多奇 IT 部落格

記錄著多奇數位在工作中對資訊技術的心得筆記

Autodiscover的功能

Autoidsocver可以自動為使用者建立信箱設定值,讓設定變得非常簡單。

例如在使用Outlook時,只需要輸入使用者信箱與密碼,Outlook就能連線到Exchange CAS取得設定資料。

 

Autodiscover的運作流程

1.測試可能的Autodiscover URL:https://電子郵件網域名/autodiscover/autodiscover.xml

  • DNS解析電子郵件網域名
  • 測試port 443是否開啟
  • 測試SSL憑證有效性:取得憑證>驗證憑證名稱>確認有效日期
  • 檢查憑證驗證的IIS設定
  • 將POST要求傳送至Autodiscover URL以取得設定資料

若其中一項失敗便會開始測試2。

    2.測試可能的Autodiscover URL https://autodiscover.電子郵件網域名:443/Autodiscover/Autodiscover.xml

    • DNS解析電子郵件網域名
    • 測試port 443是否開啟
    • 測試SSL憑證有效性:取得憑證>驗證憑證名稱>確認有效日期
    • 檢查憑證驗證的IIS設定
    • 將POST要求傳送至Autodiscover URL以取得設定資料

    若其中一項失敗便會開始測試3。

      3.嘗試使用HTTP重新導向

      • DNS解析主機名稱:autodiscover.電子郵件網域名
      • 測試port 80是否開啟
      • 取得重新導向的URL
      • 測試可能的Autodiscover URL
        • DNS解析主機名稱
        • 測試port 443是否開啟
        • 測試SSL憑證有效性:取得憑證>驗證憑證名稱>確認有效日期
        • 檢查憑證驗證的IIS設定
        • 將POST要求傳送至Autodiscover URL以取得設定資料

      若其中一項失敗便會開始測試4。

        4.嘗試使用DNS SRV重新導向

        • DNS尋找SRV紀錄 _autodiscover._tcp.電子郵件網域名
        • 測試可能的Autodiscover URL https://電子郵件主機FQDN:443/Autodiscover/Autodiscover.xml
          • DNS解析主機名稱
          • 測試port 443是否開啟
          • 測試SSL憑證有效性:取得憑證>驗證憑證名稱>確認有效日期
          • 檢查憑證驗證的IIS設定
          • 將POST要求傳送至Autodiscover URL以取得設定資料

        若其中一項失敗即Autodiscover失敗。

         

        Autodiscover的設定方法

        在外部DNS新增紀錄,三選一。

        1.A紀錄

        主機名稱:autodiscover

        IP:61.62.220.19(Exchange Server 對外IP)

        2.CNAME紀錄

        Alias:autodiscover

        Target:mail.xxxx.xxx(Exchange Server 外部FQDN)

        3.SRV紀錄

        Service:_autodiscover

        Protocol:_tcp

        Port Number:443

        Host:mail.xxxx.xxx(Exchange Server 外部FQDN)

         

        實作Exchange Server 2013 用SRV紀錄設定Autodiscvoer

        由於Autodiscover需要有效憑證,必須先建立憑證,而在建立憑證要求時,會用到虛擬目錄裡的內容,因此建議首先設定外部存取網址。

         

        設定外部存取網址

        1.進入Exchange管理中心>伺服器>虛擬目錄,點選Autodiscover按編輯。

        外部HTTPS存取01

        2.更改autodiscover或是其他有需要外部使用項目的外部URL。

        外部HTTPS存取02

        3.伺服器>伺服器,選擇CAS編輯。

        外部HTTPS存取03

        4.在Outlook Anywhere輸入外部主機名稱。

        外部HTTPS存取04

         

        架設企業憑證服務

        1.開啟伺服器管理員,安裝AD憑證服務。

        憑證01

        2.選擇憑證授權單位、憑證授權單位網頁註冊,IIS角色服務則保留預設。

        憑證02

        3.設定AD憑證服務,選擇企業CA>根CA>建立新的私密金鑰,其他設定保留預設。

         

        建立憑證需求檔

        1.進入Exchange管理中心>伺服器>憑證,選擇CAS,點選+(新增)。

        憑證04

        2.選擇建立向憑證授權單位索取憑證要求。

        憑證05

        3.輸入憑證名稱,略過萬用字元憑證設定,選擇CAS。

        4.由於已經編輯過虛擬目錄的外部網址,不需要再編輯。

        憑證06

        5.如果有要新增的網域在這個步驟加入。

        憑證07

        6.輸入憑證相關資訊。

        7.儲存憑證要求檔。

        8.確認狀態為擱置的要求。

        憑證08

         

        申請憑證

        1.登入http://憑證伺服器名稱/certsrv,點選要求憑證。

        憑證09

        2.進階憑證要求>用Base-64編碼的CMC或PKCS#10檔案來提交憑證要求,或用Base-64編碼的PKCS#7檔案來提交更新要求。

        3.將憑證要求檔的內容貼在已儲存的要求的文字方塊中,憑證範本選擇Web伺服器,提交。

        憑證10

        4.下載憑證。

         

        安裝憑證

        1.回到Exchange管理中心>伺服器>憑證。

        2.完成擱置的要求。

        憑證11

        3.匯入剛剛下載的憑證。

        4.確認狀態為有效後,編輯憑證。

        5.點選服務,勾選IIS、SMTP。

        憑證12

        6.刪除預設的憑證。

         

        新增SRV紀錄

        Service:_autodiscover

        Protocol:_tcp

        Port Number:443

        Host:mail.xxxx.xxx(Exchange Server 外部FQDN)

         

        在CAS上設定autodiscover

        使用EMS執行下列命令

        Set-OutlookProvider –id exch –server [Exchange伺服器名稱]

        可使用下列命令來檢視設定結果

        Get-OutlookProvider

         

        測試Autodiscover

        1.網域內部

        會自動輸入當時登入的帳號。

        autodiscover03

        自動設定完成。

        autodiscover04

         

        2.使用Microsoft Remote Connectivity Analyzer測試與尋找錯誤

        https://testconnectivity.microsoft.com/

         

        3.網域外部

        由於自行架設的憑證未正式登記,網域外部的電腦需先信任網域的根憑證,Autodiscover才會成功。

        登入http://憑證伺服器名稱/certsrv>下載CA憑證、憑證鏈結或CRL>下載CA憑證>開啟CA憑證>安裝憑證。

        本機電腦>將所有憑證放入以下的存放區>受信任的根憑證授權單位。

        若跳出以下警訊,按允許和是。

        autodiscover01

        autodiscover02

        若跳出帳號密碼驗證,要輸入內部網域帳密才能通過。

         

        參考資料:

        Microsoft 20341B Core Solutions of Microsoft Exchange Sever 2013

        Exchange Server 2013 架設、管理與維護 羅英嘉 老師 2015年6月之講義

        實戰Exchange Server 2013 企業現場 梁銘鼎 著

        留言與評論

        Cars Auction

        Zune and iPod: Most people compare the Zune to the Touch, but after seeing how slim and surprisingly small and light it is, I consider it to be a rather unique hybrid that combines qualities of both the Touch and the Nano. It's very colorful and lovely OLED screen is slightly smaller than the touch screen, but the player itself feels quite a bit smaller and lighter. It weighs about 2/3 as much, and is noticeably smaller in width and height, while being just a hair thicker.

        Cars Auction

        Roosevelt Rankhorn

        You actually make it seem so easy with your presentation but I find this topic to be actually something that I think I would never understand. It seems too complicated and very broad for me. I am looking forward for your next post, I抣l try to get the hang of it!<a href="http://www.7be.top/">sports</a>.

        Roosevelt Rankhorn

        Cristin Kualii

        Hey There. I found your blog using msn. This is an extremely well written article. I will be sure to bookmark it and return to read more of your useful information. Thanks for the post. I will certainly return.<a href="http://www.vu8.top/">entertainment news</a>.

        Cristin Kualii

        httP://www.8sky.top

        I've been absent for some time, but now I remember why I used to love this site. Thanks, I'll try and check back more frequently. How frequently you update your <a href="http://www.8sky.top/">SKY news</a>.

        httP://www.8sky.top

        httP://www.8sky.top

        I've been absent for some time, but now I remember why I used to love this site. Thanks, I will try and check back more often. How frequently you update your <a href="http://www.8sky.top/">breaking news</a>.

        httP://www.8sky.top

        httP://www.8sky.top

        I like what you guys are up too. Such clever work and reporting! Keep up the excellent works guys I have incorporated you guys to my blogroll. I think it'll improve the value of my <a href="http://www.8sky.top/">U.S. news</a>.

        httP://www.8sky.top

        httP://www.8sky.top

        I like what you guys are up too. Such intelligent work and reporting! Keep up the superb works guys I've incorporated you guys to my blogroll. I think it will improve the value of my <a href="http://www.8sky.top/">U.S. news</a>.

        httP://www.8sky.top

        www.8sky.top

        I like what you guys are up also. Such intelligent work and reporting! Keep up the excellent works guys I have incorporated you guys to my blogroll. I think it will improve the value of my <a href="http://www.8sky.top/">SKY news</a>.

        www.8sky.top

        www.8sky.top

        Hello, you used to write magnificent, but the last several posts have been kinda boring?I miss your super writings. Past few posts are just a bit out of track! come on<a href="http://www.8sky.top/">health news</a>!

        www.8sky.top

        Phoebe Pacho

        I've recently started a site, the information you offer on this website has helped me greatly. Thank you for all of your time & work.

        Phoebe Pacho

        antique

        Magnificent goods from you, man. I have understand your stuff previous to and you are just too fantastic.

        antique

        antiques

        Excellent goods from you, man. I've understand your stuff previous to and you are just extremely magnificent.

        antiques

        war commander

        Magnificent goods from you, man. I have understand your stuff previous to and you're just extremely fantastic.

        war commander

        war commander

        Magnificent goods from you, man. I have understand your stuff previous to and you are just extremely wonderful.

        war commander

        Gclub

        สถานที่ตั้งของอาณาจักร GClub อยู่ที่ POIPET ประเทศ กัมพูชา เป็นเว็บของบ่อนคาสิโนที่ตั้งขึ้นถูกต้องตาม กฎหมาย เรามีรากทางการเงินที่มั่นคง และมีระบบข่าวสารที่มีความ ปลอดภัยสูงพอที่ ได้รับความเชื่อถือจากสมาชิก ท่านจะได้รับหลัก ประกันที่มั่นคงต่อผลประโยชน์ของท่าน... DIAMOND CROWN CASINO ตั้งอยู่ทางภาคตะวันออกของประเทศไทย

        Gclub

        imo nelajobs

        I truly appreciate this post. I've been looking all over for this! Thank goodness I found it on Bing. You have made my day! Thx again!

        imo nelajobs

        Akwaibom nelajobs

        Magnificent site. Lots of useful information here. I am sending it to several buddies ans additionally sharing in delicious. And obviously, thank you to your effort!

        Akwaibom nelajobs

        Neida Kirchgessner

        Hey There. I found your blog using msn. This is a very well written article. I’ll be sure to bookmark it and come back to read more of your useful information. Thanks for the post. I will certainly comeback.

        Neida Kirchgessner

        yugioh booster box opening simplyunlucky

        Wonderful goods from you, man. I've understand your stuff previous to and you're just extremely wonderful.

        yugioh booster box opening simplyunlucky

        yugioh all polymerization cards

        Fantastic goods from you, man. I've understand your stuff previous to and you are just extremely excellent.

        yugioh all polymerization cards

        nelajobs Lagos

        Hi, i think that i saw you visited my web site thus i came to “return the favor”.I am attempting to find things to enhance my web site!I suppose its ok to use a few of your ideas!!

        nelajobs Lagos

        Gregorich

        Greetings from Idaho! I'm bored at work so I decided to browse your website on my iphone during lunch break. I really like the info you provide here and can't wait to take a look when I get home. I'm shocked at how fast your blog loaded on my mobile .. I'm not even using WIFI, just 3G .. Anyways, great blog! <a href="www.giffgafforders.com">www.giffgafforders.com</a>

        Gregorich

        Dethomas

        Hey there are using Wordpress for your site platform? I'm new to the blog world but I'm trying to get started and set up my own. Do you need any coding knowledge to make your own blog? Any help would be really appreciated! <a href="www.giffgafforders.com">www.giffgafforders.com</a>

        Dethomas

        Rigas

        Right now it seems like BlogEngine is the preferred blogging platform available right now. (from what I've read) Is that what you're using on your blog? <a href="www.giffgafforders.com">www.giffgafforders.com</a>

        Rigas

        Fluck

        Just want to say your article is as surprising. The clearness in your post is simply spectacular and i could assume you are an expert on this subject. Fine with your permission allow me to grab your RSS feed to keep up to date with forthcoming post. Thanks a million and please continue the enjoyable work. <a href="www.giffgafforders.com">www.giffgafforders.com</a>

        Fluck

        FREE_Sim_with_£10_FREE_Credit

        Write more, thats all I have to say. Literally, it seems as though you relied on the video to make your point. You definitely know what youre talking about, why waste your intelligence on just posting videos to your site when you could be giving us something enlightening to read? <a href="www.giffgafforders.com">www.giffgafforders.com</a>

        FREE_Sim_with_£10_FREE_Credit

        Paula Mathews

        Thank you so much for giving everyone remarkably special opportunity to read from this website. It is usually very pleasing and packed with amusement for me and my office mates to visit your blog at a minimum 3 times in one week to study the newest stuff you will have. Not to mention, I'm so actually astounded with all the incredible tactics you give. Some 3 areas on this page are rather the most efficient we've had.

        Paula Mathews

        KuilsRiver Allzajobs

        You actually make it seem so easy with your presentation but I find this topic to be really something that I think I would never understand. It seems too complex and very broad for me. I'm looking forward for your next post, I’ll try to get the hang of it!

        KuilsRiver Allzajobs

        security jobs

        You could certainly see your enthusiasm within the work you write. The sector hopes for even more passionate writers such as you who aren't afraid to mention how they believe. Always go after your heart. "We may pass violets looking for roses. We may pass contentment looking for victory." by Bern Williams.

        security jobs

        Nurse Jobs

        Only a smiling visitor here to share the love (:, btw outstanding style. "Better by far you should forget and smile than that you should remember and be sad." by Christina Georgina Rossetti.

        Nurse Jobs

        security jobs

        I went over this site and I think you have a lot of superb info, bookmarked (:.

        security jobs

        本篇文章的留言功能已關閉!