<?xml version="1.0" encoding="UTF-8" ?>
<?xml-stylesheet type="text/xsl" href="http://blogs.technet.com/utility/FeedStylesheets/rss.xsl" media="screen"?><rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:slash="http://purl.org/rss/1.0/modules/slash/" xmlns:wfw="http://wellformedweb.org/CommentAPI/"><channel><title>Inside Entourage by Amir : Known Issues</title><link>http://blogs.technet.com/amir/archive/tags/Known+Issues/default.aspx</link><description>Tags: Known Issues</description><dc:language>en</dc:language><generator>CommunityServer 2.1 SP1 (Build: 61025.2)</generator><item><title>Continued Credentials Prompt in Entourage Connecting to Exchange Mailbox</title><link>http://blogs.technet.com/amir/archive/2008/08/11/continued-credentials-prompt-in-entourage-connecting-to-exchange-mailbox.aspx</link><pubDate>Tue, 12 Aug 2008 01:18:04 GMT</pubDate><guid isPermaLink="false">d5e57398-b9ef-4490-9955-07cbb4e4a80d:3103697</guid><dc:creator>amir</dc:creator><slash:comments>16</slash:comments><comments>http://blogs.technet.com/amir/comments/3103697.aspx</comments><wfw:commentRss>http://blogs.technet.com/amir/commentrss.aspx?PostID=3103697</wfw:commentRss><wfw:comment>http://blogs.technet.com/amir/rsscomments.aspx?PostID=3103697</wfw:comment><description>&lt;p&gt;In this blog I wanted to talk about an issue which we have seen enough number of times working with our enterprise customers that it warrants a blog.
&lt;/p&gt;&lt;p&gt;&lt;strong&gt;Issue&lt;/strong&gt;&lt;br/&gt;When connecting to an Exchange mailbox Entourage user sees the following error repeatedly. User enters correct credentials (username, password &amp;amp; domain) but same error comes back again thus effectively entering a never ending loop. We have seen this on all currently &lt;a href="http://support.microsoft.com/gp/lifeselectindex" target="_blank"&gt;supported&lt;/a&gt; versions of Exchange &amp;amp; Entourage. This error can also come up when:
&lt;/p&gt;&lt;p&gt;a. User tries to permanently delete or move a large number of messages from his Exchange mailbox
&lt;/p&gt;&lt;p&gt;b. User tries to send/receive new mail after deleting or moving a large number of messages from his Exchange mailbox
&lt;/p&gt;&lt;p style="text-align: center"&gt;&lt;img src="http://erage.members.winisp.net/081108_2217_ContinuedCr1.png" alt=""/&gt;
	&lt;/p&gt;&lt;p style="text-align: center"&gt;&lt;img src="http://erage.members.winisp.net/081108_2217_ContinuedCr2.png" alt=""/&gt;
	&lt;/p&gt;&lt;p&gt;&lt;strong&gt;Cause&lt;/strong&gt;&lt;br/&gt;When Entourage tries to permanently delete messages from a folder in Exchange mailbox, Exchange Server utilizes the TEMP (temporary) folder for that operation. If Entourage user does not have required permissions on that TEMP folder, server issues a '401, Access Denied' error. Moving messages in Entourage involves permanent deletion from source folder, thus it results in the same issue.
&lt;/p&gt;&lt;p&gt;&lt;strong&gt;Resolution&lt;/strong&gt;&lt;br/&gt;There are two parts of it.
&lt;/p&gt;&lt;p&gt;&lt;strong&gt;1. Locating TEMP &amp;amp; TMP Folders
&lt;/strong&gt;&lt;/p&gt;&lt;p&gt;&lt;strong&gt;a. Non-Clustered Servers&lt;/strong&gt;&lt;br/&gt;First determine which TEMP folder is set as default on Exchange Mailbox Server on the back-end, cos that's where the delete operation actually takes place. The default location of TEMP folder is set under the following registry key:
&lt;/p&gt;&lt;p&gt;&lt;span style="color:blue"&gt;HKEY_LOCAL_MACHINE\System\CurrrentControlSet\Control\Session Manager\Environment&lt;br/&gt;REG_EXPAND_SZ: TEMP&lt;br/&gt;Value: &amp;lt;PATH&amp;gt;\TEMP
&lt;/span&gt;&lt;/p&gt;&lt;p&gt;By default, the TEMP folder is located at: '%SystemRoot%\TEMP' which is usually 'C:\WINDOWS\TEMP'
&lt;/p&gt;&lt;p&gt;Another place to check this is: Bring up 'Control Panel' on Exchange Server, go to System : Advanced : Environment Variables : System Variables (see the screenshot below) 
&lt;/p&gt;&lt;p style="text-align: center"&gt;&lt;img src="http://erage.members.winisp.net/081108_2217_ContinuedCr3.png" alt=""/&gt;
	&lt;/p&gt;&lt;p&gt;Same check applies for TMP folder, if there is one located on your drive. The above registry key should have an entry for TMP folder as well.
&lt;/p&gt;&lt;p&gt;&lt;strong&gt;b. Clustered Servers&lt;br/&gt;&lt;/strong&gt;On clustered servers, the following registry keys are used to specify the locations of TEMP &amp;amp; TMP folders (&lt;a href="http://technet.microsoft.com/en-us/library/aa998044(EXCHG.80).aspx" target="_blank"&gt;Ref.&lt;/a&gt;).
&lt;/p&gt;&lt;p&gt;&lt;span style="color:blue"&gt;HKEY_USERS\&amp;lt;Cluster service account SID&amp;gt;\Environment\TEMP
&lt;/span&gt;&lt;/p&gt;&lt;p&gt;&lt;span style="color:blue"&gt;HKEY_USERS\&amp;lt;Cluster service account SID&amp;gt;\Environment\TMP
&lt;/span&gt;&lt;/p&gt;&lt;p&gt;&lt;strong&gt;2. Verifying Permissions&lt;/strong&gt;&lt;br/&gt;Now let's verify the permissions assigned on TEMP folder. The 'Authenticated Users' group (Entourage user belongs to this group) should have the following special permissions:
&lt;/p&gt;&lt;p&gt;&lt;span style="color:blue"&gt;Traverse Folder / Execute File&lt;br/&gt;Create Files / Write Data&lt;br/&gt;Create Folders / Append Data
&lt;/span&gt;&lt;/p&gt;&lt;p&gt;In order to check these permissions, locate the TEMP folder and then right click on it to take 'Properties', go to 'Security' tab, highlight 'Authenticated Users', under 'Permissions for Authenticated Users' section, click on 'Advanced' button (see the screenshot below)
&lt;/p&gt;&lt;p style="text-align: center"&gt;&lt;img src="http://erage.members.winisp.net/081108_2217_ContinuedCr4.png" alt=""/&gt;
	&lt;/p&gt;&lt;p&gt;You will then see the 'Advanced Security Settings for TEMP' folder window (see the screenshot below)
&lt;/p&gt;&lt;p style="text-align: center"&gt;&lt;img src="http://erage.members.winisp.net/081108_2217_ContinuedCr5.png" alt=""/&gt;
	&lt;/p&gt;&lt;p&gt;Highlight the entry for 'Authenticated Users' in the above window and then click on 'Edit' button to view/edit the permissions. The screenshot below displays the required permission assigned properly.
&lt;/p&gt;&lt;p style="text-align: center"&gt;&lt;img src="http://erage.members.winisp.net/081108_2217_ContinuedCr6.png" alt=""/&gt;
	&lt;/p&gt;&lt;p&gt;Same check applies for TMP folder, if there is one located on your drive.
&lt;/p&gt;&lt;p&gt;&lt;span style="text-decoration:underline"&gt;Redirected TEMP/TMP Folder&lt;/span&gt;&lt;br/&gt;If the TEMP/TMP folder has been redirected to D (or any other) drive on the Exchange Server, it is suggested to specify the above permissions at the following three levels:
&lt;/p&gt;&lt;p&gt;1. Drive level, especially at the root of drive if you notice that 'Authenticated Users' group is simply missing
&lt;/p&gt;&lt;p&gt;2. TEMP/TMP folder
&lt;/p&gt;&lt;p&gt;3. Any sub-folders inside TEMP folder which may have numerical (like 1, 2, etc.) names as such folders have been seen on clustered servers
&lt;/p&gt;&lt;p&gt;&lt;span style="text-decoration:underline"&gt;Important&lt;/span&gt;&lt;br/&gt;You will need to restart IIS (Internet Information Server) on all those servers where you made these changes in permissions, i.e. mailbox servers on the back-end and front-end servers as well to which Entourage users are connecting for mailbox access.
&lt;/p&gt;&lt;p&gt;&lt;strong&gt;More Info&lt;/strong&gt;&lt;br/&gt;If your Entourage users are running into this issue then IIS Log on Exchange Server (front-end and/or back-end) &amp;amp; TCPFlow Log on Entourage Client will show the following:
&lt;/p&gt;&lt;p&gt;a. 'BDELETE' request from client 
&lt;/p&gt;&lt;p&gt;b. '401' error response from server
&lt;/p&gt;&lt;p&gt;&lt;span style="text-decoration:underline"&gt;IIS Trace Sample
&lt;/span&gt;&lt;/p&gt;&lt;p&gt;&lt;span style="font-family:Courier New; font-size:10pt"&gt;&lt;span style="color:#7030a0"&gt;2008-08-10 07:05:33 W3SVC1 192.168.137.121 &lt;/span&gt;&lt;span style="color:red"&gt;&lt;strong&gt;BDELETE&lt;/strong&gt;&lt;/span&gt;&lt;span style="color:#7030a0"&gt; /exchange/john/Deleted+Items/ - 80 CONTOSO\JOHN 192.168.120.110 Entourage/12.11.0+(PPC+Mac+OS+X+10.4.9) &lt;/span&gt;&lt;span style="color:red"&gt;&lt;strong&gt;401&lt;/strong&gt;&lt;/span&gt;&lt;span style="color:#7030a0"&gt; 5 0
&lt;/span&gt;&lt;/span&gt;&lt;/p&gt;&lt;p&gt;&lt;span style="font-family:Courier New; font-size:10pt"&gt;&lt;span style="color:#7030a0"&gt;2008-08-10 07:05:35 W3SVC1 192.168.137.121 &lt;/span&gt;&lt;span style="color:red"&gt;&lt;strong&gt;BDELETE&lt;/strong&gt;&lt;/span&gt;&lt;span style="color:#7030a0"&gt; /exchange/john/Deleted+Items/ - 80 CONTOSO\JOHN 192.168.120.110 Entourage/12.11.0+(PPC+Mac+OS+X+10.4.9) &lt;/span&gt;&lt;span style="color:red"&gt;&lt;strong&gt;401&lt;/strong&gt;&lt;/span&gt;&lt;span style="color:#7030a0"&gt; 1 0
&lt;/span&gt;&lt;/span&gt;&lt;/p&gt;&lt;p&gt;&lt;span style="text-decoration:underline"&gt;TCPFlow Trace Sample
&lt;/span&gt;&lt;/p&gt;&lt;p&gt;&lt;span style="font-family:Courier New; font-size:10pt"&gt;&lt;span style="color:#7030a0"&gt;192.168.120.110.54103-192.168.137.121.00080:&lt;br/&gt;&lt;/span&gt;&lt;span style="color:red"&gt;&lt;strong&gt;BDELETE&lt;/strong&gt;&lt;/span&gt;&lt;span style="color:#7030a0"&gt; /exchange/john/Deleted%20Items/ HTTP/1.1
&lt;/span&gt;&lt;/span&gt;&lt;/p&gt;&lt;p&gt;&lt;span style="font-family:Courier New; font-size:10pt"&gt;&lt;span style="color:#7030a0"&gt;192.168.137.121.00080-192.168.120.110.54103:&lt;br/&gt;HTTP/1.1 &lt;/span&gt;&lt;span style="color:red"&gt;&lt;strong&gt;401 Unauthorized&lt;/strong&gt;&lt;/span&gt;&lt;/span&gt;&lt;/p&gt;&lt;img src="http://blogs.technet.com/aggbug.aspx?PostID=3103697" width="1" height="1"&gt;</description><category domain="http://blogs.technet.com/amir/archive/tags/Entourage/default.aspx">Entourage</category><category domain="http://blogs.technet.com/amir/archive/tags/Exchange/default.aspx">Exchange</category><category domain="http://blogs.technet.com/amir/archive/tags/Troubleshooting/default.aspx">Troubleshooting</category><category domain="http://blogs.technet.com/amir/archive/tags/Known+Issues/default.aspx">Known Issues</category><category domain="http://blogs.technet.com/amir/archive/tags/Mail/default.aspx">Mail</category><category domain="http://blogs.technet.com/amir/archive/tags/Authentication/default.aspx">Authentication</category><category domain="http://blogs.technet.com/amir/archive/tags/Connectivity/default.aspx">Connectivity</category></item><item><title>E-mail Download Issue in Entourage With Exchange 2007 on Windows 2008</title><link>http://blogs.technet.com/amir/archive/2008/08/06/e-mail-download-issue-in-entourage-with-exchange-2007-on-windows-2008.aspx</link><pubDate>Wed, 06 Aug 2008 19:00:34 GMT</pubDate><guid isPermaLink="false">d5e57398-b9ef-4490-9955-07cbb4e4a80d:3100753</guid><dc:creator>amir</dc:creator><slash:comments>5</slash:comments><comments>http://blogs.technet.com/amir/comments/3100753.aspx</comments><wfw:commentRss>http://blogs.technet.com/amir/commentrss.aspx?PostID=3100753</wfw:commentRss><wfw:comment>http://blogs.technet.com/amir/rsscomments.aspx?PostID=3100753</wfw:comment><description>&lt;p&gt;In this blog post I wanted to talk about another new issue being experienced by our customers who are working with Exchange 2007 on Windows 2008. Windows Server 2008 is the key here as it relates to IIS 7 (Internet Information Server) and it's default security restrictions.
&lt;/p&gt;&lt;p&gt;&lt;strong&gt;Issue&lt;/strong&gt;&lt;br/&gt;Using Entourage for Mac (2004 or 2008) while connecting to an Exchange 2007 mailbox on a Windows 2008 Server, user cannot download any e-mail message which has a plus sign in it's subject line, like 'Test + Mail'.
&lt;/p&gt;&lt;p&gt;&lt;strong&gt;Cause&lt;/strong&gt;&lt;br/&gt;Entourage's request to download this e-mail message goes thru IIS 7 on Windows 2008 Server, which is configured (by default) to deny 'double escape sequences' in any HTTP request and thus it rejects the request with a '404.11' error.
&lt;/p&gt;&lt;p&gt;&lt;strong&gt;Resolution&lt;/strong&gt;&lt;br/&gt;As Entourage talks to 'Exchange' virtual directory (for mailbox access) under 'Default Website' on IIS, thus you can use the following procedure to allow the use of 'double escape sequence' &lt;span style="text-decoration:underline"&gt;only&lt;/span&gt; at that level to address this issue. This will minimize the risk you will be taking to enable the usage of double escape sequence. Enabling the use of 'double escape sequence' does carry some risk, please go thru the links below under 'More Info' section to get yourself educated on the issue &amp;amp; involved risks before you work on the steps below.
&lt;/p&gt;&lt;p&gt;&lt;span style="text-decoration:underline"&gt;Quick &amp;amp; Easy Way&lt;/span&gt;&lt;br/&gt;You will need to run this command on all of your Exchange 2007 CAS and Mailbox Servers as IIS is installed on them by default.
&lt;/p&gt;&lt;p&gt;Bring up a Windows 'Command Prompt', type the following command and hit 'Enter' on keyboard, that's it, you are done!
&lt;/p&gt;&lt;p&gt;&lt;span style="color:blue"&gt;%windir%\system32\inetsrv\appcmd set config "http://localhost/Exchange" -section:system.webServer/security/requestfiltering -allowDoubleEscaping:true /commit:apphost
&lt;/span&gt;&lt;/p&gt;&lt;p&gt;You will see the following response after running the above command in the same window.
&lt;/p&gt;&lt;p&gt;&lt;span style="color:blue"&gt;Applied configuration changes to section "system.webServer/security/requestFiltering" for "MACHINE/WEBROOT/APPHOST/Default Web Site/Exchange" at configuration commit path "MACHINE/WEBROOT/APPHOST"
&lt;/span&gt;&lt;/p&gt;&lt;p&gt;After running this command, you don't need to restart any services on server, just run the command and ask your Entourage users to see if the issue has been resolved for them, at the most you can ask them to re-launch Entourage.
&lt;/p&gt;&lt;p&gt;OR if you are a guy who is interested in details, then you can follow the manual steps outlined below.
&lt;/p&gt;&lt;p&gt;&lt;span style="text-decoration:underline"&gt;Manual Steps&lt;/span&gt;&lt;br/&gt;1. Bring up Notepad : File : Open, type &lt;span style="color:blue"&gt;%windir%\System32\inetsrv\config\applicationHost.config&lt;/span&gt; in the 'File name' box, and then click 'Open'.
&lt;/p&gt;&lt;p&gt;2. Locate the section titled as: &lt;span style="color:blue"&gt;&amp;lt;location path="Default Web Site/Exchange"&amp;gt;&lt;/span&gt;
	&lt;/p&gt;&lt;p&gt;3. Under that section locate &lt;span style="color:blue"&gt;&amp;lt;/authentication&amp;gt;&lt;/span&gt; tag
&lt;/p&gt;&lt;p&gt;4. Just after that insert the following text on a new line: &lt;span style="color:blue"&gt;&amp;lt;requestFiltering allowDoubleEscaping="true" /&amp;gt;&lt;/span&gt;
	&lt;/p&gt;&lt;p&gt;5. Save the file and 'Exit' Notepad
&lt;/p&gt;&lt;p&gt;Again, no restart of any service is required.
&lt;/p&gt;&lt;p&gt;Note:&lt;br/&gt;As Entourage talks to 'Public' virtual directory (for public folder access) under 'Default Website' on IIS, thus you will need to follow the same procedure for 'Public' virtual directory as well. Same instructions apply, just replace 'Exchange' with 'Public' in all steps mentioned above.
&lt;/p&gt;&lt;p&gt;&lt;strong&gt;Details&lt;/strong&gt;&lt;br/&gt;Let's go into the details of this issue. First of all let's see how this issue would look like to an Entourage user when he looks at his Inbox thru Outlook Web Access &amp;amp; Entourage.
&lt;/p&gt;&lt;p&gt;Outlook Web Access thru Safari (note the presence of messages with '+' in their subject lines, i.e. 'Movie + Dinner' &amp;amp; 'Test + Message')
&lt;/p&gt;&lt;p&gt;&lt;img src="http://erage.members.winisp.net/080608_1600_EmailDownlo1.png" alt=""/&gt;
	&lt;/p&gt;&lt;p&gt;Entourage 2008 (note the absence of messages with '+' in their subject lines, i.e. 'Movie + Dinner' &amp;amp; 'Test + Message')
&lt;/p&gt;&lt;p&gt;&lt;img src="http://erage.members.winisp.net/080608_1600_EmailDownlo2.png" alt=""/&gt;
	&lt;/p&gt;&lt;p&gt;So how did it happen? Let's review the TCPFlow Trace pasted below, which I took on Entourage user's machine. Important parts are highlighted in red.
&lt;/p&gt;&lt;p&gt;&lt;span style="color:blue"&gt;65.53.65.121 = Entourage Client
&lt;/span&gt;&lt;/p&gt;&lt;p&gt;&lt;span style="color:blue"&gt;172.30.142.217 = Exchange 2007 CAS Server
&lt;/span&gt;&lt;/p&gt;&lt;p&gt;In the trace snippet pasted below Entourage client is requesting (thru SEARCH command) if there are any changes in user's Inbox, i.e. if there are any new items there for Entourage to retrieve and sync down to its local database.
&lt;/p&gt;&lt;p&gt;&lt;span style="font-family:Courier New; font-size:10pt"&gt;&lt;span style="color:#7030a0"&gt;065.053.065.121.51253-172.030.142.217.00080:&lt;br/&gt;&lt;/span&gt;&lt;span style="color:red"&gt;&lt;strong&gt;SEARCH /exchange/john/Inbox/ HTTP/1.1&lt;/strong&gt;&lt;/span&gt;&lt;span style="color:#7030a0"&gt;&lt;br/&gt;Host: 172.30.142.217&lt;br/&gt;From: 65.53.65.121&lt;br/&gt;User-Agent: Entourage/12.10.0 (PPC Mac OS X 10.4.9)&lt;br/&gt;Accept: */*&lt;br/&gt;Accept-Language: en&lt;br/&gt;Content-Type: text/xml; charset="utf-8"&lt;br/&gt;Brief: t&lt;br/&gt;Translate: F&lt;br/&gt;Range: Rows=0-512&lt;br/&gt;Cookie: sessionid=7f5d08a5-f5ef-4e36-91e1-8c57c1c2a67f;&lt;br/&gt;cadata="4Soepik9ZpG1ev4w+C87pKQrHkOOeTHX4IiYZdRzhFlUtMQICwpFE3&lt;br/&gt;/xSe3jJmd6QpyBoZI08NwuacKT+wAeWBA==";&lt;br/&gt;OwaLbe={7313483B-4B9B-459B-8EB9-8D0BEE690596}&lt;br/&gt;Content-Length: 743&lt;br/&gt;Accept-Encoding: gzip&lt;br/&gt;Connection: Keep-Alive
&lt;/span&gt;&lt;/span&gt;&lt;/p&gt;&lt;p&gt;&lt;span style="color:#7030a0; font-family:Courier New; font-size:10pt"&gt;065.053.065.121.51253-172.030.142.217.00080:&lt;br/&gt;&amp;lt;?xml version="1.0"?&amp;gt;&amp;lt;D:searchrequestxmlns:D="DAV:"&lt;br/&gt;xmlns:R="&amp;lt;http://schemas.microsoft.com/repl/&amp;gt;"&amp;gt;&lt;br/&gt;&amp;lt;R:repl&amp;gt;&amp;lt;R:collblob&amp;gt;toCTAAMAAQIgzWX+UAA=&amp;lt;/R:collblob&amp;gt;&lt;br/&gt;&amp;lt;/R:repl&amp;gt;&amp;lt;D:sql&amp;gt;SELECT &lt;br/&gt;"&amp;lt;http://schemas.microsoft.com/repl/repl-uid&amp;gt;",&lt;br/&gt;"&amp;lt;http://schemas.microsoft.com/repl/resourcetag&amp;gt;",&lt;br/&gt;"&amp;lt;http://schemas.microsoft.com/mapi/proptag/x001A001F&amp;gt;",&lt;br/&gt;"&amp;lt;http://schemas.microsoft.com/mapi/sensitivity&amp;gt;",&lt;br/&gt;"urn:schemas:httpmail:read", "urn:schemas:httpmail:datereceived"&lt;br/&gt;FROM SCOPE ('SHALLOW TRAVERSAL OF "/exchange/john/Inbox/"')&lt;br/&gt;WHERE "&amp;lt;http://schemas.microsoft.com/mapi/proptag/0x67aa000b&amp;gt;"&lt;br/&gt;= false AND "DAV:isfolder" = false&amp;lt;/D:sql&amp;gt;&amp;lt;/D:searchrequest&amp;gt;
&lt;/span&gt;&lt;/p&gt;&lt;p&gt;And here comes the response from server with the URL of the new item, which is an e-mail with the subject 'Test + Mail' (we are working with only one message to keep things simple) …
&lt;/p&gt;&lt;p&gt;&lt;span style="font-family:Courier New; font-size:10pt"&gt;&lt;span style="color:#7030a0"&gt;172.030.142.217.00080-065.053.065.121.51253:&lt;br/&gt;&lt;/span&gt;&lt;span style="color:red"&gt;&lt;strong&gt;HTTP/1.1 207 Multi-Status&lt;/strong&gt;&lt;/span&gt;&lt;span style="color:#7030a0"&gt;&lt;br/&gt;Transfer-Encoding: chunked&lt;br/&gt;Content-Type: text/xml&lt;br/&gt;Content-Range: rows 0-0; total=*&lt;br/&gt;Accept-Ranges: rows&lt;br/&gt;Server: Microsoft-IIS/7.0&lt;br/&gt;Set-Cookie: OwaLbe={7313483B-4B9B-459B-8EB9-8D0BEE690596}; path=/&lt;br/&gt;MS-WebStorage: 08.01.10240&lt;br/&gt;MS-WebStorage: 08.01.10240&lt;br/&gt;X-Powered-By: ASP.NET&lt;br/&gt;X-Powered-By: ASP.NET&lt;br/&gt;Date: Fri, 20 Jun 2008 21:46:52 GMT
&lt;/span&gt;&lt;/span&gt;&lt;/p&gt;&lt;p&gt;&lt;span style="font-family:Courier New; font-size:10pt"&gt;&lt;span style="color:#7030a0"&gt;172.030.142.217.00080-065.053.065.121.51253:&lt;br/&gt;&amp;lt;?xml version="1.0"?&amp;gt;&amp;lt;a:multistatusxmlns:b="urn:&lt;br/&gt;uuid:c2f41010-65b3-11d1-a29f-00aa00c14882/"&lt;br/&gt;xmlns:g="urn:schemas:httpmail:"&lt;br/&gt;xmlns:f="&amp;lt;http://schemas.microsoft.com/mapi/&amp;gt;" &lt;br/&gt;xmlns:c="xml:" &lt;br/&gt;xmlns:e="&amp;lt;http://schemas.microsoft.com/mapi/proptag/&amp;gt;"&lt;br/&gt;xmlns:d="&amp;lt;http://schemas.microsoft.com/repl/&amp;gt;" &lt;br/&gt;xmlns:a="DAV:"&amp;gt;&amp;lt;a:contentrange&amp;gt;&lt;br/&gt;0-0&amp;lt;/a:contentrange&amp;gt;&amp;lt;a:response&amp;gt;&amp;lt;a:href&amp;gt;&lt;br/&gt;&amp;lt;&lt;/span&gt;&lt;span style="color:red"&gt;&lt;strong&gt;http://172.30.142.217/exchange/john/Inbox/Test%20%2B%20Mail.EML&lt;br/&gt;&lt;/strong&gt;&lt;/span&gt;&lt;span style="color:#7030a0"&gt;&amp;lt;/a:href&amp;gt;&amp;lt;d:changetype&amp;gt;new&amp;lt;/d:changetype&amp;gt;&amp;lt;a:propstat&amp;gt;&amp;lt;a:status&amp;gt;&lt;br/&gt;HTTP/1.1&amp;gt; 200 OK&amp;lt;/a:status&amp;gt;&amp;lt;a:prop&amp;gt;&amp;lt;d:repl-uid&amp;gt;&lt;br/&gt;rid:d17078df5926b048921786b466da7185000220cd63ff&lt;br/&gt;&amp;lt;/d:repl-uid&amp;gt;&amp;lt;d:resourcetag&amp;gt;rt:d5926b04892185000220cd728e&lt;br/&gt;&amp;lt;/d:resourcetag&amp;gt;&amp;lt;e:x001A001F&amp;gt;IPM.Note&amp;lt;/e:x001A001F&amp;gt;&lt;br/&gt;&amp;lt;f:sensitivity b:dt="int"&amp;gt;0&amp;lt;/f:sensitivity&amp;gt;&amp;lt;g:readb:dt="boolean"&amp;gt;0&lt;br/&gt;&amp;lt;/g:read&amp;gt;&amp;lt;g:datereceived b:dt="dateTime.tz"&amp;gt;&lt;br/&gt;20080620T21:46:46.895Z&amp;lt;/g:datereceived&amp;gt;&amp;lt;/a:prop&amp;gt;&amp;lt;/a:propstat&amp;gt;&lt;br/&gt;&amp;lt;/a:response&amp;gt;&amp;lt;d:repl&amp;gt;&amp;lt;d:collblob&amp;gt;toaUAABAAYAAiDNY/8A&amp;lt;/d:collblob&amp;gt;&lt;br/&gt;&amp;lt;/d:repl&amp;gt;&amp;lt;/a:multistatus&amp;gt;
&lt;/span&gt;&lt;/span&gt;&lt;/p&gt;&lt;p&gt;In the snippet below Entourage tries to fetch the new mail message using the URL provided by server …
&lt;/p&gt;&lt;p&gt;&lt;span style="font-family:Courier New; font-size:10pt"&gt;&lt;span style="color:#7030a0"&gt;065.053.065.121.51253-172.030.142.217.00080:&lt;br/&gt;&lt;/span&gt;&lt;span style="color:red"&gt;&lt;strong&gt;PROPFIND /exchange/john/Inbox/Test%20%2B%20Mail.EML HTTP/1.1&lt;/strong&gt;&lt;/span&gt;&lt;span style="color:#7030a0"&gt;&lt;br/&gt;Host: 172.30.142.217&lt;br/&gt;From: 65.53.65.121&lt;br/&gt;User-Agent: Entourage/12.10.0 (PPC Mac OS X 10.4.9)&lt;br/&gt;Accept: */*&lt;br/&gt;Accept-Language: en&lt;br/&gt;Content-Type: text/xml; charset="utf-8"&lt;br/&gt;Depth: 0&lt;br/&gt;Brief: t&lt;br/&gt;Translate: F&lt;br/&gt;Cookie: sessionid=7f5d08a5-f5ef-4e36-91e1-8c57c1c2a67f;&lt;br/&gt;cadata="4Soepik9ZpG1ev4wJmd6QpyBoZI08NwuacKT+wAeWBA==";&lt;br/&gt;OwaLbe={7313483B-4B9B-459B-8EB9-8D0BEE690596}&lt;br/&gt;Content-Length: 646&lt;br/&gt;Accept-Encoding: gzip&lt;br/&gt;Connection: Keep-Alive
&lt;/span&gt;&lt;/span&gt;&lt;/p&gt;&lt;p&gt;And Entourage's receives a 404 error from server for it's request, as IIS7 installed on that Windows 2008 Server (with Exchange 2007) does not allow the use of 'double escape sequence' in any incoming HTTP request.
&lt;/p&gt;&lt;p&gt;&lt;span style="font-family:Courier New; font-size:10pt"&gt;&lt;span style="color:#7030a0"&gt;172.030.142.217.00080-065.053.065.121.51253:&lt;br/&gt;&lt;/span&gt;&lt;span style="color:red"&gt;&lt;strong&gt;HTTP/1.1 404 Not Found&lt;/strong&gt;&lt;/span&gt;&lt;span style="color:#7030a0"&gt;&lt;br/&gt;Content-Type: text/html&lt;br/&gt;Server: Microsoft-IIS/7.0&lt;br/&gt;X-Powered-By: ASP.NET&lt;br/&gt;Date: Fri, 20 Jun 2008 21:46:52 GMT&lt;br/&gt;Content-Length: 1245&lt;br/&gt;&amp;lt;!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"&lt;br/&gt;"&amp;lt;http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd&amp;gt;"&amp;gt;&lt;br/&gt;&amp;lt;htmlxmlns="&amp;lt;http://www.w3.org/1999/xhtml&amp;gt;"&amp;gt;&lt;br/&gt;&amp;lt;head&amp;gt;&lt;br/&gt;&amp;lt;meta http-equiv="Content-Type" content="text/html;&lt;br/&gt;charset=iso-8859-1"/&amp;gt;&lt;br/&gt;&amp;lt;title&amp;gt;404 - File or directory not found.&amp;lt;/title&amp;gt;&lt;br/&gt;&amp;lt;style type="text/css"&amp;gt;
&lt;/span&gt;&lt;/span&gt;&lt;/p&gt;&lt;p&gt;&lt;span style="color:#7030a0; font-family:Courier New; font-size:10pt"&gt;&amp;lt;!--
&lt;/span&gt;&lt;/p&gt;&lt;p&gt;&lt;span style="color:#7030a0; font-family:Courier New; font-size:10pt"&gt;body{margin:0;font-size:.7em;font-family:Verdana, Arial,&lt;br/&gt;Helvetica, sans-serif;background:#EEEEEE;}&lt;br/&gt;fieldset{padding:0 15px 10px 15px;} &lt;br/&gt;h1{font-size:2.4em;margin:0;color:#FFF;}&lt;br/&gt;h2{font-size:1.7em;margin:0;color:#CC0000;} &lt;br/&gt;h3{font-size:1.2em;margin:10px 0 0 0;color:#000000;} &lt;br/&gt;#header{width:96%;margin:0 0 0 0;padding:6px 2% 6px 2%;&lt;br/&gt;font-family:"trebuchet MS", Verdana, sans-serif;color:#FFF;&lt;br/&gt;background-color:#555555;}&lt;br/&gt;#content{margin:0 0 0 2%;position:relative;}&lt;br/&gt;.content-container{background:#FFF;width:96%;margin-top:8px;&lt;br/&gt;padding:10px;position:relative;}
&lt;/span&gt;&lt;/p&gt;&lt;p&gt;&lt;span style="color:#7030a0; font-family:Courier New; font-size:10pt"&gt;--&amp;gt;
&lt;/span&gt;&lt;/p&gt;&lt;p&gt;&lt;span style="font-family:Courier New; font-size:10pt"&gt;&lt;span style="color:#7030a0"&gt;&amp;lt;/style&amp;gt;&lt;br/&gt;&amp;lt;/head&amp;gt;&lt;br/&gt;&amp;lt;body&amp;gt;&lt;br/&gt;&amp;lt;div id="header"&amp;gt;&amp;lt;h1&amp;gt;Server Error&amp;lt;/h1&amp;gt;&amp;lt;/div&amp;gt;&lt;br/&gt;&amp;lt;div id="content"&amp;gt;&lt;br/&gt;&amp;lt;div class="content-container"&amp;gt;&amp;lt;fieldset&amp;gt;&lt;br/&gt;&amp;lt;h2&amp;gt;&lt;/span&gt;&lt;span style="color:red"&gt;&lt;strong&gt;404 - File or directory not found.&lt;/strong&gt;&lt;/span&gt;&lt;span style="color:#7030a0"&gt;&amp;lt;/h2&amp;gt;&lt;br/&gt;&amp;lt;h3&amp;gt;&lt;/span&gt;&lt;span style="color:red"&gt;&lt;strong&gt;The resource you are looking for might have been removed,&lt;br/&gt;had its name changed, or is temporarily unavailable.&lt;/strong&gt;&lt;/span&gt;&lt;span style="color:#7030a0"&gt;&amp;lt;/h3&amp;gt;&lt;br/&gt;&amp;lt;/fieldset&amp;gt;&amp;lt;/div&amp;gt;&lt;br/&gt;&amp;lt;/div&amp;gt;&lt;br/&gt;&amp;lt;/body&amp;gt;&lt;br/&gt;&amp;lt;/html&amp;gt;
&lt;/span&gt;&lt;/span&gt;&lt;/p&gt;&lt;p&gt;Now if you look in IIS Log on Exchange 2007 CAS or Mailbox Servers, you will find the following entry there:
&lt;/p&gt;&lt;p&gt;CAS&lt;br/&gt;&lt;span style="font-family:Courier New; font-size:10pt"&gt;&lt;span style="color:#7030a0"&gt;2008-06-20 14:38:09 172.30.142.217 PROPFIND /exchange/john/Inbox/Test+++Mail.EML - 80 - 65.53.65.121 Entourage/12.11.0+(PPC+Mac+OS+X+10.4.9) &lt;/span&gt;&lt;span style="color:red"&gt;&lt;strong&gt;404&lt;/strong&gt;&lt;/span&gt;&lt;span style="color:#7030a0"&gt; 11 0 0
&lt;/span&gt;&lt;/span&gt;&lt;/p&gt;&lt;p&gt;Mailbox&lt;span style="font-family:Courier New; font-size:10pt"&gt;&lt;span style="color:#7030a0"&gt;&lt;br/&gt;2008-06-20 14:38:09 172.30.142.218 PROPFIND /exchange/john/Inbox/Test+++Mail.EML - 80 - 172.30.142.217 Exchange-Server-Frontend-Proxy/6.5+Entourage/12.11.0+(PPC+Mac+OS+X+10.4.9) &lt;/span&gt;&lt;span style="color:red"&gt;&lt;strong&gt;404&lt;/strong&gt;&lt;/span&gt;&lt;span style="color:#7030a0"&gt; 11 0 0
&lt;/span&gt;&lt;/span&gt;&lt;/p&gt;&lt;p&gt;&lt;strong&gt;More Info&lt;/strong&gt;&lt;br/&gt;For more info, you can go thru the following links:
&lt;/p&gt;&lt;p&gt;&lt;a href="http://blogs.iis.net/thomad/archive/2007/12/17/iis7-rejecting-urls-containing.aspx" target="_blank"&gt;Blog&lt;/a&gt; : IIS7 Rejecting URLs Containing Plus Sign '+'
&lt;/p&gt;&lt;p&gt;&lt;a href="http://www.owasp.org/index.php/Double_Encoding" target="_blank"&gt;Article&lt;/a&gt; : Double Encoding
&lt;/p&gt;&lt;p&gt;KB &lt;a href="http://support.microsoft.com/kb/942076" target="_blank"&gt;942076&lt;/a&gt; : Error message when you visit a Web site that is hosted on IIS 7.0: "HTTP Error 404.11 – URL_DOUBLE_ESCAPED"
&lt;/p&gt;&lt;p&gt;KB &lt;a href="http://support.microsoft.com/kb/943891" target="_blank"&gt;943891&lt;/a&gt; : The HTTP status codes in IIS 7.0&lt;/p&gt;&lt;img src="http://blogs.technet.com/aggbug.aspx?PostID=3100753" width="1" height="1"&gt;</description><category domain="http://blogs.technet.com/amir/archive/tags/Troubleshooting/default.aspx">Troubleshooting</category><category domain="http://blogs.technet.com/amir/archive/tags/Top+Issues/default.aspx">Top Issues</category><category domain="http://blogs.technet.com/amir/archive/tags/Entourage+2008/default.aspx">Entourage 2008</category><category domain="http://blogs.technet.com/amir/archive/tags/Entourage+2004/default.aspx">Entourage 2004</category><category domain="http://blogs.technet.com/amir/archive/tags/Known+Issues/default.aspx">Known Issues</category><category domain="http://blogs.technet.com/amir/archive/tags/Mail/default.aspx">Mail</category><category domain="http://blogs.technet.com/amir/archive/tags/Security/default.aspx">Security</category><category domain="http://blogs.technet.com/amir/archive/tags/Exchange+2007/default.aspx">Exchange 2007</category></item><item><title>Parts of Hyperlink After Ampersand Sign Are Stripped in Entourage 2008</title><link>http://blogs.technet.com/amir/archive/2008/07/17/parts-of-hyperlink-after-ampersand-sign-are-stripped-in-entourage-2008.aspx</link><pubDate>Thu, 17 Jul 2008 18:34:00 GMT</pubDate><guid isPermaLink="false">d5e57398-b9ef-4490-9955-07cbb4e4a80d:3090205</guid><dc:creator>amir</dc:creator><slash:comments>2</slash:comments><comments>http://blogs.technet.com/amir/comments/3090205.aspx</comments><wfw:commentRss>http://blogs.technet.com/amir/commentrss.aspx?PostID=3090205</wfw:commentRss><wfw:comment>http://blogs.technet.com/amir/rsscomments.aspx?PostID=3090205</wfw:comment><description>&lt;P&gt;&lt;SPAN style="FONT-SIZE: 11pt; COLOR: blue; LINE-HEIGHT: 115%; FONT-FAMILY: 'Calibri','sans-serif'; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: Calibri; mso-fareast-theme-font: minor-latin; mso-hansi-theme-font: minor-latin; mso-bidi-font-family: 'Times New Roman'; mso-bidi-theme-font: minor-bidi; mso-ansi-language: EN-US; mso-fareast-language: EN-US; mso-bidi-language: AR-SA"&gt;&lt;STRONG&gt;&lt;U&gt;Update&lt;/U&gt;&lt;/STRONG&gt;&lt;/SPAN&gt;&lt;SPAN style="FONT-SIZE: 11pt; LINE-HEIGHT: 115%; FONT-FAMILY: 'Calibri','sans-serif'; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: Calibri; mso-fareast-theme-font: minor-latin; mso-hansi-theme-font: minor-latin; mso-bidi-font-family: 'Times New Roman'; mso-bidi-theme-font: minor-bidi; mso-ansi-language: EN-US; mso-fareast-language: EN-US; mso-bidi-language: AR-SA"&gt;: The fix for this issue has been &lt;A href="http://www.microsoft.com/mac/downloads.mspx" target=_blank&gt;&lt;FONT color=#800080&gt;released&lt;/FONT&gt;&lt;/A&gt; in the 12.1.2 Update for Office 2008 for Mac.&lt;/SPAN&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;Here is another known issue we are working to fix these days. &lt;/P&gt;
&lt;P&gt;&lt;STRONG&gt;Issue&lt;/STRONG&gt;&lt;BR&gt;Entourage 2008 users are reporting that it is stripping parts of hyperlinks (URLs) in messages they receive from other users. It always strips parts of those hyperlinks right after '&amp;amp;', including the ampersand sign. This is only being reported by those users who have recently upgraded to Office 2008 for Mac Service Pack 1 (&lt;A href="http://support.microsoft.com/kb/952331" target=_blank mce_href="http://support.microsoft.com/kb/952331"&gt;SP1&lt;/A&gt;). Examples of stripped URLs are: &lt;/P&gt;
&lt;P&gt;Original Link:&lt;BR&gt;https://www.contoso.com/dept/sales/abc.php?ABCD=0987654321&amp;amp;UID=987612345 &lt;/P&gt;
&lt;P&gt;Stripped Link:&lt;BR&gt;https://www.contoso.com/dept/sales/abc.php?ABCD=0987654321=987612345 &lt;/P&gt;
&lt;P&gt;&lt;SPAN style="TEXT-DECORATION: underline"&gt;Note&lt;/SPAN&gt; that '&amp;amp;UID' has been stripped &lt;/P&gt;
&lt;P&gt;Original Link:&lt;BR&gt;https://www.litwareinc.com/EntApp/ViewMsg.asp?MsgID=897&amp;amp;SaveID=7843~2945 &lt;/P&gt;
&lt;P&gt;Stripped Link:&lt;BR&gt;https://www.litwareinc.com/EntApp/ViewMsg.asp?MsgID=897=7843~2945 &lt;/P&gt;
&lt;P&gt;&lt;SPAN style="TEXT-DECORATION: underline"&gt;Note&lt;/SPAN&gt; that '&amp;amp;SaveCaseID' has been stripped &lt;/P&gt;
&lt;P&gt;&lt;STRONG&gt;Cause&lt;/STRONG&gt;&lt;BR&gt;This happens as '&amp;amp;' is not properly encoded as '&amp;amp;amp' in the message source &lt;/P&gt;
&lt;P&gt;&lt;STRONG&gt;Resolution&lt;/STRONG&gt;&lt;BR&gt;Microsoft is working to release a fix for this issue in an update for Entourage 2008 but a final release date is not available yet. I plan to update this post with new information in this regard when it becomes available.&lt;/P&gt;&lt;img src="http://blogs.technet.com/aggbug.aspx?PostID=3090205" width="1" height="1"&gt;</description><category domain="http://blogs.technet.com/amir/archive/tags/Entourage/default.aspx">Entourage</category><category domain="http://blogs.technet.com/amir/archive/tags/Troubleshooting/default.aspx">Troubleshooting</category><category domain="http://blogs.technet.com/amir/archive/tags/Entourage+2008/default.aspx">Entourage 2008</category><category domain="http://blogs.technet.com/amir/archive/tags/Known+Issues/default.aspx">Known Issues</category></item><item><title>SSL Warning Issue in Entourage 2008</title><link>http://blogs.technet.com/amir/archive/2008/07/16/ssl-warning-issue-in-entourage-2008.aspx</link><pubDate>Thu, 17 Jul 2008 00:15:00 GMT</pubDate><guid isPermaLink="false">d5e57398-b9ef-4490-9955-07cbb4e4a80d:3089847</guid><dc:creator>amir</dc:creator><slash:comments>24</slash:comments><comments>http://blogs.technet.com/amir/comments/3089847.aspx</comments><wfw:commentRss>http://blogs.technet.com/amir/commentrss.aspx?PostID=3089847</wfw:commentRss><wfw:comment>http://blogs.technet.com/amir/rsscomments.aspx?PostID=3089847</wfw:comment><description>&lt;P class=MsoNormal style="MARGIN: 0in 0in 10pt"&gt;&lt;SPAN style="FONT-SIZE: 11pt; COLOR: blue; LINE-HEIGHT: 115%; FONT-FAMILY: 'Calibri','sans-serif'; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: Calibri; mso-fareast-theme-font: minor-latin; mso-hansi-theme-font: minor-latin; mso-bidi-font-family: 'Times New Roman'; mso-bidi-theme-font: minor-bidi; mso-ansi-language: EN-US; mso-fareast-language: EN-US; mso-bidi-language: AR-SA"&gt;&lt;STRONG&gt;&lt;U&gt;Update 1&lt;/U&gt;&lt;/STRONG&gt;&lt;/SPAN&gt;&lt;SPAN style="FONT-SIZE: 11pt; LINE-HEIGHT: 115%; FONT-FAMILY: 'Calibri','sans-serif'; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: Calibri; mso-fareast-theme-font: minor-latin; mso-hansi-theme-font: minor-latin; mso-bidi-font-family: 'Times New Roman'; mso-bidi-theme-font: minor-bidi; mso-ansi-language: EN-US; mso-fareast-language: EN-US; mso-bidi-language: AR-SA"&gt;: The fix for this issue has been &lt;A href="http://www.microsoft.com/mac/downloads.mspx" target=_blank&gt;&lt;FONT color=#800080&gt;released&lt;/FONT&gt;&lt;/A&gt; in the 12.1.2 Update for Office 2008 for Mac. See 'Improvements for Microsoft Entourage 2008 for Mac' section in KB &lt;A class="" href="http://support.microsoft.com/kb/956344" target=_blank mce_href="http://support.microsoft.com/kb/956344"&gt;956344&lt;/A&gt;.&lt;/SPAN&gt;&lt;/P&gt;
&lt;P class=MsoNormal style="MARGIN: 0in 0in 10pt"&gt;&lt;SPAN style="FONT-SIZE: 11pt; LINE-HEIGHT: 115%; FONT-FAMILY: 'Calibri','sans-serif'; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: Calibri; mso-fareast-theme-font: minor-latin; mso-hansi-theme-font: minor-latin; mso-bidi-font-family: 'Times New Roman'; mso-bidi-theme-font: minor-bidi; mso-ansi-language: EN-US; mso-fareast-language: EN-US; mso-bidi-language: AR-SA"&gt;&lt;SPAN style="FONT-SIZE: 11pt; COLOR: blue; LINE-HEIGHT: 115%; FONT-FAMILY: 'Calibri','sans-serif'; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: Calibri; mso-fareast-theme-font: minor-latin; mso-hansi-theme-font: minor-latin; mso-bidi-font-family: 'Times New Roman'; mso-bidi-theme-font: minor-bidi; mso-ansi-language: EN-US; mso-fareast-language: EN-US; mso-bidi-language: AR-SA"&gt;&lt;STRONG&gt;&lt;U&gt;Update 2&lt;/U&gt;&lt;/STRONG&gt;&lt;/SPAN&gt;&lt;SPAN style="FONT-SIZE: 11pt; LINE-HEIGHT: 115%; FONT-FAMILY: 'Calibri','sans-serif'; mso-ascii-theme-font: minor-latin; mso-fareast-font-family: Calibri; mso-fareast-theme-font: minor-latin; mso-hansi-theme-font: minor-latin; mso-bidi-font-family: 'Times New Roman'; mso-bidi-theme-font: minor-bidi; mso-ansi-language: EN-US; mso-fareast-language: EN-US; mso-bidi-language: AR-SA"&gt;: The fix for a subsequent 'CNAME' entry&amp;nbsp;issue discussed in the comments section of this blog post has been &lt;A href="http://www.microsoft.com/mac/downloads.mspx" target=_blank&gt;&lt;FONT color=#800080&gt;released&lt;/FONT&gt;&lt;/A&gt; in the 12.1.3 Update for Office 2008 for Mac. See 'Improvements for Microsoft Entourage 2008 for Mac' section in KB &lt;A class="" href="http://support.microsoft.com/kb/958267" target=_blank mce_href="http://support.microsoft.com/kb/958267"&gt;958267&lt;/A&gt;.&lt;/SPAN&gt;&lt;/SPAN&gt;&lt;/P&gt;
&lt;P class=MsoNormal style="MARGIN: 0in 0in 10pt"&gt;In this post I wanted to quickly provide an update on an ongoing issue with some specifics to make sure our customers are well informed on its current status. &lt;/P&gt;
&lt;P&gt;&lt;STRONG&gt;Issue&lt;/STRONG&gt;&lt;BR&gt;After installing Office 2008 for Mac Service Pack 1 (&lt;A href="http://support.microsoft.com/kb/952331" target=_blank mce_href="http://support.microsoft.com/kb/952331"&gt;SP1&lt;/A&gt;) when Entourage 2008 users connect to their mailbox on an Exchange 2007 Server, they may see an error like this (you can substitute 'contoso' in the screenshot below with your own root domain): &lt;/P&gt;
&lt;P style="TEXT-ALIGN: center"&gt;&lt;IMG alt="" src="http://erage.members.winisp.net/071608_2114_SSLWarningI1.png" mce_src="http://erage.members.winisp.net/071608_2114_SSLWarningI1.png"&gt; &lt;/P&gt;
&lt;P&gt;If you click on 'OK', Entourage will continue to work and you won't see this error message again until the end of that session when you close Entourage. Clicking on 'Cancel' you may end up in 'Not Connected' state with your Exchange account. This error may also come up when: &lt;/P&gt;
&lt;P&gt;1. You try to configure your Exchange account using 'Account Setup Assistant' which now uses Autodiscover Service on Exchange 2007 to automatically configure your account &lt;SPAN style="TEXT-DECORATION: underline"&gt;or&lt;/SPAN&gt; &lt;/P&gt;
&lt;P&gt;2. You use any 'Exchange Web Services' based feature in Entourage 2008, like OOF Assistant, Free/Busy Info pull-up, etc. as they also utilize Autodiscover feature &lt;SPAN style="TEXT-DECORATION: underline"&gt;or&lt;/SPAN&gt; &lt;/P&gt;
&lt;P&gt;3. Entourage tries to talk to Autodiscover Service while its running connected to your mailbox to see if any updates were made to Autodiscover Service on server side by your Exchange Administrator, this happens automatically in the background based on a pre-set interval which cannot be modified by user &lt;/P&gt;
&lt;P&gt;&lt;STRONG&gt;Cause&lt;/STRONG&gt;&lt;BR&gt;This happens as Entourage 2008 tries to establish a secured connection to the first of the 2 default addresses (URLs) in its attempt to contact the Autodiscover Service on your Exchange 2007 Server. This is explained in the Autodiscover &lt;A href="http://technet.microsoft.com/en-us/library/bb332063(EXCHG.80).aspx" target=_blank mce_href="http://technet.microsoft.com/en-us/library/bb332063(EXCHG.80).aspx"&gt;Whitepaper&lt;/A&gt;, see 'How the Autodiscover Service Works with Clients' section. Most organizations using Exchange 2007 do not publish Autodiscover Service thru the first URL mentioned over there, i.e. 'https://contoso.com/autodiscover/autodiscover.xml', rather they use the other URL, i.e. 'https://autodiscover.contoso.com/autodiscover/autodiscover.xml'. When Entourage finds an error (mostly its 'Common Name' mismatch) with the certificate published at the root of your domain (if there is one, many organizations do, but 'Common Name' on that certificate is 'www.contoso.com', not just 'contoso.com' and Autodiscover Service is not published thru that URL), it displays the above error. It does not move silently to try the other possible URL. Clicking 'OK' on above error makes it exactly do that and thus it finds the Autodiscover Service responding on the other URL and everything then works fine from there. &lt;/P&gt;
&lt;P&gt;This issue can also happen in Entourage 2008 if Autodiscover Service is not configured properly as per the guidelines in Autodiscover &lt;A href="http://technet.microsoft.com/en-us/library/bb332063(EXCHG.80).aspx" target=_blank mce_href="http://technet.microsoft.com/en-us/library/bb332063(EXCHG.80).aspx"&gt;Whitepaper&lt;/A&gt;. See 'Note' below on how to quickly check to see if Autodiscover Service is properly configured and published for users. &lt;/P&gt;
&lt;P&gt;&lt;STRONG&gt;Resolution&lt;/STRONG&gt;&lt;BR&gt;Microsoft is working to release a fix for this issue in an update for Entourage 2008 but a final release date is not available yet. I plan to update this post with new information in this regard when it becomes available. &lt;/P&gt;
&lt;P&gt;&lt;STRONG&gt;Note&lt;/STRONG&gt;&lt;BR&gt;We need to make sure that when Entourage looks for Autodiscover Service, the related URL as mentioned above in 'Cause' section is configured and published to respond to those requests. A quick way is to look up the A Record (a type of DNS record which is used to map a hostname or URL to the IP Address of the host) which you will have to register with your DNS provider. &lt;/P&gt;
&lt;P&gt;A Working Example:&lt;BR&gt;For Microsoft, the Autodiscover Service is configured and published at 'https://autodiscover.microsoft.com/autodiscover/autodiscover.xml', you can look it up using this URL in your browser: &lt;/P&gt;
&lt;P&gt;&lt;A href="http://codeflux.com/exec/tools/?method=nslookup&amp;amp;query=autodiscover.microsoft.com&amp;amp;type=A" mce_href="http://codeflux.com/exec/tools/?method=nslookup&amp;amp;query=autodiscover.microsoft.com&amp;amp;type=A"&gt;http://codeflux.com/exec/tools/?method=nslookup&amp;amp;query=autodiscover.microsoft.com&amp;amp;type=A&lt;/A&gt; &lt;/P&gt;
&lt;P&gt;You will see an IP Address is mapped to the URL for Autodiscover Service to respond to incoming requests. &lt;/P&gt;
&lt;P&gt;Now, if I go and hit the URL for Autodiscover Service in my browser, i.e. 'https://autodiscover.microsoft.com/autodiscover/autodiscover.xml' &lt;/P&gt;
&lt;P&gt;I will get a window to enter my user credentials (domain\username &amp;amp; password) and after that I will see the following lines in the main browser window: &lt;/P&gt;
&lt;P&gt;&lt;SPAN style="COLOR: #009900"&gt;&amp;lt;?xml version="1.0" encoding="utf-8" ?&amp;gt; &lt;BR&gt;- &amp;lt;Autodiscover xmlns="http://schemas.microsoft.com/exchange/autodiscover/responseschema/2006"&amp;gt;&lt;BR&gt;- &amp;lt;Response&amp;gt;&lt;BR&gt;- &amp;lt;Error Time="10:29:57.7332076" Id="59171512"&amp;gt;&lt;BR&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;lt;ErrorCode&amp;gt;600&amp;lt;/ErrorCode&amp;gt;&lt;BR&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;lt;Message&amp;gt;Invalid Request&amp;lt;/Message&amp;gt;&lt;BR&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;lt;DebugData /&amp;gt;&lt;BR&gt;&amp;lt;/Error&amp;gt;&lt;BR&gt;&amp;lt;/Response&amp;gt;&lt;BR&gt;&amp;lt;/Autodiscover&amp;gt; &lt;/SPAN&gt;&lt;/P&gt;
&lt;P&gt;The response above says 'Error 600, Invalid Request' as the Autodiscover Service URL is not supposed to be accessed thru a browser. This is an expected response in this scenario and confirms the proper configuration and publishing of Autodiscover Service. &lt;/P&gt;
&lt;P&gt;A Non-Working Example:&lt;BR&gt;Let's use Contoso as a non-working example, the Autodisover Service should be configured and published at 'https://autodiscover.contoso.com/autodiscover/autodiscover.xml', if you look it up using this URL in your browser: &lt;/P&gt;
&lt;P&gt;&lt;A href="http://codeflux.com/exec/tools/?method=nslookup&amp;amp;query=autodiscover.contoso.com&amp;amp;type=A" mce_href="http://codeflux.com/exec/tools/?method=nslookup&amp;amp;query=autodiscover.contoso.com&amp;amp;type=A"&gt;http://codeflux.com/exec/tools/?method=nslookup&amp;amp;query=autodiscover.contoso.com&amp;amp;type=A&lt;/A&gt; &lt;/P&gt;
&lt;P&gt;You won't find an IP Address mapped to the URL for Autodiscover Service, instead you will see an error there saying 'server can't find autodiscover.contoso.com'.&lt;/P&gt;&lt;img src="http://blogs.technet.com/aggbug.aspx?PostID=3089847" width="1" height="1"&gt;</description><category domain="http://blogs.technet.com/amir/archive/tags/Troubleshooting/default.aspx">Troubleshooting</category><category domain="http://blogs.technet.com/amir/archive/tags/Entourage+2008/default.aspx">Entourage 2008</category><category domain="http://blogs.technet.com/amir/archive/tags/Known+Issues/default.aspx">Known Issues</category><category domain="http://blogs.technet.com/amir/archive/tags/Exchange+2007/default.aspx">Exchange 2007</category></item><item><title>DST Workaround for Entourage 2004 &amp; 2008 Users in ANZ   </title><link>http://blogs.technet.com/amir/archive/2008/03/31/dst-workaround-for-entourage-2004-2008-users-in-anz.aspx</link><pubDate>Tue, 01 Apr 2008 02:12:00 GMT</pubDate><guid isPermaLink="false">d5e57398-b9ef-4490-9955-07cbb4e4a80d:3024890</guid><dc:creator>amir</dc:creator><slash:comments>1</slash:comments><comments>http://blogs.technet.com/amir/comments/3024890.aspx</comments><wfw:commentRss>http://blogs.technet.com/amir/commentrss.aspx?PostID=3024890</wfw:commentRss><wfw:comment>http://blogs.technet.com/amir/rsscomments.aspx?PostID=3024890</wfw:comment><description>&lt;P&gt;&lt;STRONG&gt;&lt;U&gt;Update&lt;/U&gt;&lt;/STRONG&gt;: The fixes for this issue have been released in 11.5 (Entourage 2004) &amp;amp; 12.1 (Entourage 2008) Updates for Office for Mac.&lt;/P&gt;
&lt;P&gt;I wanted to quickly provide this workaround to the users of Entourage 2004 &amp;amp; 2008 in Australia &amp;amp; New Zealand (ANZ) time zones until Microsoft releases fixes thru updates at Mactopia website. &lt;/P&gt;
&lt;P&gt;&lt;STRONG&gt;Issue&lt;/STRONG&gt;&lt;BR&gt;When Entourage 2004 &amp;amp; 2008 users organize meetings by inviting other users who are using Microsoft Outlook or OWA (Outlook Web Access) against their Exchange mailboxes (version of Exchange Server does not matter here), then those meeting attendees may see the incoming meeting invite being an hour off. This issue is not seen if all meeting attendees are Entourage users. &lt;/P&gt;
&lt;P&gt;&lt;STRONG&gt;Cause&lt;/STRONG&gt;&lt;BR&gt;This happens as Entourage 2004 &amp;amp; 2008 use DST information from related 'Timezones' files for users in ANZ time zones, which are not up to date with current information. &lt;/P&gt;
&lt;P&gt;&lt;STRONG&gt;Resolution&lt;/STRONG&gt;&lt;BR&gt;Microsoft is working to release a fix for this issue in an update for both versions of Entourage but a final release date is not available yet. When that update is available, users can safely install it and it will replace the files which they will put on their systems as a result of applying the workaround provided below. &lt;/P&gt;
&lt;P&gt;&lt;STRONG&gt;Workaround&lt;/STRONG&gt;&lt;BR&gt;Below are the steps to follow for both versions of Entourage. Only Entourage users will need to apply this workaround on their machines, no action is required by other users who are using Microsoft Outlook or OWA. &lt;/P&gt;
&lt;P&gt;&lt;STRONG&gt;Entourage 2004 &lt;/STRONG&gt;&lt;/P&gt;
&lt;OL&gt;
&lt;LI&gt;Quit Entourage (Entourage should not be running when you apply this workaround) &lt;/LI&gt;
&lt;LI&gt;Back up the current 'Timezones' file in folder: Mac Hard Drive : Applications : Microsoft Office 2004 : Office (just copy it to a backup folder on your hard drive) &lt;/LI&gt;
&lt;LI&gt;Download the updated 'Timezones' file for Entourage 2004 from &lt;A href="http://erage.members.winisp.net/Downloads/Timezones-2004.zip" mce_href="http://erage.members.winisp.net/Downloads/Timezones-2004.zip"&gt;here&lt;/A&gt; (extract its content before proceeding to next step) &lt;/LI&gt;
&lt;LI&gt;Copy the downloaded 'Timezones' file to the same location as above in Step 2, replacing the existing 'Timezones' file &lt;/LI&gt;
&lt;LI&gt;That's it, you are done, launch Entourage and every meeting you create now will not display the issue described above &lt;/LI&gt;&lt;/OL&gt;
&lt;P&gt;&lt;STRONG&gt;Entourage 2008 &lt;/STRONG&gt;&lt;/P&gt;
&lt;OL&gt;
&lt;LI&gt;Quit Entourage (Entourage should not be running when you apply this workaround) &lt;/LI&gt;
&lt;LI&gt;Back up the current 'Timezones.ics' file, go to folder: Mac Hard Drive : Applications : Microsoft Office 2008 : Office, locate a file by the name of 'EntourageCore.framework', now Control-Click on it and choose 'Show Package Contents' in the resulting menu, a new window will appear, in that window go to folder: Versions : 12 : Resources : en.lproj (you will find the 'Timezones.ics' file here, just copy it to a backup folder on your hard drive) &lt;/LI&gt;
&lt;LI&gt;Download the updated 'Timezones.ics' file for Entourage 2008 from &lt;A href="http://erage.members.winisp.net/Downloads/Timezones-2008.zip" mce_href="http://erage.members.winisp.net/Downloads/Timezones-2008.zip"&gt;here&lt;/A&gt; (extract its content before proceeding to next step) &lt;/LI&gt;
&lt;LI&gt;Copy the downloaded 'Timezones.ics' file to the same location as above in Step 2, replacing the existing 'Timezones.ics' file &lt;/LI&gt;
&lt;LI&gt;That's it, you are done, launch Entourage and every meeting you create now will not display the issue described above &lt;/LI&gt;&lt;/OL&gt;
&lt;P&gt;&lt;SPAN style="TEXT-DECORATION: underline"&gt;&lt;STRONG&gt;Note&lt;/STRONG&gt;&lt;/SPAN&gt;: Any meetings which were scheduled earlier and display the issue described in this post will not automatically get fixed. If you want to fix them, you will have to open them and make a change in them (like add one character to its subject/title or notes area, etc.), then save them and send update to all attendees. This change will force Entourage to recalculate DST info as per the updated 'Timezones' file. &lt;/P&gt;
&lt;P&gt;&lt;STRONG&gt;Workaround Removal&lt;/STRONG&gt;&lt;BR&gt;If at anytime you may need to remove or undo this workaround, just follow the same steps as above and replace the 'Timezones' files with the original ones which you backed up earlier.&lt;/P&gt;&lt;img src="http://blogs.technet.com/aggbug.aspx?PostID=3024890" width="1" height="1"&gt;</description><category domain="http://blogs.technet.com/amir/archive/tags/Entourage/default.aspx">Entourage</category><category domain="http://blogs.technet.com/amir/archive/tags/Microsoft/default.aspx">Microsoft</category><category domain="http://blogs.technet.com/amir/archive/tags/Troubleshooting/default.aspx">Troubleshooting</category><category domain="http://blogs.technet.com/amir/archive/tags/Entourage+2008/default.aspx">Entourage 2008</category><category domain="http://blogs.technet.com/amir/archive/tags/Entourage+2004/default.aspx">Entourage 2004</category><category domain="http://blogs.technet.com/amir/archive/tags/Known+Issues/default.aspx">Known Issues</category></item></channel></rss>