locked
Restricted Users RRS feed

  • Question

  • Hello - We have users that are restricted to certain websites. (proxy policy)

    After moving a restricted test account from Exchange on-premise to Exchange Office365 the test account is no longer able to run the MS Outlook setup, it hangs on the "search for..."

    I added the following URL's to the restricted account allow list:

    *. office365.com

    *.outlook.com

    *.office.com

    autodiscover-s.outlook.com

    login.windows.net

    login.microsoftonline.com

    But it still hangs, what am I missing? I made them all trusted sites.

    Note: outlook.office365.com/owa works as expected, just not MS Outlook Setup. If I un-restrict the user it works normally so I think I must be missing a URL?

    Thanks! I hope that makes sense.

    update -

    I just tried using the built-in "Mail" and got this info, hope it helps.




    • Edited by jamicon Tuesday, August 6, 2019 12:57 PM
    • Moved by Perry-Pan Wednesday, August 14, 2019 6:53 AM
    Monday, August 5, 2019 2:01 PM

Answers

  • Hi Jamicon,

    Is this computer domain-joined?

    As far as I know, Outlook use AutoDiscover service to configure and connect Exchange account. I'm wondering if there was something blocked when Outlook get account settings via AutoDiscover.

    To check this, we can use ERCA to test Outlook AutoDiscover on this problematic machine. Please share the detailed results here.

    We may also allow URL for some services, such as internal/external URL of virtual directories.

    You can also refer to following steps and share details under Results and Log tab:

    1. While Outlook is running, press and hold down the CTRL key, and then right-click the Outlook icon in the system tray or notification area on the lower-right corner of the screen.

    2. From the menu, select Test E-mail AutoConfiguration.


    3. Enter your email address and password.

    4. Clear the Use Guessmart and Secure Guessmart Authentication check boxes.

    5. Ensure that the Use Autodiscover check box is selected.

    6. Click test.

    Regards,

    Perry


    Please remember to mark the replies as answers if they helped. If you have feedback for TechNet Subscriber Support, contact tnsf@microsoft.com.

    • Edited by Perry-Pan Tuesday, August 6, 2019 4:48 AM
    • Marked as answer by jamicon Wednesday, August 7, 2019 2:27 PM
    Tuesday, August 6, 2019 4:48 AM
  • I'm afraid there is no such a list of required URL's for MS Outlook setup. 

    In my opinion, this may be related with the internal or external URL of virtual directories on the Exchange server as Outlook use them to connect to server. You can add these URL to Allow list and test the results.

    To check the property of InternalUrl/External of virtual directory, you can try following cmdlet:

    Get-OutlookAnywhere | Select Server,InternalHostName,ExternalHostName
    Get-MAPIVirtualDirectory | Select Server,InternalURL,ExternalURL
    Get-OABVirtualDirectory | Select Server,InternalURL,ExternalURL
    Get-WebServicesVirtualDirectory | Select Server,InternalURL,ExternalURL
    Get-ClientAccessServer | Select Name,AutoDiscoverServiceInternalUri
    Get-AutodiscoverVirtualDirectory

    Regards,

    Perry


    Please remember to mark the replies as answers if they helped. If you have feedback for TechNet Subscriber Support, contact tnsf@microsoft.com.

    • Edited by Perry-Pan Wednesday, August 7, 2019 8:19 AM
    • Marked as answer by jamicon Wednesday, August 7, 2019 2:28 PM
    Wednesday, August 7, 2019 8:18 AM

All replies

  • Hi Jamicon,

    Is this computer domain-joined?

    As far as I know, Outlook use AutoDiscover service to configure and connect Exchange account. I'm wondering if there was something blocked when Outlook get account settings via AutoDiscover.

    To check this, we can use ERCA to test Outlook AutoDiscover on this problematic machine. Please share the detailed results here.

    We may also allow URL for some services, such as internal/external URL of virtual directories.

    You can also refer to following steps and share details under Results and Log tab:

    1. While Outlook is running, press and hold down the CTRL key, and then right-click the Outlook icon in the system tray or notification area on the lower-right corner of the screen.

    2. From the menu, select Test E-mail AutoConfiguration.


    3. Enter your email address and password.

    4. Clear the Use Guessmart and Secure Guessmart Authentication check boxes.

    5. Ensure that the Use Autodiscover check box is selected.

    6. Click test.

    Regards,

    Perry


    Please remember to mark the replies as answers if they helped. If you have feedback for TechNet Subscriber Support, contact tnsf@microsoft.com.

    • Edited by Perry-Pan Tuesday, August 6, 2019 4:48 AM
    • Marked as answer by jamicon Wednesday, August 7, 2019 2:27 PM
    Tuesday, August 6, 2019 4:48 AM
  • I'm afraid there is no such a list of required URL's for MS Outlook setup. 

    In my opinion, this may be related with the internal or external URL of virtual directories on the Exchange server as Outlook use them to connect to server. You can add these URL to Allow list and test the results.

    To check the property of InternalUrl/External of virtual directory, you can try following cmdlet:

    Get-OutlookAnywhere | Select Server,InternalHostName,ExternalHostName
    Get-MAPIVirtualDirectory | Select Server,InternalURL,ExternalURL
    Get-OABVirtualDirectory | Select Server,InternalURL,ExternalURL
    Get-WebServicesVirtualDirectory | Select Server,InternalURL,ExternalURL
    Get-ClientAccessServer | Select Name,AutoDiscoverServiceInternalUri
    Get-AutodiscoverVirtualDirectory

    Regards,

    Perry


    Please remember to mark the replies as answers if they helped. If you have feedback for TechNet Subscriber Support, contact tnsf@microsoft.com.

    • Edited by Perry-Pan Wednesday, August 7, 2019 8:19 AM
    • Marked as answer by jamicon Wednesday, August 7, 2019 2:28 PM
    Wednesday, August 7, 2019 8:18 AM