I'm migrating from one Exchange 2010 server to another on new hardware. I've loaded Exchange, moved mailboxes, tested connectivity, everything seems to be working. I created new connectors on the new server and pointed my firewall to redirect
emails to the new server, seems to work.
However, I'm running the Exchange connectivity tester and it's failing. It looks like the external url for autodiscover is incorrect. (The internal one looks fine).
This is what it is showing for the url: https://mydomain.com/AutoDiscover/AutoDiscover.xml
This is what it should be showing: https://mail.mydomain.com/AutoDiscover/AutoDiscover.xml
I checked nslookup for autodiscover.mydomain.com and it is pointing to the correct ip address that is being redirected by my firewall to the new exchange server.
-------------------------------------------------------------------------------------------
The Microsoft Connectivity Analyzer is testing Exchange ActiveSync.
The Exchange ActiveSync test failed.
Additional Details
Elapsed Time: 7943 ms.
Test Steps
Attempting the Autodiscover and Exchange ActiveSync test (if requested).
Testing of Autodiscover for Exchange ActiveSync failed.
Additional Details
Elapsed Time: 7941 ms.
Test Steps
Attempting each method of contacting the Autodiscover service.
The Autodiscover service couldn't be contacted successfully by any method.
Additional Details
Elapsed Time: 7941 ms.
Test Steps
Attempting to test potential Autodiscover URL https://mydomain.com/AutoDiscover/AutoDiscover.xml
Testing of this potential Autodiscover URL failed.
Additional Details
Elapsed Time: 1325 ms.
Test Steps
Attempting to resolve the host name mydomain.com in DNS.
The host name resolved successfully.
Additional Details
IP addresses returned: 71.125.36.157
Elapsed Time: 25 ms.
Testing TCP port 443 on host mydomain.com to ensure it's listening and open.
The specified port is either blocked, not listening, or not producing the expected response.
Tell me more about this issue and how to resolve it
Additional Details
A network error occurred while communicating with the remote host.
Elapsed Time: 1299 ms.
Attempting to test potential Autodiscover URL https://autodiscover.mydomain.com/AutoDiscover/AutoDiscover.xml
Testing of this potential Autodiscover URL failed.
Additional Details
Elapsed Time: 6173 ms.
Test Steps
Attempting to resolve the host name autodiscover.mydomain.com in DNS.
The host name resolved successfully.
Additional Details
IP addresses returned: 71.125.36.155
Elapsed Time: 23 ms.
Testing TCP port 443 on host autodiscover.mydomain.com to ensure it's listening and open.
The port was opened successfully.
Additional Details
Elapsed Time: 112 ms.
Testing the SSL certificate to make sure it's valid.
The SSL certificate failed one or more certificate validation checks.
Additional Details
Elapsed Time: 6037 ms.
Test Steps
The Microsoft Connectivity Analyzer is attempting to obtain the SSL certificate from remote server autodiscover.mydomain.com on port 443.
The Microsoft Connectivity Analyzer successfully obtained the remote SSL certificate.
Additional Details
Remote Certificate Subject: CN=MAIL.mydomain.com, Issuer: CN=mydomain-VR1-CA, DC=mydomain, DC=com.
Elapsed Time: 5960 ms.
Validating the certificate name.
Certificate name validation failed.
Tell me more about this issue and how to resolve it
Additional Details
Host name autodiscover.mydomain.com doesn't match any name found on the server certificate CN=MAIL.mydomain.com.
Elapsed Time: 1 ms.
Attempting to contact the Autodiscover service using the HTTP redirect method.
The attempt to contact Autodiscover using the HTTP Redirect method failed.
Additional Details
Elapsed Time: 268 ms.
Test Steps
Attempting to resolve the host name autodiscover.mydomain.com in DNS.
The host name resolved successfully.
Additional Details
IP addresses returned: 71.125.36.155
Elapsed Time: 24 ms.
Testing TCP port 80 on host autodiscover.mydomain.com to ensure it's listening and open.
The port was opened successfully.
Additional Details
Elapsed Time: 112 ms.
The Microsoft Connectivity Analyzer is checking the host autodiscover.mydomain.com for an HTTP redirect to the Autodiscover service.
The Microsoft Connectivity Analyzer failed to get an HTTP redirect response for Autodiscover.
Additional Details
An HTTP 403 forbidden response was received. The response appears to have come from Unknown. Body of the response: You do not have permission to view this directory or page.
Headers received:
Content-Length: 58
Content-Type: text/html
Date: Tue, 17 Dec 2013 13:21:08 GMT
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Elapsed Time: 131 ms.
Attempting to contact the Autodiscover service using the DNS SRV redirect method.
The Microsoft Connectivity Analyzer failed to contact the Autodiscover service using the DNS SRV redirect method.
Additional Details
Elapsed Time: 174 ms.
Test Steps
Attempting to locate SRV record _autodiscover._tcp.mydomain.com in DNS.
The Autodiscover SRV record wasn't found in DNS.
Tell me more about this issue and how to resolve it
Additional Details
Elapsed Time: 174 ms.
However, I'm running the Exchange connectivity tester and it's failing. It looks like the external url for autodiscover is incorrect. (The internal one looks fine).
This is what it is showing for the url: https://mydomain.com/AutoDiscover/AutoDiscover.xml
This is what it should be showing: https://mail.mydomain.com/AutoDiscover/AutoDiscover.xml
I checked nslookup for autodiscover.mydomain.com and it is pointing to the correct ip address that is being redirected by my firewall to the new exchange server.
-------------------------------------------------------------------------------------------
The Microsoft Connectivity Analyzer is testing Exchange ActiveSync.
The Exchange ActiveSync test failed.
Additional Details
Elapsed Time: 7943 ms.
Test Steps
Attempting the Autodiscover and Exchange ActiveSync test (if requested).
Testing of Autodiscover for Exchange ActiveSync failed.
Additional Details
Elapsed Time: 7941 ms.
Test Steps
Attempting each method of contacting the Autodiscover service.
The Autodiscover service couldn't be contacted successfully by any method.
Additional Details
Elapsed Time: 7941 ms.
Test Steps
Attempting to test potential Autodiscover URL https://mydomain.com/AutoDiscover/AutoDiscover.xml
Testing of this potential Autodiscover URL failed.
Additional Details
Elapsed Time: 1325 ms.
Test Steps
Attempting to resolve the host name mydomain.com in DNS.
The host name resolved successfully.
Additional Details
IP addresses returned: 71.125.36.157
Elapsed Time: 25 ms.
Testing TCP port 443 on host mydomain.com to ensure it's listening and open.
The specified port is either blocked, not listening, or not producing the expected response.
Tell me more about this issue and how to resolve it
Additional Details
A network error occurred while communicating with the remote host.
Elapsed Time: 1299 ms.
Attempting to test potential Autodiscover URL https://autodiscover.mydomain.com/AutoDiscover/AutoDiscover.xml
Testing of this potential Autodiscover URL failed.
Additional Details
Elapsed Time: 6173 ms.
Test Steps
Attempting to resolve the host name autodiscover.mydomain.com in DNS.
The host name resolved successfully.
Additional Details
IP addresses returned: 71.125.36.155
Elapsed Time: 23 ms.
Testing TCP port 443 on host autodiscover.mydomain.com to ensure it's listening and open.
The port was opened successfully.
Additional Details
Elapsed Time: 112 ms.
Testing the SSL certificate to make sure it's valid.
The SSL certificate failed one or more certificate validation checks.
Additional Details
Elapsed Time: 6037 ms.
Test Steps
The Microsoft Connectivity Analyzer is attempting to obtain the SSL certificate from remote server autodiscover.mydomain.com on port 443.
The Microsoft Connectivity Analyzer successfully obtained the remote SSL certificate.
Additional Details
Remote Certificate Subject: CN=MAIL.mydomain.com, Issuer: CN=mydomain-VR1-CA, DC=mydomain, DC=com.
Elapsed Time: 5960 ms.
Validating the certificate name.
Certificate name validation failed.
Tell me more about this issue and how to resolve it
Additional Details
Host name autodiscover.mydomain.com doesn't match any name found on the server certificate CN=MAIL.mydomain.com.
Elapsed Time: 1 ms.
Attempting to contact the Autodiscover service using the HTTP redirect method.
The attempt to contact Autodiscover using the HTTP Redirect method failed.
Additional Details
Elapsed Time: 268 ms.
Test Steps
Attempting to resolve the host name autodiscover.mydomain.com in DNS.
The host name resolved successfully.
Additional Details
IP addresses returned: 71.125.36.155
Elapsed Time: 24 ms.
Testing TCP port 80 on host autodiscover.mydomain.com to ensure it's listening and open.
The port was opened successfully.
Additional Details
Elapsed Time: 112 ms.
The Microsoft Connectivity Analyzer is checking the host autodiscover.mydomain.com for an HTTP redirect to the Autodiscover service.
The Microsoft Connectivity Analyzer failed to get an HTTP redirect response for Autodiscover.
Additional Details
An HTTP 403 forbidden response was received. The response appears to have come from Unknown. Body of the response: You do not have permission to view this directory or page.
Headers received:
Content-Length: 58
Content-Type: text/html
Date: Tue, 17 Dec 2013 13:21:08 GMT
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Elapsed Time: 131 ms.
Attempting to contact the Autodiscover service using the DNS SRV redirect method.
The Microsoft Connectivity Analyzer failed to contact the Autodiscover service using the DNS SRV redirect method.
Additional Details
Elapsed Time: 174 ms.
Test Steps
Attempting to locate SRV record _autodiscover._tcp.mydomain.com in DNS.
The Autodiscover SRV record wasn't found in DNS.
Tell me more about this issue and how to resolve it
Additional Details
Elapsed Time: 174 ms.