Outlook 2010 prompting to "Insert smart card"

Before anyone refers me to the KB articles or other threads which address this problem, let me say that I have seen them and have performed the requested operations referenced in the following KB: http://support.microsoft.com/kb/2704959/en-us
The exchange server is running Microsoft Windows Server 2003 R2 x64 with Exchange Server 2007.
The clients are running Windows 7 x64 or Windows 2008 Server with Microsoft Outlook 2010 Professional Plus - both of these are up-to-date.
While an older version of IIS (v6.0) is running on the exchange server, the settings specified by the previously indicated KB are correctly configured, yet clients on both of these platforms across the domain continue to encounter these prompts.
Aside from attempting to uninstall the KBs that are responsible for this on the first place (http://support.microsoft.com/default.aspx?scid=kb;EN-US;2553248, http://support.microsoft.com/default.aspx?scid=kb;EN-US;2597137, http://support.microsoft.com/default.aspx?scid=kb;EN-US;2597011),
which are not even present on some of the systems that exhibit this problem (but may rolled in to the Service Packs for Office, though I have been unable to verify this), what else can be done to remove or otherwise prevent this prompt from endlessly harassing
our users?
Thanks!
Sorry for the lack of links in the body, apparently I can't include them until my account is verified.

Hi,
because you're using (older) Outlook with (older) Exchange, I recommend the exchange legacy clients forum:
http://social.technet.microsoft.com/Forums/en-US/home?forum=exchangesvrclientslegacy
KB2704959 mentions that the affecting feature was introduced in 2011, and, you mentioned that your clients are all up to date, which suggests they would have SP2 for Office2010.
Since SP2 for Office2010 was released around July2013, it's reasonable to assume that your clients will have the feature, and, that you would need to rollback before SP2 to remove it. You could perhaps test this, but if everything works without SP2, I'm not
sure that's a very acceptable workaround.
I also note in the "more info" section of the same KB that you would need to ensure the necessary certificate settings are applied to FE/CAS (in case you have those elements in your implementation), in addition to MBX. It may also be relevant if
you are publishing via TMG or UAG or similar products?
It may also be helpful for you to confirm if your clients are using MAPI/RPC vs. RPC-over-http(OutlookAnywhere) - from my reading of the same KB, the issue might only affect clients that are configured to use RPC-over-http ?
Don
(Please take a moment to "Vote as Helpful" and/or "Mark as Answer", where applicable.
This helps the community, keeps the forums tidy, and recognises useful contributions. Thanks!)

Similar Messages

Outlook 2010 prompting for password each login to Exchange 2013

We have a new member server w/ Windows Server 2012 and Exchange 2013. User's mailboxes were migrated from an old Windows Server 2003 server w/ Exchange 2003 by creating new empty mailboxes in Exchange 2013 then we exported/imported
.pst files instead of migrating exchange stores. Every time any users opens Outlook, they are being prompted to log in with domain credentials. Obviously I'm clicking on "Remember my password", too. The workstations are all
using Outlook 2010 and on a mix of Windows XP SP3, Windows 7 SP1 and Windows Server 2008 R2 (terminal server with Outlook 2010 installed for remote users). Some users were using Outlook 2010 prior to the migration to Exchange 2013 and some were on Outlook
2007 but upgraded to Outlook 2010. I'm almost to the point of telling the users it's a new "feature" of Exchange 2013. I'm confident that it's not stored passwords or credentials on the workstations, I've removed, deleted, created and
recreated those credentials. I've changed domain passwords and that didn't help either. Any hints, tips or suggestions would be greatly appreciated.

Hi
These settings can be found under your Outlook profile, "More Settings > Connection > Exchange Proxy Settings."
If you have Outlook Anywhere enabled, then you should force all Outlook clients to use HTTP when connecting. Ensure you have "On fast networks, connect using HTTP..." AND "On slow networks, connect using HTTP...". If you
don't, anytime you dock, undock, get a new IP address, refresh your IP address, go to sleep, idle, anything that causes your IP stack wants to renegotiate connective will cause a password prompt to appear, EVERYTIME.
Terence Yu
TechNet Community Support

Outlook 2010 prompting for password

Hi everybody. I ran into an issue yesterday morning where at one of our sites Outlook 2010 has started prompting for a username and password. If the user types in their username as "MYDOMAIN\myuser" and their password, it lets them in but the Exchange
status shows as "Disconnected". If the user sets their username to just "myuser" without the domain on the front it lets them in and works as expected until they close Outlook, at which point they have to enter their credentials again.
The strangest thing about this is that it's only affecting one of our sites and only Outlook 2010. Users running 2007 and 2003 do not have the problem and only users at this physical location have the problem. Does anybody know where I can look? I have tried
clearing stored credentials, created new Outlook profiles and reset passwords. None of these things seem to have had any effect.

After changing a ton of outlook settings, deleting the user's account profile on outlook, deleting their domain profile from the effected computer, trying to fix the registry, deleting stored credentials, etc.... almost everything else I found something
that FINALLY worked for me after over a year and about 12 different users being effected.
in the past I would just give up after much frustration and upgrade them to Office 2013 but that gets very expensive especially when I have 57 other users that could potentially run into the same issue.
Here is what I did.
- back up the user's data. log out and log into local admin
- delete the user from the local registry
- repair Office 2010 through control panel/programs, restart
- have user log back in with their credentials to make new local profile. recover their backed up documents. log out and log back in as local admin.
- install hotfix KB2597011
- restart computer
- install hotfix KB2583935
-restart computer
- log in, open outlook and setup user's account.
Some of these steps may be skipped as I didn't find the hot-fixes until after I repaired office, however I am just providing what I did in the process to end up with a working outlook again.
Some things unique to my situation that may or may not help.
- I noticed some of the computers have Office2010 32bit installed on 64 bit machines.
- Some of the users were swapped over using a profile mover program when we moved to a domain environment.
- For me this always happens when the user's passwords expire and they have to log in to the portal to change it. Then outlook starts with the repeated prompt for passwords. It is always computer specific and nothing but what I provided above has worked
other than re installing windows 7 and then office or upgrading to office 2013.

Outlook 2010 prompts for profile when 3rd party application tries to send mail

Hi,
I have been having an issue with Outlook 2010 and our in-house MIS system. The system uses Outlook to send mail out, and it works perfectly fine if Outlook is running at the time.
There is a problem though when Outlook is not running and the programs calls Outlook to send the mail, Outlook will display the "Choose Profile" dialog. Outlook basically launches in the background with the little gear icon in the system tray.
Is there any way to get rid of the select profile screen? Everything is already selected appropriately under Control Panel>Mail, Outlook does not prompt for profile when launched normally.
Thanks

It all depends on the code you are using to initiate Outlook.
It might be better to ask this in the developer forum down the hall:
http://social.msdn.microsoft.com/Forums/en-US/outlookdev/threads
Don't forget to post your sample code.
Robert Sparnaaij
[MVP-Outlook]
Outlook guides and more: HowTo-Outlook.com
Outlook Quick Tips: MSOutlook.info

Internally installed Outlook 2010 prompts for password using external smtp email as user id

Hi,
After exchange 2007 to exchange 2013 migration all internally connected outlooks 2010 (xp, vista, win7, win8) prompt for password using external email user address as user id.
Below some of my settings and informations.
Internal domain: contoso.local
External domain: contoso.com
Exchange is NOT published to Internet at all.
Internally OWA, ECP runs OK.
Test-OutlookWebservices with user.name(at)contoso.local or contoso\user.name - runs OK
Test-OutlookWebservices with user.name(at)contoso.com - fails
Common scenario - (all happens internally):
1.User starts Outlook
2.Outlook prompts for password with default user.name(at)contoso.com as id
- while user tries to authenticate using his domain password - outlook re-prompts
- while user changes id from user.name(at)contoso.com to user.name(at)contoso.local or contoso\user.name and authenticates - Outlook connets to exchange and till next Outlook it runs ok.
I am bus with that issue since 1 week and I am already bit tired. I was looking for answer via gogle/bing and went through tons of "Outlook perpetually prompts for password" threads and blogs. No success.
Do you have any clue where else start to play with that?

Hi,
Thank you for answer - no luck
>NExt og to Connection tab - Exchange Proxy settings - Proxy authentication settings - is it set
>to NTLM or Basic?Give it a try on one of them.(if set to NTLM change to basic and vise versa).
On both settings the same results - Outlook is prompting for password.
>Another thing you could try is og to Internet Explorer - tool -internet options- Security - click local
>intranet - >custom Level and scroll Down to bottom and put check mark on automaticly logon
>With current username >and password.
>Do this on Trusted sites as well,if Your domain is listed under trusted sites
The same results - Outlook isprompting for password.
Should not be some kind of mapping set somehow in AD between user.name(at)contoso.com and user.name(at)contoso.local?
I have impresion that issue is somewhere in the fact that outlook is trying to connect using contoso.com instead of contoso.local in ntlm credentials.

Outlook 2010 prompt for credential when connecting to Exchange 2013 mailbox

I have 4 server Exchange 2010 with DAG and one server Exchange 2013, i've migrated some mailbox to the new 2013 server.
I'm having a problem with some Outlook 2010 that sometimes (not always) requires credential to connect to mailbox in a server Exchange 2013, but only
when Cache mode is enabled.
The client ask for credential and dont connect to mailbox until I change in online mode.
In Online Mode, everything works fine.
I don't have Public Folders, so the check box Download Public Folder is not selected and the authentication mode is "Negotiate".
Thanks in advance.
Elisa

Hi,
As far as I know, by default, shared mail folders not public folders are downloaded in Cached mode in Outlook 2010 and Outlook 2013:
http://support.microsoft.com/kb/982697/en-us
Please check if there is shared folder in the problematic Outlook 2010 client and try to check if the issue still exists with the same account on other Outlook client.
Best regards,
Angela Shi
TechNet Community Support

FIM 2010 CM deployment for Smart Card Management

I have FIM installed and was initially getting an Object does not exist on server error whenever i went to Manage Profile Tepmplates or with a user accoutn tried the request a smart card link..
I enabled verbose logging and this is the error
Error loading all profile templates. Container path: CN=Profile Templates,CN=Publik Key Services,CN=Services,CN=Configuration,DC=Company,DC=Com
I validated that the container does not exist. I manually created it and now i get past the error but all lists of profiles are empty as the container is empty.
At what point should this have been created/populated?
Aaron

The container is created when a member of the Enterprise Admins group *successfully* runs the FIM CM Configuration wizard. It appears you have either not run the wizard, or never completed it successfully.
Brian

Ever since i plugged my CAC card in, every admin action i take forces the "Insert Smart Card" authorization screen

For months now, I keep getting told to plug in a smart card every time I want to download a game, update a program, or just change settings to my user account. It also keeps telling me my PIN to my CAC is wrong, but I KNOW my PIN still works. I am still
able to log in on all of my Army sites and use those sites with out problems. How do I switch it back? Why is it telling me my PIN is wrong?

Hi,
Would you please let me know if your account associated with your CAC card is a domain account?
Have you tried to contact the domain admin to reset the permission on CAC card to check the issue?
In addition, if the permission for this card is set correctly after confirmation, I would like to know if this issue just happened recently.
If so, you can try to boot into safe mode with local administrator or built-in admin and perform the system restore to see if this issue can be fixed.
Kate Li
TechNet Community Support

Windows XP Machines Always Prompt for Credentials (Exchange 2013, Outlook 2010)

I am running Exchange 2013 on Server 2012 Datacenter (VM). Windows 7 clients with Outlook 2010 work fine. Windows XP clients with Outlook 2010 prompt for credentials (user name and password) each time Outlook is started, and checking the "Remember
my password" box does not prevent this from happening the next time. The "Always prompt for logon credentials" checkbox on the "Security" tab of the "More Settings" section of the Exchange account is not checked. I have found a myriad of posts
with similar issues, but they all seem to have to do with SBS/Exchange 2007, and I haven't come across something that works as a solution for me. One suggested certificate issues, and I was having certificate security warnings, but I got that resolved.
I am hopefuly that the fact that this only happens on Windows XP will be telling.

Proxy settings:
auth_param ntlm program /usr/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp
auth_param ntlm children 50
auth_param ntlm keep_alive on
auth_param basic program /usr/lib/squid3/squid_ldap_auth -R \
-b "DC=domain,DC=local" \
-D "CN=Squid Proxy,OU=TI,OU=Domain,DC=domain,DC=local" \
-W passldap \
-f "sAMAccountName=%s" \
-h domain.local
auth_param basic children 20
auth_param basic realm Domain Internet Proxy
auth_param basic credentialsttl 8 hours
external_acl_type ADS children=50 ipv4 ttl=60 %LOGIN /usr/lib/squid3/squid_ldap_group -S -K -b "DC=domain,DC=local" -f "(&(objectclass=person)(sAMAccountName=%v)(memberof =CN=%a,OU=Domain,DC=domain,DC=local))" -D "CN=Squid Proxy,OU=TI,OU=Domain,DC=domain,DC=local" -s sub -W ldappass domain.local
tks.

Smart card error

using exchange 2007, server 2008 r2. Win 7- outlook 2010 users are randomly getting "insert smart card" error. Some very randomly, some 2-3 times an hour. Out of 150 users only 10 having issue. Have checked IIS settings, they are fine. Issues with
updates were from 2012 and 2013, this started happening last week. Accounts are set up with an exchange account and a pop account. (we house the pop server).
Nothing makes sense!!! Very frustrating. Anyone help??

Hi,
Based on my research, some community members who have a similar issue were able to fix it by adding Office14 STARTUP folder to the Trusted Locations configuration option in
Word. To do this, open Word, click File -> Options -> Trust Center->Trust Center Settings->Trusted Locations -> Add new location... Then, add the following path to the Path box:
If you're using 32-bit Windows:
C:\Program Files\Microsoft Office\Office14\STARTUP\
If you're using 64-bit Windows:
C:\Program Files (x86)\Microsoft Office\Office14\STARTUP\
Please have a try and let me know the result.
Regards,
Steve Fan
TechNet Community Support
It's recommended to download and install
Configuration Analyzer Tool (OffCAT), which is developed by Microsoft Support teams. Once the tool is installed, you can run it at any time to scan for hundreds of known issues in Office
programs.

Outlook 2010 contacts not showing phone number in Lync 2013 client

Hi,
We have Lync 2013 with Exchange 2010. Recently we started upgrading Lync clients from 2010 to 2013.
A few users started reporting that their local Outlook contacts does not show phone numbers in Lync 2013 (working with 2010)
I have installed the august patch which should solve this issue
981751 - Lync 2013 does not display telephone number of an Outlook 2010 contact in the contact card
Any idea where to look next?

Hi Tobias Borgen Nielsen,
Lync expects all the phone numbers to be in the E.164 format, meaning they should be +1-111-11111111 etc. If they’re not like this, you will have to normalize them if you want Lync
to publish them.
The related article for your reference.
Lync not populating contact cards phone numbers from Active Directory (Or: How to normalize AD phone numbers for Lync Server 2010 and 2013)
http://y0av.me/2012/02/23/normalize_ad_numbers/
Note: Microsoft is providing this information as a convenience to you. The sites are not controlled by Microsoft. Microsoft cannot make any representations regarding the quality, safety, or
suitability of any software or information found there. Please make sure that you completely understand the risk before retrieving any suggestions from the above link.
Hope it can be helpful.
Best regards,
Eric

Adding Skype Icon to Outlook 2010

I want to add a Skype call or chat icon. I va ecreated on the Skype page and grabbed the email code. Do I paste an icon into Outlook and link to the pasted code or what?

I want to add the skype icon/phone number to my outlook 2010 email messages; however, I can only add the picture and not my Skype Phone Number (step 6 below does not work for me). Can someone provide advice on that? Thanks. Interestingly, it automatically occurred in my hotmail account, which links to Outlook.
1. Go to http://www.skype.com/intl/en/tell-a-friend/wizard/
2. select function as "add me to skype".
3. Right click the picture and save it on your computer.
4. Open a "New email" message in Outlook 2010.
5. insert the picture.
6. Right lcik , insert Hyperlink and paste "skype:<your skype ID>?add" (without quote).

Outlook 2010 "The server is unavailable" using smart card Exchange 2010

I have a XenApp 6.5 environment, that uses smart card authenication for login. All the office applications will open except for outlook. Outlook opens up and shows a prompt saying "Connecting" ...."Then server is unavailable".
If I removed the smart card authenication from the XenApp environment, User are able to open Outlook with no problem.
My question, is there something with exchange 2010 that needs to be turned on for smart card authenication?

Hi,
I suggest you remove any existing certificate-based credentials from the Credential Manager and use the
EnableSmartCard registry setting to check the result. The Outlook client may not be properly configured to work with saved smart card credentials.
Important
Follow the steps in this section carefully. Serious problems might occur if you modify the registry incorrectly. Before you modify it,
back up the registry for restoration in
case problems occur.
Remove existing certificate based credentials
The first step to prevent a PIN lockout is to delete any existing certificate based credentials that were saved by Outlook.
Open Control Panel.
Double-click Credential Manager.
See whether there is a Certificate-Based credential similar to the following:
@@BSUgiZQZ54Pf6cEtxKflWHH
Also, see whether there is a Generic credential similar to one of the following:
MS.Outlook.14:[email protected]:PUT
MS.Outlook.15:[email protected]:PUT
Note 14 indicates Outlook 2010 saved the credential and 15 indicates Outlook 2013.
If these are both present and were created or changed at the same time, they are likely smart card credentials saved from Outlook. Click the first credential to expand it and to show the details. Then, click Remove to delete the
credential from Credential Manager.
Repeat step 4 for each one of the credentials listed in step 3.
When you are finished, close Credential Manager.
Configure the EnableSmartCard registry setting
The second step to prevent a PIN lockout is to create the EnableSmartCard registry setting.
Outlook 2010
For Outlook 2010, the EnableSmartCard registry setting was introduced with the Microsoft Outlook 2010 hotfix package dated December 13, 2011 (KB2597028). We recommend that you install the most recent build of Outlook 2010. For more information
about the latest applicable updates for Outlook, click the following article number to view the article in the Microsoft Knowledge Base:
2625547 How to install the latest applicable updates for Microsoft Outlook (US English only)
To create the EnableSmartCard registry value, follow these steps:
Exit Outlook.
Start Registry Editor.
Create the following registry values at the specified locations:
Note Manually create any registry keys or values if they do not exist.
Key: HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Outlook\RPC
DWORD: EnableSmartCard
Value: 1
Exit Registry Editor.
For this question, if you need to get more information about Exchange 2010, I suggest you post the question in Exchange forum:
https://social.technet.microsoft.com/Forums/exchange/en-US/home?category=exchangeserver
Regards,
Melon Chen
TechNet Community Support
It's recommended to download and install
Configuration Analyzer Tool (OffCAT), which is developed by Microsoft Support teams. Once the tool is installed, you can run it at any time to scan for hundreds of known issues in Office
programs.

Why being prompted for login/password when using OVDC, smart card,token/vdi

Hello,
I'm using VDI 3.2.1, OVDC, smart card and i assigned a smart card token to a desktop pool.
Inserting the smart card triggers a new VDI desktop selector which prompts for the login and password.
Is there any reason why VDI is prompting for the login/password in the VDI selector when using a smart card especially that the smart card token has been assigned to a desktop pool ?
Thanks
Thierry.

You still have to authenticate to get a desktop. If you assigned a token to a pool, the ability to be assigned a desktop is based on the token not the user ID. That means that any user will be assigned a desktop if they use that card.

HT204384 Nothing happens when I insert a card in the SD slot. Running OS X 10.8.2 on a Mid 2010 IMAC.

Nothing happens when I insert a card in the SD slot. Running OS X 10.8.2 on a Mid 2010 IMAC.

Do you have your Finder Preferences > General set to show externals on the desktop?

Outlook 2010 prompting to "Insert smart card"

Similar Messages

Maybe you are looking for