Exchange server 2013 Outlook Anywhere
Exchange 2013 Outlook Anywhere – RPC Over HTTP
Exchange server 2013 Outlook Anywhere is used to connect the outlook internally and from the internet. Exchange server 2013 uses two EXHTTP nodes which get generated xml file automatically. Please find the below XML generated for the user account.
Output of Outlook AnyWhere in Exchange 2013 CAS Server
[PS] C:\Windows\system32>Get-OutlookAnywhere -Server CASSRV1
RunspaceId : 0a620a85-b852-46de-ab5c-f7396685e7d9
ServerName : CASSRV1
SSLOffloading : True
ExternalHostname : webmail.mail.com
InternalHostname : webmail.mail.com
ExternalClientAuthenticationMethod : Ntlm
InternalClientAuthenticationMethod : Ntlm
IISAuthenticationMethods : {Ntlm}
XropUrl :
ExternalClientsRequireSsl : True
InternalClientsRequireSsl : False
MetabasePath : IIS://CASSRV1.MAIL.COM/W3SVC/1/ROOT/Rpc
Path : E:\Program Files\Microsoft\Exchange Server\V15\FrontEnd\HttpProxy\rpc
ExtendedProtectionTokenChecking : None
ExtendedProtectionFlags : {}
ExtendedProtectionSPNList : {}
AdminDisplayVersion : Version 15.0 (Build 775.38)
Server : CASSRV1
AdminDisplayName :
ExchangeVersion : 0.20 (15.0.0.0)
Name : Rpc (Default Web Site)
DistinguishedName : CN=Rpc (Default Web Site),CN=HTTP,CN=Protocols,CN=CASSRV1,CN=Servers,CN=Exchange Administrative Group (FYDIBOHF23SPDLT),CN=Administrative Groups,CN=Mail,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=AD,DC=MAIL,DC=COM
Identity : CASSRV1\Rpc (Default Web Site)
Guid : 101e738e-9dc5-48d1-9516-ff6ac7a01859
ObjectCategory : AD.MAIL.COM/Configuration/Schema/ms-Exch-Rpc-Http-Virtual-Directory
ObjectClass : {top, msExchVirtualDirectory, msExchRpcHttpVirtualDirectory}
WhenChanged : 1/22/2014 10:38:54 AM
WhenCreated : 9/18/2013 11:39:02 AM
WhenChangedUTC : 1/22/2014 5:08:54 AM
WhenCreatedUTC : 9/18/2013 6:09:02 AM
New Feature in Exchange 2013 Outlook Anywhere
Inorder to achieve the HTTP connection for internal outlook client and HTTPS connections for the outlook client connection over the internet .Then we need to have follow the below rule.
- Separate hostname for the internalhostname and externalhost should be different
- The Internalhostname should not be published in the internet ISP DNS
- The InternalClientsRequireSsl should be set as false and ExternalClientsRequireSsl should be set as true.
Powershell Command
Get-OutlookAnywhere | Set-OutlookAnywhere -InternalHostname "Outlook.mail.com" -InternalClientsRequireSsl $false -ExternalHostname "webmail.mail.com" -ExternalClientsRequireSsl $true
How it works ….
By default always the first HTTP part taken by the outlook to get the details of the url if it fails it goes to the next HTTP part of XML file. In the XML file under the protocol of EXHTTP you can able to view the SSL is off and internalhostname as Outlook.mail.com for the first part HTTP protocol used to connect the internal outlook client. If it fails then it moves to the next part of HTTP part to get connected for the internal outlook client
* <Protocol>*
* <Type>EXHTTP</Type>*
* <Server>Outlook.mail.com</Server>*
* <SSL>Off</SSL>*
* <AuthPackage>Ntlm</AuthPackage>*
In the XML file under the protocol of EXHTTP you can able to view the SSL is off and externalhostname as webmail.mail.com. Since the first name is unable to resolve fqdn over the internet hence it gets connected to second part of the EXHTTP part. Hence it move to SSL connection
<Protocol>
* <Type>EXHTTP</Type>*
* <Server>webmail.mail.com</Server>*
* <SSL>On</SSL>*
* <AuthPackage>Ntlm</AuthPackage>*
In Exchange server 2013 public folder will be get connected by using the below piece of XML file
<PublicFolderInformation>
* <SmtpAddress>PFHierarchy@mail.com</SmtpAddress>*
* </PublicFolderInformation>*
* *
Note: On performing the above change in co-existence mode of Exchange 2007/2010 with Exchange 2013 there will no impact for the legacy exchange user mailbox. Since it connect using RPC/TCP for MAPI connectivity
XML File - Generated on Email Test Configuration in Outlook
<?xml version="1.0" encoding="utf-8"?>
<Autodiscover xmlns="http://schemas.microsoft.com/exchange/autodiscover/responseschema/2006">
<Response xmlns="http://schemas.microsoft.com/exchange/autodiscover/outlook/responseschema/2006a">
<User>
<DisplayName>Raji S</DisplayName>
<LegacyDN>/o=Mail/ou=Exchange Administrative Group (FYDIBOHF23SPDLT)/cn=Recipients/cn=Raji_S</LegacyDN>
<AutoDiscoverSMTPAddress>Raji_S@mail.com</AutoDiscoverSMTPAddress>
<DeploymentId>19fbc7b1-2b71-42c6-b399-6d5465ff93c8</DeploymentId>
</User>
<Account>
<AccountType>email</AccountType>
<Action>settings</Action>
<MicrosoftOnline>False</MicrosoftOnline>
<Protocol>
<Type>EXCH</Type>
<Server>5719c3f9-d590-44ea-9e21-ff6fe7b304cd@mail.com</Server>
<ServerDN>/o=Mail/ou=Exchange Administrative Group (FYDIBOHF23SPDLT)/cn=Configuration/cn=Servers/cn=5719c3f9-d590-44ea-9e21-ff6fe7b304cd@mail.com</ServerDN>
<ServerVersion>73C08307</ServerVersion>
<MdbDN>/o=Mail/ou=Exchange Administrative Group (FYDIBOHF23SPDLT)/cn=Configuration/cn=Servers/cn=5719c3f9-d590-44ea-9e21-ff6fe7b304cd@mail.com/cn=Microsoft Private MDB</MdbDN>
<PublicFolderServer>webmail.mail.com</PublicFolderServer>
<AD>AD.MAIL.COM</AD>
<ASUrl>https://webmail.mail.com/EWS/Exchange.asmx</ASUrl>
<EwsUrl>https://webmail.mail.com/EWS/Exchange.asmx</EwsUrl>
<EmwsUrl>https://webmail.mail.com/EWS/Exchange.asmx</EmwsUrl>
<EcpUrl>https://CASSRV1.mail.com/ecp/</EcpUrl>
<EcpUrl-um>?rfr=olk&p=customize/voicemail.aspx&exsvurl=1&realm=AD.MAIL.COM</EcpUrl-um>
<EcpUrl-aggr>?rfr=olk&p=personalsettings/EmailSubscriptions.slab&exsvurl=1&realm=AD.MAIL.COM</EcpUrl-aggr>
<EcpUrl-mt>PersonalSettings/DeliveryReport.aspx?rfr=olk&exsvurl=1&IsOWA=<IsOWA>&MsgID=<MsgID>&Mbx=<Mbx>&realm=AD.MAIL.COM</EcpUrl-mt>
<EcpUrl-ret>?rfr=olk&p=organize/retentionpolicytags.slab&exsvurl=1&realm=AD.MAIL.COM</EcpUrl-ret>
<EcpUrl-sms>?rfr=olk&p=sms/textmessaging.slab&exsvurl=1&realm=AD.MAIL.COM</EcpUrl-sms>
<EcpUrl-photo>PersonalSettings/EditAccount.aspx?rfr=olk&chgPhoto=1&exsvurl=1&realm=AD.MAIL.COM</EcpUrl-photo>
<EcpUrl-extinstall>Extension/InstalledExtensions.slab?rfr=olk&exsvurl=1&realm=AD.MAIL.COM</EcpUrl-extinstall>
<OOFUrl>https://webmail.mail.com/EWS/Exchange.asmx</OOFUrl>
<UMUrl>https://webmail.mail.com/EWS/UM2007Legacy.asmx</UMUrl>
<OABUrl>https://webmail.mail.com/OAB/322aa0e9-256a-4886-bbcb-62e7aaf4cb80/</OABUrl>
<ServerExclusiveConnect>off</ServerExclusiveConnect>
<CertPrincipalName>none</CertPrincipalName>
</Protocol>
<Protocol>
<Type>EXPR</Type>
<Server>webmail.mail.com</Server>
<SSL>On</SSL>
<AuthPackage>Ntlm</AuthPackage>
<ASUrl>https://webmail.mail.com/EWS/Exchange.asmx</ASUrl>
<EwsUrl>https://webmail.mail.com/EWS/Exchange.asmx</EwsUrl>
<EmwsUrl>https://webmail.mail.com/EWS/Exchange.asmx</EmwsUrl>
<OOFUrl>https://webmail.mail.com/EWS/Exchange.asmx</OOFUrl>
<UMUrl>https://webmail.mail.com/EWS/UM2007Legacy.asmx</UMUrl>
<OABUrl>https://webmail.mail.com/OAB/322aa0e9-256a-4886-bbcb-62e7aaf4cb80/</OABUrl>
<ServerExclusiveConnect>on</ServerExclusiveConnect>
<CertPrincipalName>none</CertPrincipalName>
<EwsPartnerUrl>https://webmail.mail.com/EWS/Exchange.asmx</EwsPartnerUrl>
<GroupingInformation>Core-ASIAN</GroupingInformation>
</Protocol>
<Protocol>
<Type>WEB</Type>
<Internal>
<OWAUrl AuthenticationMethod="Basic, Fba">https://webmail.mail.com/OWA/</OWAUrl>
<Protocol>
<Type>EXCH</Type>
<ASUrl>https://webmail.mail.com/EWS/Exchange.asmx</ASUrl>
</Protocol>
</Internal>
<External>
<OWAUrl AuthenticationMethod="Fba">https://webmail.mail.com/OWA/</OWAUrl>
<Protocol>
<Type>EXPR</Type>
<ASUrl>https://webmail.mail.com/EWS/Exchange.asmx</ASUrl>
</Protocol>
</External>
</Protocol>
** <Protocol>**
** <Type>EXHTTP</Type>**
** <Server>Outlook.mail.com</Server>**
** <SSL>Off</SSL>**
** <AuthPackage>Ntlm</AuthPackage>**
** <ASUrl>https://webmail.mail.com/EWS/Exchange.asmx</ASUrl>**
** <EwsUrl>https://webmail.mail.com/EWS/Exchange.asmx</EwsUrl>**
** <EmwsUrl>https://webmail.mail.com/EWS/Exchange.asmx</EmwsUrl>**
** <EcpUrl>https://gurcasv01.ad.mail.com/ecp/</EcpUrl>**
** <EcpUrl-um>?rfr=olk&p=customize/voicemail.aspx&exsvurl=1&realm=AD.MAIL.COM</EcpUrl-um>**
** <EcpUrl-aggr>?rfr=olk&p=personalsettings/EmailSubscriptions.slab&exsvurl=1&realm=AD.MAIL.COM</EcpUrl-aggr>**
** <EcpUrl-mt>PersonalSettings/DeliveryReport.aspx?rfr=olk&exsvurl=1&IsOWA=<IsOWA>&MsgID=<MsgID>&Mbx=<Mbx>&realm=AD.MAIL.COM</EcpUrl-mt>**
** <EcpUrl-ret>?rfr=olk&p=organize/retentionpolicytags.slab&exsvurl=1&realm=AD.MAIL.COM</EcpUrl-ret>**
** <EcpUrl-sms>?rfr=olk&p=sms/textmessaging.slab&exsvurl=1&realm=AD.MAIL.COM</EcpUrl-sms>**
** <EcpUrl-photo>PersonalSettings/EditAccount.aspx?rfr=olk&chgPhoto=1&exsvurl=1&realm=AD.MAIL.COM</EcpUrl-photo>**
** <EcpUrl-extinstall>Extension/InstalledExtensions.slab?rfr=olk&exsvurl=1&realm=AD.MAIL.COM</EcpUrl-extinstall>**
** <OOFUrl>https://webmail.mail.com/EWS/Exchange.asmx</OOFUrl>**
** <UMUrl>https://webmail.mail.com/EWS/UM2007Legacy.asmx</UMUrl>**
** <OABUrl>https://webmail.mail.com/OAB/322aa0e9-256a-4886-bbcb-62e7aaf4cb80/</OABUrl>**
** <ServerExclusiveConnect>On</ServerExclusiveConnect>**
** <CertPrincipalName>None</CertPrincipalName>**
** </Protocol>**
** <Protocol>**
** <Type>EXHTTP</Type>**
** ** <Server>webmail.mail.com</Server>
** <SSL>On</SSL>**
** <AuthPackage>Ntlm</AuthPackage>**
** <ASUrl>https://webmail.mail.com/EWS/Exchange.asmx</ASUrl>**
** <EwsUrl>https://webmail.mail.com/EWS/Exchange.asmx</EwsUrl>**
** <EmwsUrl>https://webmail.mail.com/EWS/Exchange.asmx</EmwsUrl>**
** <OOFUrl>https://webmail.mail.com/EWS/Exchange.asmx</OOFUrl>**
** <UMUrl>https://webmail.mail.com/EWS/UM2007Legacy.asmx</UMUrl>**
** <OABUrl>https://webmail.mail.com/OAB/322aa0e9-256a-4886-bbcb-62e7aaf4cb80/</OABUrl>**
** <ServerExclusiveConnect>On</ServerExclusiveConnect>**
** <CertPrincipalName>none</CertPrincipalName>**
** </Protocol>**
** <PublicFolderInformation>**
** <SmtpAddress>PFHierarchy@mail.com</SmtpAddress>**
** </PublicFolderInformation>**
** </Account>**
** </Response>**
</Autodiscover>
Reference:
http://channel9.msdn.com/Events/TechEd/NorthAmerica/2013/OUC-B313#fbid=
http://technet.microsoft.com/en-us/library/hh529912(v=exchg.150).aspx
http://support.microsoft.com/kb/2834139/en-us?sd=rss&spid=16662
** **