003(v=ws.10).aspx
This article references Disabling Mailboxes, Removing OAB, Removing Public Folder Databases, then uninstalling Exchange using the Setup Wizard.
When I go to Disable Mailboxes I get the following error:
Microsoft Exchange Error
Action 'Disable' could not be performed on object 'Username (edited)'.
Username (edited)
Failed
Error:
Object cannot be saved because its ExchangeVersion property is 0.10 (14.0.100.0), which is not supported by the current version 0.1 (8.0.535.0). You will need a later version of Exchange.
OK
I really don't see why I need to Disable Mailboxes, Remove OAB and Public Folder Databases since they have been moved to 2010. I just want
to remove Exchange 2007 and DCPROMO this server (actually I just want to remove any lingering Exchange AD Objects referring to the SBS 2008 Server, using the easiest and cleanest method possible).
Can someone point me in the right direction?
Thanks!Hi,
Based on your description, it seems that you are in a migration process (migrate SBS 2008 to Windows Server
2008 R2). Now, you want to remove Exchange Server and demote server. If anything I misunderstand, please don’t hesitate to let me know.
On current situation, please refer to following articles and check if can help you.
Transition
from Small Business Server to Standard Windows Server
Removing SBS 2008 –
Step 1: Exchange 2007
Removing SBS 2008 – Step 2:
ADCS
Removing
SBS 2008 – Step 3: remove from domain / DCPROMO
Please Note: Since the web site is not hosted by Microsoft, the link may change without notice. Microsoft
does not guarantee the accuracy of this information.
Hope this helps.
Best regards,
Justin Gu -
Outlook 2010 client ask for credential when Exchange 2010 server restart
Hi,
Each time our Exchange server is restarted (most of time for update installation), all open Outlook clients are prompt for credential.
This is annoying because when the users come back, sometime they don't take care about the credential windows and believe that's they don't receive any mail and start to prompt the support when they notice that's their mail come to their mobile but
not on Outlook...
One solution is to ask everybody to shut their computer down every time an update of the server is planned. But as the users are, by design, very lazy and don't really care about this kind of things. It isn't an acceptable solution.
Does anyone know if there is a way for stopping Outlook to ask about credential when it loose temporarily the connection with Exchange ?
Thanks for readingHi,
Just checking in to see if the information from Ed (DareDevil57) was helpful. Please let us know if you would like further assistance.
Regards,
Melon Chen
Forum Support
Come back and mark the replies as answers if they help and unmark them if they provide no help.
If you have any feedback on our support, please click
here -
Outlook 2010 keeps prompting for password every morning
Hi,
We run Exchange 2007 on Windows server 2008. All SP and updates are up to date.
About a month ago, two users got prompt for user credential in Outlook every morning, but other users in the domain are fine. Below are what I have tried but no help.
1. Deleted user credential for Outlook in Credential Manager
2. Recreated Outlook profile
3. Disjoin and rejoin their computers to the domain
I can repeat the problem on another computer with the user's account log in.
The problem only happens in the morning, once the user entered the credential, Outlook starts to update new email and it will be fine for the rest of the day.
Only two users have this problem. I can't figure out if they have anything in common. Since I can repeat the problem on another computer, I assume this problem should be related to user account.
I need help!
Thanks in advance!
GraceHi,
As per the information and details provided by you, to solve the Outlook 2010 password problem, please follow these steps: -
Firstly, you try to
change the profile.
Open Control panel/Mail/Select the profile and click Properties.
Select the mailbox and click the
Change button.
When inside the profile you will see tabs at top for
connection and security.
Please make sure you have selected
Negotiate authentication, and have unchecked the box that states
Always prompt for login credentials.
Then check if you are using
HTTP to connect with exchange, if so uncheck this and apply the changes.
Close Outlook if open and reopen Outlook.
I hope this information will be helpful for you.
Thanks and regards
Shweta@G
Hi Goyal,
Thank you very much for your reply. The Outlook settings are the same as you described. We do use HTTP to connect to Exchange. I unchecked it and see what happens tomorrow. but just FYI. All Outlook has the same settings with HTTP connection checked. Only
two specific accounts have the credential issue.
Will update you tomorrow.
Thanks,
Grace -
Outlook 2010 keeps prompting for credentials
Hello,
I have just about every user experiencing an issue with Outlook 2010 where Outlook keeps prompting for credentials. This has been happening ever since recent Microsoft Office updates that rolled out last week it seems. All my users still have connection
to the exchange server and can send/reply just fine. Issue occurs on both 32 bit and 64bit versions. This prompt will appear every few seconds and is becoming a nuisance for all my users.
I have attempted the following with no resolution:
- removed credentials from credentials manager
- ran Outlook in safe mode
- ran repairs on Office
- completely removed and re-added users Outlook profile (profiles are manually configured)
- made sure Office is up to date
- configured Outlook account on freshly imaged PCHi,
For this issue, you can first try some suggestions in this forum content:
Why does Outlook keep prompting for password
Especially try NTLM Authentication to check the result.
We have received some report about this issue since the February 10, 2015 update for Outlook 2010 (KB2956128). If you have installed this update, please note we have realized this issue and once there is any update, I'll let you know.
Regards,
Melon Chen
TechNet Community Support
It's recommended to download and install
Configuration Analyzer Tool (OffCAT), which is developed by Microsoft Support teams. Once the tool is installed, you can run it at any time to scan for hundreds of known issues in Office
programs. -
Exchange 2010 SP1 Update Rollup 6 to Exchange 2010 SP3
Hi there,
I am planning to install Exchange 2010 SP3 next week and after reading some of the related comments on this site I got a little worried.
Our current Exchange environment consists of the following:
1 x CAS/HT Server
2 x Mailbox Server (members of a DAG)
The OS of the 3 servers is Windows Server 2008 R2 SP1. All servers are running Exchange 2010 SP1 Update Rollup 6.
The Execution Policies on our Exchange servers are set as follows:
– CAS/HT Server:
Scope ExecutionPolicy
MachinePolicy Undefined
UserPolicy Undefined
Process Undefined
CurrentUser Undefined
LocalMachine Unrestricted
– Mailbox Servers:
Scope ExecutionPolicy
MachinePolicy Undefined
UserPolicy Undefined
Process Undefined
CurrentUser Undefined
LocalMachine RemoteSigned
Please note that we do not have any Group Policies that defined the PowerShell script execution policy.
I would be very grateful if you (or any of the kind readers) could help me with following questions:
1- Do I have to change the execution policy on our Exchange servers before installing SP3? If I have to change a policy, what should I change? And how would you recommend I should do this?
2- After installing SP3 on a server, can I install the latest rollup update on this server before moving to the next server? For example, can I do the following:
i. Install SP3 followed by RU 5 on the CAS/HT server -> Apply the our custom settings
ii. Install SP3 followed by RU 5 on the first mailbox server
iii. Install SP3 followed by RU 5 on the second mailbox server
Many thanks,
MHi Amit,
Many thanks for the swift reply.
That's correct. We didn't set the Powershell execution policy via Group Policy. We only configured the execution policy of "LocalMachine" to "Unrestricted" on the CAS/HT server using the "Set-ExecutionPolicy" command on the server.
The mailbox servers' execution policies have not been changed and are set to those values by default.
I must admit, I go event more confused when I read the "http://support.microsoft.com/kb/2668686" and "http://support.microsoft.com/kb/2810617" articles.
But it looks like I shouldn't worry as our current Powershell execution policies shouldn't affect the upgrade. Right?
Maybe you are looking for
-
Error while importing a table with BLOB column
Hi, I am having a table with BLOB column. When I export such a table it gets exported correctly, but when I import the same in different schema having different tablespace it throws error IMP-00017: following statement failed with ORACLE error 959: "
-
Hello, I'm using version 3.6.13 I'm on a Windows 7 platform In Thunderbird or any other software that provides a hyperlink, clicking on the link will not activate Firefox if it's not running, or it won't open a new window if it is running. I have dis
-
hi all, i use the alv with the new model in a normal abap-program and there i use the statement SET COUNTRY 'US' to show the date-format in us-mode, which works fine. doing the same with webDynpro ALV does not work. Is there another possibility to us
-
Keep Formatting during Copy and Paste in Text Box
Hi everyone, I'm using Adobe Acrobat XI v11.0.0 on Windows 7. When I am copying and pasting numbers and text within the same text box, I lose the original formatting. How can I paste with the formatting retained? For example, if I copy Bold1234subscr
-
Seeburger adapter configuration
At my client place they want to send an orders idoc as an EDI document to customer,,Can any one please tell me how to configure seeburger adapter & the mapping for edi. Advanced Thanks Kum