CAS Array and Outlook 2003 clients

Status
Not open for further replies.
B

BGM2

I read where the settings in Outlook should be set to either Negotiate Authentication or NTLM and not Kerberos if you are going to use a CAS Array. For Outlook 2007 and 2010 this doesn't seem to be an issue since the default seems to be Negotiate.

In Outlook 2003 SP3 I have 3 possible settings:

Kerberos / NTLM Password Authentication

Kerberos Password Authentication

Password Authentication (NTLM)

If I'm going to use a CAS Array but still have Outlook 2003 clients is Kerberos Password Authentication the only security setting I cannot use?
 
M

MMHussain

Hello

Use NTLM authentication for Outlook 2003 and also make sure that Encryption must be enabled in the Outlook profile.

Under the Outlook Profile, choose “more settings” and then choose the Security tab.

Make sure “Enable encryption between Outlook and the Exchange Server” is Connected.

Thanks Mhussain
 
B

BGM2

Knew about the encryption and already setup a GPO but didn't know about the authentication method.
 
B

BGM2

Okay so looking at this article it appears for Outlook 2003 clients the keberos / NTLM authentication setting is ok. Please let me know if I'm mistaken?
 
A

Allen Song

Hi,

That's indeed the problem. Before Exchange 2010 SP1, the CASARRAY could not work with the kerbose. This is because when Client Access Servers are load balanced, clients are not aware of individual server names. As a result, the mail clients request as a array name.

On the CAS server, the Exchange services run in the local system or network service and authenticate the kerbose in their own account, not the array account. This causes a mismatch and leads to Kerberos authentication failure.

A good news is the SP1 can make this work. You can refer to the below article:

http://technet.microsoft.com/en-us/library/ff808312.aspx

Thanks

Allen

Allen Song
 
Status
Not open for further replies.
Similar threads
Thread starter Title Forum Replies Date
L Outlook clients did not reconnect to Exchange when one CAS server in CAS array became unresponsive Exchange Server Administration 1
T CAS Array/RPCClientAccessServer and Outlook profile experiences Exchange Server Administration 8
C Reboot a CAS array member causes Outlook 2010 clients to prompt for credentials. Using Outlook 5
K Outlook client on Exchange 2010 changes cas array name to instance-<guid> Using Outlook 21
B CAS Array and NLB Exchange Server Administration 3
D CAS Array Question Exchange Server Administration 11
M Proper way to install Exchange 2010 SP1 on a CAS Array Exchange Server Administration 3
J Segmenting IMAP traffic from CAS Array Exchange Server Administration 8
S CAS array in Exchange 2010 Exchange Server Administration 1
G Exchange 2010 CAS Array Exchange Server Administration 4
J Geographically redundant cas array Exchange Server Administration 15
D CAS Array Questions Exchange Server Administration 3
T Exchange 2010 CAS Array setup and lab Exchange Server Administration 18
S NLB exchange 2010 CAS Array Exchange Server Administration 4
S Access CAS Array Behind ISA 2006 Exchange Server Administration 6
C Introduce another CAS/HT server on the cas array on NLB Exchange Server Administration 7
P DNS Round Robin on CAS Array Exchange Server Administration 5
B After rebooting one of the cas array servers blackbarry stops working Exchange Server Administration 1
K CAS array SSL cert -RPC cas certificate warning Exchange Server Administration 3
S What to Use Instead a Hardware-based Load Balancer for an Exchange 2010 CAS Array Exchange Server Administration 21
R cas array owa is slow Exchange Server Administration 5
B CAS Array with Hardware Load Balancers Exchange Server Administration 6
A Why not using DAG virtual IP/fqdn for CAS array in two nodes setup? Exchange Server Administration 2
D Cas Array HA 2 sites Exchange Server Administration 15
A Exchange 2010 CAS Failover from Internet Facing site to Non-Internet Facing Site - Certificate Issue Exchange Server Administration 3
C Watson Error on CAS Exchange Server Administration 1
S Exchange 2010 CAS/HT/Mailbox moved - best practice/steps for decommissioning 2007 Exchange Server Administration 3
S Load balance Autodiscover with multiple CAS servers. Exchange Server Administration 2
S Load balance Autodiscover with multiple CAS servers. Exchange Server Administration 3
M Fundamental CAS question for Exchange 2010 and 2007 Co-existence... Exchange Server Administration 7
M Exchange ActiveSync HTTP 500 Exchange CAS/HUB 2007 and Exchange 2003 BE & MBX CCR 2007 Using Outlook 1
S Exchange CAS server OAB directory not showing web.config file Exchange Server Administration 3
T RBAC Error on UM/CAS Servers Exchange Server Administration 2
R FQDN of Exchange CAS servers not in SSL cert Exchange Server Administration 2
D CAS Autodiscover using -rpcclientaccessserver Exchange Server Administration 5
D CAS Design Question Exchange Server Administration 4
D Exchange 2010 CAS at 2 different Sites Exchange Server Administration 2
T Cas server uninstall failed... Now how to reinstall? Exchange Server Administration 4
S Do you need a CAS Server in Order to Use OWA in Exchange 2010 (E14)? Exchange Server Administration 9
S Any system impact if change exchange 2010 CAS/HUB and Mailbox server IP address Exchange Server Administration 1
B Exchange 2003 OWA/OA/AS over NAT and Exchange 2010 CAS Exchange Server Administration 4
B Re: Exchange 2007 and CAS from Exchange 2010 problem Exchange Server Administration 15
M Re: Exchange 2007 and CAS from Exchange 2010 problem Exchange Server Administration 2
I Exchange 2007 and CAS from Exchange 2010 problem Exchange Server Administration 4
T ActiveSync proxy problem from Exchange 2010 CAS to Exchange 2007 CAS Exchange Server Administration 5
M CAS Issue: OWA/Outlook remote users cannot login Exchange Server Administration 1
C CAS Proxy problem Exchange Server Administration 5
K Exchange 2010 OWA redirection between 2 CAS Servers Exchange Server Administration 5
S exchange 2010 cas memory usage Exchange Server Administration 2
P Exchange 2010 SP1 Cross Site CAS connection disable Exchange Server Administration 2

Similar threads

Top