Thanks. So far, adding the registry entry, SendTrustedIssuerList to our exchange, domain controllers and just yesterday, our radius server seems to have cleared up the problems.
-----Original Message----- From: Michael B. Smith [mailto:mich...@smithcons.com] Sent: Friday, January 04, 2013 9:52 AM To: MS-Exchange Admin Issues Subject: RE: Schannel error 36885 Internal certs check their CRL against their own trust chain. It should have no impact. -----Original Message----- From: Glen Johnson [mailto:gjohn...@vhcc.edu] Sent: Wednesday, January 2, 2013 4:26 PM To: MS-Exchange Admin Issues Subject: RE: Schannel error 36885 Thanks, so I'm guessing that's any server that got the recent root cert update. What about an internal CA? Reckon not sending out the list of trusted CAs would break internal certs? -----Original Message----- From: Michael B. Smith [mailto:mich...@smithcons.com] Sent: Wednesday, January 02, 2013 4:01 PM To: MS-Exchange Admin Issues Subject: RE: Schannel error 36885 It should go on any server that has the large list of CAs. -----Original Message----- From: Glen Johnson [mailto:gjohn...@vhcc.edu] Sent: Wednesday, January 2, 2013 3:43 PM To: MS-Exchange Admin Issues Subject: Schannel error 36885 On 12/21 I installed the December updates to our domain controllers and exchange 2010 server. Came in today and found that the helpdesk application that we use, which fetches email from the exchange server via POPs isn't working. Looks like our certificate authorities list is to big as we are seening schannel errors 36885 on all three domain controllers and the exchange server. On Technet this thread suggests adding a reg entry to suppress the server sending the root cert authority list. Should that reg entry go on the exchange server or the domain controllers or both? Any other suggestions appreciated. --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist
