locked
OAB download never complete on outlook RRS feed

  • Question

  • Hello All,

    Our clients are facing problem when trying to download Offline Address book in Outlook. The progress bar stuck at 10% and never completes.

    We have Exchange 2010 SP1 Enterprise edition with Rollup Update 6 installed on Windows Server 2008 R2 SP1 Enterprise Edition. The Exchange roles are distributed on four VM running on two physical machines on Hyper-V 2008 R2. The Exchange role distribution is as follow,

    ·         Client Access and HUB role on two VMs, CAS running on WNLB in multicast mode with two NICs.

    ·         Mailbox role on two VMs with DAG installed.

    The client side OS is windows XP SP3 and outlook version is Office 2010 & 2007 SP2. The internet explorer version is 6, cannot update due to software dependency.

    Everything is works fine except when we click download address book and the progress bar stuck at 10% showing ‘copying offline address book template file’ but the download never completes.

    I have verified the following,

    ·         The autodiscover is working fine internally, we don’t have an external host record for autodiscover so cannot check. We have host A record entered in our DNS.

    ·         Auto-configuration tests complete successfully without any errors.

    ·         Test-OutlookWebServices complete without any errors.

    ·         OAB directories are accessible through internet explorer from client side using user credentials.

     

    I would appreciate if someone can answer this question at earliest.

    Thanks & Regards

    I have gone through many articles but none of the solutions worked for us. This is a new environment and all the clients are facing the same problem.
    Abdul Ali Khan Systems Consultant Premier Systems (Pvt.) Ltd
    Sunday, January 1, 2012 8:52 PM

Answers

  • I found the root cause, it is due to the mouse connected to the machines. The reference link is also mentioned below:

    http://support.microsoft.com/kb/2619347

    Thanks everyone for your continuous support.

    Regards


    Abdul Ali Khan Systems Consultant Premier Systems (Pvt.) Ltd
    Thursday, January 12, 2012 2:52 PM

All replies

  • Have you enabled OAB for web based distribution?

    Any errors in the event logs for OAB?

    Check the OAB generating server to see if the files are actually generated there;

    c:program files\Microsoft\exchange Server\v14\ExchangeOAB\

    next check if the CAS server gets the files from the OAB server;

    c:\program Files\Microsoft\Exchange Server\v14\ClientAccessOAB\

    http://www.howexchangeworks.com/2011/07/how-is-offline-address-book-distributed.html

    if the OAB server is generating the files, CAS is getting the files via replication, then it would probably be client side issue.

    Monday, January 2, 2012 4:49 AM
  • Hi,

    If you are using a public folder distribution try eliminating the Public Folder distribution method and to use the Web-Based distribution method for OAB. If you have no Outlook 2003 client, you don't need to enable the public folder distribution.

     


    Regards from www.windowsadmin.info | www.blog.windowsadmin.info
    Monday, January 2, 2012 5:19 AM
  • Hi All,

    The Exchange files are present on Mailbox Server in 'ExchangeOAB' folder. They are also present on both the CAS servers in 'Client Access\OAB' folder.

    Onething i would like to mention is that i have changed the default path of installation. The exchange is installed in 'D:\Exchange\' directory.

    Philip: I have also disabled the Public folder distribution but of no use. I have checked the OAB creation on Mailbox server and it is successful. I will increase the logging mode on both the CAS servers and keep everyone posted.

    Regards


    Abdul Ali Khan Systems Consultant Premier Systems (Pvt.) Ltd
    Monday, January 2, 2012 7:46 AM
  • HI,
    Have you configured http or https for the oab internalURL?
    If your answer is http and you have a trusted certificate installed, change it to https and configure basicauthentication.
    Example: Set-oabvirtualdirectory OAB* -internalurl https://server.domain.local/OAB -Basicauthentication $True -RequireSSL $True

    Do you have a file called web.config in *\Microsoft\Exchange Server\V14\ClientAccess\OAB?
    If you do, then make sure that Authenticated Users has read/execute permission on the file

    Has the clients a proxy server configured in IE?
    If so, make sure that the traffic to the CAS Server is bypassed.


    Martina Miskovic - http://www.nic2012.com/
    Monday, January 2, 2012 9:44 AM
  • Dear Abdul

    this'll happen if you configured IIS redirection to simplify you OWA URL. After configuring IIS redirection, IIS will create a small web.config file under your OAB folder with the IIS Redirection set to False, issue that outlook clients will try to access this file since it's under OAB folder and since Authenticated Users don't have Read access to file Outlook will get stuck trying to download OAB.

    So to solve this issue, just grant Read Access to the Authenticated Users on the web.config file and outlook will then works perfectly. Note: Don't delete the file since IIS will enable the redirection option on the OAB virtual directory and will break the OAB downloads.

    Monday, January 2, 2012 11:23 AM
  • Hi Martina,

    I have changed the internal URLs but still the problem exist.

    I am getting 'Microsoft+BITS/6.7 401 2 5 0' event followed by 'Microsoft+BITS/6.7 206 0 0 0' on the CAS servers IIS logs. The outlook progress bar stuck at 10% and display 'Copying offline address book template file'.

    Regards


    Abdul Ali Khan Systems Consultant Premier Systems (Pvt.) Ltd
    Monday, January 2, 2012 2:38 PM
  • Hi,
    Has the new setting been reflected on the Client?
    Check with Test E-mail autoconfiguration.

    When changing a URL etc, I find it always good to recycle the application pool MSExchangeAutodiscoverAppPool in IIS and restart Outlook afterwards on the client I'm testing with.

    What about web.config and my proxy question?
    Martina Miskovic - http://www.nic2012.com/
    Monday, January 2, 2012 2:42 PM
  • Hi Martina,

    I can see the new settings when running Test-AutoConfiguration. I cannot see any web.config in the OAB and i am not doing proxying. I have also confirmed that we are not doing any redirection.

    Regards


    Abdul Ali Khan Systems Consultant Premier Systems (Pvt.) Ltd
    Monday, January 2, 2012 4:16 PM
  • You mentioned that you changed the internalurl to https, but did  you also configure BasicAuthentication as I wrote in my first post here?

    You might need to run iisreset, If you haven't done so already.


    Martina Miskovic - http://www.nic2012.com/
    Monday, January 2, 2012 4:19 PM
  • Yes i have set it to basicauthentication and IISreset.

    Regards


    Abdul Ali Khan Systems Consultant Premier Systems (Pvt.) Ltd
    Monday, January 2, 2012 4:28 PM
  • ..and what about your certificate...is it trusted by the client computers or?

    Aslo, you do have an OAB configured on the mailbox databases?
    get-mailboxdatabase | fl Name,Offlineaddressbook
    Martina Miskovic - http://www.nic2012.com/
    Monday, January 2, 2012 4:36 PM
  • Yes the OAB is configured for all my Databases and i have the certificate available in client trusted root container.

    Regards


    Abdul Ali Khan Systems Consultant Premier Systems (Pvt.) Ltd
    Monday, January 2, 2012 4:45 PM
  • Ok, so you don't have a trusted certificate installed in Exchange, but instead using the self-signed Certificate that was created during installation (=not recommended)?

    One thing you could try is:

    Start CMD with elevated privilages (Run as administrator)
    Run: bitsadmin /cache /clear
    Restart the service "Background Intelligent Transfer Service"


    Martina Miskovic - http://www.nic2012.com/
    Monday, January 2, 2012 4:47 PM
  • No i dont have the seld signed certificate installed. We have stand alone CA installed on a domain controller and through that i have created a CA with 6 entries;

    mail.domain.com,autodiscover.domain.com,cas1.domain.com,cas2.domain.com,cas1,cas2

    I already have restarted the servers and client machines should running the commands make the difference.

    I am seeing BITs events in IIS logs on the CAS servers whose events are '401 2 5 0' and '206 0 0 0'

    Regards


    Abdul Ali Khan Systems Consultant Premier Systems (Pvt.) Ltd
    Monday, January 2, 2012 5:25 PM
  • Outlook 2007/2010 is using BITS to download the OAB, so I would run the above command even if you already have restarted the client computer.

    Regarding the certificate...
    I misunderstood "have the certificate available in client trusted root container". I thought you had imported the servers self-signed certificate to the client computers, but since you are using your own CA, not import/installation should have been done.

    Is the internalurl https://cas1.domain.com/OAB or https://mail.domain.com/OAB ?

    Please check in IIS that you do have Client Certificate set to "Ignore" for the OABVirtualdirectory.





    Martina Miskovic - http://www.nic2012.com/
    Monday, January 2, 2012 5:38 PM
  • I will run the commands and share the results. About the certificate I have the root certificate in trusted root but the mail certificate is not in the trusted root.

    I have checked with the both the internal URL settings but of no success.

    The IIS settings are similar as shown above.

    Regards


    Abdul Ali Khan Systems Consultant Premier Systems (Pvt.) Ltd
    Monday, January 2, 2012 5:53 PM
  • Is the BITS service running on the client computers? if not start it and try downloading OAB.
    Monday, January 2, 2012 6:03 PM
  • Yes the BITs service is running.

    Regards


    Abdul Ali Khan Systems Consultant Premier Systems (Pvt.) Ltd
    Monday, January 2, 2012 7:01 PM
  • Do you have any old oab-files and in your profile?
    If so, can you delete them and try a manual download?

    Have you tried creating a new OAB?


    Martina Miskovic - http://www.nic2012.com/
    Monday, January 2, 2012 7:13 PM
  • No i dont have any OAB files in my profile. I am never able to download any.

    I have also created new OAB and tested it but of no success.

    Regards


    Abdul Ali Khan Systems Consultant Premier Systems (Pvt.) Ltd
    Monday, January 2, 2012 8:13 PM
  • Also consider using something like netmon or wireshark and run from a client when attempting the OAB download to see what exactly its doing when it contacts the server.

     

     

    Monday, January 2, 2012 8:17 PM
  • Update:

    I have tried downloaded it on a different brand of PC and it worked for me. All the PCs used here are of similar brand and giving problems.

    One wierd thing also happened, I take a remote desktop on my Laptop which is also a different brand and tried to download the OAB of the user who is not able to download it on his system and the OAB downloaded.

    The different brand PC and my laptop have window 7 installed.

    Can anyone please explain why I am able to download the OAB when using remote desktop?

    Now, I am trying to re-installing the OS on the desktop which is giving problem and will use a generic network driver instead of the driver CD provided by the hardware manufacturer.

    I will also try wired shark and netmon if the problem remains unresolved after the new changes.

    I will provide the details once I find the proper solutoin. If anybody has any ideas please feel free to share.

    Regards


    Abdul Ali Khan Systems Consultant Premier Systems (Pvt.) Ltd

    Monday, January 2, 2012 8:18 PM
  • Hello,

     

    Check the time stamp for the OAB file on CAS server; Location: c:\Program Files\Microsoft\Exchange Server\V14\ClientAccess\OAB

    If it is up to date, it means the OAB generation and publish process has been completed without issue. Then you may try rebuilding the OAB virtual directory to reset the settings.

     

    Thanks,

    Simon

    Tuesday, January 3, 2012 2:29 AM
  • I have done both the things but still no success.

    Regards


    Abdul Ali Khan Systems Consultant Premier Systems (Pvt.) Ltd
    Tuesday, January 3, 2012 11:23 AM
  • If the downloads are not working on certain machine brands, but they are working on others, then I would look to upgrade the NIC software/firmware and apply any pending Office/Windows Patches as well.

     

    Tuesday, January 3, 2012 2:47 PM
  • I want to mention one behavior. When I try to download on the PC it is not possible but when i take the remote session of the PC with the same user the OAB download completes.

    Regards

     


    Abdul Ali Khan Systems Consultant Premier Systems (Pvt.) Ltd
    Tuesday, January 3, 2012 3:34 PM
  • I havent read this entire thread, but is there any firewall or anti-virus /content-filtering enabled on the workstation? I assume at least anti-virus. I would disable/remove it and test.

    I recall years ago an issue with a certain antivirus product that was similar.

     

     

    Tuesday, January 3, 2012 4:22 PM
  • No there is no anti-virus or firewall on the client.

    I have already put the AV exclusions on exchange servers.

    Regards


    Abdul Ali Khan Systems Consultant Premier Systems (Pvt.) Ltd
    Tuesday, January 3, 2012 4:38 PM
  • Have you tried different outlook clients 2007 and 2010, do they behave the same?

    You can also try to run "process monitor", once directly from the client and once from via remote. Then compare the logs to see that the difference is.

    Tuesday, January 3, 2012 4:47 PM
  • I found the root cause, it is due to the mouse connected to the machines. The reference link is also mentioned below:

    http://support.microsoft.com/kb/2619347

    Thanks everyone for your continuous support.

    Regards


    Abdul Ali Khan Systems Consultant Premier Systems (Pvt.) Ltd
    Thursday, January 12, 2012 2:52 PM
  • Hey thanks for the info, good to know.
    Thursday, January 12, 2012 2:55 PM