UCSF/SFGH Dean's Office - Computing & Network Services
Configuring Entourage 2004 on Mac OS X to Access Exchange 2003 Server

The purpose of this document is to provide reference for UCSF – School of Medicine Computer Support Coordinators in configuring Entourage 2004 to run on Mac OS X.4 clients. It is assumed that the correct Active Directory DNS IP addresses and domain name suffix information are properly entered in the TCP/IP stack settings of the OS.

The series of steps are summarized as follows:

1. Binding Mac OS X to Active Directory (this is optional)
2. Creating the user profile in Entourage

Binding Mac OS X to SOM domain in Active Directory

Note that you will need to pre-create the computer account in the appropriate OU in the SOM domain before proceeding to configure the Mac client. Binding Macs to non-SOM domain is not supported at this time. These steps will work only on the 128.218.x.x or 10.86.x.x networks at SFGH.

1. Log in with Administrative privileges on the Mac.
2. Double-click the Directory Access icon in the Applications\Utilities folder.
3. Check the Active Directory protocol.
4. Click the Configure button and set the following Directory Access service options.
   
   Active Directory Forest: - Automatic -
   Active Directory Domain: som.ucsf.edu
   Computer ID: (computer name in AD)
   
   
5. Click Show Advanced Options then click on Administrative options. Observe the following settings.
   
   Check Prefer this domain server: and type in somad03.som.ucsf.edu.
   Check Allow administration by: (Do not change default, e.g., domain admins, enterprise admins. Add other entries after successfully binding to AD.)
   Uncheck Allow authentication from any domain in the forest
   
   
6. Click the Bind button.
7. If an Authenticate dialog appears telling you that "Directory Access requires that you type your password," enter the Mac local administrative account and password.
8. In the Network Administrator Required window, type the username (do not precede with som\ or use @som.ucsf.edu suffix - just use username) and password in AD that has the privilege to add computers in the domain
9. Type in the appropriate Active Directory OU under the Computer OU field where the Mac should be placed. For example:
   
   CN=Computers,CN=Dean,CN=SFGH,DC=som,DC=ucsf,DC=edu
   
   Leave the Use for authentication and Use for contacts fields checked (default).
   
   
10. Click OK. If an Authenticate dialog appears again, supply the Mac local administrative credentials.
11. If a Join existing account? dialog appears, click OK. The Bind button then changes to Unbind to denote that the computer is now a member of the SOM domain. Click OK to close the Active Directory window.
12. Click on Authentication option in the Directory Access window. Insure that /Active Directory/som.ucsf.edu is added to the bottom of the Directory Domains list.
13. Open the Mac OS System Preferences and double-click Accounts.
14. Set Display Login Window as: List of Users and close System Preferences.
15. Reboot the Mac. This is necessary to enable the domain groups in step 5 to become local administrators.
16. In the logon window, click Other icon in order to log on to Active Directory.
17. Log in as the user who is going to be using Entourage to connect to Exchange.
    

Creating the User Profile in Entourage

1. Start Entourage 2004.
2. A new user wizard pops up. You may choose to use the wizard or manually configure the Exchange profile with the following settings:
   
   Account Settings:
   
   Account Name: (Type in user’s full or friendly name)
   Account ID: (AD username)
   Password: (Not required)
   Domain: som.ucsf.edu
   "Save password in my Mac OS keychain" is optional.
   
   Exchange Server:
   https://sfgh.ucsf.edu/Exchange/ (for mailboxes in the SFGH05 server)
   https://somowa.medschool.ucsf.edu/ Exchange/ (for mailboxes in the SOMMAIL01 server)
   https://exchange.ucsf.edu/exchange/ (for mailboxes in the EXVS)
   
   Name: (The user’s full name, resolved automatically by Entourage)
   E-mail Address: (Type in the email address)
   
   Mail Settings: (Leave default settings)
   
   Directory Settings:
   
   LDAP Server:
   somad06 (for Macs in the SFGH AD site)
   somad01 (for Macs in non-SFGH AD sites)
   Maximum number of results to return: 100
   Search Base: (Leave blank)
   
   Advanced Options:
   Check This server requires me to log on
   Check Override default LDAP port: and enter 3268
   
   Uncheck "The LDAP server requires a secure connection (SSL)"
   
   Advanced:
   
   Public Folders Server:
   (Leave blank for mailboxes in the SFGH05 server)
   (somowa.medschool.ucsf.edu for mailboxes in the SOMMAIL01 server)
   Synchronization Options: Select Synchronize all items to server
   Security: Check DAV service requires SSL
   
   Delegates: (Optional)
   
   Security: (Leave default settings, no certificates are used)
   
   
3. Close the Account Settings window to save changes.
4. Click Tools | Run Schedule | Edit Schedules from the Entourage menu. Double click on Send and Receive All and enter the preferred frequency that it synchronizes with the Exchange Server under Repeating Schedule every X minutes. The recommended range is 5-15 minutes.
5. Quit and restart Entourage. This forces synchronization with Exchange.

Revised: 5-28-2008