No, I'm able to see hidden folders. That's the first thing I did. I can see "default" which is a hidden folder but no "all users".
________________________________________ From: Steve Moffat [st...@optimum.bm] On Behalf Of Exchange (Sunbelt) [exchangead...@optimum.bm] Sent: Wednesday, August 26, 2009 12:51 PM To: MS-Exchange Admin Issues Subject: RE: Can't set SSL cert services to "none" on Ex07 Because you haven't unticked hide hidden folders? -----Original Message----- From: Chris W. Parker [mailto:cpar...@aardvarktactical.com] Sent: Wednesday, August 26, 2009 4:37 PM To: MS-Exchange Admin Issues Subject: RE: Can't set SSL cert services to "none" on Ex07 Any idea why I don't have "all users"? ________________________________________ From: Tom Kern [tpk...@gmail.com] Sent: Wednesday, August 26, 2009 12:31 PM To: MS-Exchange Admin Issues Subject: Re: Can't set SSL cert services to "none" on Ex07 "users\all users\microsoft\crypto\rsa\machine keys" On Wed, Aug 26, 2009 at 3:20 PM, Chris W. Parker<cpar...@aardvarktactical.com> wrote: > What might that path be on server 2008? I'm not able to find it. All the > paths I've taken beyond c:\users\default\appdata\ have been unfruitful. > > Thanks. > > ________________________________________ > From: Tom Kern [tpk...@gmail.com] > Sent: Wednesday, August 26, 2009 7:13 AM > To: MS-Exchange Admin Issues > Subject: Re: Can't set SSL cert services to "none" on Ex07 > > Outlook complaining would have nothing to do with smtp and more with > IIS. Specifically autodiscover. > You are correct the "-services none" parameter does not work and the > documentation is misleading on Technet and is due to change shortly. > > If this is NOT the default cert (the one used for x-anonymous tls) and > it is just a self-signed cert you created, why not just run > remove-exchangecertificate? > > If it is a 3rd party CA cert and you only want to remove smtp as a > service then go to c:\documents and settings\All Users\Application > Data\Microsoft\Crypto\RSA\MachineKeys and remove "Network Service" > from the ACL of the cert file in there. > You can find which cert is yours by matching the timestamp on your > cert when you run get-exchangecertificate |fl NotBefore and attempt to > match that time with a date modified timestamp in the file system > within that folder That will remove smtp as a service from the cert > but based on what you write I don't think smtp is the issue here > > Thanks > > > > > > > On Wed, Aug 26, 2009 at 4:08 AM, Sobey, Richard A<r.so...@imperial.ac.uk> > wrote: >> Chris >> >> I had/have the same issue - as I understood it the cmdlet just doesn't work >> as advertised, or you cannot have a certificate installed with no services >> attached to it. >> >> Regards >> >> Richard >> >> -----Original Message----- >> From: bounce-8640089-8066...@lyris.sunbelt-software.com >> [mailto:bounce-8640089-8066...@lyris.sunbelt-software.com] On Behalf >> Of Chris W. Parker >> Sent: 26 August 2009 06:17 >> To: MS-Exchange Admin Issues >> Subject: Can't set SSL cert services to "none" on Ex07 >> >> Hi everyone, >> >> I just installed a single name SSL cert for my Ex07 server and I noticed >> that Outlook started complaining about an invalid certificate when it is >> opened. I discovered that I mistakenly added SMTP as one of the services on >> the new cert when I think I should have only enabled it on IMAP, POP, and >> IIS. This means that get-exchangecertificate results in two certificates >> being on SMTP. To remove all the services I tried >> "enable-exchangecertificate -thumbprint <new_cert_thumbprint> -services >> none". This resulted in no errors but still get-exchangecertificate shows >> the same results. >> >> Any ideas on this? >> >> >> Thanks, >> >> >> Chris Parker >> Aardvark Tactical >> IT Manager >> 1002 W Tenth St. Azusa, CA 91702 >> phone 800.997.3773 x131 direct 626.610.0131 fax 626.334.6860 >> cpar...@aardvarktactical.com<mailto:cpar...@aardvarktactical.com> >> >> [http://www.swatgear.com/sig_logo_rsml.jpg] >> >> >> >> >> > >