exchange autodiscover

Question

dears,

i have one exchange server and 7 accepted domains.
the existing certificate contains just 2 sans, the webmail and autodiscover.domain1.com ( just one domain)
and autodisvoer is published externally for just one domain.

the client is requesting to publish autodiscover for all the 7 domains and doesnt want any warning on the certificate.
what is the practice for that?
request a new certificate covering the sans of all the domains?
or there is an alternative way to make this work because the certificate containing 8 san names will cost a lot
thank you in advance

Answer 1

Hi,

Its better to include all the required SAN names in the certificate for publishing of autodiscover service for the required domains.

Alternatively, Autodiscover HTTP redirect method can be configured for the other accepted domains by making use of the existing autodiscover.domain1.com. However, if configured, below pop up is expected in the outlook clients.

Reference: http://techgenix.com/using-autodiscover-large-numbers-accepted-domains-part1/

Please Note: Since the web site is not hosted by Microsoft, the link may change without notice. Microsoft does not guarantee the accuracy of this information.

Answer 2

If you don't have mobile users, you can try the second method in the link AshokM posted: Add a Service Location DNS record (SRV record) for each new domain
This blog could guide you with it: https://supertekboy.com/2016/05/17/using-srv-records-for-autodiscover/
As Outlook should try predefined https and http url before using SRV record, you may need to remove the existing autodiscover.contoso23456.com record first.
Or you can add Outlook registry to make it skip those steps: https://learn.microsoft.com/zh-cn/outlook/troubleshoot/profiles-and-accounts/unexpected-autodiscover-behavior
Please Note: Since the web site is not hosted by Microsoft, the link may change without notice. Microsoft does not guarantee the accuracy of this information.

---

If an Answer is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 3

hello guys,

in the redirection method iis do i have to create a new server for this or i can do it on the excahgne server iis itself?

thank you