You need to be assigned permissions before you can perform this procedure. To see what permissions you need, see the "Autodiscover service virtual directory settings" entry in the Client Access Permissions topic.

To allow external access to the Autodiscover service for Outlook 2010 or Outlook 2007 clients that are connected from the Internet, we recommend that you perform these steps in the following order.

1. (Optional) Configure a separate IIS Web site on a Client Access server to host the Autodiscover service   You can create a separate site to host Autodiscover service traffic by using the New-AutodiscoverVirtualDirectory cmdlet. This step is recommended if the domain in the Simple Mail Transfer Protocol (SMTP) address is the same as the corporate Web site address and your corporate Web site is visited frequently. For example, if the corporate Web site is www.contoso.com, the e-mail SMTP domain is contoso.com, and the corporate Web site (www.contoso.com) is visited frequently, we recommend that you create a separate site and host the Autodiscover service on autodiscover.contoso.com. For more information, see Create an Autodiscover Virtual Directory.
   
   

   Note:
   You must use one IP address per site.

2. (Required) Configure a valid SSL certificate   You must configure a valid SSL certificate from a CA that the client computer trusts. We recommend that you use the Exchange 2010 Certificate wizard to configure a valid SSL certificate. For information about how to create an SSL certificate, see Create a New Exchange Certificate. If you've decided to host the Autodiscover service on a separate Web site, see Configure SSL Certificates to Use Multiple Client Access Server Host Names.
   
   
3. (Optional) Update the SCP Object   You only need to perform this step if you want internal Exchange clients to connect to the Autodiscover service through the Internet. Service connection points (SCPs) are only used for internal Exchange clients. If you've created a separate IIS Web site for the Autodiscover service, you must update the SCP object in Active Directory to specify which Client Access server and Autodiscover virtual directory you want clients to connect to. For more information about how to configure SCP objects, see Publishing with Service Connection Points.
   
   
4. (Required) Configure the firewall and SSL certificate   You should configure the firewall for the address space and configure the SSL certificate for the Autodiscover service. For more information, check your firewall documentation. If your firewall server is ISA Server 2006, see Publishing Exchange Server 2007 with ISA Server 2006. For information about how to configure Outlook Anywhere to use multiple SSL certificates, see Configure Outlook Anywhere to Use Multiple SSL Certificates.
   
   
5. (Optional) Create a new Web site for the Autodiscover service   Follow these steps:
   
   
   1. In IIS Manager, expand your Client Access server name, select and right-click Sites, and then select Add Web Site. Enter your SMTP domain name under Site name.
      
      
   2. Under Physical path, navigate to %SystemDrive%\inetpub\. Under inetpub, create a new folder called Autodiscover.
      
      

   Note:
   You must allow the Users group Read & execute access to the Web site that you create.

6. (Optional) Create an Autodiscover virtual directory for the new Web site   You can use the Shell to create an Autodiscover virtual directory for the new Web site in IIS by running the following command.
   
   You need to be assigned permissions before you can perform this procedure. To see what permissions you need, see the "Autodiscover virtual directory settings" entry in the Client Access Permissions topic.
   
   

   	Copy Code
   New-AutodiscoverVirtualDirectory -Websitename <websitename> -BasicAuthentication:$true -WindowsAuthentication:$true

   Note:
   A Web site that uses SSL requires that you use a unique IP address.

   For more information about syntax and parameters, see New-AutodiscoverVirtualDirectory.
   
   
7. (Optional) Configure a trusted third-party SSL certificate on the new Web site   If you created a new Web site to host the Autodiscover service, configure a trusted third-party SSL certificate on the Web site. We recommend that you use the Exchange 2010 Certificate wizard to configure a valid SSL certificate. For information about how to create an SSL certificate, see Create a New Exchange Certificate. For more information, see Understanding Digital Certificates and SSL.
   
   

After you configure a new Web site for the Autodiscover service, you may also want to:

• Configure Exchange Services for the Autodiscover Service
  
  
• Configure the Autodiscover Service for Multiple Forests