Have you got a UCC/SAN certificate installed? If so does it have the record autodiscover.domainname.co
m in it?
Also do you have an A recors in your external DNS for autodiscover.domainname.co
m it should be pointing to the same IP as your Outlook Web Access URL.
For the second prompt you can try the above.
I have had mixed comments some say the first work and some say the second work but the second one seems to be winning at the moment:
http://social.technet.microsoft.com/Forums/en/exchangesvrgeneral/thread/383d130e-869f-4fce-9502-8b340904b0baSee the section about enabling Kernel Authentication:
http://social.technet.microsoft.com/Forums/en-US/exchangesvradmin/thread/0c94187d-bc97-4fa5-9413-e8762a25a360