Forum Discussion
EWS Autodiscover Process in Hybrid with "internal" Exchange Servers
Hi everyone,
i really need help about the EWS Autodiscover process in a specific hybrid Environment.
Customer is starting to use Exchange Online. For Full Hybrid configuration there is a seperate new Exchange SE with a valid certificate, NAT for IP Ranges from M365 and public available URLs for Autodiscover,EWS,...
There are internal Exchange Servers which are used only for internal access. Those are the servers with all mailboxes. All URLs are configured for internal use (mail.contoso.internal)
Migration is working, access to own calender is working, mailfllow is working. But there are problems to access other users calender. If a user which is migrated to Exchange Online (or via Teams) try to access another calender which is onPrem, there is no access. So i tried to use connectivity analyzer for teams integration to find out whats the problem.
Result: Autodiscover resolves, connects to Hybrid and gets EWS URL as answer. But it gets the internal EWS URL from the internal Exchange Servers, not from the public available URLs which are configured at the hybrid server. I visualised the two scenarios.
Number1: Thats how i thought it would work
- Autodiscover to autodiscover.contoso.com
- Hybrid answers with EWS URL: hybrid.contoso.com
- Connect from EXO to hybrid EWS URL
- Proxy to Internal Exchange
Number2 : Thats what really happens
- Autodiscover to autodiscover.contoso.com
- Hybrid relays request to internal Exchange (Mailbox Server)
- Server answers with internal EWS URL: mail.contoso.internal
- Connect from EXO to internal EWS URL (which is obviously not working)
So as you can see, the autodiscover process asks the internal Exchange for its EWS URLs and not as i expected the hybrid server's URLs. I always thought, the hybrid server works as a sort of proxy for every external connection from EXO. But it seems that the hybrid just relays the autodiscover request to the server which holds the mailbox. And this servers in this scenario cannot change their EWS URLs to a public resolvable FQDN.
So my question is: Is this correct? Does the process always works like this or did i do anything wrong in the configuration? I hope you understand my explanation.
Thanks in advance!!!
4 Replies
The behavior you are seeing is expected in a hybrid Exchange configuration. Autodiscover does not return the hybrid server URL when the mailbox is located on-premises. Instead, Autodiscover always routes the request to the server that hosts the mailbox, which is why the response includes the internal EWS URL.
The Hybrid server doesn’t act as a proxy that rewrites or replaces Autodiscover responses. It simply redirects the request to the mailbox server, and the mailbox server publishes only its internal URLs because it was never configured with external EWS endpoints.
This explains why the connectivity analyzer and Teams integration try to resolve mail.contoso.internal. Clients outside the internal network cannot use this endpoint, so the connection fails.
To resolve the issue, the internal Exchange servers must have valid external EWS URLs defined in their virtual directory configuration, even if they are intended to serve internal users only. In a hybrid environment, workloads such as Teams rely on externally reachable EWS endpoints to open shared calendars or free/busy.
If the internal servers cannot be modified to publish an external FQDN, the hybrid coexistence will continue to fail for cross-premises scenarios because Autodiscover will always return the mailbox server details, not the hybrid server’s external URL.
Hello! SebastianGrigg
The current phenomenon is not due to a misconfiguration, but rather the normal Autodiscover behavior of Exchange Hybrid.
Hey! Thanks for clarification. I really thought there was something wrong with my config.
But, is there anything i can do except editing the external EWS URLs at the internal Exchange?
Hello! SebastianGrigg
There is no other way.
