The following table summaries the connection methods available for the various versions of Outlook and Exchange Server.
The default method of Outlook connecting to the Exchange server has always been to use RPC for
internal connections and Outlook Anywhere for external connections. As Outlook Anywhere was originally only designed to be used for external connections, the Autodiscover service in Exchange 2007 and 2010 only provided Outlook clients with one set of configuration parameters used for external connectivity.
The screenshot below displays the configuration output from Outlook Anywhere on a Exchange 2010 client access server. Notice there is only one External Hostname for connectivity and one Client Authentication Method you can specify.
In Exchange 2013 we now have the ability to specify different hostnames and authentication methods based on if the client is internal or external.
The authentication type is very important:
- NTLM Authentication will leverage the credentials you used when signing into Windows and result in the Outlook client automatically signing in without prompting for authentication.
- Basic Authentication is clear text authentication which does not use your Windows credentials. As long as the Basic Authentication is encapsulated within Secure Socket Layer will it be secure.
Here is where things get a little tricky. Outlook 2010 RTM only understands the External Autodiscover response for Outlook Anywhere, not the Internal response. This is shown in the screenshot below, notice the Server address is my ExternalURL and the Authentication is Basic.
This means provided you have split DNS in place for the External FQDN used for connectivity "mail.company.com", your clients will connect but with Basic Authentication. This will result in the Outlook clients being prompted for authentication.
As of Outlook 2010 SP1 and higher it supports the Internal and External Autodiscover response for Outlook Anywhere which I have displayed below in two screenshots as I needed to scroll down in the Test E-mail AutoConfiguration screen:
Note: I went straight to Outlook 2010 SP2 in the screenshot below.
In summary make sure you have done the following:
- Configured your External and Internal Authentication types correctly using the information provided above.
- Upgraded your Outlook clients to the latest service pack