Exchange Client For Mac


Outlook 2016 for Mac supports Kerberos protocol as a method of authentication with Microsoft Exchange Server and standalone LDAP accounts. Kerberos protocol uses cryptography to help provide secure mutual authentication for a network connection between a client and a server, or between two servers.

Kerberos protocol is based on ticketing. In this scheme, a client must provide a valid user name and password only once to prove their identity to an authentication server. Then, the authentication server grants the client strongly encrypted tickets that include client information and the session key that expires after a specified period of time. The client then attempts to decrypt the ticket by using its password. If the client successfully decrypts the ticket, it keeps the ticket, which is now shared by the client and the server. This decrypted ticket indicates the proof of the client's identity and is used to authenticate the client. The timestamp included in the ticket indicates that it's a recently generated ticket and is not a replay attack. If an attacker tries to capture and decrypt the information in a ticket, the breach will be limited to the current session. The client can use the same ticket on the network to request other network resources. To use this ticketing scheme, both the client and the server must have a trusted connection to the domain Key Distribution Center (KDC).

Mac OS X includes built-in support for Microsoft Kerberos authentication and Active Directory authentication policies, such as password changes, expiration and forced password changes, and Active Directory replication and failover. By leveraging the Mac OS X Kerberos service, Outlook for Mac uses the single sign-on mechanism to offer better password handling and a cleaner setup experience.

Benefits of using Kerberos authentication

  1. Re: RE: Exchange Archive and Mac OS Mail client Moving a large quantity of email back to the mailbox is not a happy thing to do, unless you want to drink a lot of coffee while you watch OWA or Outlook copy the items.
  2. Thanks for your reply, yes its Yosemite 10.10.2 and were using Exchange 2007 SP3, we have a couple of Mac users using Outlook 2011 and they are working fine connecting to our exchange server except this one.
  3. If your Exchange Server is older than above, then your only option with an Intel-based Mac is Entourage 2008. What follows is a difficult concept for many people to grasp. What follows is a difficult concept for many people to grasp.

However, I found to my chagrin that Mac Outlook 8.2.1, while indeed a real Exchange Server client for the Mac, is in fact a direct port of the old Exchange Client software from the early '90s, complete with that Win3.x/early Win95 interface and dog-slow performance. Looking for an email client for MAC OS X, which does not include the native apple email client, and does not include the following: Outlook for MAC, Airmail, Sparrow, Thunderbird, Foxmail. The email client needs to be compatible with Microsoft Exchange 2010.

Kerberos provides a secure, single sign-on, trusted third-party, mutual authentication service.

  • Secure Kerberos is secure because it does not transmit passwords over the network in clear text.

  • Single sign-on End users only need to log in once to access all network resources that support Kerberos authentication. After a user is authenticated through Kerberos at the start of a login session, their credentials are transparently passed to every resource that they access during the day.

  • Trusted third-party Kerberos works through a centralized authentication server that all systems on the network inherently trust. All authentication requests are routed through the centralized Kerberos server.

  • Mutual authentication Protects the confidentiality of sensitive information by verifying a user's identity and the identity of the server that they are communicating with.

Kerberos authentication and Outlook

You should determine the type of authentication that your organization's Exchange server uses. You can use Kerberos protocol or the other supported authentication methods: NTLM, basic authentication, or forms-based authentication for the Exchange server. In Outlook for Mac, you do not have control over the type of authentication methods that users choose. You should ask your users to choose Kerberos authentication if your organization's Exchange server uses it and their computers are connected to the corporate network.

When you set up your Exchange account in Outlook for Mac, you must click Kerberos on the Method pop-up menu, or for all other types of authentication, click User Name and Password. When you choose the Kerberos authentication method, the User Name (which includes the domain) and Password fields are hidden. When Kerberos protocol is enabled, it is used to attempt authentication against all of the servers related to the account, such as HTTP or LDAP. When Kerberos protocol is disabled in the account settings, Kerberos authentication will not be attempted against any of the servers related to the account.

For new Exchange accounts, Kerberos protocol is disabled by default with None selected on the Kerberos ID pop-up menu. When you enable Kerberos protocol, Outlook for Mac allows the user to choose or create a valid Kerberos ID. If the account is created using auto-detect, the Kerberos ID pop-up menu is populated with the existing ID. Kerberos protocol attempts auto-detect against servers if there is at least one Kerberos ticket present in the Mac OS X credential cache or a _kerberos._tcp.<domain> record is available from the Domain Name Server (DNS). If the auto-detect process is successful, the ticket is populated on the account's Kerberos ID pop-up menu. If the auto-detect process does not include a successful Kerberos authentication, the account's Kerberos setting will be disabled and Kerberos ID pop-up menu is set to None.

To create a new Kerberos ID, choose the Create a new Kerberos ID link. Provide the user name and password of the new Kerberos ID when prompted.

If the Remember password in keychain checkbox is selected, the provided credentials will be cached in the keychain and will be used to renew the ticket 15 minutes before it expires.

Kerberos authentication for administrators

Kerberos authentication might fail if the account's primary mailbox server does not support Kerberos protocol or if the KDC fails. To ensure that users are authenticated successfully by using Kerberos protocol, you should make sure that the KDC is up and running for users to access the different network services. In enterprise and mission-critical environments, it's important for administrators to create at least one failover KDC.

When Kerberos authentication fails, Outlook for Mac provides the option of using the other supported authentication mechanisms. The types of authentication methods that are available for Microsoft Exchange e-mail accounts can vary depending on whether authentication is performed on a front-end server or on a back-end server.

Active4 years, 10 months ago

Webmail lacks a search functionality and I don't want to install Outlook on my home computer. Are there any alternatives?

22.2k6 gold badges61 silver badges90 bronze badges

closed as off-topic by HopelessN00bDec 16 '14 at 19:39

This question appears to be off-topic. The users who voted to close gave this specific reason:

  • 'Requests for product, service, or learning material recommendations are off-topic because they attract low quality, opinionated and spam answers, and the answers become obsolete quickly. Instead, describe the business problem you are working on, the research you have done, and the steps taken so far to solve it.' – HopelessN00b
If this question can be reworded to fit the rules in the help center, please edit the question.

locked by HopelessN00bDec 16 '14 at 19:39

This question exists because it has historical significance, but it is not considered a good, on-topic question for this site so please do not use it as evidence that you can ask similar questions here. This question and its answers are frozen and cannot be changed. See the help center for guidance on writing a good question.

Read more about locked posts here.

8 Answers


It depends what you need to be able to do. If you just need POP or IMAP access, any mail client will generally do. If you need full MAPI Exchange access with calenders, tasks, contacts, etc. then you're really limited to Outlook.

You say you're using Exchange 2007, so you could look for something that talks to Exchange Web Services, but I don't know of any premade solutions to this.

Sam CoganSam Cogan
32.3k5 gold badges70 silver badges109 bronze badges

If you run mac at home, the newest OSx version (snow leopard) has a built-in mail client that uses EWS (Exchange Web Services). It's the only 'free' or bundled Exchange-aware client I'm aware of.


There's a Greasemonkey userscript, OWA Search, that adds search capability to OWA. It works … okay.

5,4187 gold badges39 silver badges68 bronze badges

It's also worth noting that OWA does have a search feature if you access it from Internet Explorer.

5,4187 gold badges39 silver badges68 bronze badges

You can tryThunderbird, but depending on how the Exchange server is configured, you may not have any luck. This is a pretty good how-to regarding Thunderbird and Exchange.

Or, depending on how sensitive your mail is, you can just forward a copy to a gmail account and use gmail.

Free exchange client for macSatanicpuppy

Bluetooth File Exchange For Mac

5,6181 gold badge13 silver badges18 bronze badges

The Linux client Evolution had figured out how to leverage Outlook Web Access to work as an exchange client, but I'm not sure whether this was free or not and whether it still works or not. Cool idea, though.

Sometimes I prefer the search in OWA, because it's so much easier to restrict the search to just subject keywords, (you do always send emails with good searchable subjects, don't you?).

What was the name of the old HP mail system*, it was fully MAPI-compatible and I believe it even went open-source in the end... or am I just imagining things?

Mac Outlook Client For Exchange 2007

*Thank you @sendmoreinfo, it was Scalix (ex-HP OpenMail) I was thinking of.


I have had a good experience using eM Client:

It has full MAPI support (Calendar, Contacts, etc.) and seems to perform almost as well as Outlook from what I can tell so far (I have only been using it for about a week now).

There was some trouble getting it set up at first, don't make the mistake I did: use the 'automatically detect' settings to connect to your Exchange server, and if it can't connect (it won't be able to) manually enter the information. It seems that manually configuring eM Client for Exchange from the get-go doesn't work (at least it didn't for me, and according to the community forums a lot of others), you have to do the automatic thing first.

Pc Mac Exchange


Ms Exchange Client For Mac

Not the answer you're looking for? Browse other questions tagged exchangeexchange-2007 or ask your own question.