Very good to hear. Thanks for that.
On Fri, Aug 5, 2011 at 10:47, Harry Singh <hbo...@gmail.com> wrote: > I'm using a wildcard cert just fine. Exchange 2k10 with IPhones. > > On Friday, August 5, 2011, Kurt Buff <kurt.b...@gmail.com> wrote: >> Are iPhones OK with wildcard certs on E2k10? >> >> I've got our wildcard cert on the E2k3 servers in our overseas >> offices, and the iPhones they're using don't seem to have a problem >> with it - at least none have been reported to me. >> >> Kurt >> >> On Fri, Aug 5, 2011 at 10:15, Michael B. Smith <mich...@smithcons.com> >> wrote: >>> It's not recommended because it doesn't work on some phones. If all our >>> phones support wildcard certs, it's just fine. >>> >>> I've got lots of clients installed with wildcard certs. >>> >>> Regards, >>> >>> Michael B. Smith >>> Consultant and Exchange MVP >>> http://TheEssentialExchange.com >>> >>> >>> -----Original Message----- >>> From: Kurt Buff [mailto:kurt.b...@gmail.com] >>> Sent: Friday, August 05, 2011 1:10 PM >>> To: MS-Exchange Admin Issues >>> Subject: Re: transition from exchange 2003 to 2010 >>> >>> OK! >>> >>> That's good to know. We'll be switching from E2k3 to E2010 in the near >>> future. Kinda sucks that our expensive wildcard cert won't be useful. >>> >>> Kurt >>> >>> On Fri, Aug 5, 2011 at 07:55, KevinM <kev...@wlkmmas.org> wrote: >>>> Technically you need to have the names on the cert to make things work >>>> correctly. You can kind of make it work with a wild card but it is not very >>>> pretty, and not recommended.. >>>> >>>> -----Original Message----- >>>> From: Kurt Buff [mailto:kurt.b...@gmail.com] >>>> Sent: Friday, August 05, 2011 7:52 AM >>>> To: MS-Exchange Admin Issues >>>> Subject: Re: transition from exchange 2003 to 2010 >>>> >>>> So, why go with a SAN cert instead of a wildcard cert? Is it just price, >>>> or is there a technical advantage? >>>> >>>> On Fri, Aug 5, 2011 at 07:45, Paul Hutchings <paul.hutchi...@mira.co.uk> >>>> wrote: >>>>> >>>>> Just done this, fun aint it J We got a single SAN/UCC cert for >>>>> domain.com, mail.domain.com, legacy.domain.com and >>>>> autodiscover.domain.com. >>>>> >>>>> >>>>> >>>>> We put it on the CAS and the 2003 FE, not the 2003 BE (and of course >>>>> our reverse proxy for SSL inspection). >>>>> >>>>> >>>>> >>>>> This is what I have in my notes for KB937031: >>>>> >>>>> >>>>> >>>>> Steps to enable Integrated Windows Authentication after you install >>>>> hotfix 937031 on the Exchange 2003 back-end server >>>>> >>>>> To work around this problem, turn on Integrated Windows Authentication. >>>>> To do this, follow these steps: >>>>> >>>>> Start Exchange System Manager. >>>>> >>>>> Expand Administrative Groups, expand Administrative_Group_Name, and >>>>> then expand Servers. >>>>> >>>>> Expand Your_Server_Name, expand Protocols, and then expand HTTP. >>>>> >>>>> Expand Exchange Virtual Server, right-click >>>>> Microsoft-Server-ActiveSync, and then click Properties. >>>>> >>>>> Click the Access tab, and then click Authentication. >>>>> >>>>> Click to select the Integrated Windows Authentication check box. >>>>> >>>>> Click OK two times. To verify that this successfully replicated to the >>>>> metabase on the Exchange server, follow these steps: >>>>> >>>>> Open the Internet Information Services (IIS) Manager under >>>>> Administrative Tools. >>>>> >>>>> Expand the Computer, expand Web Sites, and then expand Default Web >>>>> Site. >>>>> >>>>> Right-click Microsoft-Server-ActiveSync, and then click Properties. >>>>> >>>>> Click the Directory Security tab, and then select the Edit button under >>>>> Authentication and access control. >>>>> >>>>> Verify that the Integrated Windows Authentication check box is >>>>> selected. >>>>> >>>>> >>>>> >>>>> Note If this check box is selected, you have successfully replicated >>>>> the change that was made in the Exchange System Manager to the metabase on >>>>> the Exchange server. >>>>> >>>>> Click Cancel two times, and then exit Internet Information Services >>>>> (IIS) Manager. You can now test synching with your mobile device. >>>>> >>> > > --- > > To manage subscriptions click here: > http://lyris.sunbelt-software.com/read/my_forums/ > or send an email to listmana...@lyris.sunbeltsoftware.com > with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist