Memorise

Default settings for Exchange-related virtual directories in Exchange Server 2010

Exchange Server 2010 with the Client Access Server (standalone):

Location Authentication SSL Setting Management
Default Web Site Anonymous Required IIS Management Console
aspnet_client Anonymous Required IIS Management Console
Autodiscover Anonymous / Basic / Windows Authentication Required Exchange Management Shell
ECP Anonymous / Basic Required Exchange Management Console or Shell
EWS Anonymous / Windows Authentication Required Exchange Management Shell
Microsoft-Server-ActiveSync Basic Required Exchange Management Console or Shell
OWA Basic Required Exchange Management Console or Shell
Powershell Anonymous Not Required Exchange Management Shell
RPC Basic / Windows Authentication Required Exchange Management Shell
RpcWithCert all options Disabled Required (128 bit not checked) N/A
OAB Windows Authentication Not Required Exchange Management Console or Shell

Exchange Server 2010 Mailbox role (standalone):

Location Authentication SSL Setting Management
Default Web Site Anonymous Required IIS Management Console
PowerShell Anonymous Not Required Exchange Management Shell

CMDlet list for those that can only be modified in the Management Shell:

Set-AutoDiscoverVirtualDirectory

Set-WebServicesVirtualDirectory

Set-PowershellVirtualDirectory

Set-OutlookAnywhere (for the RPC virtual directory)

Set-AutodiscoverVirtualDirectory
This example sets the authentication method to Digest authentication for the Autodiscover virtual directory.
Set-AutodiscoverVirtualDirectory -Identity 'autodiscover(default Web Site)' -WindowsAuthentication $false -BasicAuthentication $false -DigestAuthentication $true

This example sets Integrated Windows authentication for the Autodiscover virtual directory.
Set-AutodiscoverVirtualDirectory -Identity 'autodiscover (default Web Site)' -WindowsAuthentication $true

Set-WebServicesVirtualDirectory
This example sets the authentication method to Basic authentication for the virtual directory EWS on the server Contoso. This example als sets the external and internal URLs for this virtual directory.
Set-WebServicesVirtualDirectory -Identity Contoso\EWS(Default Web Site)-ExternalUrl https://www.contoso.com/EWS/exchange.asmx -BasicAuthentication $true -InternalUrl https://contoso.internal.com/EWS/exchange.asmx

This example uses a wildcard character instead of "Default Web site" as was used in Example 1.
Set-WebServicesVirtualDirectory -Identity Contoso\EWS* -ExternalUrl https://www.contoso.com/EWS/exchange.asmx

This example enables MRSProxy on the EWS default website. MRSProxy is the service responsible for assisting in remote mailbox moves.
Set-WebServicesVirtualDirectory -Identity "EWS (Default Web Site)" -MRSProxyEnabled $true
Set-PowerShellVirtualDirectory
This example modifies the external URL of the Contoso Windows PowerShell virtual directory.
Set-PowerShellVirtualDirectory "Contoso (default Web site)" -ExternalUrl "http://www.contoso.com/powershell"
Set-OutlookAnywhere
This example sets the client authentication method to NTLM for the /rpc virtual directory on the Client Access server CAS01.
Set-OutlookAnywhere -Identity: "CAS01\rpc (Default Web Site)" -ExternalClientAuthenticationMethod NTLM

This example sets SSL offloading for the /rpc virtual directory to false, which means that SSL isn't used for securing client connections to the Client Access server EXCH1.
Set-OutlookAnywhere -Identity "EXCH1\rpc (Default Web Site)" -SSLOffloading $false

This example sets the authentication method for the /rpc virtual directory setting in IIS to NTLM.
Set-OutlookAnywhere -Identity "EXCH1\rpc (Default Web Site)" -IISAuthenticationMethods NTLM

This example sets the available authentication methods for the /rpc virtual directory setting in IIS to use both Basic and NTLM authentication. After you set this value, you can use the IIS virtual directory to handle authentication for multiple applications that require different authentication methods.
Set-OutlookAnywhere -Identity "EXCH1\rpc (Default Web Site)" -IISAuthenticationMethods Basic,NTLM


A solution that resolved Outlook from requesting you re-enter the password for the email accounts following a period when the computer is asleep.

Mac Outlook continuously asks for credentials.

After checking the server above IIS settings I have managed to resolved the issue. Also sometime I have noticed another fix below worked.

With Outlook open, use Finder to select the Applications folder, then the MSOffice folder, then holding the Control key down select the Outlook “O” icon, and select “Get Info” from the list.

Within the Get Info screen presented, check the “Prevent Nap App” box.  Then close Finder, close Oulook and then re-open Outlook and your problem will be solved.  This action prevents the Outlook app from sleeping under Mavericks control which was designed to save power consumption, however Microsoft did not modify Outlook to conform to this feature so you must check and activate the “Prevent App Nap”.

Screen Shot 2014-01-15 at 4.35.48 PM.png


Categorised as: Exchange, Linux/OSX, Microsoft, Networking, Outlook, Server OS


Leave a Reply