Exchange

Outlook 中的 Exchange 2013 SSL 警告

  • April 10, 2021

我目前在我們組織中配置 Exchange/Outlook 的最後階段遇到問題。

我們在打開 Outlook 2013 時遇到 SSL 警告問題,它無法驗證 SSL,因為它正在使用我們的(舊)內部 URL (exchange.internal.local)。

請參閱下面的 Exchange 中的配置,但是我不確定是什麼原因造成的,如果它有幫助,它似乎沒有在 Outlook 2007 中發生

get-ClientAccessServer | ft identity,AutodiscoverServiceInternalUri
Identity                                                    InternalUrl
--------                                                    -----------
EXCHANGE\Autodiscover (Default Web Site)

get-webservicesvirtualdirectory | ft identity,internalurl
Identity                                                    AutoDiscoverServiceInternalUri
--------                                                    ------------------------------
EXCHANGE                                                    https://mail.externaldomain.co.uk/autodiscover/autodi...

get-webservicesvirtualdirectory | ft identity,internalurl
Identity                                                    InternalUrl
--------                                                    -----------
EXCHANGE\EWS (Default Web Site)                             https://mail.externaldomain.co.uk/EWS/Exchange.asmx

get-oabvirtualdirectory | ft identity,internalurl
Identity                                                    InternalUrl
--------                                                    -----------
EXCHANGE\OAB (Default Web Site)                             https://mail.externaldomain.co.uk/OAB

get-owavirtualdirectory | ft identity,internalurl
Identity                                                    InternalUrl
--------                                                    -----------
EXCHANGE\owa (Default Web Site)                             https://mail.externaldomain.co.uk/owa

get-ecpvirtualdirectory | ft identity,internalurl
Identity                                                    InternalUrl
--------                                                    -----------
EXCHANGE\ecp (Default Web Site)                             https://mail.externaldomain.co.uk/ecp

get-ActiveSyncVirtualDirectory | ft identity,internalurl
Identity                                                    InternalUrl
--------                                                    -----------
EXCHANGE\Microsoft-Server-ActiveSync (Default Web Site)     https://mail.externaldomain.co.uk/Microsoft-Server-ActiveSync


Get-OutlookAnywhere
RunspaceId                         : 416632a3-3695-430f-8d49-a072344e2bc0
ServerName                         : EXCHANGE
SSLOffloading                      : True
ExternalHostname                   : mail.externaldomain.co.uk
InternalHostname                   : mail.externaldomain.co.uk
ExternalClientAuthenticationMethod : Negotiate
InternalClientAuthenticationMethod : Ntlm
IISAuthenticationMethods           : {Basic, Ntlm, Negotiate}
XropUrl                            :
ExternalClientsRequireSsl          : True
InternalClientsRequireSsl          : True
MetabasePath                       : IIS://EXCHANGE.internal.local/W3SVC/1/ROOT/Rpc
Path                               : C:\Program Files\Microsoft\Exchange Server\V15\FrontEnd\HttpProxy\rpc
ExtendedProtectionTokenChecking    : None
ExtendedProtectionFlags            : {}
ExtendedProtectionSPNList          : {}
AdminDisplayVersion                : Version 15.0 (Build 516.32)
Server                             : EXCHANGE
AdminDisplayName                   :
ExchangeVersion                    : 0.20 (15.0.0.0)
Name                               : Rpc (Default Web Site)
DistinguishedName                  : CN=Rpc (Default Web Site),CN=HTTP,CN=Protocols,CN=EXCHANGE,CN=Servers,CN=Exchange
                                    Administrative Group (FYDIBOHF23SPDLT),CN=Administrative
                                    Groups,CN=CompExchange,CN=Microsoft
                                    Exchange,CN=Services,CN=Configuration,DC=internal,DC=local
Identity                           : EXCHANGE\Rpc (Default Web Site)
Guid                               : 7a9f693d-0f42-4fd5-8de9-e3e7eb946932
ObjectCategory                     : internal.local/Configuration/Schema/ms-Exch-Rpc-Http-Virtual-Directory
ObjectClass                        : {top, msExchVirtualDirectory, msExchRpcHttpVirtualDirectory}
WhenChanged                        : 26/06/2013 11:31:19
WhenCreated                        : 21/06/2013 14:37:47
WhenChangedUTC                     : 26/06/2013 10:31:19
WhenCreatedUTC                     : 21/06/2013 13:37:47
OrganizationId                     :
OriginatingServer                  : Exchange.internal.local
IsValid                            : True
ObjectState                        : Changed

get-exchangecertificate
Thumbprint                                Services   Subject
----------                                --------   -------
239AA8CC6811F0D226F73959B3B4D61FFADDF694  IP.WS..    CN=mail.externaldomain.co.uk, OU=Domain Control Validated

錯誤截圖

截屏

!!編輯!! 此外,如果它有幫助,通過測試 Exchange 連接執行 Exchange 會顯示以下內容: 截屏

好的 - 將自動發現從 DNS A 記錄更改為 SRV 記錄已修復。

此外,這仍然會出現在已經設置好的測試機器上。

在將 Exchange 帳戶刪除/重新添加到 Outlook 時,此問題已修復。

您需要設置 Outlook 提供程序。 http://ilantz.com/2013/06/29/exchange-2013-outlook-anywhere-considerations/

引用自:https://serverfault.com/questions/520506