Outlook complaining would have nothing to do with smtp and more with IIS. Specifically autodiscover. You are correct the "-services none" parameter does not work and the documentation is misleading on Technet and is due to change shortly.
If this is NOT the default cert (the one used for x-anonymous tls) and it is just a self-signed cert you created, why not just run remove-exchangecertificate? If it is a 3rd party CA cert and you only want to remove smtp as a service then go to c:\documents and settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys and remove "Network Service" from the ACL of the cert file in there. You can find which cert is yours by matching the timestamp on your cert when you run get-exchangecertificate |fl NotBefore and attempt to match that time with a date modified timestamp in the file system within that folder That will remove smtp as a service from the cert but based on what you write I don't think smtp is the issue here Thanks On Wed, Aug 26, 2009 at 4:08 AM, Sobey, Richard A<r.so...@imperial.ac.uk> wrote: > Chris > > I had/have the same issue - as I understood it the cmdlet just doesn't work > as advertised, or you cannot have a certificate installed with no services > attached to it. > > Regards > > Richard > > -----Original Message----- > From: bounce-8640089-8066...@lyris.sunbelt-software.com > [mailto:bounce-8640089-8066...@lyris.sunbelt-software.com] On Behalf Of Chris > W. Parker > Sent: 26 August 2009 06:17 > To: MS-Exchange Admin Issues > Subject: Can't set SSL cert services to "none" on Ex07 > > Hi everyone, > > I just installed a single name SSL cert for my Ex07 server and I noticed that > Outlook started complaining about an invalid certificate when it is opened. I > discovered that I mistakenly added SMTP as one of the services on the new > cert when I think I should have only enabled it on IMAP, POP, and IIS. This > means that get-exchangecertificate results in two certificates being on SMTP. > To remove all the services I tried "enable-exchangecertificate -thumbprint > <new_cert_thumbprint> -services none". This resulted in no errors but still > get-exchangecertificate shows the same results. > > Any ideas on this? > > > Thanks, > > > Chris Parker > Aardvark Tactical > IT Manager > 1002 W Tenth St. Azusa, CA 91702 > phone 800.997.3773 x131 direct 626.610.0131 > fax 626.334.6860 > cpar...@aardvarktactical.com<mailto:cpar...@aardvarktactical.com> > > [http://www.swatgear.com/sig_logo_rsml.jpg] > > > > >
