If you were successful, you would see the two new URLs in the list. You might also take a screenshot of the new list for your records.
Compare the before list/screenshot against the new list of SPNs. Verify that you added the new records by running the Get-MsolServicePrincipal cmdlet. PS C:\> Set-MSOLServicePrincipal -AppPrincipalId 00000002-0000-0ff1-ce00-000000000000 -ServicePrincipalNames $x.ServicePrincipalNames Step 4. If you don’t see your internal and external MAPI/HTTP, EWS, ActiveSync, OAB, and Autodiscover records in this list, you must add them using the command below. Therefore, we will need to add those specific records to this list in the next step. Most likely, the URLs from your on-premises are missing. Take note of (and screenshot for later comparison) the output of this command, which should include an and URL, but mostly consist of SPNs that begin with 00000002-0000-0ff1-ce00-000000000000/. Run the Get-MsolServicePrincipal cmdlet to get the Exchange related URLs in the cloud for the application 00000002-0000-0ff1-ce00-000000000000. Sign in with your Microsoft 365 global administrator credentials. Run PowerShell as administrator and connect to Azure AD. C:\>Get-OABVirtualDirectory | FL server,*url*ĮxternalUrl : Step 2. To use the Get-ClientAccessService cmdlet.
#Outlook identity password update#
If you have any scripts that use the Get-ClientAccessServer cmdlet, update them WARNING: The Get-ClientAccessServer cmdlet will be removed in a future version of Exchange. C:\>Get-ClientAccessServer | FL Name, AutodiscoverServiceInternalUri C:\>Get-WebServicesVirtualDirectory | FL server,*url* C:\>Get-MapiVirtualDirectory | FL server,*url* If you didn’t, you would see internal addresses that end with. We recommend configuring it like this as it will simplify a lot. In our example, we have the same name for internal and external URLs. Make a note of all the internal and external URLs because you will need to add these URLs in one of the next steps. After that, we get the results in the output. Run the four cmdlets to retrieve the virtual directory URLs. Start Exchange Management Shell as administrator on your Exchange Server on-premises. After that, add the on-premises web service URLs as SPNs (Service Principal Name). The solution is to get the Exchange virtual directory URLs.
#Outlook identity password code#
Why do we see the error code CAA2000B, and why is it showing that Outlook needs password? What is the solution for these issues after configuring Hybrid Modern Authentication? Solution for Outlook needs password after Hybrid Modern Authentication implementation You might have sent your authentication request to the wrong tenant. This can happen if the application has not been installed by the administrator of the tenant or consented to by any user in the tenant. Server message: AADSTS500011: The resource principal named was not found in the tenant named. If this error persists, contact your system administrator and provide the error code CAA2000B.Ĭorrelation ID: 54cba1ee-6cf8-4382-8e24-b8d7028182a4 After doing that, we get the error: CAA2000B. Let’s remove and create a new Outlook profile for Amanda. However, after configuring Hybrid Modern Authentication and restarting Outlook, Outlook shows that it needs a password. Everything works great with basic authentication. She can sign in to Outlook, and the mail shows up. We have the user Amanda, which has an on-premises mailbox.
0 kommentar(er)
