exchange autodiscover

eg1995 1,156 Reputation points
2020-09-17T07:17:15.883+00:00

dears,

i have one exchange server and 7 accepted domains.
the existing certificate contains just 2 sans, the webmail and autodiscover.domain1.com ( just one domain)
and autodisvoer is published externally for just one domain.

the client is requesting to publish autodiscover for all the 7 domains and doesnt want any warning on the certificate.
what is the practice for that?
request a new certificate covering the sans of all the domains?
or there is an alternative way to make this work because the certificate containing 8 san names will cost a lot
thank you in advance

Exchange | Exchange Server | Management
0 comments No comments
{count} votes

3 answers

Sort by: Most helpful
  1. Ashok M 6,846 Reputation points
    2020-09-17T07:45:26.723+00:00

    Hi,

    Its better to include all the required SAN names in the certificate for publishing of autodiscover service for the required domains.

    Alternatively, Autodiscover HTTP redirect method can be configured for the other accepted domains by making use of the existing autodiscover.domain1.com. However, if configured, below pop up is expected in the outlook clients.

    25486-image.png

    Reference: http://techgenix.com/using-autodiscover-large-numbers-accepted-domains-part1/

    Please Note: Since the web site is not hosted by Microsoft, the link may change without notice. Microsoft does not guarantee the accuracy of this information.

    1 person found this answer helpful.
    0 comments No comments

  2. Eric Yin-MSFT 4,396 Reputation points
    2020-09-18T08:06:16.29+00:00

    If you don't have mobile users, you can try the second method in the link AshokM posted: Add a Service Location DNS record (SRV record) for each new domain
    This blog could guide you with it: https://supertekboy.com/2016/05/17/using-srv-records-for-autodiscover/
    As Outlook should try predefined https and http url before using SRV record, you may need to remove the existing autodiscover.contoso23456.com record first.
    Or you can add Outlook registry to make it skip those steps: https://learn.microsoft.com/zh-cn/outlook/troubleshoot/profiles-and-accounts/unexpected-autodiscover-behavior
    Please Note: Since the web site is not hosted by Microsoft, the link may change without notice. Microsoft does not guarantee the accuracy of this information.


    If an Answer is helpful, please click "Accept Answer" and upvote it.
    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

    0 comments No comments

  3. eg1995 1,156 Reputation points
    2020-09-18T09:14:36.01+00:00

    hello guys,

    in the redirection method iis do i have to create a new server for this or i can do it on the excahgne server iis itself?

    thank you


Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.