locked
Exchange 2010: Prevent CAS server from being used for AutoDiscover RRS feed

  • Question

  • Is there a way to prevent a CAS server from being used for AutoDiscover?  Or if there is a way to point AutoDiscover to a load balancer, that would be helpful too.  Thanks.        
    Tuesday, June 26, 2012 7:13 PM

Answers

  • Hi TGIF2011,

    You can run "Get-ClientAccessServer | Select AutoDiscoverServiceInternalUri" to see which URL is configured for internal domain joined Clients using the SCP. With "Set-ClientAccessServer -AutoDiscoverServiceInternalUri <a href="https:///Autodiscover/Autodiscover.xml">https://<load balanced url>/Autodiscover/Autodiscover.xml you can change it to point to your load balancer.

    BR

    Timo

    • Proposed as answer by cara chenModerator Wednesday, June 27, 2012 5:49 AM
    • Marked as answer by TGIF2011 Wednesday, June 27, 2012 1:37 PM
    Tuesday, June 26, 2012 7:33 PM
  • Set-ClientAccessServer -AutoDiscoverServiceInternalUri "https://MyBigHonkingLB.domain.com/autodiscover/autodiscover.xml" 

    Timo is correct - I put the command into the code snippet box for readability.

    And for the OP note that it is URI  nor URL for this cmdlet  :)   when you are typing it in.

    If you are asking the question because you are introducing a new Exchange server into the org which will have a self signed certificate by default and you do not want users to hit it, run the above command and change the URL to be an existing server that has a valid cert. 


    Cheers, Rhoderick NOTICE: My posts are provided “AS IS” without warranty of any kind, either expressed or implied, including but not limited to the implied warranties of merchantability and/or fitness for a particular purpose.

    • Proposed as answer by cara chenModerator Wednesday, June 27, 2012 5:49 AM
    • Marked as answer by TGIF2011 Wednesday, June 27, 2012 1:37 PM
    Tuesday, June 26, 2012 9:09 PM

All replies

  • Hi TGIF2011,

    You can run "Get-ClientAccessServer | Select AutoDiscoverServiceInternalUri" to see which URL is configured for internal domain joined Clients using the SCP. With "Set-ClientAccessServer -AutoDiscoverServiceInternalUri <a href="https:///Autodiscover/Autodiscover.xml">https://<load balanced url>/Autodiscover/Autodiscover.xml you can change it to point to your load balancer.

    BR

    Timo

    • Proposed as answer by cara chenModerator Wednesday, June 27, 2012 5:49 AM
    • Marked as answer by TGIF2011 Wednesday, June 27, 2012 1:37 PM
    Tuesday, June 26, 2012 7:33 PM
  • Set-ClientAccessServer -AutoDiscoverServiceInternalUri "https://MyBigHonkingLB.domain.com/autodiscover/autodiscover.xml" 

    Timo is correct - I put the command into the code snippet box for readability.

    And for the OP note that it is URI  nor URL for this cmdlet  :)   when you are typing it in.

    If you are asking the question because you are introducing a new Exchange server into the org which will have a self signed certificate by default and you do not want users to hit it, run the above command and change the URL to be an existing server that has a valid cert. 


    Cheers, Rhoderick NOTICE: My posts are provided “AS IS” without warranty of any kind, either expressed or implied, including but not limited to the implied warranties of merchantability and/or fitness for a particular purpose.

    • Proposed as answer by cara chenModerator Wednesday, June 27, 2012 5:49 AM
    • Marked as answer by TGIF2011 Wednesday, June 27, 2012 1:37 PM
    Tuesday, June 26, 2012 9:09 PM