Outlook keeps asking password for authentication after a second exchange server added and DAG created

Chris Wong 0 Reputation points
2023-12-10T05:54:44.06+00:00

I had installed a second exchange server in domain. Then some of users reported their Outlook is keep asking password, the correct password cannot be authenticated. OWA and ActiveSync on mobile are fine. Other users do not have any issues, so far around 5 of users reported the same issue on their Outlook.

  • Exchange Server Standard 2016

Image

After the second exchange server installed, Autodiscover error event id 1 appears in event log.

Unhandled Exception "Object reference not set to an instance of an object." Stack trace:    at Microsoft.Exchange.AutoDiscoverV2.FlightSettingRepository.GetHostNameFromVdir(ADObjectId serverSiteId, String protocol)    at Microsoft.Exchange.AutoDiscoverV2.AutoDiscoverV2.ExecuteOnPremEndFlow(AutoDiscoverV2Request request)    at Microsoft.Exchange.AutoDiscoverV2.AutoDiscoverV2.Execute(AutoDiscoverV2Request request, ITenantRepository tenantRepository)    at Microsoft.Exchange.AutoDiscoverV2.AutoDiscoverV2HandlerBase.<>c__DisplayClass11_0.<ProcessRequest>b__0()    at Microsoft.Exchange.Common.IL.ILUtil.DoTryFilterCatch(Action tryDelegate, Func`2 

Used below PS to update second server CAS Uri

Set-ClientAccessService -Identity "EX-Server" -AutoDiscoverServiceInternalUri https://autodiscover.domain.com/Autodiscover/Autodiscover.xml

Confirmed the CAS Uri is correct on both exchange servers.

Checked https://support.microsoft.com/en-au/topic/autodiscover-event-id-1-after-installing-exchange-server-2019-cu3-or-exchange-server-2016-cu14-93850e62-4cf4-8a76-5fd4-c8ce6f032015

PS applied>

Add-PSSnapin Microsoft.Exchange.Management.PowerShell.E2010

Still got "A parameter cannot be found that matches parameter name 'ExternalUrl'" with below command in Exchange Shell

Get-AutodiscoverVirtualDirectory -Server $env:COMPUTERNAME | Set-AutodiscoverVirtualDirectory -ExternalUrl "https://autodiscover.365labs.net/Autodiscover/Autodiscover.xml"

Microsoft Remote Connectivity Analyzer on Exchange server with failed accounts

The Microsoft Connectivity Analyzer failed to obtain an Autodiscover XML response.

Additional Details

An HTTP 401 Unauthorized response was received from the remote Unknown server. This is usually the result of an incorrect username or password. If you are attempting to log onto an Office 365 service, ensure you are using your full User Principal Name (UPN).

User's image

Microsoft Remote Connectivity Analyzer on Exchange server with success accountsImage

Image

Now the users cannot use Outlook app on desktop.

Checked forums found similar and exactly same issue but no fix provided.

It is appreciated anyone can point out which part is the root cause.

Exchange Server
Exchange Server
A family of Microsoft client/server messaging and collaboration software.
1,170 questions
Exchange Server Development
Exchange Server Development
Exchange Server: A family of Microsoft client/server messaging and collaboration software.Development: The process of researching, productizing, and refining new or existing technologies.
525 questions
Exchange Server Management
Exchange Server Management
Exchange Server: A family of Microsoft client/server messaging and collaboration software.Management: The act or process of organizing, handling, directing or controlling something.
7,465 questions
Microsoft Exchange
Microsoft Exchange
Microsoft messaging and collaboration software.
444 questions
{count} votes

2 answers

Sort by: Most helpful
  1. Andy David - MVP 144.2K Reputation points MVP
    2023-12-10T16:16:21.3433333+00:00

    For the 5 users having issues, can you recreate their Outlook profiles and try again?

    I assume the server has a valid and trusted certificate set for Exchange virtual directories, yes?


  2. Andy David - MVP 144.2K Reputation points MVP
    2023-12-11T13:10:46.29+00:00
    1. Are you using a load balancer?
    2. All services started on the new Exchange Server and server component state set to active? Get-ServerComponentState -Identity Mailbox01
    3. Does it fail for those users connecting internally or externally?
    4. Any firewalls in between the clients and new server?
    0 comments No comments