SMTP Banner

2011-08-05 Thread Cameron
Good morning all,

Exchange 2010
I've just been told that I have a discrepancy between our webmail record and
SMTP banner. It returns 220 servername.domain.ca Microsoft ESMTP MAIL
Service ready at date/time. Can I just use the Set-ReceiveConnector cmdlet
to set webmail.domain.ca ?

I'm just concerned that if I do that, that I may be affecting something
else.

TIA

Cameron

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

Re: Do not resolve sender's display name for messages submitted over anonymous?

2011-08-05 Thread Harry Singh
Did you ever find a answer to your question?

H


On Wed, Aug 3, 2011 at 10:46 PM, daemonR00t daemonr...@sysadmin-cr.comwrote:

 Hi,

 ** **

 How do I set Exchange 2010 SP1 to not resolve sender's display name for
 messages submitted over anonymous connections from the Internet?

 http://technet.microsoft.com/en-us/library/aa997792(v=EXCHG.65).aspx 

 Thanks!

 ** **

 ~d

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe exchangelist


---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

Managing Activesync

2011-08-05 Thread Rimmel, Carl
Wondering what, if any, solutions people are using to manage, secure and 
control Activesync connections to their Exchange environments.  We are looking 
at a product from Airwatch (http://www.air-watch.com/).

==
CONFIDENTIALITY NOTICE: This email contains information from the sender that 
may be CONFIDENTIAL, LEGALLY PRIVILEGED, PROPRIETARY or otherwise protected 
from disclosure. This email is intended for use only by the person or entity 
to whom it is addressed. If you are not the intended recipient, any use, 
disclosure, copying, distribution, printing, or any action taken in reliance 
on the contents of this email, is strictly prohibited. If you received this 
email in error, please contact the sending party by reply email, delete the 
email from your computer system and shred any paper copies.
 
Note to Patients: There are a number of risks you should consider before using 
e-mail to communicate with us. See our Privacy Policy and Henry Ford My Health 
at www.henryford.com for more detailed information. If you do not believe that 
our policy gives you the privacy and security protection you need, do not send 
e-mail or Internet communications to us.
==

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

RE: transition from exchange 2003 to 2010

2011-08-05 Thread Sobey, Richard A
You'll need new certs on the 2010 CAS as that's where your clients will be 
connecting once you've transition your namespace.

On my SAN certs I put server.fqdn, autodiscover.fqdn and the name of our OWA 
namespace.

Cheers,

Richard

From: bounce-9390019-8066...@lyris.sunbelt-software.com 
[mailto:bounce-9390019-8066...@lyris.sunbelt-software.com] On Behalf Of Jason 
Benway
Sent: 05 August 2011 15:35
To: MS-Exchange Admin Issues
Subject: transition from exchange 2003 to 2010

I've been doing A LOT of reading. One thing I haven't been able to find is 
where the new cert needs to be installed.

I'm assuming its on the CAS, exchange 2003 FE and exchange 2003 mbx servers?

Should I also put the internal names on the SAN cert? or just the external DNS 
names?

What about the hotfix kb937031 does that go on all exchange 2003 servers? Or 
just the FE?

Thanks,jb

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

RE: transition from exchange 2003 to 2010

2011-08-05 Thread Paul Hutchings
Just done this, fun aint it :)  We got a single SAN/UCC cert for domain.com, 
mail.domain.com, legacy.domain.com and autodiscover.domain.com.

We put it on the CAS and the 2003 FE, not the 2003 BE (and of course our 
reverse proxy for SSL inspection).

This is what I have in my notes for KB937031:

Steps to enable Integrated Windows Authentication after you install hotfix 
937031 on the Exchange 2003 back-end server
To work around this problem, turn on Integrated Windows Authentication. To do 
this, follow these steps:
Start Exchange System Manager.
Expand Administrative Groups, expand Administrative_Group_Name, and then expand 
Servers.
Expand Your_Server_Name, expand Protocols, and then expand HTTP.
Expand Exchange Virtual Server, right-click Microsoft-Server-ActiveSync, and 
then click Properties.
Click the Access tab, and then click Authentication.
Click to select the Integrated Windows Authentication check box.
Click OK two times. To verify that this successfully replicated to the metabase 
on the Exchange server, follow these steps:
Open the Internet Information Services (IIS) Manager under Administrative Tools.
Expand the Computer, expand Web Sites, and then expand Default Web Site.
Right-click Microsoft-Server-ActiveSync, and then click Properties.
Click the Directory Security tab, and then select the Edit button under 
Authentication and access control.
Verify that the Integrated Windows Authentication check box is selected.

Note If this check box is selected, you have successfully replicated the change 
that was made in the Exchange System Manager to the metabase on the Exchange 
server.
Click Cancel two times, and then exit Internet Information Services (IIS) 
Manager. You can now test synching with your mobile device.

From: Jason Benway [mailto:benw...@jsjcorp.com]
Sent: 05 August 2011 15:35
To: MS-Exchange Admin Issues
Subject: transition from exchange 2003 to 2010

I've been doing A LOT of reading. One thing I haven't been able to find is 
where the new cert needs to be installed.

I'm assuming its on the CAS, exchange 2003 FE and exchange 2003 mbx servers?

Should I also put the internal names on the SAN cert? or just the external DNS 
names?

What about the hotfix kb937031 does that go on all exchange 2003 servers? Or 
just the FE?

Thanks,jb

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

--
MIRA Ltd

Watling Street, Nuneaton, Warwickshire, CV10 0TU, England
Registered in England and Wales No. 402570
VAT Registration  GB 100 1464 84

The contents of this e-mail are confidential and are solely for the use of the 
intended recipient.  If you receive this e-mail in error, please delete it and 
notify us either by e-mail, telephone or fax.  You should not copy, forward or 
otherwise disclose the content of the e-mail as this is prohibited.

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

Re: transition from exchange 2003 to 2010

2011-08-05 Thread Kurt Buff
So, why go with a SAN cert instead of a wildcard cert? Is it just
price, or is there a technical advantage?

On Fri, Aug 5, 2011 at 07:45, Paul Hutchings paul.hutchi...@mira.co.uk wrote:

 Just done this, fun aint it J  We got a single SAN/UCC cert for domain.com, 
 mail.domain.com, legacy.domain.com and autodiscover.domain.com.



 We put it on the CAS and the 2003 FE, not the 2003 BE (and of course our 
 reverse proxy for SSL inspection).



 This is what I have in my notes for KB937031:



 Steps to enable Integrated Windows Authentication after you install hotfix 
 937031 on the Exchange 2003 back-end server

 To work around this problem, turn on Integrated Windows Authentication. To do 
 this, follow these steps:

 Start Exchange System Manager.

 Expand Administrative Groups, expand Administrative_Group_Name, and then 
 expand Servers.

 Expand Your_Server_Name, expand Protocols, and then expand HTTP.

 Expand Exchange Virtual Server, right-click Microsoft-Server-ActiveSync, and 
 then click Properties.

 Click the Access tab, and then click Authentication.

 Click to select the Integrated Windows Authentication check box.

 Click OK two times. To verify that this successfully replicated to the 
 metabase on the Exchange server, follow these steps:

 Open the Internet Information Services (IIS) Manager under Administrative 
 Tools.

 Expand the Computer, expand Web Sites, and then expand Default Web Site.

 Right-click Microsoft-Server-ActiveSync, and then click Properties.

 Click the Directory Security tab, and then select the Edit button under 
 Authentication and access control.

 Verify that the Integrated Windows Authentication check box is selected.



 Note If this check box is selected, you have successfully replicated the 
 change that was made in the Exchange System Manager to the metabase on the 
 Exchange server.

 Click Cancel two times, and then exit Internet Information Services (IIS) 
 Manager. You can now test synching with your mobile device.

 From: Jason Benway [mailto:benw...@jsjcorp.com]

 Sent: 05 August 2011 15:35
 To: MS-Exchange Admin Issues
 Subject: transition from exchange 2003 to 2010



 I’ve been doing A LOT of reading. One thing I haven’t been able to find is 
 where the new cert needs to be installed.



 I’m assuming its on the CAS, exchange 2003 FE and exchange 2003 mbx servers?



 Should I also put the internal names on the SAN cert? or just the external 
 DNS names?



 What about the hotfix kb937031 does that go on all exchange 2003 servers? Or 
 just the FE?



 Thanks,jb

 ---
 To manage subscriptions click here: 
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe exchangelist

 
 MIRA Ltd
 Watling Street, Nuneaton, Warwickshire, CV10 0TU, England
 Registered in England and Wales No. 402570
 VAT Registration  GB 100 1464 84
 The contents of this e-mail are confidential and are solely for the use of 
 the intended recipient.  If you receive this e-mail in error, please delete 
 it and notify us either by e-mail, telephone or fax.  You should not copy, 
 forward or otherwise disclose the content of the e-mail as this is prohibited.

 ---
 To manage subscriptions click here: 
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist



RE: transition from exchange 2003 to 2010

2011-08-05 Thread Sobey, Richard A
Sorry, just to confirm after reading Paul's email - we don't have legacy.fqdn 
on our certs as we didn't do a transition. We gave users a new name to access 
OWA etc.

Richard

From: bounce-9390028-8066...@lyris.sunbelt-software.com 
[mailto:bounce-9390028-8066...@lyris.sunbelt-software.com] On Behalf Of Sobey, 
Richard A
Sent: 05 August 2011 15:40
To: MS-Exchange Admin Issues
Subject: RE: transition from exchange 2003 to 2010

You'll need new certs on the 2010 CAS as that's where your clients will be 
connecting once you've transition your namespace.

On my SAN certs I put server.fqdn, autodiscover.fqdn and the name of our OWA 
namespace.

Cheers,

Richard

From: 
bounce-9390019-8066...@lyris.sunbelt-software.commailto:bounce-9390019-8066...@lyris.sunbelt-software.com
 
[mailto:bounce-9390019-8066...@lyris.sunbelt-software.com]mailto:[mailto:bounce-9390019-8066...@lyris.sunbelt-software.com]
 On Behalf Of Jason Benway
Sent: 05 August 2011 15:35
To: MS-Exchange Admin Issues
Subject: transition from exchange 2003 to 2010

I've been doing A LOT of reading. One thing I haven't been able to find is 
where the new cert needs to be installed.

I'm assuming its on the CAS, exchange 2003 FE and exchange 2003 mbx servers?

Should I also put the internal names on the SAN cert? or just the external DNS 
names?

What about the hotfix kb937031 does that go on all exchange 2003 servers? Or 
just the FE?

Thanks,jb

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

RE: transition from exchange 2003 to 2010

2011-08-05 Thread KevinM
Technically you need to have the names on the cert to make things work 
correctly. You can kind of make it work with a wild card but it is not very 
pretty, and not recommended.. 

-Original Message-
From: Kurt Buff [mailto:kurt.b...@gmail.com] 
Sent: Friday, August 05, 2011 7:52 AM
To: MS-Exchange Admin Issues
Subject: Re: transition from exchange 2003 to 2010

So, why go with a SAN cert instead of a wildcard cert? Is it just price, or is 
there a technical advantage?

On Fri, Aug 5, 2011 at 07:45, Paul Hutchings paul.hutchi...@mira.co.uk wrote:

 Just done this, fun aint it J  We got a single SAN/UCC cert for domain.com, 
 mail.domain.com, legacy.domain.com and autodiscover.domain.com.



 We put it on the CAS and the 2003 FE, not the 2003 BE (and of course our 
 reverse proxy for SSL inspection).



 This is what I have in my notes for KB937031:



 Steps to enable Integrated Windows Authentication after you install 
 hotfix 937031 on the Exchange 2003 back-end server

 To work around this problem, turn on Integrated Windows Authentication. To do 
 this, follow these steps:

 Start Exchange System Manager.

 Expand Administrative Groups, expand Administrative_Group_Name, and then 
 expand Servers.

 Expand Your_Server_Name, expand Protocols, and then expand HTTP.

 Expand Exchange Virtual Server, right-click Microsoft-Server-ActiveSync, and 
 then click Properties.

 Click the Access tab, and then click Authentication.

 Click to select the Integrated Windows Authentication check box.

 Click OK two times. To verify that this successfully replicated to the 
 metabase on the Exchange server, follow these steps:

 Open the Internet Information Services (IIS) Manager under Administrative 
 Tools.

 Expand the Computer, expand Web Sites, and then expand Default Web Site.

 Right-click Microsoft-Server-ActiveSync, and then click Properties.

 Click the Directory Security tab, and then select the Edit button under 
 Authentication and access control.

 Verify that the Integrated Windows Authentication check box is selected.



 Note If this check box is selected, you have successfully replicated the 
 change that was made in the Exchange System Manager to the metabase on the 
 Exchange server.

 Click Cancel two times, and then exit Internet Information Services (IIS) 
 Manager. You can now test synching with your mobile device.

 From: Jason Benway [mailto:benw...@jsjcorp.com]

 Sent: 05 August 2011 15:35
 To: MS-Exchange Admin Issues
 Subject: transition from exchange 2003 to 2010



 I’ve been doing A LOT of reading. One thing I haven’t been able to find is 
 where the new cert needs to be installed.



 I’m assuming its on the CAS, exchange 2003 FE and exchange 2003 mbx servers?



 Should I also put the internal names on the SAN cert? or just the external 
 DNS names?



 What about the hotfix kb937031 does that go on all exchange 2003 servers? Or 
 just the FE?



 Thanks,jb

 ---
 To manage subscriptions click here: 
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe exchangelist

 
 MIRA Ltd
 Watling Street, Nuneaton, Warwickshire, CV10 0TU, England Registered 
 in England and Wales No. 402570 VAT Registration  GB 100 1464 84 The 
 contents of this e-mail are confidential and are solely for the use of the 
 intended recipient.  If you receive this e-mail in error, please delete it 
 and notify us either by e-mail, telephone or fax.  You should not copy, 
 forward or otherwise disclose the content of the e-mail as this is prohibited.

 ---
 To manage subscriptions click here: 
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist



---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

RE: Managing Activesync

2011-08-05 Thread Martin Blackstone
We are evaluating a number of MDM solutions right now. I haven't gotten to
Airwatch yet, but it is on the list.

My favorite so far has been Zenprise. I like the way they use app tunnels.

 

From: Rimmel, Carl [mailto:crimm...@hfhs.org] 
Sent: Friday, August 05, 2011 7:21 AM
To: MS-Exchange Admin Issues
Subject: Managing Activesync

 

Wondering what, if any, solutions people are using to manage, secure and
control Activesync connections to their Exchange environments.  We are
looking at a product from Airwatch (http://www.air-watch.com/).


==
CONFIDENTIALITY NOTICE: This email contains information from the sender that

may be CONFIDENTIAL, LEGALLY PRIVILEGED, PROPRIETARY or otherwise protected 
from disclosure. This email is intended for use only by the person or entity

to whom it is addressed. If you are not the intended recipient, any use, 
disclosure, copying, distribution, printing, or any action taken in reliance

on the contents of this email, is strictly prohibited. If you received this 
email in error, please contact the sending party by reply email, delete the 
email from your computer system and shred any paper copies.
 
Note to Patients: There are a number of risks you should consider before
using 
e-mail to communicate with us. See our Privacy Policy and Henry Ford My
Health 
at www.henryford.com for more detailed information. If you do not believe
that 
our policy gives you the privacy and security protection you need, do not
send 
e-mail or Internet communications to us.

==

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist


---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

RE: transition from exchange 2003 to 2010

2011-08-05 Thread Paul Hutchings
Client devices mainly.  I don't think Exchange itself cares, pretty sure IIRC 
that the cert wizard lets you tell it you want to use a wildcard cert, but we 
have a bunch of Nokia's and they don't seem to like wildcard certs as the 
onboard web browser bitches and moans about a name mismatch if you try and 
visit a site that uses our existing wildcard.


From: Kurt Buff [kurt.b...@gmail.com]
Sent: 05 August 2011 3:51 PM
To: MS-Exchange Admin Issues
Subject: Re: transition from exchange 2003 to 2010

So, why go with a SAN cert instead of a wildcard cert? Is it just
price, or is there a technical advantage?

On Fri, Aug 5, 2011 at 07:45, Paul Hutchings paul.hutchi...@mira.co.uk wrote:

 Just done this, fun aint it J  We got a single SAN/UCC cert for domain.com, 
 mail.domain.com, legacy.domain.com and autodiscover.domain.com.



 We put it on the CAS and the 2003 FE, not the 2003 BE (and of course our 
 reverse proxy for SSL inspection).



 This is what I have in my notes for KB937031:



 Steps to enable Integrated Windows Authentication after you install hotfix 
 937031 on the Exchange 2003 back-end server

 To work around this problem, turn on Integrated Windows Authentication. To do 
 this, follow these steps:

 Start Exchange System Manager.

 Expand Administrative Groups, expand Administrative_Group_Name, and then 
 expand Servers.

 Expand Your_Server_Name, expand Protocols, and then expand HTTP.

 Expand Exchange Virtual Server, right-click Microsoft-Server-ActiveSync, and 
 then click Properties.

 Click the Access tab, and then click Authentication.

 Click to select the Integrated Windows Authentication check box.

 Click OK two times. To verify that this successfully replicated to the 
 metabase on the Exchange server, follow these steps:

 Open the Internet Information Services (IIS) Manager under Administrative 
 Tools.

 Expand the Computer, expand Web Sites, and then expand Default Web Site.

 Right-click Microsoft-Server-ActiveSync, and then click Properties.

 Click the Directory Security tab, and then select the Edit button under 
 Authentication and access control.

 Verify that the Integrated Windows Authentication check box is selected.



 Note If this check box is selected, you have successfully replicated the 
 change that was made in the Exchange System Manager to the metabase on the 
 Exchange server.

 Click Cancel two times, and then exit Internet Information Services (IIS) 
 Manager. You can now test synching with your mobile device.

 From: Jason Benway [mailto:benw...@jsjcorp.com]

 Sent: 05 August 2011 15:35
 To: MS-Exchange Admin Issues
 Subject: transition from exchange 2003 to 2010



 I’ve been doing A LOT of reading. One thing I haven’t been able to find is 
 where the new cert needs to be installed.



 I’m assuming its on the CAS, exchange 2003 FE and exchange 2003 mbx servers?



 Should I also put the internal names on the SAN cert? or just the external 
 DNS names?



 What about the hotfix kb937031 does that go on all exchange 2003 servers? Or 
 just the FE?



 Thanks,jb

 ---
 To manage subscriptions click here: 
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe exchangelist

 
 MIRA Ltd
 Watling Street, Nuneaton, Warwickshire, CV10 0TU, England
 Registered in England and Wales No. 402570
 VAT Registration  GB 100 1464 84
 The contents of this e-mail are confidential and are solely for the use of 
 the intended recipient.  If you receive this e-mail in error, please delete 
 it and notify us either by e-mail, telephone or fax.  You should not copy, 
 forward or otherwise disclose the content of the e-mail as this is prohibited.

 ---
 To manage subscriptions click here: 
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist


---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist



Re: transition from exchange 2003 to 2010

2011-08-05 Thread Kurt Buff
OK!

That's good to know. We'll be switching from E2k3 to E2010 in the near
future. Kinda sucks that our expensive wildcard cert won't be useful.

Kurt

On Fri, Aug 5, 2011 at 07:55, KevinM kev...@wlkmmas.org wrote:
 Technically you need to have the names on the cert to make things work 
 correctly. You can kind of make it work with a wild card but it is not very 
 pretty, and not recommended..

 -Original Message-
 From: Kurt Buff [mailto:kurt.b...@gmail.com]
 Sent: Friday, August 05, 2011 7:52 AM
 To: MS-Exchange Admin Issues
 Subject: Re: transition from exchange 2003 to 2010

 So, why go with a SAN cert instead of a wildcard cert? Is it just price, or 
 is there a technical advantage?

 On Fri, Aug 5, 2011 at 07:45, Paul Hutchings paul.hutchi...@mira.co.uk 
 wrote:

 Just done this, fun aint it J  We got a single SAN/UCC cert for domain.com, 
 mail.domain.com, legacy.domain.com and autodiscover.domain.com.



 We put it on the CAS and the 2003 FE, not the 2003 BE (and of course our 
 reverse proxy for SSL inspection).



 This is what I have in my notes for KB937031:



 Steps to enable Integrated Windows Authentication after you install
 hotfix 937031 on the Exchange 2003 back-end server

 To work around this problem, turn on Integrated Windows Authentication. To 
 do this, follow these steps:

 Start Exchange System Manager.

 Expand Administrative Groups, expand Administrative_Group_Name, and then 
 expand Servers.

 Expand Your_Server_Name, expand Protocols, and then expand HTTP.

 Expand Exchange Virtual Server, right-click Microsoft-Server-ActiveSync, and 
 then click Properties.

 Click the Access tab, and then click Authentication.

 Click to select the Integrated Windows Authentication check box.

 Click OK two times. To verify that this successfully replicated to the 
 metabase on the Exchange server, follow these steps:

 Open the Internet Information Services (IIS) Manager under Administrative 
 Tools.

 Expand the Computer, expand Web Sites, and then expand Default Web Site.

 Right-click Microsoft-Server-ActiveSync, and then click Properties.

 Click the Directory Security tab, and then select the Edit button under 
 Authentication and access control.

 Verify that the Integrated Windows Authentication check box is selected.



 Note If this check box is selected, you have successfully replicated the 
 change that was made in the Exchange System Manager to the metabase on the 
 Exchange server.

 Click Cancel two times, and then exit Internet Information Services (IIS) 
 Manager. You can now test synching with your mobile device.

 From: Jason Benway [mailto:benw...@jsjcorp.com]

 Sent: 05 August 2011 15:35
 To: MS-Exchange Admin Issues
 Subject: transition from exchange 2003 to 2010



 I’ve been doing A LOT of reading. One thing I haven’t been able to find is 
 where the new cert needs to be installed.



 I’m assuming its on the CAS, exchange 2003 FE and exchange 2003 mbx servers?



 Should I also put the internal names on the SAN cert? or just the external 
 DNS names?



 What about the hotfix kb937031 does that go on all exchange 2003 servers? Or 
 just the FE?



 Thanks,jb

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe exchangelist

 
 MIRA Ltd
 Watling Street, Nuneaton, Warwickshire, CV10 0TU, England Registered
 in England and Wales No. 402570 VAT Registration  GB 100 1464 84 The
 contents of this e-mail are confidential and are solely for the use of the 
 intended recipient.  If you receive this e-mail in error, please delete it 
 and notify us either by e-mail, telephone or fax.  You should not copy, 
 forward or otherwise disclose the content of the e-mail as this is 
 prohibited.

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe exchangelist

 ---
 To manage subscriptions click here: 
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe exchangelist



 ---
 To manage subscriptions click here: 
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist



RE: transition from exchange 2003 to 2010

2011-08-05 Thread Michael B. Smith
It's not recommended because it doesn't work on some phones. If all our phones 
support wildcard certs, it's just fine.

I've got lots of clients installed with wildcard certs.

Regards,

Michael B. Smith
Consultant and Exchange MVP
http://TheEssentialExchange.com


-Original Message-
From: Kurt Buff [mailto:kurt.b...@gmail.com] 
Sent: Friday, August 05, 2011 1:10 PM
To: MS-Exchange Admin Issues
Subject: Re: transition from exchange 2003 to 2010

OK!

That's good to know. We'll be switching from E2k3 to E2010 in the near
future. Kinda sucks that our expensive wildcard cert won't be useful.

Kurt

On Fri, Aug 5, 2011 at 07:55, KevinM kev...@wlkmmas.org wrote:
 Technically you need to have the names on the cert to make things work 
 correctly. You can kind of make it work with a wild card but it is not very 
 pretty, and not recommended..

 -Original Message-
 From: Kurt Buff [mailto:kurt.b...@gmail.com]
 Sent: Friday, August 05, 2011 7:52 AM
 To: MS-Exchange Admin Issues
 Subject: Re: transition from exchange 2003 to 2010

 So, why go with a SAN cert instead of a wildcard cert? Is it just price, or 
 is there a technical advantage?

 On Fri, Aug 5, 2011 at 07:45, Paul Hutchings paul.hutchi...@mira.co.uk 
 wrote:

 Just done this, fun aint it J  We got a single SAN/UCC cert for domain.com, 
 mail.domain.com, legacy.domain.com and autodiscover.domain.com.



 We put it on the CAS and the 2003 FE, not the 2003 BE (and of course our 
 reverse proxy for SSL inspection).



 This is what I have in my notes for KB937031:



 Steps to enable Integrated Windows Authentication after you install
 hotfix 937031 on the Exchange 2003 back-end server

 To work around this problem, turn on Integrated Windows Authentication. To 
 do this, follow these steps:

 Start Exchange System Manager.

 Expand Administrative Groups, expand Administrative_Group_Name, and then 
 expand Servers.

 Expand Your_Server_Name, expand Protocols, and then expand HTTP.

 Expand Exchange Virtual Server, right-click Microsoft-Server-ActiveSync, and 
 then click Properties.

 Click the Access tab, and then click Authentication.

 Click to select the Integrated Windows Authentication check box.

 Click OK two times. To verify that this successfully replicated to the 
 metabase on the Exchange server, follow these steps:

 Open the Internet Information Services (IIS) Manager under Administrative 
 Tools.

 Expand the Computer, expand Web Sites, and then expand Default Web Site.

 Right-click Microsoft-Server-ActiveSync, and then click Properties.

 Click the Directory Security tab, and then select the Edit button under 
 Authentication and access control.

 Verify that the Integrated Windows Authentication check box is selected.



 Note If this check box is selected, you have successfully replicated the 
 change that was made in the Exchange System Manager to the metabase on the 
 Exchange server.

 Click Cancel two times, and then exit Internet Information Services (IIS) 
 Manager. You can now test synching with your mobile device.

 From: Jason Benway [mailto:benw...@jsjcorp.com]

 Sent: 05 August 2011 15:35
 To: MS-Exchange Admin Issues
 Subject: transition from exchange 2003 to 2010



 I’ve been doing A LOT of reading. One thing I haven’t been able to find is 
 where the new cert needs to be installed.



 I’m assuming its on the CAS, exchange 2003 FE and exchange 2003 mbx servers?



 Should I also put the internal names on the SAN cert? or just the external 
 DNS names?



 What about the hotfix kb937031 does that go on all exchange 2003 servers? Or 
 just the FE?



 Thanks,jb

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe exchangelist

 
 MIRA Ltd
 Watling Street, Nuneaton, Warwickshire, CV10 0TU, England Registered
 in England and Wales No. 402570 VAT Registration  GB 100 1464 84 The
 contents of this e-mail are confidential and are solely for the use of the 
 intended recipient.  If you receive this e-mail in error, please delete it 
 and notify us either by e-mail, telephone or fax.  You should not copy, 
 forward or otherwise disclose the content of the e-mail as this is 
 prohibited.

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe exchangelist

 ---
 To manage subscriptions click here: 
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe exchangelist



 ---
 To manage subscriptions click here: 
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send 

Resource question

2011-08-05 Thread Brown, Larry
Exchange 2007 Outlook 2007

Our resources are accepting meetings with Show As: set to Free, which is the 
default when they book full days. This, of course, is allowing the room to be 
doubled booked. (And yes, I know this is user edumication...but I've been told 
to fix it!)

I've thought of changing the Work hours to 12:00 Am to 11:30 PM, and checking 
Allow scheduling only during working hours in the resource settings. But this 
isn't working. The resources are still accepting All Day Event bookings, with 
its default Free designation.

So...two questions: Will Exchange take hours before the Allow scheduling only 
during working hours starts working; am I just not waiting long enough?

And...am I missing a setting or way to make the Resources deny meetings with 
Show As set to Free?

 Larry C. Brown



---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

Re: transition from exchange 2003 to 2010

2011-08-05 Thread Kurt Buff
Are iPhones OK with wildcard certs on E2k10?

I've got our wildcard cert on the E2k3 servers in our overseas
offices, and the iPhones they're using don't seem to have a problem
with it - at least none have been reported to me.

Kurt

On Fri, Aug 5, 2011 at 10:15, Michael B. Smith mich...@smithcons.com wrote:
 It's not recommended because it doesn't work on some phones. If all our 
 phones support wildcard certs, it's just fine.

 I've got lots of clients installed with wildcard certs.

 Regards,

 Michael B. Smith
 Consultant and Exchange MVP
 http://TheEssentialExchange.com


 -Original Message-
 From: Kurt Buff [mailto:kurt.b...@gmail.com]
 Sent: Friday, August 05, 2011 1:10 PM
 To: MS-Exchange Admin Issues
 Subject: Re: transition from exchange 2003 to 2010

 OK!

 That's good to know. We'll be switching from E2k3 to E2010 in the near
 future. Kinda sucks that our expensive wildcard cert won't be useful.

 Kurt

 On Fri, Aug 5, 2011 at 07:55, KevinM kev...@wlkmmas.org wrote:
 Technically you need to have the names on the cert to make things work 
 correctly. You can kind of make it work with a wild card but it is not very 
 pretty, and not recommended..

 -Original Message-
 From: Kurt Buff [mailto:kurt.b...@gmail.com]
 Sent: Friday, August 05, 2011 7:52 AM
 To: MS-Exchange Admin Issues
 Subject: Re: transition from exchange 2003 to 2010

 So, why go with a SAN cert instead of a wildcard cert? Is it just price, or 
 is there a technical advantage?

 On Fri, Aug 5, 2011 at 07:45, Paul Hutchings paul.hutchi...@mira.co.uk 
 wrote:

 Just done this, fun aint it J  We got a single SAN/UCC cert for domain.com, 
 mail.domain.com, legacy.domain.com and autodiscover.domain.com.



 We put it on the CAS and the 2003 FE, not the 2003 BE (and of course our 
 reverse proxy for SSL inspection).



 This is what I have in my notes for KB937031:



 Steps to enable Integrated Windows Authentication after you install
 hotfix 937031 on the Exchange 2003 back-end server

 To work around this problem, turn on Integrated Windows Authentication. To 
 do this, follow these steps:

 Start Exchange System Manager.

 Expand Administrative Groups, expand Administrative_Group_Name, and then 
 expand Servers.

 Expand Your_Server_Name, expand Protocols, and then expand HTTP.

 Expand Exchange Virtual Server, right-click Microsoft-Server-ActiveSync, 
 and then click Properties.

 Click the Access tab, and then click Authentication.

 Click to select the Integrated Windows Authentication check box.

 Click OK two times. To verify that this successfully replicated to the 
 metabase on the Exchange server, follow these steps:

 Open the Internet Information Services (IIS) Manager under Administrative 
 Tools.

 Expand the Computer, expand Web Sites, and then expand Default Web Site.

 Right-click Microsoft-Server-ActiveSync, and then click Properties.

 Click the Directory Security tab, and then select the Edit button under 
 Authentication and access control.

 Verify that the Integrated Windows Authentication check box is selected.



 Note If this check box is selected, you have successfully replicated the 
 change that was made in the Exchange System Manager to the metabase on the 
 Exchange server.

 Click Cancel two times, and then exit Internet Information Services (IIS) 
 Manager. You can now test synching with your mobile device.

 From: Jason Benway [mailto:benw...@jsjcorp.com]

 Sent: 05 August 2011 15:35
 To: MS-Exchange Admin Issues
 Subject: transition from exchange 2003 to 2010



 I’ve been doing A LOT of reading. One thing I haven’t been able to find is 
 where the new cert needs to be installed.



 I’m assuming its on the CAS, exchange 2003 FE and exchange 2003 mbx servers?



 Should I also put the internal names on the SAN cert? or just the external 
 DNS names?



 What about the hotfix kb937031 does that go on all exchange 2003 servers? 
 Or just the FE?



 Thanks,jb

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe exchangelist

 
 MIRA Ltd
 Watling Street, Nuneaton, Warwickshire, CV10 0TU, England Registered
 in England and Wales No. 402570 VAT Registration  GB 100 1464 84 The
 contents of this e-mail are confidential and are solely for the use of the 
 intended recipient.  If you receive this e-mail in error, please delete it 
 and notify us either by e-mail, telephone or fax.  You should not copy, 
 forward or otherwise disclose the content of the e-mail as this is 
 prohibited.

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe exchangelist

 ---
 To manage subscriptions click here: 
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the 

Re: transition from exchange 2003 to 2010

2011-08-05 Thread Harry Singh
I'm using a wildcard cert just fine. Exchange 2k10 with IPhones.

On Friday, August 5, 2011, Kurt Buff kurt.b...@gmail.com wrote:
 Are iPhones OK with wildcard certs on E2k10?

 I've got our wildcard cert on the E2k3 servers in our overseas
 offices, and the iPhones they're using don't seem to have a problem
 with it - at least none have been reported to me.

 Kurt

 On Fri, Aug 5, 2011 at 10:15, Michael B. Smith mich...@smithcons.com
wrote:
 It's not recommended because it doesn't work on some phones. If all our
phones support wildcard certs, it's just fine.

 I've got lots of clients installed with wildcard certs.

 Regards,

 Michael B. Smith
 Consultant and Exchange MVP
 http://TheEssentialExchange.com


 -Original Message-
 From: Kurt Buff [mailto:kurt.b...@gmail.com]
 Sent: Friday, August 05, 2011 1:10 PM
 To: MS-Exchange Admin Issues
 Subject: Re: transition from exchange 2003 to 2010

 OK!

 That's good to know. We'll be switching from E2k3 to E2010 in the near
 future. Kinda sucks that our expensive wildcard cert won't be useful.

 Kurt

 On Fri, Aug 5, 2011 at 07:55, KevinM kev...@wlkmmas.org wrote:
 Technically you need to have the names on the cert to make things work
correctly. You can kind of make it work with a wild card but it is not very
pretty, and not recommended..

 -Original Message-
 From: Kurt Buff [mailto:kurt.b...@gmail.com]
 Sent: Friday, August 05, 2011 7:52 AM
 To: MS-Exchange Admin Issues
 Subject: Re: transition from exchange 2003 to 2010

 So, why go with a SAN cert instead of a wildcard cert? Is it just price,
or is there a technical advantage?

 On Fri, Aug 5, 2011 at 07:45, Paul Hutchings paul.hutchi...@mira.co.uk
wrote:

 Just done this, fun aint it J  We got a single SAN/UCC cert for
domain.com, mail.domain.com, legacy.domain.com and autodiscover.domain.com.



 We put it on the CAS and the 2003 FE, not the 2003 BE (and of course
our reverse proxy for SSL inspection).



 This is what I have in my notes for KB937031:



 Steps to enable Integrated Windows Authentication after you install
 hotfix 937031 on the Exchange 2003 back-end server

 To work around this problem, turn on Integrated Windows Authentication.
To do this, follow these steps:

 Start Exchange System Manager.

 Expand Administrative Groups, expand Administrative_Group_Name, and
then expand Servers.

 Expand Your_Server_Name, expand Protocols, and then expand HTTP.

 Expand Exchange Virtual Server, right-click
Microsoft-Server-ActiveSync, and then click Properties.

 Click the Access tab, and then click Authentication.

 Click to select the Integrated Windows Authentication check box.

 Click OK two times. To verify that this successfully replicated to the
metabase on the Exchange server, follow these steps:

 Open the Internet Information Services (IIS) Manager under
Administrative Tools.

 Expand the Computer, expand Web Sites, and then expand Default Web
Site.

 Right-click Microsoft-Server-ActiveSync, and then click Properties.

 Click the Directory Security tab, and then select the Edit button under
Authentication and access control.

 Verify that the Integrated Windows Authentication check box is
selected.



 Note If this check box is selected, you have successfully replicated
the change that was made in the Exchange System Manager to the metabase on
the Exchange server.

 Click Cancel two times, and then exit Internet Information Services
(IIS) Manager. You can now test synching with your mobile device.



---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

RE: transition from exchange 2003 to 2010

2011-08-05 Thread Sean Rector
This is good to hear - we're already using a wildcard cert and so far no issues 
with the Android phones that our people are using.  Phones seem to be the 
'only' area where a wildcard cert can cause problems?

Sean Rector, MCSE

-Original Message-
From: Michael B. Smith [mailto:mich...@smithcons.com] 
Sent: Friday, August 05, 2011 1:16 PM
To: MS-Exchange Admin Issues
Subject: RE: transition from exchange 2003 to 2010

It's not recommended because it doesn't work on some phones. If all our phones 
support wildcard certs, it's just fine.

I've got lots of clients installed with wildcard certs.

Regards,

Michael B. Smith
Consultant and Exchange MVP
http://TheEssentialExchange.com


-Original Message-
From: Kurt Buff [mailto:kurt.b...@gmail.com]
Sent: Friday, August 05, 2011 1:10 PM
To: MS-Exchange Admin Issues
Subject: Re: transition from exchange 2003 to 2010

OK!

That's good to know. We'll be switching from E2k3 to E2010 in the near future. 
Kinda sucks that our expensive wildcard cert won't be useful.

Kurt

On Fri, Aug 5, 2011 at 07:55, KevinM kev...@wlkmmas.org wrote:
 Technically you need to have the names on the cert to make things work 
 correctly. You can kind of make it work with a wild card but it is not very 
 pretty, and not recommended..

 -Original Message-
 From: Kurt Buff [mailto:kurt.b...@gmail.com]
 Sent: Friday, August 05, 2011 7:52 AM
 To: MS-Exchange Admin Issues
 Subject: Re: transition from exchange 2003 to 2010

 So, why go with a SAN cert instead of a wildcard cert? Is it just price, or 
 is there a technical advantage?

 On Fri, Aug 5, 2011 at 07:45, Paul Hutchings paul.hutchi...@mira.co.uk 
 wrote:

 Just done this, fun aint it J  We got a single SAN/UCC cert for domain.com, 
 mail.domain.com, legacy.domain.com and autodiscover.domain.com.



 We put it on the CAS and the 2003 FE, not the 2003 BE (and of course our 
 reverse proxy for SSL inspection).



 This is what I have in my notes for KB937031:



 Steps to enable Integrated Windows Authentication after you install 
 hotfix 937031 on the Exchange 2003 back-end server

 To work around this problem, turn on Integrated Windows Authentication. To 
 do this, follow these steps:

 Start Exchange System Manager.

 Expand Administrative Groups, expand Administrative_Group_Name, and then 
 expand Servers.

 Expand Your_Server_Name, expand Protocols, and then expand HTTP.

 Expand Exchange Virtual Server, right-click Microsoft-Server-ActiveSync, and 
 then click Properties.

 Click the Access tab, and then click Authentication.

 Click to select the Integrated Windows Authentication check box.

 Click OK two times. To verify that this successfully replicated to the 
 metabase on the Exchange server, follow these steps:

 Open the Internet Information Services (IIS) Manager under Administrative 
 Tools.

 Expand the Computer, expand Web Sites, and then expand Default Web Site.

 Right-click Microsoft-Server-ActiveSync, and then click Properties.

 Click the Directory Security tab, and then select the Edit button under 
 Authentication and access control.

 Verify that the Integrated Windows Authentication check box is selected.



 Note If this check box is selected, you have successfully replicated the 
 change that was made in the Exchange System Manager to the metabase on the 
 Exchange server.

 Click Cancel two times, and then exit Internet Information Services (IIS) 
 Manager. You can now test synching with your mobile device.

 From: Jason Benway [mailto:benw...@jsjcorp.com]

 Sent: 05 August 2011 15:35
 To: MS-Exchange Admin Issues
 Subject: transition from exchange 2003 to 2010



 I’ve been doing A LOT of reading. One thing I haven’t been able to find is 
 where the new cert needs to be installed.



 I’m assuming its on the CAS, exchange 2003 FE and exchange 2003 mbx servers?



 Should I also put the internal names on the SAN cert? or just the external 
 DNS names?



 What about the hotfix kb937031 does that go on all exchange 2003 servers? Or 
 just the FE?



 Thanks,jb

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe exchangelist

 
 MIRA Ltd
 Watling Street, Nuneaton, Warwickshire, CV10 0TU, England Registered 
 in England and Wales No. 402570 VAT Registration  GB 100 1464 84 The 
 contents of this e-mail are confidential and are solely for the use of the 
 intended recipient.  If you receive this e-mail in error, please delete it 
 and notify us either by e-mail, telephone or fax.  You should not copy, 
 forward or otherwise disclose the content of the e-mail as this is 
 prohibited.

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe exchangelist

 ---
 To manage subscriptions click here: 
 

Re: transition from exchange 2003 to 2010

2011-08-05 Thread Kurt Buff
Very good to hear.

Thanks for that.

On Fri, Aug 5, 2011 at 10:47, Harry Singh hbo...@gmail.com wrote:
 I'm using a wildcard cert just fine. Exchange 2k10 with IPhones.

 On Friday, August 5, 2011, Kurt Buff kurt.b...@gmail.com wrote:
 Are iPhones OK with wildcard certs on E2k10?

 I've got our wildcard cert on the E2k3 servers in our overseas
 offices, and the iPhones they're using don't seem to have a problem
 with it - at least none have been reported to me.

 Kurt

 On Fri, Aug 5, 2011 at 10:15, Michael B. Smith mich...@smithcons.com
 wrote:
 It's not recommended because it doesn't work on some phones. If all our
 phones support wildcard certs, it's just fine.

 I've got lots of clients installed with wildcard certs.

 Regards,

 Michael B. Smith
 Consultant and Exchange MVP
 http://TheEssentialExchange.com


 -Original Message-
 From: Kurt Buff [mailto:kurt.b...@gmail.com]
 Sent: Friday, August 05, 2011 1:10 PM
 To: MS-Exchange Admin Issues
 Subject: Re: transition from exchange 2003 to 2010

 OK!

 That's good to know. We'll be switching from E2k3 to E2010 in the near
 future. Kinda sucks that our expensive wildcard cert won't be useful.

 Kurt

 On Fri, Aug 5, 2011 at 07:55, KevinM kev...@wlkmmas.org wrote:
 Technically you need to have the names on the cert to make things work
 correctly. You can kind of make it work with a wild card but it is not very
 pretty, and not recommended..

 -Original Message-
 From: Kurt Buff [mailto:kurt.b...@gmail.com]
 Sent: Friday, August 05, 2011 7:52 AM
 To: MS-Exchange Admin Issues
 Subject: Re: transition from exchange 2003 to 2010

 So, why go with a SAN cert instead of a wildcard cert? Is it just price,
 or is there a technical advantage?

 On Fri, Aug 5, 2011 at 07:45, Paul Hutchings paul.hutchi...@mira.co.uk
 wrote:

 Just done this, fun aint it J  We got a single SAN/UCC cert for
 domain.com, mail.domain.com, legacy.domain.com and 
 autodiscover.domain.com.



 We put it on the CAS and the 2003 FE, not the 2003 BE (and of course
 our reverse proxy for SSL inspection).



 This is what I have in my notes for KB937031:



 Steps to enable Integrated Windows Authentication after you install
 hotfix 937031 on the Exchange 2003 back-end server

 To work around this problem, turn on Integrated Windows Authentication.
 To do this, follow these steps:

 Start Exchange System Manager.

 Expand Administrative Groups, expand Administrative_Group_Name, and
 then expand Servers.

 Expand Your_Server_Name, expand Protocols, and then expand HTTP.

 Expand Exchange Virtual Server, right-click
 Microsoft-Server-ActiveSync, and then click Properties.

 Click the Access tab, and then click Authentication.

 Click to select the Integrated Windows Authentication check box.

 Click OK two times. To verify that this successfully replicated to the
 metabase on the Exchange server, follow these steps:

 Open the Internet Information Services (IIS) Manager under
 Administrative Tools.

 Expand the Computer, expand Web Sites, and then expand Default Web
 Site.

 Right-click Microsoft-Server-ActiveSync, and then click Properties.

 Click the Directory Security tab, and then select the Edit button under
 Authentication and access control.

 Verify that the Integrated Windows Authentication check box is
 selected.



 Note If this check box is selected, you have successfully replicated
 the change that was made in the Exchange System Manager to the metabase on
 the Exchange server.

 Click Cancel two times, and then exit Internet Information Services
 (IIS) Manager. You can now test synching with your mobile device.



 ---

 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist



RE: transition from exchange 2003 to 2010

2011-08-05 Thread Michael B. Smith
It requires a bit more config (one extra powershell command), but that is the 
only issue I have ever seen.

Sent from my HTC Tilt™ 2, a Windows® phone from ATT

-Original Message-
From: Sean Rector sean.rec...@vaopera.org
Sent: Friday, August 05, 2011 2:10 PM
To: MS-Exchange Admin Issues exchangelist@lyris.sunbelt-software.com
Subject: RE: transition from exchange 2003 to 2010


This is good to hear - we're already using a wildcard cert and so far no issues 
with the Android phones that our people are using.  Phones seem to be the 
'only' area where a wildcard cert can cause problems?

Sean Rector, MCSE

-Original Message-
From: Michael B. Smith [mailto:mich...@smithcons.com]
Sent: Friday, August 05, 2011 1:16 PM
To: MS-Exchange Admin Issues
Subject: RE: transition from exchange 2003 to 2010

It's not recommended because it doesn't work on some phones. If all our phones 
support wildcard certs, it's just fine.

I've got lots of clients installed with wildcard certs.

Regards,

Michael B. Smith
Consultant and Exchange MVP
http://TheEssentialExchange.com


-Original Message-
From: Kurt Buff [mailto:kurt.b...@gmail.com]
Sent: Friday, August 05, 2011 1:10 PM
To: MS-Exchange Admin Issues
Subject: Re: transition from exchange 2003 to 2010

OK!

That's good to know. We'll be switching from E2k3 to E2010 in the near future. 
Kinda sucks that our expensive wildcard cert won't be useful.

Kurt

On Fri, Aug 5, 2011 at 07:55, KevinM kev...@wlkmmas.org wrote:
 Technically you need to have the names on the cert to make things work 
 correctly. You can kind of make it work with a wild card but it is not very 
 pretty, and not recommended..

 -Original Message-
 From: Kurt Buff [mailto:kurt.b...@gmail.com]
 Sent: Friday, August 05, 2011 7:52 AM
 To: MS-Exchange Admin Issues
 Subject: Re: transition from exchange 2003 to 2010

 So, why go with a SAN cert instead of a wildcard cert? Is it just price, or 
 is there a technical advantage?

 On Fri, Aug 5, 2011 at 07:45, Paul Hutchings paul.hutchi...@mira.co.uk 
 wrote:

 Just done this, fun aint it J  We got a single SAN/UCC cert for domain.com, 
 mail.domain.com, legacy.domain.com and autodiscover.domain.com.



 We put it on the CAS and the 2003 FE, not the 2003 BE (and of course our 
 reverse proxy for SSL inspection).



 This is what I have in my notes for KB937031:



 Steps to enable Integrated Windows Authentication after you install
 hotfix 937031 on the Exchange 2003 back-end server

 To work around this problem, turn on Integrated Windows Authentication. To 
 do this, follow these steps:

 Start Exchange System Manager.

 Expand Administrative Groups, expand Administrative_Group_Name, and then 
 expand Servers.

 Expand Your_Server_Name, expand Protocols, and then expand HTTP.

 Expand Exchange Virtual Server, right-click Microsoft-Server-ActiveSync, and 
 then click Properties.

 Click the Access tab, and then click Authentication.

 Click to select the Integrated Windows Authentication check box.

 Click OK two times. To verify that this successfully replicated to the 
 metabase on the Exchange server, follow these steps:

 Open the Internet Information Services (IIS) Manager under Administrative 
 Tools.

 Expand the Computer, expand Web Sites, and then expand Default Web Site.

 Right-click Microsoft-Server-ActiveSync, and then click Properties.

 Click the Directory Security tab, and then select the Edit button under 
 Authentication and access control.

 Verify that the Integrated Windows Authentication check box is selected.



 Note If this check box is selected, you have successfully replicated the 
 change that was made in the Exchange System Manager to the metabase on the 
 Exchange server.

 Click Cancel two times, and then exit Internet Information Services (IIS) 
 Manager. You can now test synching with your mobile device.

 From: Jason Benway [mailto:benw...@jsjcorp.com]

 Sent: 05 August 2011 15:35
 To: MS-Exchange Admin Issues
 Subject: transition from exchange 2003 to 2010



 I’ve been doing A LOT of reading. One thing I haven’t been able to find is 
 where the new cert needs to be installed.



 I’m assuming its on the CAS, exchange 2003 FE and exchange 2003 mbx servers?



 Should I also put the internal names on the SAN cert? or just the external 
 DNS names?



 What about the hotfix kb937031 does that go on all exchange 2003 servers? Or 
 just the FE?



 Thanks,jb

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe exchangelist

 
 MIRA Ltd
 Watling Street, Nuneaton, Warwickshire, CV10 0TU, England Registered
 in England and Wales No. 402570 VAT Registration  GB 100 1464 84 The
 contents of this e-mail are confidential and are solely for the use of the 
 intended recipient.  If you receive this e-mail in error, please delete it 
 and notify us 

RE: transition from exchange 2003 to 2010

2011-08-05 Thread Michael B. Smith
Yes. Some nokia, winmo prior to v6, older palms, etc. Have problems, but very 
little 'current' equipment.

Sent from my HTC Tilt™ 2, a Windows® phone from ATT

-Original Message-
From: Kurt Buff kurt.b...@gmail.com
Sent: Friday, August 05, 2011 1:31 PM
To: MS-Exchange Admin Issues exchangelist@lyris.sunbelt-software.com
Subject: Re: transition from exchange 2003 to 2010


Are iPhones OK with wildcard certs on E2k10?

I've got our wildcard cert on the E2k3 servers in our overseas
offices, and the iPhones they're using don't seem to have a problem
with it - at least none have been reported to me.

Kurt

On Fri, Aug 5, 2011 at 10:15, Michael B. Smith mich...@smithcons.com wrote:
 It's not recommended because it doesn't work on some phones. If all our 
 phones support wildcard certs, it's just fine.

 I've got lots of clients installed with wildcard certs.

 Regards,

 Michael B. Smith
 Consultant and Exchange MVP
 http://TheEssentialExchange.com


 -Original Message-
 From: Kurt Buff [mailto:kurt.b...@gmail.com]
 Sent: Friday, August 05, 2011 1:10 PM
 To: MS-Exchange Admin Issues
 Subject: Re: transition from exchange 2003 to 2010

 OK!

 That's good to know. We'll be switching from E2k3 to E2010 in the near
 future. Kinda sucks that our expensive wildcard cert won't be useful.

 Kurt

 On Fri, Aug 5, 2011 at 07:55, KevinM kev...@wlkmmas.org wrote:
 Technically you need to have the names on the cert to make things work 
 correctly. You can kind of make it work with a wild card but it is not very 
 pretty, and not recommended..

 -Original Message-
 From: Kurt Buff [mailto:kurt.b...@gmail.com]
 Sent: Friday, August 05, 2011 7:52 AM
 To: MS-Exchange Admin Issues
 Subject: Re: transition from exchange 2003 to 2010

 So, why go with a SAN cert instead of a wildcard cert? Is it just price, or 
 is there a technical advantage?

 On Fri, Aug 5, 2011 at 07:45, Paul Hutchings paul.hutchi...@mira.co.uk 
 wrote:

 Just done this, fun aint it J  We got a single SAN/UCC cert for domain.com, 
 mail.domain.com, legacy.domain.com and autodiscover.domain.com.



 We put it on the CAS and the 2003 FE, not the 2003 BE (and of course our 
 reverse proxy for SSL inspection).



 This is what I have in my notes for KB937031:



 Steps to enable Integrated Windows Authentication after you install
 hotfix 937031 on the Exchange 2003 back-end server

 To work around this problem, turn on Integrated Windows Authentication. To 
 do this, follow these steps:

 Start Exchange System Manager.

 Expand Administrative Groups, expand Administrative_Group_Name, and then 
 expand Servers.

 Expand Your_Server_Name, expand Protocols, and then expand HTTP.

 Expand Exchange Virtual Server, right-click Microsoft-Server-ActiveSync, 
 and then click Properties.

 Click the Access tab, and then click Authentication.

 Click to select the Integrated Windows Authentication check box.

 Click OK two times. To verify that this successfully replicated to the 
 metabase on the Exchange server, follow these steps:

 Open the Internet Information Services (IIS) Manager under Administrative 
 Tools.

 Expand the Computer, expand Web Sites, and then expand Default Web Site.

 Right-click Microsoft-Server-ActiveSync, and then click Properties.

 Click the Directory Security tab, and then select the Edit button under 
 Authentication and access control.

 Verify that the Integrated Windows Authentication check box is selected.



 Note If this check box is selected, you have successfully replicated the 
 change that was made in the Exchange System Manager to the metabase on the 
 Exchange server.

 Click Cancel two times, and then exit Internet Information Services (IIS) 
 Manager. You can now test synching with your mobile device.

 From: Jason Benway [mailto:benw...@jsjcorp.com]

 Sent: 05 August 2011 15:35
 To: MS-Exchange Admin Issues
 Subject: transition from exchange 2003 to 2010



 I’ve been doing A LOT of reading. One thing I haven’t been able to find is 
 where the new cert needs to be installed.



 I’m assuming its on the CAS, exchange 2003 FE and exchange 2003 mbx servers?



 Should I also put the internal names on the SAN cert? or just the external 
 DNS names?



 What about the hotfix kb937031 does that go on all exchange 2003 servers? 
 Or just the FE?



 Thanks,jb

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe exchangelist

 
 MIRA Ltd
 Watling Street, Nuneaton, Warwickshire, CV10 0TU, England Registered
 in England and Wales No. 402570 VAT Registration  GB 100 1464 84 The
 contents of this e-mail are confidential and are solely for the use of the 
 intended recipient.  If you receive this e-mail in error, please delete it 
 and notify us either by e-mail, telephone or fax.  You should not copy, 
 forward or otherwise disclose the content of the e-mail 

RE: Room Booking - All Day Events

2011-08-05 Thread Campbell, Rob
By default, the booking attendant will not double book.

You can double book, but to do it you have to go in and explicitly change the 
Allowconflicts setting from the default of $false to $true, and set the 
ConflictPercentageAllowed and MaximumConflictInstances, using the 
set-calendarprocessing cmdlet.

You can end up with double bookings if you give users full access to the 
calendar and they manually add the appointments to the calendar.  The 
AllowConflicts only applies to the behavior of the Booking Attendant.  It 
doesn't  apply a restriction to the calendar itself.




From: Paul Hutchings [mailto:paul.hutchi...@mira.co.uk]
Sent: Friday, August 05, 2011 12:59 PM
To: MS-Exchange Admin Issues
Subject: Room Booking - All Day Events

Just after a sanity check that I'm not missing anything here - on Exchange 2010 
if I setup a room/equipment mailbox and use the booking attendant, it seems 
that if I send a meeting request from Outlook as an all day event with the 
default of show as free, the book attendant automatically marks the time in 
the room/equipment calendar as busy, which is obviously sensible.

I just want to be sure that I haven't overlooked anything and that there are no 
circumstances, regardless of client version, where a booking will show as 
free in the calendar of the resource?

Essentially, can you still double-book using the booking attendant and Exchange 
2010 SP1 RU3v3?

Thanks,
Paul

MIRA Ltd

Watling Street, Nuneaton, Warwickshire, CV10 0TU, England
Registered in England and Wales No. 402570
VAT Registration  GB 100 1464 84

The contents of this e-mail are confidential and are solely for the use of the 
intended recipient.  If you receive this e-mail in error, please delete it and 
notify us either by e-mail, telephone or fax.  You should not copy, forward or 
otherwise disclose the content of the e-mail as this is prohibited.

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist
**
Note: 
The information contained in this message may be privileged and confidential 
and 
protected from disclosure.  If the reader of this message is not the intended  
recipient, or an employee or agent responsible for delivering this message to  
the intended recipient, you are hereby notified that any dissemination,   
distribution or copying of this communication is strictly prohibited. If you  
have received this communication in error, please notify us immediately by  
replying to the message and deleting it from your computer. 
**

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

RE: Room Booking - All Day Events

2011-08-05 Thread Paul Hutchings
Thanks Rob, that is what I would expect, but there's been a couple of things 
the attendant does that don't tie in with what I'd have expected.

Presumably the same thing goes for the all-day event scenario - the attendant 
will always set the show as to busy even if the user leaves Outlook on the 
default?

All of my test booking seem to confirm this but a second opinion would be great.

From: Campbell, Rob [rob_campb...@centraltechnology.net]
Sent: 05 August 2011 7:24 PM
To: MS-Exchange Admin Issues
Subject: RE: Room Booking - All Day Events

By default, the booking attendant will not double book.

You can double book, but to do it you have to go in and explicitly change the 
Allowconflicts setting from the default of $false to $true, and set the 
ConflictPercentageAllowed and MaximumConflictInstances, using the 
set-calendarprocessing cmdlet.

You can end up with double bookings if you give users full access to the 
calendar and they manually add the appointments to the calendar.  The 
AllowConflicts only applies to the behavior of the Booking Attendant.  It 
doesn’t  apply a restriction to the calendar itself.




From: Paul Hutchings [mailto:paul.hutchi...@mira.co.uk]
Sent: Friday, August 05, 2011 12:59 PM
To: MS-Exchange Admin Issues
Subject: Room Booking - All Day Events

Just after a sanity check that I’m not missing anything here – on Exchange 2010 
if I setup a room/equipment mailbox and use the booking attendant, it seems 
that if I send a meeting request from Outlook as an “all day event” with the 
default of “show as free”, the book attendant automatically marks the time in 
the room/equipment calendar as busy, which is obviously sensible.

I just want to be sure that I haven’t overlooked anything and that there are no 
circumstances, regardless of client version, where a booking will show as 
“free” in the calendar of the resource?

Essentially, can you still double-book using the booking attendant and Exchange 
2010 SP1 RU3v3?

Thanks,
Paul

MIRA Ltd

Watling Street, Nuneaton, Warwickshire, CV10 0TU, England
Registered in England and Wales No. 402570
VAT Registration  GB 100 1464 84

The contents of this e-mail are confidential and are solely for the use of the 
intended recipient.  If you receive this e-mail in error, please delete it and 
notify us either by e-mail, telephone or fax.  You should not copy, forward or 
otherwise disclose the content of the e-mail as this is prohibited.

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

**
Note:
The information contained in this message may be privileged and confidential and
protected from disclosure.  If the reader of this message is not the intended
recipient, or an employee or agent responsible for delivering this message to
the intended recipient, you are hereby notified that any dissemination,
distribution or copying of this communication is strictly prohibited. If you
have received this communication in error, please notify us immediately by
replying to the message and deleting it from your computer.
**


---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

RE: Room Booking - All Day Events

2011-08-05 Thread Campbell, Rob
I've never seen it stated explicitly that it does change it for an all day 
event, but I can't imagine the thing working reliably at all if it doesn't.

Even if the booking attendant wouldn't allow the double booking, the resource 
would still be showing up as available in a free busy search, and users would 
be trying to reserve it and complaining when it showed available, but then 
denied their request.

From: Paul Hutchings [mailto:paul.hutchi...@mira.co.uk]
Sent: Friday, August 05, 2011 1:29 PM
To: MS-Exchange Admin Issues
Subject: RE: Room Booking - All Day Events

Thanks Rob, that is what I would expect, but there's been a couple of things 
the attendant does that don't tie in with what I'd have expected.

Presumably the same thing goes for the all-day event scenario - the attendant 
will always set the show as to busy even if the user leaves Outlook on the 
default?

All of my test booking seem to confirm this but a second opinion would be great.

From: Campbell, Rob [rob_campb...@centraltechnology.net]
Sent: 05 August 2011 7:24 PM
To: MS-Exchange Admin Issues
Subject: RE: Room Booking - All Day Events
By default, the booking attendant will not double book.

You can double book, but to do it you have to go in and explicitly change the 
Allowconflicts setting from the default of $false to $true, and set the 
ConflictPercentageAllowed and MaximumConflictInstances, using the 
set-calendarprocessing cmdlet.

You can end up with double bookings if you give users full access to the 
calendar and they manually add the appointments to the calendar.  The 
AllowConflicts only applies to the behavior of the Booking Attendant.  It 
doesn't  apply a restriction to the calendar itself.




From: Paul Hutchings 
[mailto:paul.hutchi...@mira.co.uk]mailto:[mailto:paul.hutchi...@mira.co.uk]
Sent: Friday, August 05, 2011 12:59 PM
To: MS-Exchange Admin Issues
Subject: Room Booking - All Day Events

Just after a sanity check that I'm not missing anything here - on Exchange 2010 
if I setup a room/equipment mailbox and use the booking attendant, it seems 
that if I send a meeting request from Outlook as an all day event with the 
default of show as free, the book attendant automatically marks the time in 
the room/equipment calendar as busy, which is obviously sensible.

I just want to be sure that I haven't overlooked anything and that there are no 
circumstances, regardless of client version, where a booking will show as 
free in the calendar of the resource?

Essentially, can you still double-book using the booking attendant and Exchange 
2010 SP1 RU3v3?

Thanks,
Paul

MIRA Ltd

Watling Street, Nuneaton, Warwickshire, CV10 0TU, England
Registered in England and Wales No. 402570
VAT Registration  GB 100 1464 84

The contents of this e-mail are confidential and are solely for the use of the 
intended recipient.  If you receive this e-mail in error, please delete it and 
notify us either by e-mail, telephone or fax.  You should not copy, forward or 
otherwise disclose the content of the e-mail as this is prohibited.

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

**

Note:

The information contained in this message may be privileged and confidential and

protected from disclosure.  If the reader of this message is not the intended

recipient, or an employee or agent responsible for delivering this message to

the intended recipient, you are hereby notified that any dissemination,

distribution or copying of this communication is strictly prohibited. If you

have received this communication in error, please notify us immediately by

replying to the message and deleting it from your computer.

**

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist
**
Note: 
The information contained in this message may be privileged and confidential 
and 
protected from disclosure.  If the reader of this message is not the intended  
recipient, or an employee or agent responsible for delivering this message to  
the intended recipient, you are hereby notified that any dissemination,   
distribution 

Re: Managing Activesync

2011-08-05 Thread Kurt Buff
Sorry to say that we're abandoning Good's technology, and going with
plain Activesync.

I was very opposed to it, but the iPhone fanatics hated it, and never
gave it a good chance.

I suppose we'll get something else once we have a major breach.

Kurt

On Fri, Aug 5, 2011 at 11:53, Don Andrews don.andr...@safeway.com wrote:
 Not directly involved but I understand we are looking at Airwatch as well.

 
 From: Martin Blackstone mblackst...@gmail.com
 To: MS-Exchange Admin Issues exchangelist@lyris.sunbelt-software.com
 Sent: Fri Aug 05 09:14:05 2011
 Subject: RE: Managing Activesync

 We are evaluating a number of MDM solutions right now. I haven’t gotten to
 Airwatch yet, but it is on the list.

 My favorite so far has been Zenprise. I like the way they use app tunnels.



 From: Rimmel, Carl [mailto:crimm...@hfhs.org]
 Sent: Friday, August 05, 2011 7:21 AM
 To: MS-Exchange Admin Issues
 Subject: Managing Activesync



 Wondering what, if any, solutions people are using to manage, secure and
 control Activesync connections to their Exchange environments.  We are
 looking at a product from Airwatch (http://www.air-watch.com/).

 ==

 CONFIDENTIALITY NOTICE: This email contains information from the sender that

 may be CONFIDENTIAL, LEGALLY PRIVILEGED, PROPRIETARY or otherwise protected

 from disclosure. This email is intended for use only by the person or entity

 to whom it is addressed. If you are not the intended recipient, any use,

 disclosure, copying, distribution, printing, or any action taken in reliance

 on the contents of this email, is strictly prohibited. If you received this

 email in error, please contact the sending party by reply email, delete the

 email from your computer system and shred any paper copies.



 Note to Patients: There are a number of risks you should consider before
 using

 e-mail to communicate with us. See our Privacy Policy and Henry Ford My
 Health

 at www.henryford.com for more detailed information. If you do not believe
 that

 our policy gives you the privacy and security protection you need, do not
 send

 e-mail or Internet communications to us.

 ==

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe exchangelist

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe exchangelist

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist



RE: Resource question

2011-08-05 Thread Brown, Larry
Well...I think I found out why  Allow scheduling only during working hours 
isn't working.

http://www.mskbarticles.com/index.php?kb=2479939

Still wondering though...shouldn't Resources automatically put entries in as 
Busy? Am I missing something somewhere?

Larry

From: Brown, Larry [mailto:lc.br...@dplinc.com]
Sent: Friday, August 05, 2011 1:27 PM
To: MS-Exchange Admin Issues
Subject: Resource question

Exchange 2007 Outlook 2007

Our resources are accepting meetings with Show As: set to Free, which is the 
default when they book full days. This, of course, is allowing the room to be 
doubled booked. (And yes, I know this is user edumication...but I've been told 
to fix it!)

I've thought of changing the Work hours to 12:00 Am to 11:30 PM, and checking 
Allow scheduling only during working hours in the resource settings. But this 
isn't working. The resources are still accepting All Day Event bookings, with 
its default Free designation.

So...two questions: Will Exchange take hours before the Allow scheduling only 
during working hours starts working; am I just not waiting long enough?

And...am I missing a setting or way to make the Resources deny meetings with 
Show As set to Free?

 Larry C. Brown



---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

RE: Resource question

2011-08-05 Thread Campbell, Rob
If you're using the resource AutoAccept it should, unless you've got it set to 
allow conflicts.

If the users have full rights to the calendar and are using direct booking, 
they're bypassing the agent and putting the appointment directly onto the 
calendar, and the agent never gets a chance to change the free busy status.

From: Brown, Larry [mailto:lc.br...@dplinc.com]
Sent: Friday, August 05, 2011 2:55 PM
To: MS-Exchange Admin Issues
Subject: RE: Resource question

Well...I think I found out why  Allow scheduling only during working hours 
isn't working.

http://www.mskbarticles.com/index.php?kb=2479939

Still wondering though...shouldn't Resources automatically put entries in as 
Busy? Am I missing something somewhere?

Larry

From: Brown, Larry 
[mailto:lc.br...@dplinc.com]mailto:[mailto:lc.br...@dplinc.com]
Sent: Friday, August 05, 2011 1:27 PM
To: MS-Exchange Admin Issues
Subject: Resource question

Exchange 2007 Outlook 2007

Our resources are accepting meetings with Show As: set to Free, which is the 
default when they book full days. This, of course, is allowing the room to be 
doubled booked. (And yes, I know this is user edumication...but I've been told 
to fix it!)

I've thought of changing the Work hours to 12:00 Am to 11:30 PM, and checking 
Allow scheduling only during working hours in the resource settings. But this 
isn't working. The resources are still accepting All Day Event bookings, with 
its default Free designation.

So...two questions: Will Exchange take hours before the Allow scheduling only 
during working hours starts working; am I just not waiting long enough?

And...am I missing a setting or way to make the Resources deny meetings with 
Show As set to Free?

 Larry C. Brown



---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist
**
Note: 
The information contained in this message may be privileged and confidential 
and 
protected from disclosure.  If the reader of this message is not the intended  
recipient, or an employee or agent responsible for delivering this message to  
the intended recipient, you are hereby notified that any dissemination,   
distribution or copying of this communication is strictly prohibited. If you  
have received this communication in error, please notify us immediately by  
replying to the message and deleting it from your computer. 
**

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

RE: Resource question

2011-08-05 Thread PRamatowski


2010 here but a big fat this.

/Looking at a few users here who will never understand.
::grumble::

From: Campbell, Rob [mailto:rob_campb...@centraltechnology.net]
Sent: Friday, August 05, 2011 4:06 PM
To: MS-Exchange Admin Issues
Subject: RE: Resource question

If you're using the resource AutoAccept it should, unless you've got it set to 
allow conflicts.

If the users have full rights to the calendar and are using direct booking, 
they're bypassing the agent and putting the appointment directly onto the 
calendar, and the agent never gets a chance to change the free busy status.

From: Brown, Larry [mailto:lc.br...@dplinc.com]
Sent: Friday, August 05, 2011 2:55 PM
To: MS-Exchange Admin Issues
Subject: RE: Resource question

Well...I think I found out why  Allow scheduling only during working hours 
isn't working.

http://www.mskbarticles.com/index.php?kb=2479939

Still wondering though...shouldn't Resources automatically put entries in as 
Busy? Am I missing something somewhere?

Larry

From: Brown, Larry 
[mailto:lc.br...@dplinc.com]mailto:[mailto:lc.br...@dplinc.com]
Sent: Friday, August 05, 2011 1:27 PM
To: MS-Exchange Admin Issues
Subject: Resource question

Exchange 2007 Outlook 2007

Our resources are accepting meetings with Show As: set to Free, which is the 
default when they book full days. This, of course, is allowing the room to be 
doubled booked. (And yes, I know this is user edumication...but I've been told 
to fix it!)

I've thought of changing the Work hours to 12:00 Am to 11:30 PM, and checking 
Allow scheduling only during working hours in the resource settings. But this 
isn't working. The resources are still accepting All Day Event bookings, with 
its default Free designation.

So...two questions: Will Exchange take hours before the Allow scheduling only 
during working hours starts working; am I just not waiting long enough?

And...am I missing a setting or way to make the Resources deny meetings with 
Show As set to Free?

 Larry C. Brown



---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

**

Note:

The information contained in this message may be privileged and confidential and

protected from disclosure.  If the reader of this message is not the intended

recipient, or an employee or agent responsible for delivering this message to

the intended recipient, you are hereby notified that any dissemination,

distribution or copying of this communication is strictly prohibited. If you

have received this communication in error, please notify us immediately by

replying to the message and deleting it from your computer.

**

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

RE: Resource question

2011-08-05 Thread Campbell, Rob
Do you get about 4 dozen old reminders popping up like you just cleared the 
deck in Solitaire when you open one of those resource calendars?

From: pramatow...@mediageneral.com [mailto:pramatow...@mediageneral.com]
Sent: Friday, August 05, 2011 3:36 PM
To: MS-Exchange Admin Issues
Subject: RE: Resource question



2010 here but a big fat this.

/Looking at a few users here who will never understand.
::grumble::

From: Campbell, Rob 
[mailto:rob_campb...@centraltechnology.net]mailto:[mailto:rob_campb...@centraltechnology.net]
Sent: Friday, August 05, 2011 4:06 PM
To: MS-Exchange Admin Issues
Subject: RE: Resource question

If you're using the resource AutoAccept it should, unless you've got it set to 
allow conflicts.

If the users have full rights to the calendar and are using direct booking, 
they're bypassing the agent and putting the appointment directly onto the 
calendar, and the agent never gets a chance to change the free busy status.

From: Brown, Larry 
[mailto:lc.br...@dplinc.com]mailto:[mailto:lc.br...@dplinc.com]
Sent: Friday, August 05, 2011 2:55 PM
To: MS-Exchange Admin Issues
Subject: RE: Resource question

Well...I think I found out why  Allow scheduling only during working hours 
isn't working.

http://www.mskbarticles.com/index.php?kb=2479939

Still wondering though...shouldn't Resources automatically put entries in as 
Busy? Am I missing something somewhere?

Larry

From: Brown, Larry 
[mailto:lc.br...@dplinc.com]mailto:[mailto:lc.br...@dplinc.com]
Sent: Friday, August 05, 2011 1:27 PM
To: MS-Exchange Admin Issues
Subject: Resource question

Exchange 2007 Outlook 2007

Our resources are accepting meetings with Show As: set to Free, which is the 
default when they book full days. This, of course, is allowing the room to be 
doubled booked. (And yes, I know this is user edumication...but I've been told 
to fix it!)

I've thought of changing the Work hours to 12:00 Am to 11:30 PM, and checking 
Allow scheduling only during working hours in the resource settings. But this 
isn't working. The resources are still accepting All Day Event bookings, with 
its default Free designation.

So...two questions: Will Exchange take hours before the Allow scheduling only 
during working hours starts working; am I just not waiting long enough?

And...am I missing a setting or way to make the Resources deny meetings with 
Show As set to Free?

 Larry C. Brown



---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

**

Note:

The information contained in this message may be privileged and confidential and

protected from disclosure.  If the reader of this message is not the intended

recipient, or an employee or agent responsible for delivering this message to

the intended recipient, you are hereby notified that any dissemination,

distribution or copying of this communication is strictly prohibited. If you

have received this communication in error, please notify us immediately by

replying to the message and deleting it from your computer.

**

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist
**
Note: 
The information contained in this message may be privileged and confidential 
and 
protected from disclosure.  If the reader of this message is not the intended  
recipient, or an employee or agent responsible for delivering this message to  
the intended recipient, you are hereby notified that any dissemination,   
distribution or copying of this communication is strictly prohibited. If you  
have received this communication in error, please notify us immediately by  
replying to the message and deleting it from your computer. 
**

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe 

RE: Do not resolve sender's display name for messages submitted over anonymous?

2011-08-05 Thread daemonR00t
Not yet L

 

 

From: Harry Singh [mailto:hbo...@gmail.com] 
Sent: Friday, August 05, 2011 8:17 AM
To: MS-Exchange Admin Issues
Subject: Re: Do not resolve sender's display name for messages submitted over 
anonymous?

 

Did you ever find a answer to your question?

 

H

 

 

On Wed, Aug 3, 2011 at 10:46 PM, daemonR00t daemonr...@sysadmin-cr.com wrote:

Hi,

 

How do I set Exchange 2010 SP1 to not resolve sender's display name for 
messages submitted over anonymous connections from the Internet?

http://technet.microsoft.com/en-us/library/aa997792(v=EXCHG.65).aspx 

Thanks!

 

~d

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

 

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist


---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

RE: SMTP Banner

2011-08-05 Thread daemonR00t
That's exactly what I've done a few times and no one got hurt J

 

From: Cameron [mailto:cameron.orl...@gmail.com] 
Sent: Friday, August 05, 2011 8:15 AM
To: MS-Exchange Admin Issues
Subject: SMTP Banner

 

Good morning all,

 

Exchange 2010

I've just been told that I have a discrepancy between our webmail record and
SMTP banner. It returns 220 servername.domain.ca Microsoft ESMTP MAIL
Service ready at date/time. Can I just use the Set-ReceiveConnector cmdlet
to set webmail.domain.ca ?

 

I'm just concerned that if I do that, that I may be affecting something
else.

 

TIA

 

Cameron

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist


---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist