TweetFollow Us on Twitter

Entourage Exchange Account Configuration

Volume Number: 22 (2006)
Issue Number: 7
Column Tag: MICROSOFT | MAC IN THE ENTERPRISE

Entourage Exchange Account Configuration

Understanding the details of Microsoft Entourage 2004 Exchange account configurations

by Andy Ruff

Introduction

Entourage provides two methods for configuring accounts: manually via the Account Settings dialog or through the Account Configuration Wizard, a simple tool that automatically detects your network's configurations and configures an Exchange account accordingly. Understanding how these methods work is very useful for troubleshooting deployment headaches.

Navigating the Account Settings Dialog

Entourage uses WebDAV, the same technology underpinnings as the web-based Outlook Web Access (OWA), to communicate with the Exchange server. As a user, if you can access your Exchange mailbox through the web browser, you should be able to configure Entourage to synchronize with Exchange. From the administrator's perspective, this means that no further work is required in order to support Entourage if OWA is enabled on your Exchange server.

To configure or create an Exchange account in Entourage, use the standard Entourage account manager at menu path Tools : Accounts, click on the Exchange tab, and press the New toolbar button.



Figure 1: Account Settings

The Account name field merely represents how the Exchange account will appear throughout Entourage. The contents of this field do not impact how Entourage synchronizes or communicates with the Exchange server. Typically the field should be easily recognizable as conveying the relevance or location of the account. For example, with my Microsoft corporate account, I simply name my account Microsoft. Name and E-mail address represent how outgoing e-mail addresses will be generated and represented to recipients. The E-mail address field is also used in Entourage's mailbox discovery process detailed later.

The Account ID, Domain, and Password are the Active Directory credentials of the account whose mailbox Entourage will synchronize. Within many organizations, you may recognize these credentials by logging in with a domain name\account ID. If you save your password using the Mac OS keychain, it is important to remember that each time you change your password, you need to return to Entourage's account settings and update your password. While Entourage does not allow you to change or reset your password from within Entourage, Entourage will notify you that a password will soon expire.



Figure 2: Components of Exchange Mailbox URLs

In the simplest configuration, the Exchange server field merely needs to contain the host name of the Exchange server Entourage will connect to for mailbox synchronization. If the user's mailbox is later moved to a different Exchange server, Entourage should be redirected to the new location and the user will not need to update the Exchange server field's contents.

Entourage's mailbox discovery process is one of the most common issues that result in an Exchange account failing to connect with the server. When first connecting to an Exchange mailbox, Entourage attempts to locate the user's mailbox through a combination of the left-hand-side of the user's e-mail address, and the Exchange server field's value. In most cases, Entourage attempts to find the user's mailbox beyond the virtual root with the left-hand-side (LHS) of a user's e-mail address. In the e-mail address aruff@microsoft.com, Entourage will look for an Exchange mailbox named aruff.

The virtual root is the first subcomponent of the URL used by Entourage when communicating with the Exchange server. In the default Exchange deployment, the virtual root is /exchange/. Entourage will always assume the default virtual root is unchanged. If your organization has modified the virtual root, you may override this behavior by entering a custom virtual root within the account's Exchange Server field. For example, if your Exchange server had a custom virtual root of /owa/ and mail.example.com was your Exchange server, you should enter mail.example.com/owa/ in the Exchange server field in order for Entourage to begin synchronization.

In some organizations, particularly those supporting a variety of legacy e-mail and directory configurations, this poses a problem. Often times, such organizations name Exchange mailboxes using the user's account alias (the default value when creating an Exchange mailbox), but assign users much more human-readable e-mail addresses. For example, instead of aruff@microsoft.com, the user knows their e-mail address as more along the lines of andy.ruff@microsoft.com.

The Exchange Server field is again key to overriding the methods Entourage uses to discover a user's mailbox. When the user's mailbox name differs from the LHS of their e-mail address, placing the full path (server name/virtual root/mailbox name) in the field, will override Entourage's mailbox discovery behavior, forcing Entourage to look directly at the provided path for the user's mailbox.

Often times, getting the Exchange server field correct is a process of understanding the relationship between Entourage and Outlook Web Access (OWA). The simplest method for configuring an Exchange account in Entourage is to log into OWA, copy the resulting location in Safari's Address Bar up until the first mailbox folder, and pasting the resulting text in the Exchange server field of your account in Entourage.



Figure 3: Advanced tab

The Advanced tab provides further configuration for Exchange functionality that is not required in order to synchronize with Entourage, but many users find important: public folders and access to the global address list.

The Public Folder server provides both access to public folders and free/busy information. Entourage may synchronize any calendar, address book, or message public folder. If your public folders are replicated across a collection of servers, Entourage will follow redirections to the appropriate server. If you would like a regularly accessed public folder to be synchronized for offline access, the public folder should be added to your public folder favorites simply by dragging-and-dropping the folder into the Favorites subfolder of the Public Folders folder of your Exchange account in Entourage.

When scheduling a meeting, free/busy information is used to share with others what time you are available to meet. Entourage does not generate and publish free/busy information. Instead, the Exchange server detects changes in a calendar and automatically updates the corresponding free/busy information. If another user's free/busy information appears dark grey within Entourage when scheduling meetings, it is often the result of an incorrectly configured Public folders server address.

For access to the corporate directory or Global Address List, Entourage uses the LDAP services of an Active Directory domain controller. The LDAP Server field is the host name of a domain controller Entourage will query. Entourage typically queries the Global Catalog of a domain controller for directory information with default ports of 3268 and 3269. If you do not know the name of your domain controller, you may use the same "dig" command line query detailed later.

In order for users to be able to browse the contents of the directory, Entourage uses the LDAP Virtual List View (VLV) control introduced in Windows Server 2003. For Entourage users connecting to Windows 2000 domain controllers, they will only be to search the contents of the directory.

Dissecting the Account Configuration Wizard

The Account Configuration Wizard provides a simple mechanism for configuring a new Exchange account without requiring the user to know anything other than their Active Directory login credentials and e-mail address. It is important to understand how Account Configuration Wizard works so that you might tweak your network configuration to ensure its success as a low cost method for deploying Entourage as an Exchange client.



Figure 4: Account Configuration Wizard

The wizard follows a three-step process for automatically determining the user's account settings: 1) finding a domain controller, 2) determining the Exchange server that hosts the user's mailbox, and 3) connecting to the server to begin synchronization. It is important that the user's Network settings in System Preferences are properly configured with the appropriate search domains and DNS server, as the combination of the two values is critical to Entourage's ability to find servers on a network.

In order to find a domain controller, Entourage uses the DNS service discovery mechanism to find LDAP-based services on the currently connected network. If Entourage is unsuccessful at finding, or finds the incorrect domain controller within a network, often times it is easiest to debug the DNS configuration of the machine using either the dig or nslookup command-line tools to perform a DNS query similar to that issued by Entourage. In Terminal.app, execute dig _ldap._tcp.search.domain:

aruff:~ aruff$ dig _ldap._tcp.microsoft.com
; <<>> DiG 9.2.2 <<>> _ldap._tcp.microsoft.com
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 36646
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;_ldap._tcp.microsoft.com. IN A
;; AUTHORITY SECTION:
microsoft.com. 3595 IN SOA    dc.microsoft.com. hostmaster.microsoft.com. 11896502 900 600 86400 3600
;; Query time: 70 msec
;; SERVER: 157.57.195.29#53(157.57.195.29)
;; WHEN: Mon Jun 12 22:46:37 2006
;; MSG SIZE  rcvd: 118

In the above results, the DNS server returned that dc.microsoft.com provides LDAP services. In this case, dc.microsoft.com likely refers to many different domain controllers. Often organizations use DNS to have a single host name point to a series of servers, allowing clients such as Entourage to quickly rollover to any of the servers depending on uptime and server load. If the DNS query returns more than one domain controller, Entourage chooses the appropriate domain controller based on priority returned in the DNS query. If the priority value of two or more domain controllers match, Entourage chooses the first matching domain controller.

After discovering a domain controller, Entourage connects, binds, and queries the Active Directory via LDAP for the homeMDB attribute of the user's directory entry. The homeMDB attribute contains the host name of the Exchange server that stores the user's mailbox. Further, Entourage will set the Directory Service server field for the account to the discovered LDAP-providing domain controller.

Failure to discover the homeMDB attribute typically is the result of Entourage's inability to find the user object in the Active Directory. If you have access to a Window's machine, it may be useful to use the LDP.exe tool in the Windows 2000 Support Tools kit to connect to the LDAP service returned by the DNS query in step one, and ensure the user's Active Directory object is replicating properly to the target domain controller and that the homeMDB attribute is returned correctly.

Once Entourage knows the homeMDB value, Entourage connects to the server via WebDAV, and attempts to locate the user's mailbox. Once the Entourage locates the mailbox on the server, Entourage parses out HTML generated by Outlook Web Access to the location of the public folder server. Typical causes of failure at this step in the configuration wizard are either Entourage's difficulty in locating the user's mailbox on the server or the server is inaccessible on the network (e.g. incorrect search domains within the Network settings of System Preferences). If all succeeds, the account configuration wizard will exit and the user will begin to see the contents of their Exchange mailbox synchronizing with Entourage.

Seamless Traveling: Synch Entourage without VPN Access

Taking advantage of the rich experience and offline capabilities of Entourage's Exchange synch need not be limited to your office. A benefit of Entourage using the same underlying technology as OWA to communicate with your Exchange server, Entourage may synchronize your Exchange account from any machine that is able to access the same mailbox in a web browser through OWA. If you are able to go home, launch Safari, and check your e-mail using OWA, then you should also be able to configure Entourage to connect to your Exchange server and synchronize while at home, just as you would in the office.

For laptop users, this capability provides offline access for productive e-mail triage on the airplane or quick access to a contact's phone number, even when no wireless network is available. Personally, I configure Entourage to always point to the corporate OWA servers. This allows me to dash off to a local coffee shop for several hours of uninterrupted focus or connect to the airport's wireless network when traveling, all the while seamlessly synchronizing my Exchange account with Entourage without once mucking with VPN access--it just works.

To configure Entourage to connect to the OWA server, place the name of the server you connect to in Safari within the Exchange server field. For example, if you type https://mail.example.com/ in Safari to access your Exchange mail from within your web browser, enter https://mail.example.com into the Exchange server field of your Entourage Exchange account (Entourage will automatically detect if your Exchange server uses a secure connection and toggle the "use SSL" checkbox as necessary). For public folders and free-busy information, you may find it easiest to browse to your public folders within OWA, copying the front portion of the resulting URL in the Address Bar. Under the default Exchange server configuration, public folders are accessible under the /public/ virtual root (e.g. https://mail.example.com/public/).

Generally, few organizations allow applications outside their trusted networks to access domain information via LDAP. As such, both the Global Address List and Account Configuration Wizard will fail to work in Entourage. If always-accessible Global Address List is critical to your organization, you may consider configuring Microsoft Active Directory Application Mode (http://www.microsoft.com/windowsserver2003/adam/), to host the GAL and provide lightweight LDAP services over a secure connection. Some third party tools, such as EntourageABMenu, provide a method for quickly searching your GAL through Entourage without requiring LDAP connectivity.

While Outlook and Exchange 2003 deliver similar functionality in the form of MAPI-RPC, Entourage 2004 users in both Exchange 2000 and 2003 environments may configure Entourage to synchronize without ever needing to worry about VPN access.

Conclusion

Entourage uses a variety of technologies to communicate with the Exchange server, sometimes making deployment a challenge. Understanding how each of these technologies impacts Entourage is often key to forging a plan for deploying Entourage within your organization.


Andy Ruff is an Entourage Program Manager at Microsoft. You may read his weblog at http://www.ruffly.org

 

Community Search:
MacTech Search:

Software Updates via MacUpdate

NetShade 8.3 - Browse privately using an...
NetShade is an anonymous proxy and VPN app+service for Mac. Unblock your Internet through NetShade's high-speed proxy and VPN servers spanning 17 countries. NetShade masks your IP address as you... Read more
Adobe Animate CC 2020 20.0.1 - Animation...
Animate CC 2020 is available as part of Adobe Creative Cloud for as little as $20.99/month (or $9.99/month if you're a previous Flash Professional customer). Animate CC 2020 (was Flash CC) lets you... Read more
Adobe Acrobat DC 19.021.20058 - Powerful...
Acrobat DC is available only as a part of Adobe Creative Cloud, and can only be installed and/or updated through Adobe's Creative Cloud app. Adobe Acrobat DC with Adobe Document Cloud services is... Read more
Adobe Acrobat Reader 19.021.20058 - View...
Adobe Acrobat Reader allows users to view PDF documents. You may not know what a PDF file is, but you've probably come across one at some point. PDF files are used by companies and even the IRS to... Read more
Adobe Flash Player 32.0.0.303 - Plug-in...
Adobe Flash Player is a cross-platform, browser-based application runtime that provides uncompromised viewing of expressive applications, content, and videos across browsers and operating systems.... Read more
Adobe InDesign CC 2019 15.0.1 - Professi...
InDesign CC 2019 is available as part of Adobe Creative Cloud for as little as $20.99/month (or $9.99/month if you're a previous InDesign customer). Adobe InDesign CC 2019 is part of Creative Cloud.... Read more
Adobe Lightroom Classic 9.1 - Import, de...
You can download Lightroom for Mac as a part of Creative Cloud for only $9.99/month with Photoshop, included as part of the photography package. The latest version of Lightroom gives you all of the... Read more
Shredo 1.2.7 - $6.99
Shredo is a beautiful, functional file-shredding and privacy scan utility. It permanently shreds files, folders, and external volumes' contents to keep information secure and impossible for anyone to... Read more
Visual Studio Code 1.41.0 - Cross-platfo...
Visual Studio Code provides developers with a new choice of developer tool that combines the simplicity and streamlined experience of a code editor with the best of what developers need for their... Read more
calibre 4.6.0 - Complete e-book library...
Calibre is a complete e-book library manager. Organize your collection, convert your books to multiple formats, and sync with all of your devices. Let Calibre be your multi-tasking digital librarian... Read more

Latest Forum Discussions

See All

King's Throne, the hugely ambitious...
King's Throne: Game of Lust is a deeply immersive medieval-set idle RPG which sees you playing as an ambitious prince, and sole heir to your father's kingdom. On a seemingly ordinary night whilst wandering the king's castle, you make the shocking... | Read more »
Abyssrium Pole is an upcoming aquarium b...
FleroGames' upcoming Abyssrium Pole has recently hit one million pre-registers, which is very impressive, particularly for a fairly casual looking game. Those who have pre-registered will receive 1000 Pearl when the game launches on 8th January... | Read more »
Two Spies is pretty fun, but it's h...
Two Spies just dropped on the App Store this week, and it looks pretty neat. The game has two players capturing various cities across Europe, with the goal of eventually spotting and striking the other spy down. It may be simple-looking, but after... | Read more »
Two Spies is a turn-based game for iOS t...
There aren't too many games that feature pass and play multiplayer and there are even less where you can only play against people you know, even when playing online. But Two Spies does both of those things and you can get it for iOS right now. [... | Read more »
Solve your way through new low-poly puzz...
The best escape-the-room games don’t just test your creative problem-solving skills – they look great, too. Released in October this year by Antler (the developer of the succesful VR puzzle SVRVIVE: The Deus Helix), Krystopia offers everything you... | Read more »
Get ready for an epic adventure with Pea...
Following a hugely successful pre-registration campaign, Pearl Abyss' much-hyped MMORPG, Black Desert Mobile, has finally arrived for iOS and Android. With some of the most impressive visuals on mobile, a vast open world to explore, an in-depth... | Read more »
Elder Scrolls: Blades has ditched chest...
Elder Scrolls: Blades started out as one of the most hyped mobile games of 2019, boasting some impressive visuals and no shortage of promise. Our hopes were somewhat dashed when it eventually launched and we all became privy to its mishandled... | Read more »
Hands-On with the Pocket City December U...
At the end of last month, Codebrew Games announced an update coming to their popular city-builder, Pocket City some time this month. In this update is the promise of expanding your city out into other regions, enacting policies, and more. The full... | Read more »
Black Desert Mobile is available for pre...
Pearl Abyss' stunning open-world MMORPG, Black Desert Mobile, is set to launch for iOS and Android on December 11th at 12 AM PST (8 AM UTC). However, those looking to get in early and test out the in-depth character customisation will be able to... | Read more »
Extraordinary Ones, NetEase's innov...
NetEase's inventive 5v5 anime MOBA, Extraordinary Ones, has now opened for pre-registration ahead of its global launch in early 2020. The game seems to have received a fairly warm reception from fans after its soft-launch earlier in the year,... | Read more »

Price Scanner via MacPrices.net

Apple Watch Series 3 models on sale at Amazon...
Amazon has Apple Watch Series 3 GPS models on sale for $20 off MSRP, starting at only $179. Their prices are the lowest available for these models from any Apple reseller. Choose Amazon as the seller... Read more
Sunday AirPods Sale: Amazon drops prices to a...
Amazon has new 2019 Apple AirPods on sale today ranging up to $30 off MSRP, starting at $139. Shipping is free: – AirPods Pro: $249 $0 off MSRP – AirPods with Wireless Charging Case: $168.95 $30 off... Read more
Holiday 2019 sale: 11″ iPad Pros for up to $2...
Amazon has new Apple 11″ iPad Pros in stock today and on sale for up to $200 off Apple’s MSRP as part of their Holiday 2019 sale. These are the same iPad Pros sold by Apple in its retail and online... Read more
B&H has 12.9″ WiFi iPad Pros on sale for...
B&H Photo has new 12.9″ WiFi iPad Pros on sale for up to $150 off Apple’s MSRP as part of their Holiday 2019 sale. Overnight shipping is free to many addresses in the US: – 12.9″ 64GB WiFi iPad... Read more
Find the best Holiday 2019 prices on Apple’s...
Our Apple award-winning price trackers are the best place to look for the best deals and lowest prices on Apple gear this 2019 Holiday shopping season. Scan our price trackers for the latest... Read more
13″ 2.4GHz/256GB Silver MacBook Pro on sale f...
Amazon has the Silver 13″ 2.4GHz/256GB 4-Core Touch Bar MacBook Pro on sale for $1499.99 shipped. Their price is $300 off Apple’s MSRP, and it’s the lowest price currently available for a 13″ 2.4GHz... Read more
Sams Club one day sales event December 14th:...
Through midnight Saturday night (December 14th), Sams Club online has several Apple Watch Series 5 models on sale for $40 off MSRP as part of their One Day sales event. Choose free shipping or free... Read more
Total Wireless offers iPhone 6S models for as...
Total Wireless has Apple 32GB iPhone 6S models available starting at $99: – 32GB iPhone 6S: $99.99 – 32GB iPhone 6S Plus: $149.99 A no-contract Total Wireless prepaid plan is required with your... Read more
Get a 4 or 6-core Mac Mini for up to $170 off...
B&H Photo has 4-Core and 6-Core Mac minis on sale for up to $170 off Apple’s standard MSRP as part of their Holiday 2019 sale. Overnight shipping is free to many US addresses: – 3.6GHz Quad-Core... Read more
Amazon restocks base 13″ 1.4GHz MacBook Pro f...
Amazon has restocked the base 13″ 1.4GHz/128GB Space Gray MacBook Pro for $1099.99 shipped. Their price is $200 off Apple’s MSRP, and it’s the cheapest price available for a new MacBook Pro. Amazon... Read more

Jobs Board

*Apple* Mobility Sales Professional - Best B...
**750138BR** **Job Title:** Apple Mobility Sales Professional **Job Category:** Store Associates **Store NUmber or Department:** 000471-Mt Vernon-Store **Job Read more
*Apple* Engineering Specialist (ITC ) - Gene...
…Suitability clearance, per contract requirements. Currently, we are seeking an Apple Engineering Specialist in Washington, DC The responsibilities for candidates in Read more
Senior *Apple* Endpoint Engineer - Leidos (...
…Medicaid Service (CMS) End User environment. Perform specific duties as an Apple Endpoint Engineer in support of the infrastructure operations, hardware, software Read more
Perioperative - RN - ( *Apple* Hill Surgical...
Perioperative - RN - ( Apple Hill Surgical Center) Tracking Code 59281 Job Description Monday - Friday - Part Time - Days Possible Saturdays General Summary: Under Read more
Lead DevOps Engineer - *Apple* - Theorem, L...
Job Summary Apple is looking for a seasoned Lead DevOps Engineer that can lead multiple projects and teams while delivering high quality and performant solutions in Read more
All contents are Copyright 1984-2011 by Xplain Corporation. All rights reserved. Theme designed by Icreon.