This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
Few users were disconnected from outlook and when tried to reconfigure the profile, getting below error:
We have checked autodiscover DNS record is resolved from external network and http://autodiscover.example.com\autodiscover\autodiscover.xml is working correctly which is checked from browser.
I am running fiddler when i am trying to configure Outlook 2016/2109 from External Network, getting below error that goes to wrong autodiscover request,
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(246.4, 22%, 33%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EKY%3C/text%3E%3C/svg%3E)
Hi, @MdALAmran-4721
Sorry I need to ask a few questions in order to get some more information:
I suppose that the problem may be with autodiscover.
Besides testing via a browser, would you also test with ExRCA tool and Test E-mail autoconfiguration via Outlook client to check the autodiscover results from external network?
If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.
Please see the below information of your queries,
1.What version (including the CU version) of the Exchange server are you using?
Ans: Exchange 2013 CU16
2.Have you done some changes to the environment before the problem occurs?
Ans: No
3.Does the problem happen with all external users or just some of them?
Ans: All External Users.
ExECA tool Result,
Not getting any helpful error details but Outlook connectivity failed.
Hi,
Thanks for your detailed information.
From the result of ExRCA, it seems the autodiscover process is completed by using "domain.com/autodiscover/autodiscover.xml" instead of "autodiscover.domain.com/autodiscover/autodiscover.xml" and doesn't return any information.
Do you have some websites running with the root domain(domain.com)?
If so, please follow these steps:
1.open regedit.exe on the client computer and locate HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Outlook\AutoDiscover.
2.add a DWORD value named ExcludeHttpsRootDomain and set its value data to 1
3.restart Outlook and check if you are able to configure the profile
If the response is helpful, please click "Accept Answer" and upvote it.
@Kael Yao-MSFT
Thanks for your reply.
Do you have some websites running with the root domain(domain.com)?
Ans: Yes
If we add DWORD value into the client computer, the outlook is connected successfully,
What might be the reason?
Thanks for the update.
What might be the reason?
By default Outlook follows this order to search for autodiscover URL:
1.If the device is domain joined (in internal network), Outlook will first look for scp record in Active Directory
2.If step1 fails or the device is in external network, Outlook will look up for https://domain.com/autodiscover/autodiscover.xml
3.If step2 fails, Outlook will look up for https://autodiscover.domain.com/autodiscover/autodiscover.xml
To my understanding:
In your case, since there are some websites using domain.com, the request is taken over by the website (on step2)
And because in fact the website doesn't have the information for autodiscover, it doesn't return any information but a 403 forbidden.
Adding the value ExcludeHttpsRootDomain will force Outlook to skip step2 and go direct to step3, which seems to work for you.
Thanks for your quick reply.
if the request is taken over by the website(domain.com) doesn't have the information for autodiscovery, it doesn't return any information but a 403 forbidden.
Why the website is taking over the request, Are there any false/duplicate autodiscover record exits?
If so, how can I identify?
Why the website is taking over the request, Are there any false/duplicate autodiscover record exits?
I suppose this behavior is not caused by false/duplicate autodiscover record, but caused by Outlook design.
As I mentioned in the former post, Outlook will look for https://domain.com to search for the autodiscover URL before it tries to access https://autodiscover.domain.com.
And since there is website service running, it accepts the request as a normal HTTPs request and looks for the /autodiscover/autodiscover.xml under its directory.
Then it returns a 403 error.
While to Outlook, since it gets a response for the request so it doesn't go on to try to access https://autodiscover.domain.com and just return the unable to log on the server error.
Thanks for your continuous reply.
Then what will be the resolution without adding registry value in client computer?
I have tried Outlook 2013, 2016 & 2019 to configure outlook profile but the issue is same from external network.
Hi,
You're welcome.
I suppose you may also solve the problem by setup some rules on Firewall or configure on IIS to redirect https://domain.com/autodiscover/autodiscover.xml to https://autodiscover.domain.com/autodiscover/autodiscover.xml.
If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.
we are using ARR3.0 as the reverse proxy server for external client access. which server should we configure the IIS redirect? both CAS servers or reverse proxy servers?
It might be helpful if you share the steps of IIS redirection.
Hi,
You need to configure the redirect on your website since the request are sent to the website.
If it is also running on IIS, I suppose that you may create a virtual directory named "autodiscover" under your website and configure it to redirect to https://autodiscover.company.com/autodiscover/autodiscover.xml.
If it is based on other web servers, you should look for the appropriate method of redirecting.
If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.
Thanks for your guidance.
can you please look into the provided article and provide your feedback?
Hi,
In this article cPanel is used to manage the website.
While the detailed method to redirect the request may vary from how your website is based and managed.
Thanks for your support.
We have resolved this autodiscover response issue by following the article which I shared earlier.
Glad to hear that and thanks for the update!