The Autodiscover Service and Outlook Providers - how does this stuff work?

Published Sep 26 2008 11:47 AM 87.9K Views

To allow Autodiscover to function completely there is an important component in Exchange 2007 Server named Providers. Providers are components that are specifically related to the type of client that is trying to connect and be configured. When the Client Access Server role is installed, by default three providers are created: EXCH, EXPR and WEB. We will here discuss each one. In the second part of this blog post, we will talk about when and if those should be modified. The Autodiscover Service and Outlook Providers The diagram below explains the role of the Outlook Provider in the Autodiscover process. When creating or refreshing an Outlook 2007 profile a request is placed to the Autodiscover service; the service determines which provider needs to handle the request. The XML request contains the necessary information for this to happen, such as the SMTP address and which client (MAPI client or Outlook Anywhere) made the request so the Autodiscover service can easily identify the provider the request needs to be forwarded to. How does the Autodiscover service know which Outlook client is making the request? 1. The client posts an HTTP(S) request to the Autodiscover service including a XML request. 2. The Autodiscover service parses and validates the request so it knows which provider the request is targeted for. The XML request contains a reference to a schema as the first part of the opening <Autodiscover> XML tag. As you the see in the example bellow the portion "outlook" in the path of the "xmlns=" indicates that a request was made from an Outlook (MAPI) client.

3. If an Outlook Provider cannot be found, the requesting client is notified and the Autodiscover retrieval fails. 4. Once the Autodiscover service has identified the correct provider it will pass the request to it. By default three Outlook Providers are used to configure settings individually for Exchange RPC protocol or internal clients (EXCH), Outlook Anywhere (EXPR) and WEB.
  • The EXCH setting references the Exchange RPC protocol that is used internally. This setting includes port settings and the internal URLs for the Exchange services that you have enabled.
  • The EXPR setting references the Exchange HTTP protocol that is used by Outlook Anywhere. This setting includes the external URLs for the Exchange services that you have enabled, which are used by clients that access Exchange from the Internet.
  • The WEB setting contains the best URL for Outlook Web Access for the user to use. This setting is not in use.
Note: The EXCH and EXPR settings are vital for the proper configuration of Outlook. If not configured correctly, initial connections and configurations for your Exchange Server 2007 mailbox and server services may not function as expected. 5. The provider relies on the Services Discovery service (set of XSO API calls) to retrieve the stored URL settings from Active Directory. Services Discovery also determines which setting is the best to return, using the e-mail name passed along with the request. Services Discovery will decide which entry to return based on proximity. 6. The provider then processes the request and uses Services Discovery to compile all information configured for the requesting user, returns that to the Autodiscover Service which then forwards the response to the requesting client.
a. If the request is made by an Outlook Exchange RPC client, the EXCH provider will return the InternalUrl configured on the best CAS server for the following services: Availability Service, OAB virtual directory and Unified Messaging virtual directory.
b. If the request is made by an Outlook Anywhere Exchange HTTP client, the EXPR provider will return the External URL configured on the best CAS server for the same services: Availability Service, OAB virtual directory and Unified Messaging virtual directory and ExternalHostName for Outlook Anywhere.
Note: If the ExternalUrl is not set, the CAS will fail-back returning the InternalUrl.
Note: The Internal and External URL for EWS, OAB and UM can be configured through the following cmdlets: Set-WebServicesVirtualDirectory, Set-OABVirtualDirectory and Set-UMVirtualDirectory respectively. Outlook Providers are global settings in Active Directory The Outlook Providers are global settings in the Active Directory forest, thus there is no need to create an Outlook Provider; however, depending of your environment you might have to tweak their configuration. The Outlook providers settings are in Active Directory, in the following location:
DC=<domain>, CN=Configuration, CN=Services, CN=Microsoft Exchange, CN=<Organization Name>, CN=Client Access, CN=Autodiscover, CN=OutlookCN=EXCH or CN=EXPR
In a few days, I'll cover when and if you should make modifications to those providers. Stay tuned! - Vandy Rodrigues
Not applicable
This is good cover on how the autodiscover service and outlook works together but one thing that I have not seen is how well the mobile devices work with the autodiscover.  One focus I am looking towards is when you use srv record to resolve to a single domain name and how the mobile device provider will contact the autodiscover service.
Not applicable
I've also a question concerning autodiscover service and windows mobile.
Using "Scenario 4: Using the Autodiscover Service with Redirection", I don't manage to get it work from a device with windows mobile.
Windows mobile seems not to be able to be redirected to the http link if the https link fails.

Is it correct?Will it be fixed?

Thanks in advance.
Not applicable
Note: If the ExternalUrl is not set, the CAS will fail-back returning the InternalUrl.

I'm curious, is there anyway this could fall into the wrong hands and exposes internal network information and configuration being that if external fails it will transmit the internal information configuration xml files?
Not applicable
Hi VAs Hachi Roku,

Your question about expoising the Internal network information - "If the ExternalUrl is not set, the CAS will fail-back returning the InternalUrl", this process is not an issue. Why? Because the outlook will be able to get these information only after you have authenticated agains the CAS server. Any Outlook 2007 client connect via Outlook Anywhere or MAPI will be able to see the Internal and External Urls running Test E-mail autoconfiguration option.

Vandy Rodrigues
Not applicable
When reading this, it looks like EVERYONE has different internal/external name space. Would be nice to see a sentence or two in your documents describng a scenario with equal name space and a split dns..

Not applicable
I have seen, The EXPR is causing the the outlook proxy settings to be automatically changed and causing the outlook to prompt for password continously.

How can we disable the mutual authentication in EXPR
Not applicable
I am using a wildcard cert and am having a problem with the EXPR handing out the wrong domain name.  Instead of giving "*" it is giving "*" causing OA to fail.  I had things working before but had to re-install the CAS role and can't get it back.
Any ideas?
Version history
Last update:
‎Jul 01 2019 03:40 PM
Updated by: