Wildcard certificate resolves an internal connection certificate error problem

Problem Error:

650) this.width=650; "style=" style "alt=" Computer generated alternative text: Group Sub # 0 rules. 0 forwards fast step onto Brown has been sent # has been erased # The book comes from a trusted books agency. Ngsan@contoso The Book of the day has knocked. The name on the book does not knock or does not match the name of the website. Is that Kat Fusiform? is (y)gqd "src=" http://s3.51cto.com/wyfs02/M01/84/37/wKiom1eIi9TRx4DkAACWRavQq3o322.png "576" height= "310"/&G T

Workaround:

1, modify the Autodiscover internal URL address:

Check the original configuration

650) this.width=650; "style=" style "alt=" Computer generated alternative text: C:windows ys tem32 t-clientrccessseruer name auto* ame utodiscouers ERUICECN utodiscouerseruiceciassname pekdci-chs-oi pekdci-chs-oi ms-exchange-auto discouer-seru ice UtoDiscouerSeru IC E Internaluri:https:/' Mail.contoso-corp.com/rutodiscouer/rut odiscouer. XmI Utodiscouerseruiceguid. 77378f46-2c66-4aa9-a6a6-3e?a48b19596 Utodiscouersitescope. {Def Ite-name} pekdci-chs-02 ame UTODISCOUERSERUICECN pekdci-chs-02 utodiscouerseruiceciassname Ms-exchange-auto Discouer-seru Ice Utodiscouerseru ice Internaluri:https:/' Mail.contoso-corp.com/rutodiscouer/rut odiscouer. XmI Utodiscouerseruiceguid. 77378f46-2c66-4aa9-a6a6-3e?a48b19596 Utodiscouersitescope. {Def Ite-name} "Src=" Http://s3.51cto.com/wyfs02/M01/84/37/wKioL1eIi9Wg3rhOAAAumJZneHI585.png "576" height= "268"/>

Modify the configuration to point the internal URL to mail.contoso.com, with the following command:

650) this.width=650; "style=" style "alt=" Computer generated alternative text: C:windows ys tem32 t-clientrccessseruer name auto* ame utodiscouers ERUICECN utodiscouerseruiceciassname pekdci-chs-oi pekdci-chs-oi ms-exchange-auto discouer-seru ice UtoDiscouerSeru IC E Internaluri:https:/' Mail.contoso.com/rutodiscouer/rutodisc over. XmI Utodiscouerseruiceguid. 77378f46-2c66-4aa9-a6a6-3e?a48b19596 Utodiscouersitescope. {Def Ite-name} pekdci-chs-02 ame UTODISCOUERSERUICECN pekdci-chs-02 utodiscouerseruiceciassname Ms-exchan ice UtoDiscouerSeru Ice in Ternaluri:https:/' Mail.contoso.com/rutodiscouer/rutodisc over. XmI uto iscouer em. ' Ice u 1 utodiscouersitescope. {Def Ite-name} "Src=" Http://s3.51cto.com/wyfs02/M01/84/37/wKioL1eIi9WAyHulAAAvYeOvR-w014.png "576" height= "266"/>

2. Modify the internal connection URL address in the WebServicesVirtualDirectory directory:

Original settings output:

650) this.width=650; "style=" style "alt=" computer generates alternative text: C:windows ys tem32 t-webseru ices U Irtua ID ire C top Y. BWS (Default Web Site) pekdci-chs-oi Internalnlbbypassuri internalruthenticat ionmethods. Internaluri ame Internalnlbbypassuri internalruthenticat ionmethods. Internaluri server. inter* AME FI name. . Https://pekdcl-chs-?l.contoso-corp.com/ews/exch Ange. asmx {Nt 1m. Windows Integrated. Wssecurity}. Https://maiI.contoso-corp.com/EWS/Exchange. asmx. BWS (Default Web Site) pekdci-chs-02. Https://pekdcl-chs-m.contoso-corp.com/ews/exch Ange. asmx {Nt 1m. Windows Integrated. Wssecurity}. Https://maiI.contoso-corp.com/EWS/Exchange. asmx "src=" http://s3.51cto.com/wyfs02/M01/84/37/wKiom1eIi9ai5CbQAAAqjRVt5eE494.png "576" height= "268"/>

650) this.width=650; "style=" style "alt=" Computer generated alternative text: C:windows ys tem32 t-webseru ices U Irtua ID ire C top y ame WS PE Kdci-chs-oi WS pekdci-chs-02 Server (default (Default Web site) site) Internaluri https://mail.contoso-c. Https://mail.contoso-c. "Src=" Http://s3.51cto.com/wyfs02/M02/84/37/wKiom1eIi9aQfKi3AAAPWMnTwMk070.png "576" height= "/>"

The Reset method command is as follows:

650) this.width=650; "style=" style "alt=" Computer generated alternative text: [Psi-identity NEWS (Default Web Site) "-internaluri" https://mail.c Ontoso.com/ews/exchange. As [psi-identity NEWS (Default Web Site) "-internaluri" Https://mail.contoso.com/EWS/Exchange. As "src=" Http://s3.51cto.com/wyfs02/M02/84/37/wKioL1eIi9bA8jH7AAAV2LiPkb0379.png "576" height= "/>"

After the change, the output is as follows:

650) this.width=650; the "style=" style "alt=" Computer generated alternative text: FI name. Ame c:windows ys tem32 t-webseru ices U Irtua ID ire C top Y. BWS (Default Web Site) pekdci-chs-oi server. int* Internalnlbbypassuri. Https://pekdcl-chs-?l.contoso-corp.com/ews/exch Ange. ASMX Internalruthenticat ionmethods. {Nt 1m. Windows Integrated. Wssecurity} internaluri. Https://mail.contoso.com/EWS/Exchange. asmx. BWS (Default Web Site) Ame pekdci-chs-02 Internalnlbbypassuri. Https://pekdcl-chs-m.contoso-corp.com/ews/exch Ange. ASMX Internalruthenticat ionmethods. {Nt 1m. Windows Integrated. Wssecurity} internaluri. Https://mail.contoso.com/EWS/Exchange. asmx "src=" Http://s3.51cto.com/wyfs02/M00/84/37/wKiom1eIi9ej3hrPAAAosKPLDFg937.png "" 576 "height=" 236 "/>

3. Set the OAB directory

The original setting output result:

650) this.width=650; "style=" style "alt=" Computer generated alternative text: C:windows ys tem32 T-oabu irtua idirectory FI name. Server. int* *ame Internaluri internalruthenticationmethods *ame internaluri internalruthenticationmethods. ORB (Default Web Site) pekdci-chs-oi. Http://maiI.contoso-corp.com/ORB. {Windows Integrated}. ORB (Default Web Site) pekdci-chs-02. Http://maiI.contoso-corp.com/ORB. {Windows Integrated} "Src=" Http://s3.51cto.com/wyfs02/M02/84/37/wKioL1eIi9fj2Bp-AAAYjqmyYCk822.png "576" height= "201"/>

The Setup method is as follows:

650) this.width=650; "style=" style "alt=" Computer generated alternative text:-chs-01 efault efault nwindows irtuaidirectory-identity "PEKDCI Web Site) "-internaluri" Http://mail.contoso.com/ORB "nwindows irtuaidirectory-identity" PEKDCI Web Site) "-internaluri" HT Tp://mail.contoso.com/orb "(d (d" src= "Http://s3.51cto.com/wyfs02/M02/84/37/wKiom1eIi9jx8pPJAAAR4xhbCwI648.png" " 576 "height="/>

The result of the adjustment is as follows:

650) this.width=650; "style=" style "alt=" Computer generated alternative text: C:windows ys tem32 T-oabu irtua idirectory FI name. Server. int* ame Internaluri internalruthenticationmethods ame Internaluri internalruthenticationmethods. ORB (Default Web Site) pekdci-chs-oi. Http://mail.contoso.com/ORB. {Windows Integrated}. ORB (Default Web Site) pekdci-chs-02. Http://mail.contoso.com/ORB. {Windows Integrated} "Src=" Http://s3.51cto.com/wyfs02/M00/84/37/wKioL1eIi9izjPBKAAAZsWmshHw692.png "570" height= "199"/>

After the setting is complete, the certificate prompt is no longer played, but to ensure uniformity of all configurations, we will also make adjustments to the next few steps.

4. Set ActiveSyncVirtualDirectory internal settings

The original configuration is as follows:

650) this.width=650; "style=" style "alt=" Computer generated alternative text: server. inter* ame c:windows ys tem32 t-act iues yncu irtua top y FI name. . (Default Web pekdci-chs-oi internaluri internalruthenticat ionmethods. Ame Internaluri internalruthenticat ionmethods. Site). Https://maiI.contoso-corp.com/MicrosoFt-Seruer-ActiveSync. (Default Web Site) Pekdci-chs-02. Https://maiI.contoso-corp.com/MicrosoFt-Seruer-ActiveSync "src=" http://s3.51cto.com/wyfs02/M00/84/37/ Wkiom1eii9iz8f2uaaafrwxcnzi021.png "" 576 "height=" 206 "/>

The Setup method is as follows:

650) this.width=650; "style=" style "alt=" Computer generated alternative text: [Psi-identity (Default Web Site) "-internaluri" Https://mail.cont s O.com/microsoft-seruer-rctiuesync "[Psi-identity (Default Web Site)"-internaluri "Https://mail.cont So.com/microsoft -seruer-rctiuesync "" src= "Http://s3.51cto.com/wyfs02/M01/84/37/wKioL1eIi9nRH7qPAAAYwx4D56w532.png" "576" height= " "/>

After the adjustment, the output is as follows:

650) this.width=650; "style=" style "alt=" Computer generated alternative text: server. inter* name C:windows ys tem32 t-act iues yncu irtua top y FI name. . (Default Web pekdci-chs-oi internaluri internalruthenticat ionmethods. Name Internaluri internalruthenticat ionmethods. Site). Https://mail.contoso.com/MicrosoFt-Seruer-Rctiu e S ync. (Default Web Site) Pekdci-chs-02. Https://mail.contoso.com/MicrosoFt-Seruer-Rctiu e S ync "src=" http://s3.51cto.com/wyfs02/M01/84/37/ Wkiom1eii9mxsl5taaac-0dcrou064.png "" 576 "height=" 203 "/>

The issue that is raised about offline Address book cannot be downloaded is as follows:

650) this.width=650; "style=" style "alt=" Computer generated alternative text: Utlook "src=" http://s3.51cto.com/wyfs02/M02/84/37/ Wkiol1eii9ny2ctfaabkqb40i_8337.png "" 576 "height=" 334 "/>

650) this.width=650; "style=" style "alt=" computer generates alternative text: [Psi-identity] Pekdci-chs-oi (D Fault Web Site) "-internaluri ' HT Tp://mail.contoso.com/orb ' Set-oabuirtuaidirectory "-V ... [Psi-identity "Pekdc1-chs-?2 (D Fault Web Site)"-internaluri ' Http://mail.contoso.com/ORB ' [PSI xsystem32>iisreset/ Stop i n t erne t [PSI xsystem32>iisreset/start I N T erne T "src=" http://s3.51cto.com/wyfs02/M02/84/37/wKiom1eIi9q Weesjaaasslp7cs0841.png "" 576 "height=" 181 "/>

650) this.width=650; "style=" style "alt=" Computer generated alternative text: (E) wangtlngdong@contoscn guessm com <? Sur1>https://mai1 a awsur1>https://mai1 A conto art gcpuri>ht TPS://mal acpur1-mt>p 0 ers nalse MsgID&gt G cpuri-re t or ga_m ze/voi cemail ex swarl=l gcpuri-i Subscripti SL ex swarl=l </EcpUrI-aggr> T Tings/deli very Repore Ze/retenti Onpoli ex swarl=l s/textmessaglng ex swarl=l <? Ofur1>https://mai1 a uur1>https://mail com/ews/w2007legacy <?? Hjr1>http://mail "src=" Http://s3.51cto.com/wyfs02/M00/84/37/wKioL1eIi9qS6-KJAABOQZapD7Y746.png "" 574 "height=" 359 "/>

And when we do the above URL address modification, in the <OABUrl> this item does not display, so at this time we need to restart the IIS service on the CAS server after the adjustment is completed, the client can now display correctly after reboot

Since we've turned on the Outlookanywhere feature, we don't use public folders, and if you need to use the common file feature, you need to set the Externalurl address shown as an external address

650) this.width=650; "style=" style "alt=" Computer generated alternative text: C:windows ys tem32 t-webseru ices U Irtua ID ire C top y ame Xtern Airuthenticationmethods xtendedprotectionrokenchecking xtendedprotectionfiags xtendedProtectionSPNList XternaIUrI Ame xternairuthenticationmethods xtendedprotectionrokenchecking xtendedprotectionfiags xtendedProtectionSPNList Xternaiuri. BWS (Default Web Site) pekdci-chs-oi. {Ntlm. Windows Integrated: None. BWS (Default Web Site) pekdci-chs-02. {Ntlm. Windows Integrated: None name ext* wssecurity} wssecurity} "src=" http://s3.51cto.com/wyfs02/M00/84/37/ Wkiol1eii9qzmpndaaal76okbsk234.png "" 576 "height=" 267 "/>

The command is as follows:

Set-webservicesvirtualdirectory–identity ' Pekdc1-chs-01\ews (Default Web Site) ' –externalurl https:// Mail.contoso.com/ews/exchange.asmx

Set-webservicesvirtualdirectory–identity ' Pekdc1-chs-02\ews (Default Web Site) ' –externalurl https:// Mail.contoso.com/ews/exchange.asmx

650) this.width=650; "style=" style "alt=" Computer generated alternative text: "Send all the hair hongying gdong@cont Show" Zhuxi all cancel download: out. K Send concubine received zhuxi over 1 tasks in a successful light into the FA/receive when not show the (s) box to cancel the next mark. Positive deposit processing Change dial-up connection download offline work task error name wangtingdong@c Wangtingdong@conto onto offline phonebook positive deposit Connections C oft Ex all cancel ℃)〈〈 Detailed Letter (d) Yushi Cancel task (t)5/2 "src=" Http://s3.51cto.com/wyfs02/M00/84/37/wKiom1eIi9uyLrYnAACNpWaQSZY037.png "" 576 "height=" 364 "/>

Wildcard certificate resolves an internal connection certificate error problem