Exchange 2013(内部):无法使外部自动发现工作

背景

在2012 R2 Active Directory域上的Windows Server 2012 R2(完全更新)上的本地运行的Exchange Server Standard 2013(CU13)。

  1. 外部DNS设置正确:autodiscover.mydomain.com成功来自外部连接
  2. 通配符SSL证书已安装且可用
  3. 我可以从外部连接访问http://autodiscover.mydomain.com/autodiscover/autodiscover.xml。 我被提示input用户名和密码,这些用户名和密码被接受,然后显示一个显示Error 600(预期结果)的页面。
  4. AutoDiscover在内部局域网上正常工作和testing。

问题

但是,我无法使AutoDiscover在Internet上运行。

  1. 我不能让Outlook通过外部连接进行连接:不使用Outlook 2013时,也不使用Outlook for Android或iOS。 Outlook Web Access确实可行,但这不相关。
  2. https://testconnectivity.microsoft.com/报告以下错误:

Attempting to send an Autodiscover POST request to potential Autodiscover URLs. Autodiscover settings weren't obtained when the Autodiscover POST request was sent. Additional Details Test Steps The Microsoft Connectivity Analyzer is attempting to retrieve an XML Autodiscover response from URL https://autodiscover.mydomain.com:443/Autodiscover/Autodiscover.xml for user [email protected]. The Microsoft Connectivity Analyzer failed to obtain an Autodiscover XML response. Additional Details An HTTP 401 Unauthorized response was received from the remote Unknown server. This is usually the result of an incorrect username or password. If you are attempting to log onto an Office 365 service, ensure you are using your full User Principal Name (UPN). HTTP Response Headers: request-id: 03440b6d-56e0-405c-9f4e-eb663abca5b Set-Cookie: ClientId=AFD789F9E0A427AB; expires=Tue, 26-Sep-2017 12:53:11 GMT; path=/; HttpOnly Server: Microsoft-IIS/8.5 WWW-Authenticate: Basic realm="autodiscover.mydomain.com",Negotiate,NTLM X-Powered-By: ASP.NET X-FEServer: EXCHANGE-SERVER Date: Mon, 26 Sep 2016 12:53:11 GMT Content-Length: 0 Elapsed Time: 424 ms. 

尝试解决scheme

  1. 每https://community.spiceworks.com/topic/550046-exchange-autodiscover-not-working-correctly-in-2010-2013-environment我检查了我在IIS中的绑定,并没有看到任何不妥。 他们来了:
    默认url :http端口:80 IP:*,net.pipe绑定:*,net.msmq绑定:localhost,msmq.formatname绑定:localhost,net.tcp绑定:808:*,https端口:443,http端口: 80 IP:127.0.0.1,http端口:443 IP:127.0.0.1
    Exchange后端 :http端口:81 IP:*,https端口:444 IP:*,net.pipe绑定:*

  2. 每个https://social.technet.microsoft.com/Forums/exchange/en-US/cc9ffe71-b4fe-4217-9343-14956ccf30d9/autodiscover-authentication?forum=exchangesvrgenerallegacy和http://www.itnotes.eu/? p = 2455我已经检查了IIS中的/Autodiscover应用程序的身份validation方法。 为/Autodiscover和匿名启用了Anyonymous,Basic和Windows,并启用了/Autodiscover Exchange Back End Windows。

  3. 我已经检查了经过Authenticated users对IIS中的/Autodiscover应用程序有权限。 对于Default Web Site/Autodiscover具有对已Authenticated Users Allow Read权限。 对于Exchange Back End/Autodiscover具有Allow Read & executeList folder contentsRead Authenticated Users

我真的被困在这里 我不知道为什么这不起作用。