Hi,

I can't connect with Outlook 2007 to my Exchange 2007 Server with RPC over 
HTTPS (Connect Anywhere). I activated to use SSL with standard-auth in the 
advanced settings.


I installed RPC over HTTP and activated Connect Anywhere (with 
standard-auth) on the Client-Access Server. I have no errors or warnings in 
the Application and System Logs. And I'm using a valid public certificate, i 
have no problems with owa.

Can someone help me?

Thanks,
Erich

Hi
first of all check whether Outlook really tries to connect over HTTPS
you can use Connection Status windows provided by Outlook
(CTRL+ Right click on Outlook icon in the system tray)

if this is correct, look for errors or other kind of information in IIS logs 
of your virtual web server at the CAS where you expect the client is 
connecting to.

Henry

"NiX" wrote:

> Hi,
> 
> I can't connect with Outlook 2007 to my Exchange 2007 Server with RPC over 
> HTTPS (Connect Anywhere). I activated to use SSL with standard-auth in the 
> advanced settings.
> 
> 
> I installed RPC over HTTP and activated Connect Anywhere (with 
> standard-auth) on the Client-Access Server. I have no errors or warnings in 
> the Application and System Logs. And I'm using a valid public certificate, i 
> have no problems with owa.
> 
> Can someone help me?
> 
> Thanks,
> Erich

Hi,

I think the IIS log is okay, see:
2008-05-13 16:05:00 W3SVC1 xx.xx.xx.xx RPC_IN_DATA /rpc/rpcproxy.dll 
mail.x.net:6004 443 ssladmin@x.net xx.xx.xx.xx MSRPC 200 0 0
2008-05-13 16:05:00 W3SVC1 xx.xx.xx.xx RPC_OUT_DATA /rpc/rpcproxy.dll 
mail.x.net:6004 443 ssladmin@x.net xx.xx.xx.xx MSRPC 200 0 0


no errors or else.

and yes: ActiveSync over 443 with my Mobilephone is also working :s why just 
the outlook connection not?
I have disconnected the VPN to the server, so that I'm a normal 
"internet-user" like my mobile phone (on the firewall ist just 80 (only for 
http to https redirect) and 443 open). I tested with different computers.

Thanks,
Erich


"Henry" wrote:

> Hi
> first of all check whether Outlook really tries to connect over HTTPS
> you can use Connection Status windows provided by Outlook
> (CTRL+ Right click on Outlook icon in the system tray)
> 
> if this is correct, look for errors or other kind of information in IIS logs 
> of your virtual web server at the CAS where you expect the client is 
> connecting to.
> 
> Henry
> 
> "NiX" wrote:
> 
> > Hi,
> > 
> > I can't connect with Outlook 2007 to my Exchange 2007 Server with RPC over 
> > HTTPS (Connect Anywhere). I activated to use SSL with standard-auth in the 
> > advanced settings.
> > 
> > 
> > I installed RPC over HTTP and activated Connect Anywhere (with 
> > standard-auth) on the Client-Access Server. I have no errors or warnings in 
> > the Application and System Logs. And I'm using a valid public certificate, i 
> > have no problems with owa.
> > 
> > Can someone help me?
> > 
> > Thanks,
> > Erich

Hi
looks good so far.
have you tried  another account not only another machine?

what is the setting of  "MAPIBlockOutlookRpcHttp" of the account you are 
using? is it $true or $False ?

Henry


"NiX" wrote:

> Hi,
> 
> I think the IIS log is okay, see:
> 2008-05-13 16:05:00 W3SVC1 xx.xx.xx.xx RPC_IN_DATA /rpc/rpcproxy.dll 
> mail.x.net:6004 443 ssladmin@x.net xx.xx.xx.xx MSRPC 200 0 0
> 2008-05-13 16:05:00 W3SVC1 xx.xx.xx.xx RPC_OUT_DATA /rpc/rpcproxy.dll 
> mail.x.net:6004 443 ssladmin@x.net xx.xx.xx.xx MSRPC 200 0 0
> 
> 
> no errors or else.
> 
> and yes: ActiveSync over 443 with my Mobilephone is also working :s why just 
> the outlook connection not?
> I have disconnected the VPN to the server, so that I'm a normal 
> "internet-user" like my mobile phone (on the firewall ist just 80 (only for 
> http to https redirect) and 443 open). I tested with different computers.
> 
> Thanks,
> Erich
> 
> 
> "Henry" wrote:
> 
> > Hi
> > first of all check whether Outlook really tries to connect over HTTPS
> > you can use Connection Status windows provided by Outlook
> > (CTRL+ Right click on Outlook icon in the system tray)
> > 
> > if this is correct, look for errors or other kind of information in IIS logs 
> > of your virtual web server at the CAS where you expect the client is 
> > connecting to.
> > 
> > Henry
> > 
> > "NiX" wrote:
> > 
> > > Hi,
> > > 
> > > I can't connect with Outlook 2007 to my Exchange 2007 Server with RPC over 
> > > HTTPS (Connect Anywhere). I activated to use SSL with standard-auth in the 
> > > advanced settings.
> > > 
> > > 
> > > I installed RPC over HTTP and activated Connect Anywhere (with 
> > > standard-auth) on the Client-Access Server. I have no errors or warnings in 
> > > the Application and System Logs. And I'm using a valid public certificate, i 
> > > have no problems with owa.
> > > 
> > > Can someone help me?
> > > 
> > > Thanks,
> > > Erich

Hi,

i tested with two users, one is "test", and one is "ssladmin".

I can't find the command to see how is MAPIBlockOutlookRpcHttp, but then 
i've set this:

Set-CASMailbox ssladmin -MAPIBlockOutlookRpcHttp $false
and reloaded the Service (I think that's not needed, but better one more) 
and tried again.
Still not running.

I can't understanbd, why is Active Sync and OWA over HTTPS running but not 
RPC over HTTPS.


Thanks,
Erich


"Henry" wrote:

> Hi
> looks good so far.
> have you tried  another account not only another machine?
> 
> what is the setting of  "MAPIBlockOutlookRpcHttp" of the account you are 
> using? is it $true or $False ?
> 
> Henry
> 
> 
> "NiX" wrote:
> 
> > Hi,
> > 
> > I think the IIS log is okay, see:
> > 2008-05-13 16:05:00 W3SVC1 xx.xx.xx.xx RPC_IN_DATA /rpc/rpcproxy.dll 
> > mail.x.net:6004 443 ssladmin@x.net xx.xx.xx.xx MSRPC 200 0 0
> > 2008-05-13 16:05:00 W3SVC1 xx.xx.xx.xx RPC_OUT_DATA /rpc/rpcproxy.dll 
> > mail.x.net:6004 443 ssladmin@x.net xx.xx.xx.xx MSRPC 200 0 0
> > 
> > 
> > no errors or else.
> > 
> > and yes: ActiveSync over 443 with my Mobilephone is also working :s why just 
> > the outlook connection not?
> > I have disconnected the VPN to the server, so that I'm a normal 
> > "internet-user" like my mobile phone (on the firewall ist just 80 (only for 
> > http to https redirect) and 443 open). I tested with different computers.
> > 
> > Thanks,
> > Erich
> > 
> > 
> > "Henry" wrote:
> > 
> > > Hi
> > > first of all check whether Outlook really tries to connect over HTTPS
> > > you can use Connection Status windows provided by Outlook
> > > (CTRL+ Right click on Outlook icon in the system tray)
> > > 
> > > if this is correct, look for errors or other kind of information in IIS logs 
> > > of your virtual web server at the CAS where you expect the client is 
> > > connecting to.
> > > 
> > > Henry
> > > 
> > > "NiX" wrote:
> > > 
> > > > Hi,
> > > > 
> > > > I can't connect with Outlook 2007 to my Exchange 2007 Server with RPC over 
> > > > HTTPS (Connect Anywhere). I activated to use SSL with standard-auth in the 
> > > > advanced settings.
> > > > 
> > > > 
> > > > I installed RPC over HTTP and activated Connect Anywhere (with 
> > > > standard-auth) on the Client-Access Server. I have no errors or warnings in 
> > > > the Application and System Logs. And I'm using a valid public certificate, i 
> > > > have no problems with owa.
> > > > 
> > > > Can someone help me?
> > > > 
> > > > Thanks,
> > > > Erich

Hi
is it possible that any kind of firewall is between your clients and the CAS?
sometimes this can also cause problems. Have you ever tested your 
configuration internally only?

Henry


"NiX" wrote:

> Hi,
> 
> i tested with two users, one is "test", and one is "ssladmin".
> 
> I can't find the command to see how is MAPIBlockOutlookRpcHttp, but then 
> i've set this:
> 
> Set-CASMailbox ssladmin -MAPIBlockOutlookRpcHttp $false
> and reloaded the Service (I think that's not needed, but better one more) 
> and tried again.
> Still not running.
> 
> I can't understanbd, why is Active Sync and OWA over HTTPS running but not 
> RPC over HTTPS.
> 
> 
> Thanks,
> Erich
> 
> 
> "Henry" wrote:
> 
> > Hi
> > looks good so far.
> > have you tried  another account not only another machine?
> > 
> > what is the setting of  "MAPIBlockOutlookRpcHttp" of the account you are 
> > using? is it $true or $False ?
> > 
> > Henry
> > 
> > 
> > "NiX" wrote:
> > 
> > > Hi,
> > > 
> > > I think the IIS log is okay, see:
> > > 2008-05-13 16:05:00 W3SVC1 xx.xx.xx.xx RPC_IN_DATA /rpc/rpcproxy.dll 
> > > mail.x.net:6004 443 ssladmin@x.net xx.xx.xx.xx MSRPC 200 0 0
> > > 2008-05-13 16:05:00 W3SVC1 xx.xx.xx.xx RPC_OUT_DATA /rpc/rpcproxy.dll 
> > > mail.x.net:6004 443 ssladmin@x.net xx.xx.xx.xx MSRPC 200 0 0
> > > 
> > > 
> > > no errors or else.
> > > 
> > > and yes: ActiveSync over 443 with my Mobilephone is also working :s why just 
> > > the outlook connection not?
> > > I have disconnected the VPN to the server, so that I'm a normal 
> > > "internet-user" like my mobile phone (on the firewall ist just 80 (only for 
> > > http to https redirect) and 443 open). I tested with different computers.
> > > 
> > > Thanks,
> > > Erich
> > > 
> > > 
> > > "Henry" wrote:
> > > 
> > > > Hi
> > > > first of all check whether Outlook really tries to connect over HTTPS
> > > > you can use Connection Status windows provided by Outlook
> > > > (CTRL+ Right click on Outlook icon in the system tray)
> > > > 
> > > > if this is correct, look for errors or other kind of information in IIS logs 
> > > > of your virtual web server at the CAS where you expect the client is 
> > > > connecting to.
> > > > 
> > > > Henry
> > > > 
> > > > "NiX" wrote:
> > > > 
> > > > > Hi,
> > > > > 
> > > > > I can't connect with Outlook 2007 to my Exchange 2007 Server with RPC over 
> > > > > HTTPS (Connect Anywhere). I activated to use SSL with standard-auth in the 
> > > > > advanced settings.
> > > > > 
> > > > > 
> > > > > I installed RPC over HTTP and activated Connect Anywhere (with 
> > > > > standard-auth) on the Client-Access Server. I have no errors or warnings in 
> > > > > the Application and System Logs. And I'm using a valid public certificate, i 
> > > > > have no problems with owa.
> > > > > 
> > > > > Can someone help me?
> > > > > 
> > > > > Thanks,
> > > > > Erich

Hi,

there is a hardware-firewall (netgear 538fvx), port 443 is full open.
yes, i tested also over the vpn (we have noclients in this net). but I think 
more than port 443 is not required?


thanks,
Erich



"Henry" wrote:

> 
> Hi
> is it possible that any kind of firewall is between your clients and the CAS?
> sometimes this can also cause problems. Have you ever tested your 
> configuration internally only?
> 
> Henry
> 
> 
> "NiX" wrote:
> 
> > Hi,
> > 
> > i tested with two users, one is "test", and one is "ssladmin".
> > 
> > I can't find the command to see how is MAPIBlockOutlookRpcHttp, but then 
> > i've set this:
> > 
> > Set-CASMailbox ssladmin -MAPIBlockOutlookRpcHttp $false
> > and reloaded the Service (I think that's not needed, but better one more) 
> > and tried again.
> > Still not running.
> > 
> > I can't understanbd, why is Active Sync and OWA over HTTPS running but not 
> > RPC over HTTPS.
> > 
> > 
> > Thanks,
> > Erich
> > 
> > 
> > "Henry" wrote:
> > 
> > > Hi
> > > looks good so far.
> > > have you tried  another account not only another machine?
> > > 
> > > what is the setting of  "MAPIBlockOutlookRpcHttp" of the account you are 
> > > using? is it $true or $False ?
> > > 
> > > Henry
> > > 
> > > 
> > > "NiX" wrote:
> > > 
> > > > Hi,
> > > > 
> > > > I think the IIS log is okay, see:
> > > > 2008-05-13 16:05:00 W3SVC1 xx.xx.xx.xx RPC_IN_DATA /rpc/rpcproxy.dll 
> > > > mail.x.net:6004 443 ssladmin@x.net xx.xx.xx.xx MSRPC 200 0 0
> > > > 2008-05-13 16:05:00 W3SVC1 xx.xx.xx.xx RPC_OUT_DATA /rpc/rpcproxy.dll 
> > > > mail.x.net:6004 443 ssladmin@x.net xx.xx.xx.xx MSRPC 200 0 0
> > > > 
> > > > 
> > > > no errors or else.
> > > > 
> > > > and yes: ActiveSync over 443 with my Mobilephone is also working :s why just 
> > > > the outlook connection not?
> > > > I have disconnected the VPN to the server, so that I'm a normal 
> > > > "internet-user" like my mobile phone (on the firewall ist just 80 (only for 
> > > > http to https redirect) and 443 open). I tested with different computers.
> > > > 
> > > > Thanks,
> > > > Erich
> > > > 
> > > > 
> > > > "Henry" wrote:
> > > > 
> > > > > Hi
> > > > > first of all check whether Outlook really tries to connect over HTTPS
> > > > > you can use Connection Status windows provided by Outlook
> > > > > (CTRL+ Right click on Outlook icon in the system tray)
> > > > > 
> > > > > if this is correct, look for errors or other kind of information in IIS logs 
> > > > > of your virtual web server at the CAS where you expect the client is 
> > > > > connecting to.
> > > > > 
> > > > > Henry
> > > > > 
> > > > > "NiX" wrote:
> > > > > 
> > > > > > Hi,
> > > > > > 
> > > > > > I can't connect with Outlook 2007 to my Exchange 2007 Server with RPC over 
> > > > > > HTTPS (Connect Anywhere). I activated to use SSL with standard-auth in the 
> > > > > > advanced settings.
> > > > > > 
> > > > > > 
> > > > > > I installed RPC over HTTP and activated Connect Anywhere (with 
> > > > > > standard-auth) on the Client-Access Server. I have no errors or warnings in 
> > > > > > the Application and System Logs. And I'm using a valid public certificate, i 
> > > > > > have no problems with owa.
> > > > > > 
> > > > > > Can someone help me?
> > > > > > 
> > > > > > Thanks,
> > > > > > Erich

Hi
you are rigth, only port 443 is required
and if your internal tests are also without success you should probably open 
a call with microsoft.

sorry, I have no ideas anymore.

Henry


"NiX" wrote:

> Hi,
> 
> there is a hardware-firewall (netgear 538fvx), port 443 is full open.
> yes, i tested also over the vpn (we have noclients in this net). but I think 
> more than port 443 is not required?
> 
> 
> thanks,
> Erich
> 
> 
> 
> "Henry" wrote:
> 
> > 
> > Hi
> > is it possible that any kind of firewall is between your clients and the CAS?
> > sometimes this can also cause problems. Have you ever tested your 
> > configuration internally only?
> > 
> > Henry
> > 
> > 
> > "NiX" wrote:
> > 
> > > Hi,
> > > 
> > > i tested with two users, one is "test", and one is "ssladmin".
> > > 
> > > I can't find the command to see how is MAPIBlockOutlookRpcHttp, but then 
> > > i've set this:
> > > 
> > > Set-CASMailbox ssladmin -MAPIBlockOutlookRpcHttp $false
> > > and reloaded the Service (I think that's not needed, but better one more) 
> > > and tried again.
> > > Still not running.
> > > 
> > > I can't understanbd, why is Active Sync and OWA over HTTPS running but not 
> > > RPC over HTTPS.
> > > 
> > > 
> > > Thanks,
> > > Erich
> > > 
> > > 
> > > "Henry" wrote:
> > > 
> > > > Hi
> > > > looks good so far.
> > > > have you tried  another account not only another machine?
> > > > 
> > > > what is the setting of  "MAPIBlockOutlookRpcHttp" of the account you are 
> > > > using? is it $true or $False ?
> > > > 
> > > > Henry
> > > > 
> > > > 
> > > > "NiX" wrote:
> > > > 
> > > > > Hi,
> > > > > 
> > > > > I think the IIS log is okay, see:
> > > > > 2008-05-13 16:05:00 W3SVC1 xx.xx.xx.xx RPC_IN_DATA /rpc/rpcproxy.dll 
> > > > > mail.x.net:6004 443 ssladmin@x.net xx.xx.xx.xx MSRPC 200 0 0
> > > > > 2008-05-13 16:05:00 W3SVC1 xx.xx.xx.xx RPC_OUT_DATA /rpc/rpcproxy.dll 
> > > > > mail.x.net:6004 443 ssladmin@x.net xx.xx.xx.xx MSRPC 200 0 0
> > > > > 
> > > > > 
> > > > > no errors or else.
> > > > > 
> > > > > and yes: ActiveSync over 443 with my Mobilephone is also working :s why just 
> > > > > the outlook connection not?
> > > > > I have disconnected the VPN to the server, so that I'm a normal 
> > > > > "internet-user" like my mobile phone (on the firewall ist just 80 (only for 
> > > > > http to https redirect) and 443 open). I tested with different computers.
> > > > > 
> > > > > Thanks,
> > > > > Erich
> > > > > 
> > > > > 
> > > > > "Henry" wrote:
> > > > > 
> > > > > > Hi
> > > > > > first of all check whether Outlook really tries to connect over HTTPS
> > > > > > you can use Connection Status windows provided by Outlook
> > > > > > (CTRL+ Right click on Outlook icon in the system tray)
> > > > > > 
> > > > > > if this is correct, look for errors or other kind of information in IIS logs 
> > > > > > of your virtual web server at the CAS where you expect the client is 
> > > > > > connecting to.
> > > > > > 
> > > > > > Henry
> > > > > > 
> > > > > > "NiX" wrote:
> > > > > > 
> > > > > > > Hi,
> > > > > > > 
> > > > > > > I can't connect with Outlook 2007 to my Exchange 2007 Server with RPC over 
> > > > > > > HTTPS (Connect Anywhere). I activated to use SSL with standard-auth in the 
> > > > > > > advanced settings.
> > > > > > > 
> > > > > > > 
> > > > > > > I installed RPC over HTTP and activated Connect Anywhere (with 
> > > > > > > standard-auth) on the Client-Access Server. I have no errors or warnings in 
> > > > > > > the Application and System Logs. And I'm using a valid public certificate, i 
> > > > > > > have no problems with owa.
> > > > > > > 
> > > > > > > Can someone help me?
> > > > > > > 
> > > > > > > Thanks,
> > > > > > > Erich