I have had a lot of questions recently regarding Outlook prompting for a username and password whilst using Exchange 2007 or Exchange 2010. There are a few reasons why this would happen and I will try to cover the most common ones here.
Exchange 2007 Service Pack
There was an issue with repeated password prompts that was resolved by installing Rollup 9 for Exchange 2007 SP1, however I would recommend that you should now be using Exchange 2007 SP2 since it has been around since August 2009: http://www.microsoft.com/downloads/details.aspx?FamilyID=4C4BD2A3-5E50-42B0-8BBB-2CC9AFE3216A&displaylang=en Exchange 2007 Service pack 3 is also available: http://www.microsoft.com/downloads/en/details.aspx?FamilyID=1687160b-634a-43cb-a65a-f355cff0afa6&displaylang=en
If you are in an Small Business Server 2008 environment and not yet using Exchange 2007 Rollup 9 you can also install SP2 for Exchange 2007 with the aid of the Installation Tool, available here: http://support.microsoft.com/default.aspx?scid=kb;EN-US;974271
If that doesn’t fix the repeated prompt for password then it could be down to the autodiscover if you are using Outlook 2007 then you must configure autodiscover correctly. There are many articles out there that cover the correct way to configure autodiscover, one of the better ones I have found is this one: http://www.exchange-genie.com/2007/07/exchange-2007-autodiscover-service-part-1/
However the part that most people are missing is the autodiscover.domainname.com (where domainname.com) is the part after the @ in your e-mail address. Newer versions of outlook will look for this for OAB download, free/busy information, Out of Office etc etc. If it’s not there then outlook will continually give user prompts. To accompany this you must have an SSL Certificate that contains the autodiscover.domainname.com URL (whilst you can configure ways around this, it really isn’t worth all the hastle). So purchasing an SAN/UCC Certificate, which you can get from http://www.exchangecertificates.comwith the following names in is a must for Exchange 2007 and Exchange 2010:
- owa.domainname.com (the URL used for Outlook Web Access)
- remote.domainname.com (used in SBS 2008)
- servername.domainname.local (the internal FQDN of your Exchange Server)
- SERVERNAME (NETBIOS Name of your Server)
You must also have the corresponding autodiscover.domainname.com and owa.domainname.com A records configured in your external DNS
Kernel authentication Mode
If you have all the above configured and you are still experiencing problems then the following procedure will more than likely fix it for you. It has been working a lot for me lately and also for people asking questions on Experts Exchange.
In Internet Information Services (IIS) Manager locate the Exchange virtual directories, if you are using Small Business Server 2008 these will be under the SBS Web Applications website, if you are not using SBS then they will be under the Default Website.
The virtual Directories you are looking for are:
In turn highlight each of these virtual directories and double click the Authentication icon on the right hand side. Right click on Windows Authentication and select Advanced Settings. Place a check box in the box for Enable kernel-mode authentication. Do this for each virtual directory listed above.
Internet Explorer Proxy
Another recent discovery is that if you use a proxy server then you need to ensure that the exchange servers fully qualified domain name is in the exclusion list.
This can be done manually in Internet Explorer under Tools > Internet Options > Connections or using Group Policy if you want to make the change in a centralised environment.
4 thoughts on “Outlook does not save password”
Aw, this was a really nice post. In idea I would like to put in writing like this additionally – taking time and actual effort to make a very good article… but what can I say… I procrastinate alot and by no means seem to get something done.
If you dont mind, where do you host your blog? I am looking for a good quality host and your blog appears to be extremely fast and up just about all the time
namecheap.com, very good hosting partner.
Okay so we have 21 certs in our exchange sveerr. Most seem to be duplicates. remote.domain.com and mail.domain.com, there is one or two that are WSM and mail.example.local our domain name is mywebsite.com and our sveerr name is MAIL and our internal domain is myweb.local (in other words our domain name is longer then what SBS would allow by one letter). Sorry, my point is. We have a working email connection mail flows in and out no problem. The problem is OOF works on some but not all computers in and out of the network. So my question is can I remove all certs and just click on configure internet address in the SBS wizard and will this reconfigure the cert to allow things to flow smoothly with OOF, autodiscover etc.. Or can I with out removing the certs just click on the configure internet address that fix my issue? when I run test autoconfiguration on those who can’t get OOF the log shows autodiscover.domain.com failed. However on the machines that do have OOF the test autoconfiguration are getting remote.domain.comso I am not sure why there are some computers are getting it and others are not.