If your Outlook clients are complaining about a cert name mismatch or if you’re having other authentication issues then you might need to check that the names being presented match the cert. Here are some common places to check:
- Get-ClientAccessServer – AutoDiscoverServiceInternalUri
- Get-AutodiscoverVirtualDirectory – InternalUrl, ExternalUrl
- Get-OutlookAnywhere – ExternalHostname
- Get-OutlookProvider – EXCH: CertPrincipalName, EXPR: CertPrincipalName
- Get-WebServicesVirtualDirectory – InternalUrl, ExternalUrl
- Get-OwaVirtualDirectory – InternalUrl, ExternalURL
- Get-OabVirtualDirectory – InternalUrl, ExternalUrl
- Get-EcpVirtualDirectory – InternalUrl, ExternalUrl
- Get-ActiveSyncVirtualDirectory – InternalUrl, ExternalUrl
TIP: As a shortcut, just copy and paste the following lines into powershell and examine the results!
Get-ClientAccessServer | fl Identity,AutoDiscoverServiceInternalUri
Get-AutodiscoverVirtualDirectory | fl Identity,InternalURL,ExternalUrl
Get-OutlookAnywhere | fl identity,ExternalHostname
Get-OutlookProvider | fl identity,name,CertPrincipalName
Get-WebservicesVirtualDirectory | fl Identity,InternalURL,ExternalUrl
Get-OwaVirtualDirectory | fl Identity,InternalURL,ExternalUrl
Get-OabVirtualDirectory | fl Identity,InternalURL,ExternalUrl
Get-EcpVirtualDirectory | fl Identity,InternalURL,ExternalUrl
Get-ActiveSyncVirtualDirectory | fl Identity,InternalURL,ExternalUrl