{"id":212,"date":"2007-10-14T02:03:00","date_gmt":"2007-10-14T00:03:00","guid":{"rendered":"http:\/\/www.corelan.be:8800\/index.php\/2007\/10\/14\/outlook-2007-unable-to-download-offline-address-book-error-0x8004010f-and-0x80190194\/"},"modified":"2007-10-14T02:03:00","modified_gmt":"2007-10-14T00:03:00","slug":"outlook-2007-unable-to-download-offline-address-book-error-0x8004010f-and-0x80190194","status":"publish","type":"post","link":"https:\/\/www.corelan.be\/index.php\/2007\/10\/14\/outlook-2007-unable-to-download-offline-address-book-error-0x8004010f-and-0x80190194\/","title":{"rendered":"Outlook 2007 unable to download Offline Address Book \u2013 error 0X8004010F and 0X80190194"},"content":{"rendered":"

I used to run Exchange 2003 in my test lab. After adding a new 2007 Server (HUB, CAS and Mail) in my AD and moving the mailboxes to the 2007 server, I started seeing problems in my Outlook 2007 client that is using cached exchange mode. Under 'Sync Issues' I noticed an error about the client not being able to download the Offline Address Book.<\/p>\n

New, before the Offline Address Book can be downloaded, it must exist & must be available, the Exchange 2007 Autodiscovery feature must work properly (because Outlook 2007 uses Autodiscovery to determine where to download the Address Book) and finally the web service hosting the Address Book must be configured correctly as well.<\/p>\n

When I was running Exchange 2003, the Offline Address Book was hosted (and generated) on my Exchange 2003 server. When I installed the 2007 server, the Offline Address Book was still hosted on the 2003 server. I tried updating the Address book running the Update-OfflineAddressBook -id \"Default Offline Address List\" \u2013verbose<\/strong> cmdlet, and the output indicated that the address book was still on my old 2003 server (which had to go anyway). So I decided to remove the (Default) Address List and rebuild it on the new server.
\nI removed the address book by running Remove-OfflineAddressBook \"Default Offline Address List\"<\/strong> and then created a new Default address book. I enabled Web based distribution and public folder based distribution. The Update-OfflineAddressBook cmdlet now clearly shows that the address book is generated on my Exchange 2007 server. First problem was solved. By the way, as explained in http:\/\/technet.microsoft.com\/en-us\/library\/bb288905.aspx<\/a>, you don't need to remove the OAB\u2026 I already did before I realized that I just could move the generation server to my 2007 server.<\/p>\n

In case you don\u2019t know yet : the OAB is generated on a mailbox server. If you are running a cluster, you need to find the active node because that is where the OAB is generated. Furthermore, there should be a registry key available on the servers that points to the server that is generating the OAB :\u00a0 HKLM\\System\\CurrentControlSet\\Services\\MSExchangeSA\\Parameters\\<Servername>\\EnableOABGenOnThisNode (Reg_SZ) : Value = netbios hostname of the active cluster node.<\/p>\n

Normally, when the OAB is generated, it is automatically placed put in the VirtualDirectory on the CAS servers. So the OAB Virtual Web folder must be configured correctly as well. Use Get-OABVirtualDirectory<\/strong> and Set-OABVirtualDirectory<\/strong> to find and fix any issues. (Check InternalURL, ExternalURL and RequireSSL parameters). If the IIS folder does not exists, you can create it through the New-OABVirtualWeb<\/strong> cmdlet<\/p>\n

I opened Outlook, but I still got an error about the client not being able to download the OAB (error 0X8004010F \u2013 A Server (URL) could not be located) ). So I checked autodiscover.<\/p>\n

First of all, check your AD user account and make sure the mail address is filled out.\u00a0 The email address domain name needs to match the DNS zone that contains the autodiscover entry (SCP or DNS), or the AD domain the user is logged on to must contain the SCP instance and the certificates need to match those FQDN's also.<\/p>\n

Verify that autodiscovery is set up :
\nIn my lab, the Get-AutodiscoverVirtualDirectory<\/strong> cmdlet showed that the internal and external URL were missing, so I used the Set-AutoDiscoverVirtualDirectory<\/strong> command to fix that :
\nSet-AutodiscoverVirtualDirectory \"apollo\\Autodiscover (Default Web Site)\" -InternalUrl \"http:\/\/apollo.corelan.be\" -ExternalUrl https:\/\/autodiscover.mydomain.com<\/strong>
\nIn order make autodiscovery work, DNS must be set up as well. My DNS zone contains a CNAME record \"autodiscover\" pointing to my Client Access server, and the IIS Default Web Site shows that the Autodiscovery folder was created. In order to see if autodiscovery works fine, open Outlook, hold the CTRL key and right-click the Outlook icon in the system tray. Choose \"Test E-mail AutoConfiguration\", disable \"Use Guessmart\" and disable \"Secure Guessmart Authentication\" and click \"Test\". If this test doesn't work, then autodiscovery (and download of the Offline Address Book) won't work. Fix this problem before continuing. (Look at DNS resolution, certificates, and so on. It is important that DNS is set up correctly and that your certificate contains both internal fqdn's and external fqdn's. Not all CA's support creating certificates with SAN's (Subject Alternate Names), but you can generate a webserver certificate using Exchange Powershell :<\/p>\n

First, create the request :<\/p>\n

\n
\nNew-ExchangeCertificate -GenerateRequest:$true<\/span> -Path c:\\newCert.req -DomainName\n\nwww.mydomain.com,webmail.mydomain.com,autodiscovery.mydomain.com\n\n -PrivateKeyExportable:$true<\/span> -FriendlyName \"MyDomain Exchange SSL Certificate \"<\/span>\n\n -IncludeAcceptedDomains:$false<\/span> -Force:$true<\/pre>\n<\/div>\n
Next, copy the request .req file to your CA and sign the request.\u00a0 Then open the issued certificate in the CA manager, export it to file, and copy it back to the Exchange server. You can then import it back on the Exchange server (has to be the same server as where the request was created) using the following powershell cmdlet :<\/p>\n
\n
Import-ExchangeCertificate c:\\newCert.cer<\/pre>\n<\/div>\n
Now open IIS manager and install the new certificate (which should be visible in the list).<\/p>\n
Enable https for the Default Web Site (assuming that this is the place where your OWA\/OAB\/Autodiscover\/... virtual sites are created.)<\/p>\n
Try accessing the website using a browser : http:\/\/autodiscover.corelan.be\/Autodiscover\/autodiscover.xml<\/a> (If you have enabled https, you should change all URL's again to https, and use https:\/\/.....\u00a0 in your simulations). You will be prompted to enter a username and password, and you should get the following message :\u00a0
\n\"101407_1602_Outlook20071\"<\/a><\/p>\n
This means that autodiscover works fine. Since the browser did not specify a proper command, you got the ErrorCode 600 page.<\/p>\n
If it still doesn't work, check the AutoDiscoverServiceInternalUri via the Get-ClientAccessServer | FL<\/strong> cmdlet Correct the URI if it does not contain the correct link. The link should look like : http:\/\/autodiscover.domain.com\/Autodiscover\/autodiscover.xml You can find more information about the Autodiscovery process on http:\/\/technet.microsoft.com\/en-us\/library\/bb124251.aspx<\/p>\n
Use the Outlook \"Test E-mail Autoconfiguration\" tool again to verify that Autodiscovery is working fine.\u00a0
\n\"101407_1602_Outlook20072\"<\/a><\/p>\n
When I got autodiscovery to work, the Outlook \"Sync Issues\" reports another error : 0X80190194 In fact, this is a HTTP 404 error, which means that the files cannot be found (= the OAB Address Book is not available on the website). In my environment, I have a single server. This means that the OAB files should be copied to the folder on the server immediately. In fact, the Microsoft Exchange File Distribution Service is responsible for replicating the data to CAS servers.<\/p>\n
First of all, check if the files are indeed missing. Open the IIS manager, select the OAB folder under \"Default Web Site\" and see where the Path to the OAB folder is. I opened the folder in the path (default location is C:\\Program Files\\Microsoft\\Exchange Server\\ClientAccess\\OAB), and I found that the folder was empty. An easy way to solve this, is by stopping and starting the MSExchangeFDS service on the Mailbox servers. After restarting the service, the folder was created and the problem was solved. In fact, this subfoldername looks like a GUID string :\u00a0
\n\"101407_1602_Outlook20073\"<\/a><\/p>\n
\u00a0<\/p>\n
Some more information to help you troubleshoot similar problems :<\/p>\n
Verbose logging <\/span><\/p>\n
You can enable verbose logging for the Offline Address List generator service by running the Set-EventLogLevel -id \"MSExchangeSA\\OAL Generator\" -Level expert<\/strong> -verbose<\/strong> cmdlet (possible level values are Lowest, Low, Medium, High and Expert) Next, you can look for OAL Generator event log entries by using the following command : Get-EventLog Application | where {$_.Category \u2013eq \"OAL Generator\"} | ft -Wrap > c:\\oallog.txt<\/p>\n
<\/strong>(Don't forget to put the Event Logging level back at \"Low\" when you've finished troubleshooting.)<\/p>\n
\u00a0<\/p>\n
Interesting links to troubleshoot Autodiscovery :<\/span><\/strong><\/p>\n
\n