When you use a single server in your organization, but wish to publish Free/Busy for Exchange users from another organization (using the Add-AvailabilityAddressSpace cmdlet and InterOrg replication or third party solutions), it is important to remember the following:
DAV requests made by the Availability Service to the Schedule+ Free/Busy Public Folder in your organization are sent using HTTP, not HTTPS, to the /public virtual directory. By default, when you install the Client Access Server role on a computer, the virtual directories are configured to require SSL. In a single server environment, this will prevent the Availability Service from retrieving the Free/Busy information from Public Folders.In this scenario:
Event Type: Error Event Source: MSExchange Availability Event Category: Availability Service Event ID: 4003 Description: Process 4204[w3wp.exe:/LM/W3SVC/1/ROOT/EWS-1-128632060327053920]: Microsoft.Exchange.InfoWorker.Common.Availability.PublicFolderRequest failed. The exception returned is Microsoft.Exchange.InfoWorker.Common.Availability.PublicFolderRequestProcessingException: The remote server returned an error: (403) Forbidden.. The request information is http://mail.domainname.com/public/?Cmd=freebusy&start=2008-08-04T12:00:00Z&end=2008-09-03T12:00:00Zfirstname.lastname@example.org.. The Availability service could not successfully retrieve Schedule+ free/busy data for one or more legacy Exchange mailboxes. To find the root cause of this error, increase the diagnostic logging level of the MSExchange Availability service.For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. There are three workarounds for this scenario: 1. Move the Client Access Server role to another server. 2. Disable "Require SSL" for the /public virtual directory in the IIS manager. **You will likely wish to close port 80 for Internet access in to this server for security reasons. Using this method will allow external clients to successfully connect and use HTTPS, and will not lessen the security of the connections. Just because SSL is not required does not mean that it cannot be used. 3. A workaround that will allow ONLY Outlook 2007 clients to retrieve Free/Busy data (Outlook Web Access will still fail for these replicated users) could be to introduce the registry value below. This will force the clients to retrieve and publish Free/Busy data to a Public Folders folder - bypassing the Availability Service. The value is: Key: HKEY_CURRENT_USER\Software\Microsoft\Office\12.0\Outlook\Options\Calendar DWORD: UseLegacyFB Value: 1 The value choices for this key are: 0 (or not present) = default behavior of using the Availability Service 1 = Use public folder free/busy information It is important to remember that if the UseLegacyFB registry value is used, only Outlook users will be able to access Free/Busy data for the external users you have replicated! References: http://technet.microsoft.com/en-us/library/bb124122(EXCHG.80).aspx - Will Duff
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.