none
Outlook Anywhere not working for Windows XP Clients RRS feed

  • Question

  • We have an issue with Outlook Anywhere not working for XP clients on one of our CAS servers;

     

    • Most sites on the web point to the SAN cert being the issue but this can’t the case here. We are running a CASArray with a load balancer and ssl offloading so it can’t be an issue with the cert as it is presented on the LB not the CAS itself and works fine for the other CAS servers.
    • It’s XP not Office related as the problem exists on Office 2003, 2007 and 2010
    • https://www.testexchangeconnectivity.com/ does not report any problems, I’m assuming this is because it’s running under Server 2008
    • rpcping works every time running from a  Win7 machine.
    • There are no issues with RPC, OWA and ActiveSync connections to this CAS.
    • rpcping is highly temperamental on xp connecting to the effected server, timing out at most attempts.
    • rpcping command that I ran is;

    rpcping -t ncacn_http -s "Mailbox Server" -o RpcProxy="CAS server" -P "user,domain,password" -I "user,domain,password" -H 2 -F 3 -a connect -u 10 -v 3 -e 6001 –B msstd:"CAS server

     Regards

     

     

     

     

     

    Monday, April 23, 2012 10:51 AM

All replies

  • Hello,

    Your XP should be SP1 and Q331320 hotfix should be installed:http://technet.microsoft.com/en-us/library/cc179036%28v=office.12%29.aspx

    To download the hotfix: http://www.microsoft.com/download/en/details.aspx?displaylang=en&id=1920

    If this does not help then it may be an issue with the MSSTD mutual authentication. In this case, you can run Set-OutlookProvider EXPR -CertPrincipalName:none to disable it. Once done, restart your Outlook 2007 / 2010 and check results.

    If disabling the mutual authentication solved the issue then run the following Set-OutlookProvider EXPR -CertPrincipalName:$null (If you are using a Wildcard certificate then you will have to run Set-OutlookProvider EXPR -CertPrincipalName:"*.domain.com. domain.com is the domain name used in the wildcard certificate).


    This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.   

    Microsoft Student Partner 2010 / 2011
    Microsoft Certified Professional
    Microsoft Certified Systems Administrator: Security
    Microsoft Certified Systems Engineer: Security
    Microsoft Certified Technology Specialist: Windows Server 2008 Active Directory, Configuration
    Microsoft Certified Technology Specialist: Windows Server 2008 Network Infrastructure, Configuration
    Microsoft Certified Technology Specialist: Windows Server 2008 Applications Infrastructure, Configuration
    Microsoft Certified Technology Specialist: Windows 7, Configuring
    Microsoft Certified Technology Specialist: Designing and Providing Volume Licensing Solutions to Large Organizations
    Microsoft Certified IT Professional: Enterprise Administrator
    Microsoft Certified IT Professional: Server Administrator
    Microsoft Certified Trainer

    Monday, April 23, 2012 11:14 AM
  • Thanks for that, Q331320 has already been applined, Our OutllokProvider is already empty;

    [PS] C:\Windows\system32>get-OutlookProvider EXPR

    Name                       Server                    CertPrincipalName     TTL
    ----                          ------                        -----------------             ---
    EXPR                                                                                         1

    The same settings are shown on both the non-functioning and funtioning CAS servers.

    We don't have a wildcard cert, the principal name is correct for the RPC proxy and it works fine for XP clients connecting to our other CAS's through the LB.

    We've also tried re-installing the RPC http proxy feature on the effected server, no joy.

    Regards

     

    Monday, April 23, 2012 11:58 AM
  • Please explain by "not working for XP clients", what is the symptoms? Does Outlook Anywhere works in other kind of OS?

    Can you access the Outlook Anywhere external URL from the problematic XP client? (The expected result is a blank page).

    What report has been return if you run https://www.testexchangeconnectivity.com/?

    Is there any error recorded in Application event log and the IIS log, and also the firewall app log if there is any?


    Fiona Liao

    TechNet Community Support

    Tuesday, April 24, 2012 6:35 AM
  • When you try to connect with a XP client, regardless of Office version you get the "Your Microsoft Exchange Server is unavailable" message. Win 7 clients connect fine.  

    Regards

    Tuesday, April 24, 2012 8:11 AM
  • Any error message when issue occurs in XP client? please provide more detailed information to help us research.

    and,

    Can you access the Outlook Anywhere external URL from the problematic XP client? (The expected result is a blank page).

    What report has been return if you run https://www.testexchangeconnectivity.com/?

    Is there any error recorded in Application event log and the IIS log, and also the firewall app log if there is any?


    Fiona Liao

    TechNet Community Support

    Tuesday, April 24, 2012 8:52 AM
  • I would also recommend disabling temporary all security softwares on one XP client computer and checking results.


    This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.   

    Microsoft Student Partner 2010 / 2011
    Microsoft Certified Professional
    Microsoft Certified Systems Administrator: Security
    Microsoft Certified Systems Engineer: Security
    Microsoft Certified Technology Specialist: Windows Server 2008 Active Directory, Configuration
    Microsoft Certified Technology Specialist: Windows Server 2008 Network Infrastructure, Configuration
    Microsoft Certified Technology Specialist: Windows Server 2008 Applications Infrastructure, Configuration
    Microsoft Certified Technology Specialist: Windows 7, Configuring
    Microsoft Certified Technology Specialist: Designing and Providing Volume Licensing Solutions to Large Organizations
    Microsoft Certified IT Professional: Enterprise Administrator
    Microsoft Certified IT Professional: Server Administrator
    Microsoft Certified Trainer

    Tuesday, April 24, 2012 9:41 AM
  • As Above the error message is "Your Microsoft Exchange Server is unavailable"

    https://www.testexchangeconnectivity.com/

    Doesn't report any errors, my guess is here that the backend for it runs on Server 2008 so would not experiance the issue as with our Win7 cleints.

    ISS log contains

    2012-04-24 10:06:35 SERVERIP RPC_IN_DATA /rpc/rpcproxy.dll CASARRAY:6002 80 - CLIENTIP MSRPC 401 1 2148074254 0
    2012-04-24 10:06:35 SERVERIP RPC_OUT_DATA /rpc/rpcproxy.dll CASARRAY:6002 80 - CLIENTIP MSRPC 401 1 2148074254 0
    2012-04-24 10:06:35 SERVERIP RPC_IN_DATA /rpc/rpcproxy.dll CASARRAY:6002 80 - CLIENTIP MSRPC 401 1 2148074252 0
    2012-04-24 10:06:35 SERVERIP RPC_OUT_DATA /rpc/rpcproxy.dll CASARRAY:6002 80 - CLIENTIP MSRPC 401 1 2148074252 15
    2012-04-24 10:06:40 SERVERIP RPC_IN_DATA /rpc/rpcproxy.dll CASARRAY:6002 80 - CLIENTIP MSRPC 401 1 2148074254 0
    2012-04-24 10:06:40 SERVERIP RPC_OUT_DATA /rpc/rpcproxy.dll CASARRAY:6002 80 - CLIENTIP MSRPC 401 1 2148074254 0
    2012-04-24 10:06:40 SERVERIP RPC_IN_DATA /rpc/rpcproxy.dll CASARRAY:6002 80 london\user CLIENTIP MSRPC 200 0 0 0
    2012-04-24 10:06:40 SERVERIP RPC_OUT_DATA /rpc/rpcproxy.dll CASARRAY:6002 80 london\user CLIENTIP MSRPC 200 0 0 31

    Regards

    No Client or Server firewall in place

    Tuesday, April 24, 2012 10:11 AM
  • As Above the error message is "Your Microsoft Exchange Server is unavailable"

    https://www.testexchangeconnectivity.com/

    Doesn't report any errors, my guess is here that the backend for it runs on Server 2008 so would not experiance the issue as with our Win7 cleints.

    ISS log contains

    2012-04-24 10:06:35 SERVERIP RPC_IN_DATA /rpc/rpcproxy.dll CASARRAY:6002 80 - CLIENTIP MSRPC 401 1 2148074254 0
    2012-04-24 10:06:35 SERVERIP RPC_OUT_DATA /rpc/rpcproxy.dll CASARRAY:6002 80 - CLIENTIP MSRPC 401 1 2148074254 0
    2012-04-24 10:06:35 SERVERIP RPC_IN_DATA /rpc/rpcproxy.dll CASARRAY:6002 80 - CLIENTIP MSRPC 401 1 2148074252 0
    2012-04-24 10:06:35 SERVERIP RPC_OUT_DATA /rpc/rpcproxy.dll CASARRAY:6002 80 - CLIENTIP MSRPC 401 1 2148074252 15
    2012-04-24 10:06:40 SERVERIP RPC_IN_DATA /rpc/rpcproxy.dll CASARRAY:6002 80 - CLIENTIP MSRPC 401 1 2148074254 0
    2012-04-24 10:06:40 SERVERIP RPC_OUT_DATA /rpc/rpcproxy.dll CASARRAY:6002 80 - CLIENTIP MSRPC 401 1 2148074254 0
    2012-04-24 10:06:40 SERVERIP RPC_IN_DATA /rpc/rpcproxy.dll CASARRAY:6002 80 london\user CLIENTIP MSRPC 200 0 0 0
    2012-04-24 10:06:40 SERVERIP RPC_OUT_DATA /rpc/rpcproxy.dll CASARRAY:6002 80 london\user CLIENTIP MSRPC 200 0 0 31

    Regards

    No Client or Server firewall in place

    Could you please see that: http://support.microsoft.com/kb/919092


    This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.   

    Microsoft Student Partner 2010 / 2011
    Microsoft Certified Professional
    Microsoft Certified Systems Administrator: Security
    Microsoft Certified Systems Engineer: Security
    Microsoft Certified Technology Specialist: Windows Server 2008 Active Directory, Configuration
    Microsoft Certified Technology Specialist: Windows Server 2008 Network Infrastructure, Configuration
    Microsoft Certified Technology Specialist: Windows Server 2008 Applications Infrastructure, Configuration
    Microsoft Certified Technology Specialist: Windows 7, Configuring
    Microsoft Certified Technology Specialist: Designing and Providing Volume Licensing Solutions to Large Organizations
    Microsoft Certified IT Professional: Enterprise Administrator
    Microsoft Certified IT Professional: Server Administrator
    Microsoft Certified Trainer

    Tuesday, April 24, 2012 10:18 AM
  • I've taken a look at that KB

    As its effecting all verisons of office on XP not just 2k3, I'm not seeing any 404 errors in our iis log and Win7 Clients work fine I'm not sure it's relevant.

    Regards 

    Tuesday, April 24, 2012 11:05 AM
  • Hi,

    If you are using Big IP F5 load balancer for load balancing CAS Servers, Please configure source IP affinity for Outlookanywhere rule in LB.

    This is the known issue, if we have Big IP f5 Load balancer for Exchange CAS Servers high availablity.

    Regards

    Manoj

    Tuesday, April 24, 2012 12:46 PM
  • Thanks

    We have Barracuda Loadbalancers and they work fine with our other CAS's

    Regards

    Tuesday, April 24, 2012 12:48 PM
  • Thanks for that

    However both our working and non-working CAS servers are subject to the same GPO and are set to use NTLM so I dont think it can be that,  "LAN Manager authentication level" setting on both servers is "Send NTLMv2 response only"

    Tuesday, April 24, 2012 2:58 PM
  • I should add I've also tried re-installing the RPC over HTTP proxy feature and copying web.config in to "system32\rpcproxy" from a working server
    Tuesday, April 24, 2012 3:44 PM
  • As Above the error message is "Your Microsoft Exchange Server is unavailable"

    https://www.testexchangeconnectivity.com/

    Doesn't report any errors, my guess is here that the backend for it runs on Server 2008 so would not experiance the issue as with our Win7 cleints.

    ISS log contains

    2012-04-24 10:06:35 SERVERIP RPC_IN_DATA /rpc/rpcproxy.dll CASARRAY:6002 80 - CLIENTIP MSRPC 401 1 2148074254 0
    2012-04-24 10:06:35 SERVERIP RPC_OUT_DATA /rpc/rpcproxy.dll CASARRAY:6002 80 - CLIENTIP MSRPC 401 1 2148074254 0
    2012-04-24 10:06:35 SERVERIP RPC_IN_DATA /rpc/rpcproxy.dll CASARRAY:6002 80 - CLIENTIP MSRPC 401 1 2148074252 0
    2012-04-24 10:06:35 SERVERIP RPC_OUT_DATA /rpc/rpcproxy.dll CASARRAY:6002 80 - CLIENTIP MSRPC 401 1 2148074252 15
    2012-04-24 10:06:40 SERVERIP RPC_IN_DATA /rpc/rpcproxy.dll CASARRAY:6002 80 - CLIENTIP MSRPC 401 1 2148074254 0
    2012-04-24 10:06:40 SERVERIP RPC_OUT_DATA /rpc/rpcproxy.dll CASARRAY:6002 80 - CLIENTIP MSRPC 401 1 2148074254 0
    2012-04-24 10:06:40 SERVERIP RPC_IN_DATA /rpc/rpcproxy.dll CASARRAY:6002 80 london\user CLIENTIP MSRPC 200 0 0 0
    2012-04-24 10:06:40 SERVERIP RPC_OUT_DATA /rpc/rpcproxy.dll CASARRAY:6002 80 london\user CLIENTIP MSRPC 200 0 0 31

    Regards

    No Client or Server firewall in place

    Seems like client side issue.

    401.1 means 401.1 - Logon failed (see http://support.microsoft.com/kb/318380). However the IIS log does not contain client's IP and user ID, please double confirm it is the report of the problematic XP client; and make sure XP client does not use the saved password to logon.

    Additionally, please try https://<yourOutlookAnywhereExternalURL/RPCProxy/RPCproxy.xml in the probleamtic XP client. the expected result is a blank page; otherwise, the client might have proxy settings in IE or a client firewall which blocks the outlookanywhere request.


    Fiona Liao

    TechNet Community Support

    Wednesday, April 25, 2012 6:46 AM
  • We get this issue on every XP box we've tried so it's not isolated to one client.

    I think in 2K10 the url is /rpc/rpcproxy.dll it works form a browser

    Wednesday, April 25, 2012 8:40 AM


  • Not wanting to hijack this thread , but have you been able to resolve this issue?

    I am experiencing the EXACT same issue. I have been through the same troubleshooting.

    Rpc/https not working for outlook 2007/2010 clients coming in over RPC/HTTPS to a bigip F5 loadbalancer and Exchange 2010Sp2 Cas array.

    www.testexchangeconnectivity.com reports no issues , everyone else working fine - just windows xp users not being able to connect with rpc/https. 

    Extremely puzzling...


    • Edited by JPLishman Monday, July 23, 2012 9:32 AM
    Monday, July 23, 2012 9:31 AM
  • Ended up re-installing the CAS server sorry.
    • Proposed as answer by runexe Monday, July 30, 2012 11:52 PM
    Monday, July 23, 2012 9:44 AM
  • Hi Guys,

    We are running a Citrix Load Balancer & had it configured to use SSLSession. Microsoft recommended we change this to use Source IP & now XP systems are working.    

    Two articles from Citrix:

    Common Causes of Load Imbalance using SOURCEIP Persistence
    http://support.citrix.com/article/CTX119941/

    Configuring Persistence Based on Source IP Address

    http://support.citrix.com/proddocs/topic/netscaler-gslb-92-map/ns-gslb-config-persist-based-src-ip-tsk.html

    From Exchange standpoint, based on the following article, Outlook running on Windows XP does not support the OutlookSession cookie for load balancing. In this scenario, we recommend that you use IP load balancing.

    Understanding Load Balancing in Exchange 2010

    http://technet.microsoft.com/en-us/library/ff625247.aspx


    C
    heers,
    Skywalker





    • Edited by runexe Tuesday, July 31, 2012 12:15 AM
    • Proposed as answer by runexe Tuesday, July 31, 2012 12:16 AM
    Tuesday, July 31, 2012 12:00 AM