Exchange 2013 Outlook Anywhere RPC Over HTTP

Exchange server 2013 Outlook Anywhere has new feature which can able to connect the outlook internally and from the internet. Exchange server 2013 uses two EXHTTP nodes which get generated xml file automatically. The complete detail on how it works with powershell command and scenario based explained in the enclosed attachment.

Exchange 2013 Outlook Anywhere – RPC Over HTTP

Exchange server 2013 Outlook Anywhere is used to connect the outlook internally and from the internet. Exchange server 2013 uses two EXHTTP nodes which get generated xml file automatically. Please find the below XML generated for the user account.

Output of Outlook AnyWhere in Exchange 2013 CAS Server

[PS] C:\Windows\system32>Get-OutlookAnywhere -Server CASSRV1

RunspaceId : 0a620a85-b852-46de-ab5c-f7396685e7d9

ServerName : CASSRV1

SSLOffloading : True

ExternalHostname : webmail.mail.com

InternalHostname : webmail.mail.com

ExternalClientAuthenticationMethod : Ntlm

InternalClientAuthenticationMethod : Ntlm

IISAuthenticationMethods : {Ntlm}

XropUrl :

ExternalClientsRequireSsl : True

InternalClientsRequireSsl : False

MetabasePath : IIS://CASSRV1.MAIL.COM/W3SVC/1/ROOT/Rpc

Path : E:\Program Files\Microsoft\Exchange Server\V15\FrontEnd\HttpProxy\rpc

ExtendedProtectionTokenChecking : None

ExtendedProtectionFlags : {}

ExtendedProtectionSPNList : {}

AdminDisplayVersion : Version 15.0 (Build 775.38)

Server : CASSRV1

AdminDisplayName :

ExchangeVersion : 0.20 (15.0.0.0)

Name : Rpc (Default Web Site)

DistinguishedName : CN=Rpc (Default Web Site),CN=HTTP,CN=Protocols,CN=CASSRV1,CN=Servers,CN=Exchange Administrative Group (FYDIBOHF23SPDLT),CN=Administrative Groups,CN=Mail,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=AD,DC=MAIL,DC=COM

Identity : CASSRV1\Rpc (Default Web Site)

Guid : 101e738e-9dc5-48d1-9516-ff6ac7a01859

ObjectCategory : AD.MAIL.COM/Configuration/Schema/ms-Exch-Rpc-Http-Virtual-Directory

ObjectClass : {top, msExchVirtualDirectory, msExchRpcHttpVirtualDirectory}

WhenChanged : 1/22/2014 10:38:54 AM

WhenCreated : 9/18/2013 11:39:02 AM

WhenChangedUTC : 1/22/2014 5:08:54 AM

WhenCreatedUTC : 9/18/2013 6:09:02 AM

New Feature in Exchange 2013 Outlook Anywhere

Inorder to achieve the HTTP connection for internal outlook client and HTTPS connections for the outlook client connection over the internet .Then we need to have follow the below rule.

· Separate hostname for the internalhostname and externalhost should be different

· The Internalhostname should not be published in the internet ISP DNS

· The InternalClientsRequireSsl should be set as false and ExternalClientsRequireSsl should be set as true.

Powershell Command

Get-OutlookAnywhere | Set-OutlookAnywhere -InternalHostname "Outlook.mail.com" -InternalClientsRequireSsl $false -ExternalHostname "webmail.mail.com" -ExternalClientsRequireSsl $true

How it works ….

By default always the first HTTP part taken by the outlook to get the details of the url if it fails it goes to the next HTTP part of XML file. In the XML file under the protocol of EXHTTP you can able to view the SSL is off and internalhostname as Outlook.mail.com for the first part HTTP protocol used to connect the internal outlook client. If it fails then it moves to the next part of HTTP part to get connected for the internal outlook client

<Type>EXHTTP</Type>

<Server>Outlook.mail.com</Server>

<AuthPackageNtlm</AuthPackage

In the XML file under the protocol of EXHTTP you can able to view the SSL is off and externalhostname as webmail.mail.com. Since the first name is unable to resolve fqdn over the internet hence it gets connected to second part of the EXHTTP part. Hence it move to SSL connection

<Type>EXHTTP</Type>

<Server>webmail.mail.com</Server>

<AuthPackageNtlm</AuthPackage

In Exchange server 2013 public folder will be get connected by using the below piece of XML file

PublicFolderInformation

<SmtpAddress></SmtpAddress

</PublicFolderInformation

Note: On performing the above change in co-existence mode of Exchange 2007/2010 with Exchange 2013 there will no impact for the legacy exchange user mailbox. Since it connect using RPC/TCP for MAPI connectivity

XML File - Generated on Email Test Configuration in Outlook

<?xml version="1.0" encoding="utf-8"?>

Autodiscover xmlns="http://schemas.microsoft.com/exchange/autodiscover/responseschema/2006">

<User>

<DisplayNameRaji S</DisplayName

<LegacyDN>/o=Mail/ou=Exchange Administrative Group (FYDIBOHF23SPDLT)/cn=Recipients/cn=Raji_S</LegacyDN

</User>

<AccountType>email</AccountType

<Action>settings</Action>

<MicrosoftOnline>False</MicrosoftOnline

<ServerDN>/o=Mail/ou=Exchange Administrative Group (FYDIBOHF23SPDLT)/cn=Configuration/cn=Servers/cn=</ServerDN>

<ServerVersion>73C08307</ServerVersion

<MdbDN>/o=Mail/ou=Exchange Administrative Group (FYDIBOHF23SPDLT)/cn=Configuration/cn=Servers/cn=/cn=Microsoft Private MDB</MdbDN

<PublicFolderServerwebmail.mail.com</PublicFolderServer

<ASUrl>https://webmail.mail.com/EWS/Exchange.asmx</ASUrl>

<EwsUrl>https://webmail.mail.com/EWS/Exchange.asmx</EwsUrl>

<EmwsUrl>https://webmail.mail.com/EWS/Exchange.asmx</EmwsUrl>

<EcpUrl>https://CASSRV1.mail.com/ecp/</EcpUrl>

<EcpUrl-um>?rfr=olk&p=customize/voicemail.aspx&exsvurl=1&realm=AD.MAIL.COM</EcpUrl-um>

<EcpUrl-aggr>?rfr=olk&p=personalsettings/EmailSubscriptions.slab&exsvurl=1&realm=AD.MAIL.COM</EcpUrl-aggr>

<EcpUrl-mt>PersonalSettings/DeliveryReport.aspx?rfr=olk&exsvurl=1&IsOWA=<IsOWA>&MsgID=<MsgID>&Mbx=<Mbx>&realm=AD.MAIL.COM</EcpUrl-mt>

<EcpUrl-ret>?rfr=olk&p=organize/retentionpolicytags.slab&exsvurl=1&realm=AD.MAIL.COM</EcpUrl-ret>

<EcpUrl-sms>?rfr=olk&p=sms/textmessaging.slab&exsvurl=1&realm=AD.MAIL.COM</EcpUrl-sms>

<EcpUrl-photo>PersonalSettings/EditAccount.aspx?rfr=olk&chgPhoto=1&exsvurl=1&realm=AD.MAIL.COM</EcpUrl-photo>

<EcpUrl-extinstall>Extension/InstalledExtensions.slab?rfr=olk&exsvurl=1&realm=AD.MAIL.COM</EcpUrl-extinstall>

<OOFUrl>https://webmail.mail.com/EWS/Exchange.asmx</OOFUrl>

<UMUrl>https://webmail.mail.com/EWS/UM2007Legacy.asmx</UMUrl>

<OABUrl>https://webmail.mail.com/OAB/322aa0e9-256a-4886-bbcb-62e7aaf4cb80/</OABUrl>

<ServerExclusiveConnect>off</ServerExclusiveConnect

<CertPrincipalName>none</CertPrincipalName

</Protocol>

<Server>webmail.mail.com</Server>

<AuthPackageNtlm</AuthPackage

<ASUrl>https://webmail.mail.com/EWS/Exchange.asmx</ASUrl>

<EwsUrl>https://webmail.mail.com/EWS/Exchange.asmx</EwsUrl>

<EmwsUrl>https://webmail.mail.com/EWS/Exchange.asmx</EmwsUrl>

<OOFUrl>https://webmail.mail.com/EWS/Exchange.asmx</OOFUrl>

<UMUrl>https://webmail.mail.com/EWS/UM2007Legacy.asmx</UMUrl>

<OABUrl>https://webmail.mail.com/OAB/322aa0e9-256a-4886-bbcb-62e7aaf4cb80/</OABUrl>

<ServerExclusiveConnect>on</ServerExclusiveConnect

<CertPrincipalName>none</CertPrincipalName

<EwsPartnerUrl>https://webmail.mail.com/EWS/Exchange.asmx</EwsPartnerUrl>

<GroupingInformation>Core-ASIAN</GroupingInformation

</Protocol>

<OWAUrl AuthenticationMethod="Basic, Fba">https://webmail.mail.com/OWA/</OWAUrl>

<ASUrl>https://webmail.mail.com/EWS/Exchange.asmx</ASUrl>

</Protocol>

</Internal>

<OWAUrl AuthenticationMethod="Fba">https://webmail.mail.com/OWA/</OWAUrl>

<ASUrl>https://webmail.mail.com/EWS/Exchange.asmx</ASUrl>

</Protocol>

</External>

</Protocol>

<Protocol>

<Type>EXHTTP</Type>

<Server>Outlook.mail.com</Server>

<SSL>Off</SSL>

<AuthPackageNtlm</AuthPackage

<ASUrl>https://webmail.mail.com/EWS/Exchange.asmx</ASUrl>

<EwsUrl>https://webmail.mail.com/EWS/Exchange.asmx</EwsUrl>

<EmwsUrl>https://webmail.mail.com/EWS/Exchange.asmx</EmwsUrl>

<EcpUrl>https://gurcasv01.ad.mail.com/ecp/</EcpUrl>

<EcpUrl-um>?rfr=olk&p=customize/voicemail.aspx&exsvurl=1&realm=AD.MAIL.COM</EcpUrl-um>

<EcpUrl-aggr>?rfr=olk&p=personalsettings/EmailSubscriptions.slab&exsvurl=1&realm=AD.MAIL.COM</EcpUrl-aggr>

<EcpUrl-mt>PersonalSettings/DeliveryReport.aspx?rfr=olk&exsvurl=1&IsOWA=<IsOWA>&MsgID=<MsgID>&Mbx=<Mbx>&realm=AD.MAIL.COM</EcpUrl-mt>

<EcpUrl-ret>?rfr=olk&p=organize/retentionpolicytags.slab&exsvurl=1&realm=AD.MAIL.COM</EcpUrl-ret>

<EcpUrl-sms>?rfr=olk&p=sms/textmessaging.slab&exsvurl=1&realm=AD.MAIL.COM</EcpUrl-sms>

<EcpUrl-photo>PersonalSettings/EditAccount.aspx?rfr=olk&chgPhoto=1&exsvurl=1&realm=AD.MAIL.COM</EcpUrl-photo>

<EcpUrl-extinstall>Extension/InstalledExtensions.slab?rfr=olk&exsvurl=1&realm=AD.MAIL.COM</EcpUrl-extinstall>

<OOFUrl>https://webmail.mail.com/EWS/Exchange.asmx</OOFUrl>

<UMUrl>https://webmail.mail.com/EWS/UM2007Legacy.asmx</UMUrl>

<OABUrl>https://webmail.mail.com/OAB/322aa0e9-256a-4886-bbcb-62e7aaf4cb80/</OABUrl>

<ServerExclusiveConnect>On</ServerExclusiveConnect

<CertPrincipalName>None</CertPrincipalName

</Protocol>

<Type>EXHTTP</Type>

<Server>webmail.mail.com</Server>

<AuthPackageNtlm</AuthPackage

<ASUrl>https://webmail.mail.com/EWS/Exchange.asmx</ASUrl>

<EwsUrl>https://webmail.mail.com/EWS/Exchange.asmx</EwsUrl>

<EmwsUrl>https://webmail.mail.com/EWS/Exchange.asmx</EmwsUrl>

<OOFUrl>https://webmail.mail.com/EWS/Exchange.asmx</OOFUrl>

<UMUrl>https://webmail.mail.com/EWS/UM2007Legacy.asmx</UMUrl>

<OABUrl>https://webmail.mail.com/OAB/322aa0e9-256a-4886-bbcb-62e7aaf4cb80/</OABUrl>

<ServerExclusiveConnect>On</ServerExclusiveConnect

<CertPrincipalName>none</CertPrincipalName

</Protocol>

<PublicFolderInformation

<SmtpAddress></SmtpAddress

</PublicFolderInformation

</Account>

</Response>

</Autodiscover

Reference:

http://blogs.technet.com/b/meamcs/archive/2013/07/25/part-2-step-by-step-exchange-2007-to-2013-migration.aspx

http://channel9.msdn.com/Events/TechEd/NorthAmerica/2013/OUC-B313#fbid=

http://technet.microsoft.com/en-us/library/hh529912(v=exchg.150).aspx

http://support.microsoft.com/kb/2834139/en-us?sd=rss&spid=16662