What triggers the "Allow this website to configure server settings?" message.

Question

Today, several office staff got a pop-up with the message "Allow this website to configure user@mydom.org server settings?" Then it displayed the URL: https://mail.mydom.org/autodiscover/autodiscover.xml, and "Your account was redirected to this website for settings. You should only all settings from sources you know and trust."

Searching on this error said that, "When Microsoft Outlook redirects an AutoDiscover operation from HTTP to HTTPS, you may receive a warning message ...". It then gave instructions on how to suppress this message.

I'd like to know why this message suddenly popped up on several users' workstations (running Windows 10 and Office 365) after subscribing to Exchange Online for over a year. What HTTP URL is AutoDiscover redirecting to HTTPS?

Answer 1

Hi @OHPRS Admin

Is your environment a cloud only one or a hybrid? Did you have on-prem exchange server before? And how do you configure the autodiscover for your environment now?

According to my reasearch, this issue may be caused by outlook found your autodiscover SRV record that is configured for the email domain, if you have configured the SRV record previously, you could remove the record. You could refer to this: How To Check Exchange Autodiscover SRV Record Using Nslookup

Details: How to: Fix Microsoft Outlook keep asking autodiscover.xml (Allow this website to configure email server settings?)
Please Note: Since the web site is not hosted by Microsoft, the link may change without notice. Microsoft does not guarantee the accuracy of this information.

Issue: After migrated/moved to O365, from on-premises exchange server, Outlook on the same network with domain controller/DNS server keeps asking permission for autodiscover.
Fix: Remove the SRV record

And if this is not your case, try clearing the related cached information in credential manager control panel then create a new outlook profile for your user.

In addition, have you tried selecting the option Don't ask me about this website again to see if any help?

The official document here provided a method by set a registry value: How to suppress the AutoDiscover redirect warning in Outlook

---

If an Answer is helpful, please click "Accept Answer" and upvote it.

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 2

More info: One user report that the "Allow this website to configure [userEmail] server settings?" message had some other user's email address in the message, not their own.

Another user reported that her emails were not going out until she clicked either 'Allow' or 'Cancel' on the dialogue. After clicking (on 'Cancel') her emails started going out.

To repeat the original question: why are we no getting this message? Is this some new feature of Exchange/Outlook? What HTTP URL is AutoDiscover redirecting to HTTPS?

Answer 3

joyceshen-MSFT - thanks for your reply. No, we've never had Local Exchange installed, only ever Exchange Online for about a year and a half now.

I don't think I want to clear the Credential Manager cache for all users.

I have directed the users to select "Don't ask me about this website again". I suppose that will take care of future messages, but I'm still puzzled as to why after a year and a half of using Exchange Online why this autodiscover.xml link and error got triggered. Maybe I just shouldn't worry about it.

Answer 4

joyceshen - yes we can close this issue. I'll keep the info on the SARA tool for future reference, if needed. Thanks