RE: spf record length

[Maglinger, Paul]

Sweet.  Thanks for the input everybody!

From: Micheal Espinola Jr [mailto:michealespin...@gmail.com]
Sent: Friday, September 23, 2011 3:54 PM
To: MS-Exchange Admin Issues
Subject: Re: spf record length

I would do this, and follow the limits outlined in the RFC.

--
Espi




On Fri, Sep 23, 2011 at 11:41 AM, Jason Gurtz 
mailto:jasongu...@npumail.com>> wrote:
A lot of the larger places seem to utilize a subdomain scheme like
spf1.example.com, 
spf2.example.com, ... , 
spfn.example.com and then use
include:spf1.example.com, etc... in the main record in 
the example.com
zone.

For example, hotmail.com:

;; ANSWER SECTION:
hotmail.com.3600IN  TXT "v=spf1
include:spf-a.hotmail.com include:spf-b.hotm
ail.com include:spf-c.hotmail.com 
include:spf-d.hotmail.com ~all"

~JasonG

> -Original Message-
> From: Maglinger, Paul [mailto:pmaglin...@scvl.com]
> Sent: Friday, September 23, 2011 14:26
> To: MS-Exchange Admin Issues
> Subject: RE: spf record length
>
> Anyone?  I just checked ours and it was 736 characters.
>
> -Original Message-
> From: Maglinger, Paul [mailto:pmaglin...@scvl.com]
> Sent: Wednesday, September 21, 2011 7:50 PM
> To: MS-Exchange Admin Issues
> Subject: spf record length
>
> Looking at the RFC on spf length it says that the combined length of the
> DNS name and the text of all the records of a given type (TXT or SPF)
> should be under 450 characters.  Has anyone ran into situations where
> they've had to go over that and if so, what did you do?
>
> -Paul
>
> ---
> To manage subscriptions click here: http://lyris.sunbelt-
> software.com/read/my_forums/
> or send an email to 
> listmana...@lyris.sunbeltsoftware.com
> with the body: unsubscribe exchangelist
>
>
> ---
> To manage subscriptions click here: http://lyris.sunbelt-
> software.com/read/my_forums/
> or send an email to 
> listmana...@lyris.sunbeltsoftware.com
> with the body: unsubscribe exchangelist


---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist


---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

Re: spf record length

[Micheal Espinola Jr]

I would do this, and follow the limits outlined in the RFC.

--
Espi





On Fri, Sep 23, 2011 at 11:41 AM, Jason Gurtz wrote:

> A lot of the larger places seem to utilize a subdomain scheme like
> spf1.example.com, spf2.example.com, ... , spfn.example.com and then use
> include:spf1.example.com, etc... in the main record in the example.com
> zone.
>
> For example, hotmail.com:
>
> ;; ANSWER SECTION:
> hotmail.com.3600IN  TXT "v=spf1
> include:spf-a.hotmail.com include:spf-b.hotm
> ail.com include:spf-c.hotmail.com include:spf-d.hotmail.com ~all"
>
> ~JasonG
>
> > -Original Message-
> > From: Maglinger, Paul [mailto:pmaglin...@scvl.com]
> > Sent: Friday, September 23, 2011 14:26
> > To: MS-Exchange Admin Issues
> > Subject: RE: spf record length
> >
> > Anyone?  I just checked ours and it was 736 characters.
> >
> > -Original Message-
> > From: Maglinger, Paul [mailto:pmaglin...@scvl.com]
> > Sent: Wednesday, September 21, 2011 7:50 PM
> > To: MS-Exchange Admin Issues
> > Subject: spf record length
> >
> > Looking at the RFC on spf length it says that the combined length of the
> > DNS name and the text of all the records of a given type (TXT or SPF)
> > should be under 450 characters.  Has anyone ran into situations where
> > they've had to go over that and if so, what did you do?
> >
> > -Paul
> >
> > ---
> > To manage subscriptions click here: http://lyris.sunbelt-
> > software.com/read/my_forums/
> > or send an email to listmana...@lyris.sunbeltsoftware.com
> > with the body: unsubscribe exchangelist
> >
> >
> > ---
> > To manage subscriptions click here: http://lyris.sunbelt-
> > software.com/read/my_forums/
> > or send an email to listmana...@lyris.sunbeltsoftware.com
> > with the body: unsubscribe exchangelist
>
>
> ---
> To manage subscriptions click here:
> http://lyris.sunbelt-software.com/read/my_forums/
> or send an email to listmana...@lyris.sunbeltsoftware.com
> with the body: unsubscribe exchangelist
>
>

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

Re: Anybody familiar with salesforce.com?

[Micheal Espinola Jr]

+1   My experiences with them are similar.

--
Espi





On Fri, Sep 23, 2011 at 1:17 PM, Kennedy, Jim
wrote:

> They are legit. Kind of a CRM and lead system for salesdroids.  From time
> to time they have had problems with people abusing their system and using it
> to send spam. But they whack those people pretty hard. I have not heard of
> any issues or problems from them in several years. In fact their CEO was
> (may still be) on the front lines of the spam fight.
>
> ** **
>
> ** **
>
> *From:* Campbell, Rob [mailto:rob_campb...@centraltechnology.net]
> *Sent:* Friday, September 23, 2011 4:06 PM
> *To:* MS-Exchange Admin Issues
> *Subject:* Anybody familiar with salesforce.com?
>
> ** **
>
> I’ve got a user that’s apparently hooked up with some offering from them,
> and needing to get an automated email from their system.  They sent her a
> list of 38 IP addresses they say we need to whitelist.
>
> ** **
>
> Call me paranoid, but somehow I’m managing to be suspicious of a company
> that needs 38 mail servers.
>
> **
>
> Note: 
>
> The information contained in this message may be privileged and confidential 
> and 
>
> protected from disclosure.  If the reader of this message is not the intended 
>  
>
> recipient, or an employee or agent responsible for delivering this message to 
>  
>
> the intended recipient, you are hereby notified that any dissemination,   
>
> distribution or copying of this communication is strictly prohibited. If you  
> 
>
> have received this communication in error, please notify us immediately by  
> 
>
> replying to the message and deleting it from your computer. 
>
> **
>
> ---
> To manage subscriptions click here:
> http://lyris.sunbelt-software.com/read/my_forums/
> or send an email to listmana...@lyris.sunbeltsoftware.com
> with the body: unsubscribe exchangelist
>
> ---
> To manage subscriptions click here:
> http://lyris.sunbelt-software.com/read/my_forums/
> or send an email to listmana...@lyris.sunbeltsoftware.com
> with the body: unsubscribe exchangelist
>

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

RE: Anybody familiar with salesforce.com?

[Kennedy, Jim]

They are legit. Kind of a CRM and lead system for salesdroids.  From time to 
time they have had problems with people abusing their system and using it to 
send spam. But they whack those people pretty hard. I have not heard of any 
issues or problems from them in several years. In fact their CEO was (may still 
be) on the front lines of the spam fight.


From: Campbell, Rob [mailto:rob_campb...@centraltechnology.net]
Sent: Friday, September 23, 2011 4:06 PM
To: MS-Exchange Admin Issues
Subject: Anybody familiar with salesforce.com?

I've got a user that's apparently hooked up with some offering from them, and 
needing to get an automated email from their system.  They sent her a list of 
38 IP addresses they say we need to whitelist.

Call me paranoid, but somehow I'm managing to be suspicious of a company that 
needs 38 mail servers.

**

Note:

The information contained in this message may be privileged and confidential and

protected from disclosure.  If the reader of this message is not the intended

recipient, or an employee or agent responsible for delivering this message to

the intended recipient, you are hereby notified that any dissemination,

distribution or copying of this communication is strictly prohibited. If you

have received this communication in error, please notify us immediately by

replying to the message and deleting it from your computer.

**

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

RE: OWA Cert

[Simon Butler]

I don't exactly hide the fact that I operate that site. The WHOIS points to me, 
it is on my signatures to this forum and others and plastered all over my blog, 
articles and postings about SSL certificates.

Simon.

From: Michael B. Smith [mailto:mich...@smithcons.com]
Sent: 23 September 2011 17:53
To: MS-Exchange Admin Issues
Subject: RE: OWA Cert

Didn't know if you wanted your name mentioned. :)

I've got a few dozen for my clients. I always recommend it.

Regards,

Michael B. Smith
Consultant and Exchange MVP
http://TheEssentialExchange.com

From: Simon Butler 
[mailto:si...@sembee.co.uk]
Sent: Friday, September 23, 2011 11:00 AM
To: MS-Exchange Admin Issues
Subject: RE: OWA Cert

CertificatesForExchange.com is mine.
I am installing three or four of them a week both single name on Exchange 2003 
and UC (aka SAN Subject Alternative Name) certificates for Exchange 2007 and 
2010. They work fine. One of my customers has purchased over 300 of them for 
their clients, so they must also like them as well.

It is a GoDaddy reseller account and uses the same root as the ones they sell. 
However it doesn't have the GoDaddy branding on them, and I am aware that over 
in the USA the GoDaddy name has somewhat of a reputation based on the founder's 
activities and his marketing methods. Therefore people like to use this source 
as they get the same wide levels of trust for the certificates but without that 
association.

The "www.safebuy.org.uk" org are simply reselling 
Verisign (or one of their brands), or RapidSSL certificates. I don't see 
unified communications certificates listed, which probably means they wouldn't 
know what they are and would simply sell you either a single name or a wildcard 
certificate instead. While both of those can be used with Exchange 2007 and 
higher, it does make extra work and can cause the occasional issue.

The only difference in SSL certificates is the level of trust in browsers and 
devices, and the insurance cover. At this level insurance cover isn't really 
going to be much - although recent events might cause people to rethink on that.
Most of the major certificates are trusted by IE, Firefox etc, but if you are 
using mobile devices then the number of root certificates that they have will 
be smaller. I don't think I would call that "quality" though.

Simon.


--
Simon Butler
MVP: Exchange, MCSE
Sembee Ltd.

e: si...@sembee.co.uk
w: http://www.sembee.co.uk/
w: http://exchange.sembee.info/
w: http://blog.sembee.co.uk/

Need cheap certificates for Exchange, compatible with the iPhone?
http://CertificatesForExchange.com/ for 
certificates from just $26.99.
Need a domain for your certificate? 
http://DomainsForExchange.net/

Exchange Resources: http://exbpa.com/



From: Webster 
[mailto:webs...@carlwebster.com]
Sent: 23 September 2011 15:28
To: MS-Exchange Admin Issues
Subject: RE: OWA Cert

Strange, MBS has mentioned them many times on this list.

Carl Webster
Consultant and Citrix Technology Professional
http://www.CarlWebster.com


From: Spencer Read 
[mailto:spencer.r...@nemesisgb.com]
Sent: Friday, September 23, 2011 9:21 AM
To: MS-Exchange Admin Issues
Subject: RE: OWA Cert

Thanks all for your answers and you've confirmed that this sales person is full 
of s**t

...Spence

PS - the archives only list 1 message containing certificatesforexchange with 
regards to San certs - way to technical for me!

From: Webster 
[mailto:webs...@carlwebster.com]
Sent: 23 September 2011 14:02
To: MS-Exchange Admin Issues
Subject: RE: OWA Cert

That is correct.


Carl Webster
Consultant and Citrix Technology Professional
http://www.CarlWebster.com


From: Sean Rector 
[mailto:sean.rec...@vaopera.org]
Subject: RE: OWA Cert

If I'm remembering what MBS said about them, they were started by an Exchange 
MVP, and resell GoDaddy certificates.

Sean Rector, MCSE

From: Spencer Read 
[mailto:spencer.r...@nemesisgb.com]
Subject: OWA Cert

Hi there,

I've got a cert that is about to expire on our exchange 2003 server and I'm 
looking at going to 
www.certificatesforexchange.com to get 
a UCC cert

Then I take a cold call from a UK based reseller called 
www.safebuy.org.uk
The person said 'The price is a little more than what you have been quoted 
elsewhere but the chances are the quote is so low because of poor quality of 
the certificate.'
Price is double and only for a single domain, whereas the one I've been looking 
at is for up to 5 domains!

I'm sure I remember certificatesforexchange being mentioned he

RE: Using Search-Mailbox?

[Robinson, Chuck]

Try something like this

get-mailbox | search-mailbox -SearchQuery "Received:> $('1/01/2010') and 
Received:< $('12/31/2011') and subject:RE: Fake Message"

Chuck Robinson
___
Sr. Solutions Architect
MCITP:EA, Messaging 2010
EMC Consulting
Mobile: 973-865-0394
chuck.robin...@emc.com
www.emc.com/consulting

Transforming Information Into Business Results

From: Leedy, Andy [mailto:ale...@butlerschein.com]
Sent: Friday, September 23, 2011 2:29 PM
To: MS-Exchange Admin Issues
Subject: Using Search-Mailbox?

I'm trying to pull a message from everyone's mailbox.  The following PowerShell 
command seems to work but I would like to narrow down the search by adding date 
sent, sender etc...

Get-mailbox | Search-Mailbox  -SearchQuery 'subject:"RE: Fake Message"' 
-DeleteContent

My question is, how do you add more than one parameter to -SearchQuery?

Thanks,
Andy


**

CONFIDENTIALITY NOTICE - The information transmitted in this message is 
intended only for the person or entity to which it is addressed and may contain 
confidential and/or privileged material. Any review, retransmission, 
dissemination or other use of this information by persons or entities other 
than the intended recipient is prohibited. If you received this in error, 
please contact the sender and destroy all copies of this document. Thank you.

Butler Schein Animal Health

**

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

Re: OWA Cert

[Cameron]

Godaddy has Danica Patrickyumm! LOL!!

On Fri, Sep 23, 2011 at 1:38 PM, Paul Hutchings
wrote:

>  I don't think you shouldn't need a UCC cert for Exchange 2003 as usually
> all the services usually go via a single URL.
>
> On our Exchange 2003 box we used a RapidSSL cert which worked just fine.
>
> On our 2010 box we use a Starfield (Godaddy without the Godaddy branding)
> one from Certificatesforexchange.
>
> I did a lot of homework as we use one particular model of phone which can
> be a bit fussy about which SSL certs it works with, and the Starfield ones
> fulfilled this requirement and just happened to be the cheapest option as
> well (as others have said, much of the cost of expensive SSL certs is the
> authentication part).
>
> Paul
>  --
> *From:* Spencer Read [spencer.r...@nemesisgb.com]
> *Sent:* 23 September 2011 12:36 PM
>
> *To:* MS-Exchange Admin Issues
> *Subject:* OWA Cert
>
>   Hi there,
>
>
>
> I’ve got a cert that is about to expire on our exchange 2003 server and I’m
> looking at going to www.certificatesforexchange.com to get a UCC cert
>
>
>
> Then I take a cold call from a UK based reseller called www.safebuy.org.uk
>
> The person said ‘The price is a little more than what you have been quoted
> elsewhere but the chances are the quote is so low because of poor quality of
> the certificate.’
>
> Price is double and only for a single domain, whereas the one I’ve been
> looking at is for up to 5 domains!
>
>
>
> I’m sure I remember certificatesforexchange being mentioned here so can
> anyone comment on the above?
>
> This is only being used for iPhone/HTC phone synchronisation and rare use
> of OWA so I don’t see any issues – or am I missing something obvious?
>
>
>
> Thanks
>
>
>
> …Spence
>
>
> __
>
> This email has been scanned by the MessageLabs Email Security System.
> For more information please visit http://www.messagelabs.com/email
> __
>
> ---
> To manage subscriptions click here:
> http://lyris.sunbelt-software.com/read/my_forums/
> or send an email to listmana...@lyris.sunbeltsoftware.com
> with the body: unsubscribe exchangelist
>  --
>  *MIRA Ltd*
>
> Watling Street, Nuneaton, Warwickshire, CV10 0TU, England
>  Registered in England and Wales No. 402570
> VAT Registration  GB 100 1464 84
>
> The contents of this e-mail are confidential and are solely for the use of
> the intended recipient.  If you receive this e-mail in error, please delete
> it and notify us either by e-mail, telephone or fax.  You should not copy,
> forward or otherwise disclose the content of the e-mail as this is
> prohibited.
>
> ---
> To manage subscriptions click here:
> http://lyris.sunbelt-software.com/read/my_forums/
> or send an email to listmana...@lyris.sunbeltsoftware.com
> with the body: unsubscribe exchangelist
>

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

RE: spf record length

[Jason Gurtz]

A lot of the larger places seem to utilize a subdomain scheme like
spf1.example.com, spf2.example.com, ... , spfn.example.com and then use
include:spf1.example.com, etc... in the main record in the example.com
zone.

For example, hotmail.com:

;; ANSWER SECTION:
hotmail.com.3600IN  TXT "v=spf1
include:spf-a.hotmail.com include:spf-b.hotm
ail.com include:spf-c.hotmail.com include:spf-d.hotmail.com ~all"

~JasonG

> -Original Message-
> From: Maglinger, Paul [mailto:pmaglin...@scvl.com]
> Sent: Friday, September 23, 2011 14:26
> To: MS-Exchange Admin Issues
> Subject: RE: spf record length
> 
> Anyone?  I just checked ours and it was 736 characters.
> 
> -Original Message-
> From: Maglinger, Paul [mailto:pmaglin...@scvl.com]
> Sent: Wednesday, September 21, 2011 7:50 PM
> To: MS-Exchange Admin Issues
> Subject: spf record length
> 
> Looking at the RFC on spf length it says that the combined length of the
> DNS name and the text of all the records of a given type (TXT or SPF)
> should be under 450 characters.  Has anyone ran into situations where
> they've had to go over that and if so, what did you do?
> 
> -Paul
> 
> ---
> To manage subscriptions click here: http://lyris.sunbelt-
> software.com/read/my_forums/
> or send an email to listmana...@lyris.sunbeltsoftware.com
> with the body: unsubscribe exchangelist
> 
> 
> ---
> To manage subscriptions click here: http://lyris.sunbelt-
> software.com/read/my_forums/
> or send an email to listmana...@lyris.sunbeltsoftware.com
> with the body: unsubscribe exchangelist


---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

RE: spf record length

[Michael B. Smith]

There is an absolute limit that FOPE recognizes, and I THINK it's 1024 bytes. 
But I'm not 100%. The shorter the better.

Regards,

Michael B. Smith
Consultant and Exchange MVP
http://TheEssentialExchange.com


-Original Message-
From: Maglinger, Paul [mailto:pmaglin...@scvl.com] 
Sent: Friday, September 23, 2011 2:26 PM
To: MS-Exchange Admin Issues
Subject: RE: spf record length

Anyone?  I just checked ours and it was 736 characters.

-Original Message-
From: Maglinger, Paul [mailto:pmaglin...@scvl.com] 
Sent: Wednesday, September 21, 2011 7:50 PM
To: MS-Exchange Admin Issues
Subject: spf record length

Looking at the RFC on spf length it says that the combined length of the DNS 
name and the text of all the records of a given type (TXT or SPF) should be 
under 450 characters.  Has anyone ran into situations where they've had to go 
over that and if so, what did you do?

-Paul

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist


---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist


---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

Using Search-Mailbox?

[Leedy, Andy]

I'm trying to pull a message from everyone's mailbox.  The following PowerShell 
command seems to work but I would like to narrow down the search by adding date 
sent, sender etc...

Get-mailbox | Search-Mailbox  -SearchQuery 'subject:"RE: Fake Message"' 
-DeleteContent

My question is, how do you add more than one parameter to -SearchQuery?

Thanks,
Andy


**

CONFIDENTIALITY NOTICE - The information transmitted in this message is 
intended only for the person or entity to which it is addressed and may contain 
confidential and/or privileged material. Any review, retransmission, 
dissemination or other use of this information by persons or entities other 
than the intended recipient is prohibited. If you received this in error, 
please contact the sender and destroy all copies of this document. Thank you.

Butler Schein Animal Health

**

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

RE: spf record length

[Maglinger, Paul]

Anyone?  I just checked ours and it was 736 characters.

-Original Message-
From: Maglinger, Paul [mailto:pmaglin...@scvl.com] 
Sent: Wednesday, September 21, 2011 7:50 PM
To: MS-Exchange Admin Issues
Subject: spf record length

Looking at the RFC on spf length it says that the combined length of the DNS 
name and the text of all the records of a given type (TXT or SPF) should be 
under 450 characters.  Has anyone ran into situations where they've had to go 
over that and if so, what did you do?

-Paul

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist


---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

RE: Confused by Calendar Repair options

[Michael B. Smith]

I think this is a pretty good explanation:

http://technet.microsoft.com/en-us/library/ee633469.aspx

Does that help?

Regards,

Michael B. Smith
Consultant and Exchange MVP
http://TheEssentialExchange.com

From: Sobey, Richard A [mailto:r.so...@imperial.ac.uk]
Sent: Friday, September 23, 2011 10:55 AM
To: MS-Exchange Admin Issues
Subject: Confused by Calendar Repair options

Hi all,

I'm a bit confused between the following parameters on Exchange 2010. We're 
running SP1.

CalendarRepairSchedule
CalendarRepairWorkCycle

Does the schedule define what days, or times of day, the assistant could run, 
whilst the WorkCycle defines how often it will run? I.e. a schedule that allows 
running all weekend, and a WorkCycle of every seven days?

Thanks,

Richard

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

RE: OWA Cert

[Paul Hutchings]

I don't think you shouldn't need a UCC cert for Exchange 2003 as usually all 
the services usually go via a single URL.

On our Exchange 2003 box we used a RapidSSL cert which worked just fine.

On our 2010 box we use a Starfield (Godaddy without the Godaddy branding) one 
from Certificatesforexchange.

I did a lot of homework as we use one particular model of phone which can be a 
bit fussy about which SSL certs it works with, and the Starfield ones fulfilled 
this requirement and just happened to be the cheapest option as well (as others 
have said, much of the cost of expensive SSL certs is the authentication part).

Paul

From: Spencer Read [spencer.r...@nemesisgb.com]
Sent: 23 September 2011 12:36 PM
To: MS-Exchange Admin Issues
Subject: OWA Cert

Hi there,

I’ve got a cert that is about to expire on our exchange 2003 server and I’m 
looking at going to 
www.certificatesforexchange.com to get 
a UCC cert

Then I take a cold call from a UK based reseller called 
www.safebuy.org.uk
The person said ‘The price is a little more than what you have been quoted 
elsewhere but the chances are the quote is so low because of poor quality of 
the certificate.’
Price is double and only for a single domain, whereas the one I’ve been looking 
at is for up to 5 domains!

I’m sure I remember certificatesforexchange being mentioned here so can anyone 
comment on the above?
This is only being used for iPhone/HTC phone synchronisation and rare use of 
OWA so I don’t see any issues – or am I missing something obvious?

Thanks

…Spence

__
This email has been scanned by the MessageLabs Email Security System.
For more information please visit http://www.messagelabs.com/email
__

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

--
MIRA Ltd

Watling Street, Nuneaton, Warwickshire, CV10 0TU, England
Registered in England and Wales No. 402570
VAT Registration  GB 100 1464 84

The contents of this e-mail are confidential and are solely for the use of the 
intended recipient.  If you receive this e-mail in error, please delete it and 
notify us either by e-mail, telephone or fax.  You should not copy, forward or 
otherwise disclose the content of the e-mail as this is prohibited.

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

RE: OWA Cert

[Michael B. Smith]

Didn't know if you wanted your name mentioned. :)

I've got a few dozen for my clients. I always recommend it.

Regards,

Michael B. Smith
Consultant and Exchange MVP
http://TheEssentialExchange.com

From: Simon Butler [mailto:si...@sembee.co.uk]
Sent: Friday, September 23, 2011 11:00 AM
To: MS-Exchange Admin Issues
Subject: RE: OWA Cert

CertificatesForExchange.com is mine.
I am installing three or four of them a week both single name on Exchange 2003 
and UC (aka SAN Subject Alternative Name) certificates for Exchange 2007 and 
2010. They work fine. One of my customers has purchased over 300 of them for 
their clients, so they must also like them as well.

It is a GoDaddy reseller account and uses the same root as the ones they sell. 
However it doesn't have the GoDaddy branding on them, and I am aware that over 
in the USA the GoDaddy name has somewhat of a reputation based on the founder's 
activities and his marketing methods. Therefore people like to use this source 
as they get the same wide levels of trust for the certificates but without that 
association.

The "www.safebuy.org.uk" org are simply reselling 
Verisign (or one of their brands), or RapidSSL certificates. I don't see 
unified communications certificates listed, which probably means they wouldn't 
know what they are and would simply sell you either a single name or a wildcard 
certificate instead. While both of those can be used with Exchange 2007 and 
higher, it does make extra work and can cause the occasional issue.

The only difference in SSL certificates is the level of trust in browsers and 
devices, and the insurance cover. At this level insurance cover isn't really 
going to be much - although recent events might cause people to rethink on that.
Most of the major certificates are trusted by IE, Firefox etc, but if you are 
using mobile devices then the number of root certificates that they have will 
be smaller. I don't think I would call that "quality" though.

Simon.


--
Simon Butler
MVP: Exchange, MCSE
Sembee Ltd.

e: si...@sembee.co.uk
w: http://www.sembee.co.uk/
w: http://exchange.sembee.info/
w: http://blog.sembee.co.uk/

Need cheap certificates for Exchange, compatible with the iPhone?
http://CertificatesForExchange.com/ for 
certificates from just $26.99.
Need a domain for your certificate? 
http://DomainsForExchange.net/

Exchange Resources: http://exbpa.com/



From: Webster [mailto:webs...@carlwebster.com]
Sent: 23 September 2011 15:28
To: MS-Exchange Admin Issues
Subject: RE: OWA Cert

Strange, MBS has mentioned them many times on this list.

Carl Webster
Consultant and Citrix Technology Professional
http://www.CarlWebster.com


From: Spencer Read 
[mailto:spencer.r...@nemesisgb.com]
Sent: Friday, September 23, 2011 9:21 AM
To: MS-Exchange Admin Issues
Subject: RE: OWA Cert

Thanks all for your answers and you've confirmed that this sales person is full 
of s**t

...Spence

PS - the archives only list 1 message containing certificatesforexchange with 
regards to San certs - way to technical for me!

From: Webster 
[mailto:webs...@carlwebster.com]
Sent: 23 September 2011 14:02
To: MS-Exchange Admin Issues
Subject: RE: OWA Cert

That is correct.


Carl Webster
Consultant and Citrix Technology Professional
http://www.CarlWebster.com


From: Sean Rector 
[mailto:sean.rec...@vaopera.org]
Subject: RE: OWA Cert

If I'm remembering what MBS said about them, they were started by an Exchange 
MVP, and resell GoDaddy certificates.

Sean Rector, MCSE

From: Spencer Read 
[mailto:spencer.r...@nemesisgb.com]
Subject: OWA Cert

Hi there,

I've got a cert that is about to expire on our exchange 2003 server and I'm 
looking at going to 
www.certificatesforexchange.com to get 
a UCC cert

Then I take a cold call from a UK based reseller called 
www.safebuy.org.uk
The person said 'The price is a little more than what you have been quoted 
elsewhere but the chances are the quote is so low because of poor quality of 
the certificate.'
Price is double and only for a single domain, whereas the one I've been looking 
at is for up to 5 domains!

I'm sure I remember certificatesforexchange being mentioned here so can anyone 
comment on the above?
This is only being used for iPhone/HTC phone synchronisation and rare use of 
OWA so I don't see any issues - or am I missing something obvious?


---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

___

RE: OWA Cert

[Chinnery, Paul]

Thanks for the post, Simon.  Now I know where to go when my Exchange cert needs 
'refreshing.'

From: Simon Butler [mailto:si...@sembee.co.uk]
Sent: Friday, September 23, 2011 11:00 AM
To: MS-Exchange Admin Issues
Subject: RE: OWA Cert

CertificatesForExchange.com is mine.
I am installing three or four of them a week both single name on Exchange 2003 
and UC (aka SAN Subject Alternative Name) certificates for Exchange 2007 and 
2010. They work fine. One of my customers has purchased over 300 of them for 
their clients, so they must also like them as well.

It is a GoDaddy reseller account and uses the same root as the ones they sell. 
However it doesn't have the GoDaddy branding on them, and I am aware that over 
in the USA the GoDaddy name has somewhat of a reputation based on the founder's 
activities and his marketing methods. Therefore people like to use this source 
as they get the same wide levels of trust for the certificates but without that 
association.

The "www.safebuy.org.uk" org are simply reselling 
Verisign (or one of their brands), or RapidSSL certificates. I don't see 
unified communications certificates listed, which probably means they wouldn't 
know what they are and would simply sell you either a single name or a wildcard 
certificate instead. While both of those can be used with Exchange 2007 and 
higher, it does make extra work and can cause the occasional issue.

The only difference in SSL certificates is the level of trust in browsers and 
devices, and the insurance cover. At this level insurance cover isn't really 
going to be much - although recent events might cause people to rethink on that.
Most of the major certificates are trusted by IE, Firefox etc, but if you are 
using mobile devices then the number of root certificates that they have will 
be smaller. I don't think I would call that "quality" though.

Simon.


--
Simon Butler
MVP: Exchange, MCSE
Sembee Ltd.

e: si...@sembee.co.uk
w: http://www.sembee.co.uk/
w: http://exchange.sembee.info/
w: http://blog.sembee.co.uk/

Need cheap certificates for Exchange, compatible with the iPhone?
http://CertificatesForExchange.com/ for 
certificates from just $26.99.
Need a domain for your certificate? 
http://DomainsForExchange.net/

Exchange Resources: http://exbpa.com/



From: Webster [mailto:webs...@carlwebster.com]
Sent: 23 September 2011 15:28
To: MS-Exchange Admin Issues
Subject: RE: OWA Cert

Strange, MBS has mentioned them many times on this list.

Carl Webster
Consultant and Citrix Technology Professional
http://www.CarlWebster.com


From: Spencer Read 
[mailto:spencer.r...@nemesisgb.com]
Sent: Friday, September 23, 2011 9:21 AM
To: MS-Exchange Admin Issues
Subject: RE: OWA Cert

Thanks all for your answers and you've confirmed that this sales person is full 
of s**t

...Spence

PS - the archives only list 1 message containing certificatesforexchange with 
regards to San certs - way to technical for me!

From: Webster 
[mailto:webs...@carlwebster.com]
Sent: 23 September 2011 14:02
To: MS-Exchange Admin Issues
Subject: RE: OWA Cert

That is correct.


Carl Webster
Consultant and Citrix Technology Professional
http://www.CarlWebster.com


From: Sean Rector 
[mailto:sean.rec...@vaopera.org]
Subject: RE: OWA Cert

If I'm remembering what MBS said about them, they were started by an Exchange 
MVP, and resell GoDaddy certificates.

Sean Rector, MCSE

From: Spencer Read 
[mailto:spencer.r...@nemesisgb.com]
Subject: OWA Cert

Hi there,

I've got a cert that is about to expire on our exchange 2003 server and I'm 
looking at going to 
www.certificatesforexchange.com to get 
a UCC cert

Then I take a cold call from a UK based reseller called 
www.safebuy.org.uk
The person said 'The price is a little more than what you have been quoted 
elsewhere but the chances are the quote is so low because of poor quality of 
the certificate.'
Price is double and only for a single domain, whereas the one I've been looking 
at is for up to 5 domains!

I'm sure I remember certificatesforexchange being mentioned here so can anyone 
comment on the above?
This is only being used for iPhone/HTC phone synchronisation and rare use of 
OWA so I don't see any issues - or am I missing something obvious?


---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

__
This email has been scanned by the MessageLabs Email Security System

RE: OWA Cert

[Simon Butler]

CertificatesForExchange.com is mine.
I am installing three or four of them a week both single name on Exchange 2003 
and UC (aka SAN Subject Alternative Name) certificates for Exchange 2007 and 
2010. They work fine. One of my customers has purchased over 300 of them for 
their clients, so they must also like them as well.

It is a GoDaddy reseller account and uses the same root as the ones they sell. 
However it doesn't have the GoDaddy branding on them, and I am aware that over 
in the USA the GoDaddy name has somewhat of a reputation based on the founder's 
activities and his marketing methods. Therefore people like to use this source 
as they get the same wide levels of trust for the certificates but without that 
association.

The "www.safebuy.org.uk" org are simply reselling 
Verisign (or one of their brands), or RapidSSL certificates. I don't see 
unified communications certificates listed, which probably means they wouldn't 
know what they are and would simply sell you either a single name or a wildcard 
certificate instead. While both of those can be used with Exchange 2007 and 
higher, it does make extra work and can cause the occasional issue.

The only difference in SSL certificates is the level of trust in browsers and 
devices, and the insurance cover. At this level insurance cover isn't really 
going to be much - although recent events might cause people to rethink on that.
Most of the major certificates are trusted by IE, Firefox etc, but if you are 
using mobile devices then the number of root certificates that they have will 
be smaller. I don't think I would call that "quality" though.

Simon.


--
Simon Butler
MVP: Exchange, MCSE
Sembee Ltd.

e: si...@sembee.co.uk
w: http://www.sembee.co.uk/
w: http://exchange.sembee.info/
w: http://blog.sembee.co.uk/

Need cheap certificates for Exchange, compatible with the iPhone?
http://CertificatesForExchange.com/ for 
certificates from just $26.99.
Need a domain for your certificate? 
http://DomainsForExchange.net/

Exchange Resources: http://exbpa.com/



From: Webster [mailto:webs...@carlwebster.com]
Sent: 23 September 2011 15:28
To: MS-Exchange Admin Issues
Subject: RE: OWA Cert

Strange, MBS has mentioned them many times on this list.

Carl Webster
Consultant and Citrix Technology Professional
http://www.CarlWebster.com


From: Spencer Read 
[mailto:spencer.r...@nemesisgb.com]
Sent: Friday, September 23, 2011 9:21 AM
To: MS-Exchange Admin Issues
Subject: RE: OWA Cert

Thanks all for your answers and you've confirmed that this sales person is full 
of s**t

...Spence

PS - the archives only list 1 message containing certificatesforexchange with 
regards to San certs - way to technical for me!

From: Webster 
[mailto:webs...@carlwebster.com]
Sent: 23 September 2011 14:02
To: MS-Exchange Admin Issues
Subject: RE: OWA Cert

That is correct.


Carl Webster
Consultant and Citrix Technology Professional
http://www.CarlWebster.com


From: Sean Rector 
[mailto:sean.rec...@vaopera.org]
Subject: RE: OWA Cert

If I'm remembering what MBS said about them, they were started by an Exchange 
MVP, and resell GoDaddy certificates.

Sean Rector, MCSE

From: Spencer Read 
[mailto:spencer.r...@nemesisgb.com]
Subject: OWA Cert

Hi there,

I've got a cert that is about to expire on our exchange 2003 server and I'm 
looking at going to 
www.certificatesforexchange.com to get 
a UCC cert

Then I take a cold call from a UK based reseller called 
www.safebuy.org.uk
The person said 'The price is a little more than what you have been quoted 
elsewhere but the chances are the quote is so low because of poor quality of 
the certificate.'
Price is double and only for a single domain, whereas the one I've been looking 
at is for up to 5 domains!

I'm sure I remember certificatesforexchange being mentioned here so can anyone 
comment on the above?
This is only being used for iPhone/HTC phone synchronisation and rare use of 
OWA so I don't see any issues - or am I missing something obvious?


---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

__
This email has been scanned by the MessageLabs Email Security System.
For more information please visit http://www.messagelabs.com/email
__

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or se

RE: OWA Cert

[Webster]

Strange, MBS has mentioned them many times on this list.

Carl Webster
Consultant and Citrix Technology Professional
http://www.CarlWebster.com


From: Spencer Read [mailto:spencer.r...@nemesisgb.com]
Sent: Friday, September 23, 2011 9:21 AM
To: MS-Exchange Admin Issues
Subject: RE: OWA Cert

Thanks all for your answers and you've confirmed that this sales person is full 
of s**t

...Spence

PS - the archives only list 1 message containing certificatesforexchange with 
regards to San certs - way to technical for me!

From: Webster 
[mailto:webs...@carlwebster.com]
Sent: 23 September 2011 14:02
To: MS-Exchange Admin Issues
Subject: RE: OWA Cert

That is correct.


Carl Webster
Consultant and Citrix Technology Professional
http://www.CarlWebster.com


From: Sean Rector 
[mailto:sean.rec...@vaopera.org]
Subject: RE: OWA Cert

If I'm remembering what MBS said about them, they were started by an Exchange 
MVP, and resell GoDaddy certificates.

Sean Rector, MCSE

From: Spencer Read 
[mailto:spencer.r...@nemesisgb.com]
Subject: OWA Cert

Hi there,

I've got a cert that is about to expire on our exchange 2003 server and I'm 
looking at going to 
www.certificatesforexchange.com to get 
a UCC cert

Then I take a cold call from a UK based reseller called 
www.safebuy.org.uk
The person said 'The price is a little more than what you have been quoted 
elsewhere but the chances are the quote is so low because of poor quality of 
the certificate.'
Price is double and only for a single domain, whereas the one I've been looking 
at is for up to 5 domains!

I'm sure I remember certificatesforexchange being mentioned here so can anyone 
comment on the above?
This is only being used for iPhone/HTC phone synchronisation and rare use of 
OWA so I don't see any issues - or am I missing something obvious?


---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

__
This email has been scanned by the MessageLabs Email Security System.
For more information please visit http://www.messagelabs.com/email
__

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

RE: OWA Cert

[Spencer Read]

Thanks all for your answers and you've confirmed that this sales person
is full of s**t

 

...Spence

 

PS - the archives only list 1 message containing certificatesforexchange
with regards to San certs - way to technical for me!

 

From: Webster [mailto:webs...@carlwebster.com] 
Sent: 23 September 2011 14:02
To: MS-Exchange Admin Issues
Subject: RE: OWA Cert

 

That is correct.

 

 

Carl Webster

Consultant and Citrix Technology Professional

http://www.CarlWebster.com  

 

 

From: Sean Rector [mailto:sean.rec...@vaopera.org] 
Subject: RE: OWA Cert

 

If I'm remembering what MBS said about them, they were started by an
Exchange MVP, and resell GoDaddy certificates.

 

Sean Rector, MCSE

 

From: Spencer Read [mailto:spencer.r...@nemesisgb.com] 
Subject: OWA Cert

 

Hi there,

 

I've got a cert that is about to expire on our exchange 2003 server and
I'm looking at going to www.certificatesforexchange.com to get a UCC
cert 

 

Then I take a cold call from a UK based reseller called
www.safebuy.org.uk 

The person said 'The price is a little more than what you have been
quoted elsewhere but the chances are the quote is so low because of poor
quality of the certificate.'

Price is double and only for a single domain, whereas the one I've been
looking at is for up to 5 domains!

 

I'm sure I remember certificatesforexchange being mentioned here so can
anyone comment on the above?

This is only being used for iPhone/HTC phone synchronisation and rare
use of OWA so I don't see any issues - or am I missing something
obvious?

 

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist


__
This email has been scanned by the MessageLabs Email Security System.
For more information please visit http://www.messagelabs.com/email 
__
---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

RE: OWA Cert

[Webster]

That is correct.


Carl Webster
Consultant and Citrix Technology Professional
http://www.CarlWebster.com


From: Sean Rector [mailto:sean.rec...@vaopera.org]
Subject: RE: OWA Cert

If I'm remembering what MBS said about them, they were started by an Exchange 
MVP, and resell GoDaddy certificates.

Sean Rector, MCSE

From: Spencer Read 
[mailto:spencer.r...@nemesisgb.com]
Subject: OWA Cert

Hi there,

I've got a cert that is about to expire on our exchange 2003 server and I'm 
looking at going to 
www.certificatesforexchange.com to get 
a UCC cert

Then I take a cold call from a UK based reseller called 
www.safebuy.org.uk
The person said 'The price is a little more than what you have been quoted 
elsewhere but the chances are the quote is so low because of poor quality of 
the certificate.'
Price is double and only for a single domain, whereas the one I've been looking 
at is for up to 5 domains!

I'm sure I remember certificatesforexchange being mentioned here so can anyone 
comment on the above?
This is only being used for iPhone/HTC phone synchronisation and rare use of 
OWA so I don't see any issues - or am I missing something obvious?


---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

RE: Autodiscover question

[N Parr]

Yes there is, which means we may have a config issue somewhere else.  Although 
it's starting to look like it may be an issue with certain devices.  Motorola 
branded droids don't ask for the mail server name during basic setup and they 
find it and work.  HTC Droids just ask for email and password during basic 
setup and they fail.  Have to go to manual config and put in the server address 
to get them to take.  Had to do the same with a couple iphones.
Now I just need to research why my outlook 03 clients are performing so poorly 
on the 2010 server.  Outlook sometimes won't show you the results of what you 
just did, like delete or move an email, until you click on another email or 
folder.  Outboxes will stay bolded with the send email but it's been sent.

-Original Message-
From: Peter Johnson [mailto:peter.john...@peterstow.com] 
Sent: Friday, September 23, 2011 3:15 AM
To: MS-Exchange Admin Issues
Subject: RE: Autodiscover question

As long as the DNS entries match the domain names that the user is entering it 
all should work 100% i.e. There is an autodiscover.domain.name that matches 
n...@domain.com as the e-mail address.

Regards
Peter Johnson
I.T Architect
United Kingdom:+44 1285 658542
South Africa: +27 11 252 1100
Swaziland: +268 442 7000
Fax:+27 11 974 7130
Mobile: +2783 306 0019
peter.john...@peterstow.com
www.peterstow.com
This email message (including attachments) contains information which may be 
confidential and/or legally privileged. Unless you are the intended recipient, 
you may not use, copy or disclose to anyone the message or any information 
contained in the message or from any attachments that were sent with this 
email, and If you have received this email message in error, please advise the 
sender by email, and delete the message. Unauthorised disclosure and/or use of 
information contained in this email may result in civil and criminal liability. 
Everything in this e-mail and attachments relating to the official business of 
Peterstow Aquapower is proprietary to the company. 

Caution should be observed in placing any reliance upon any information 
contained in this e-mail, which is not intended to be a representation or 
inducement to make any decision in relation to Peterstow Aquapower. Any 
decision taken based on the information provided in this e-mail, should only be 
made after consultation with appropriate legal, regulatory, tax, technical, 
business, investment, financial, and accounting advisors. Neither the sender of 
the e-mail, nor Peterstow Aquapower shall be liable to any party for any 
direct, indirect or consequential damages, including, without limitation, loss 
of profit, interruption of business or loss of information, data or software or 
otherwise.

The e-mail address of the sender may not be used, copied, sold, disclosed or 
incorporated into any database or mailing list for spamming and/or other 
marketing purposes without the prior consent of Peterstow Aquapower. 

No warranties are created or implied that an employee of Peterstow Aquapower 
and/or a contractor of Peterstow Aquapower is authorised to create and send 
this e-mail. 

-Original Message-
From: N Parr [mailto:npar...@mortonind.com]
Sent: 22 September 2011 08:49 PM
To: MS-Exchange Admin Issues
Subject: Autodiscover question

Does autodiscover only work by e-mail address if your internal domain is the 
same as your external primary address?  In my case it's not working and I'm 
guessing it's because domainname.com and mail.domainname.com are different 
IP's?  And the mail server is at mail.domainname.com.

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist




---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist


---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

RE: OWA Cert

[Jason Gurtz]

Certificates all have the same quality (within their type and assuming
same number of bit and hash function, of course). The various companies
that issue certs seem to rely on their customers not quite understanding
what it's all about. And, if they apply enough window dressing, can charge
more for the same thing. See "selling water at retail for $14.00 a gallon"
for another example of this biz model.

There is obviously quality differences between different CA's (note the
recent revocation by MS of a certain CA that signed and issued fraudulent
certs). I don't know of any reliable way to determine the quality of a CA.

With that in mind, the certificatesforexchange site has been mentioned
here many times (search the archives!) and are probably just fine. But,
you check out https://www.startssl.com/?app=40 You probably will find the
costs fairly attractive compared to the alternatives. See also:
http://www.istartedsomething.com/20091010/microsoft-free-root-certificate-
authority-windows/

~JasonG

> -Original Message-
> From: Spencer Read [mailto:spencer.r...@nemesisgb.com]
> Sent: Friday, September 23, 2011 07:36
> To: MS-Exchange Admin Issues
> Subject: OWA Cert
> 
> Hi there,
> 
> 
> 
> I've got a cert that is about to expire on our exchange 2003 server and
> I'm looking at going to www.certificatesforexchange.com to get a UCC
cert
> 
> 
> 
> Then I take a cold call from a UK based reseller called
> www.safebuy.org.uk
> 
> The person said 'The price is a little more than what you have been
> quoted elsewhere but the chances are the quote is so low because of poor
> quality of the certificate.'
> 
> Price is double and only for a single domain, whereas the one I've been
> looking at is for up to 5 domains!
> 
> 
> 
> I'm sure I remember certificatesforexchange being mentioned here so can
> anyone comment on the above?
> 
> This is only being used for iPhone/HTC phone synchronisation and rare
use
> of OWA so I don't see any issues - or am I missing something obvious?
> 
> 
> 
> Thanks
> 
> 
> 
> ...Spence
> 
> 
> __
> This email has been scanned by the MessageLabs Email Security System.
> For more information please visit http://www.messagelabs.com/email
> __
> 
> 
> ---
> To manage subscriptions click here: http://lyris.sunbelt-
> software.com/read/my_forums/
> or send an email to listmana...@lyris.sunbeltsoftware.com
> with the body: unsubscribe exchangelist


---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

RE: OWA Cert

[Sean Rector]

If I'm remembering what MBS said about them, they were started by an
Exchange MVP, and resell GoDaddy certificates.

 

Sean Rector, MCSE

 

From: Spencer Read [mailto:spencer.r...@nemesisgb.com] 
Sent: Friday, September 23, 2011 7:36 AM
To: MS-Exchange Admin Issues
Subject: OWA Cert

 

Hi there,

 

I've got a cert that is about to expire on our exchange 2003 server and
I'm looking at going to www.certificatesforexchange.com to get a UCC
cert 

 

Then I take a cold call from a UK based reseller called
www.safebuy.org.uk 

The person said 'The price is a little more than what you have been
quoted elsewhere but the chances are the quote is so low because of poor
quality of the certificate.'

Price is double and only for a single domain, whereas the one I've been
looking at is for up to 5 domains!

 

I'm sure I remember certificatesforexchange being mentioned here so can
anyone comment on the above?

This is only being used for iPhone/HTC phone synchronisation and rare
use of OWA so I don't see any issues - or am I missing something
obvious?

 

Thanks

 

...Spence

 


__
This email has been scanned by the MessageLabs Email Security System.
For more information please visit http://www.messagelabs.com/email 
__

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist


Information Technology Manager
Virginia Opera Association 
E-Mail:   sean.rec...@vaopera.org
Phone:(757) 213-4548 (direct line)
{+}
Tickets and Subscriptions On Sale Now!
Aida | Hansel And Gretel | Orph?e | The Mikado
Visit us online at www.VaOpera.org or call 1-866-OPERA-VA

Experience the Beauty, Power & Passion of Virginia Opera.

This e-mail and any attached files are confidential and intended solely for the 
intended recipient(s). Unless otherwise specified, persons unnamed as 
recipients may not read, distribute, copy or alter this e-mail. Any views or 
opinions expressed in this e-mail belong to the author and may not necessarily 
represent those of Virginia Opera. Although precautions have been taken to 
ensure no viruses are present, Virginia Opera cannot accept responsibility for 
any loss or damage that may arise from the use of this e-mail or attachments.
{*}
---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

Re: Renewing SSL Cert in Exchange 2010

[Wright, Seth - wrightst]

I'm a couple of days late to this party, but I have a quick-and-dirty PS script 
that does exactly what you want in terms of importing an intermediate cert.  I 
created it to import the InCommon root and intermediate certs if they didn't 
already exist on a server.

---
$path = "\\server\share\InCommonCerts\"
$intermediate = $path + "InCommonIntermediate_X509_b64.cer"
$root = $path + "InCommonRoot_X509_b64.cer"

function InstallCertificate ($file, $path) {
$pfx = New-Object 
System.Security.Cryptography.X509Certificates.X509Certificate2
$pfx.Import($file, $null, "Exportable, PersistKeySet")

if ( (Test-Path "$($path)\$($pfx.Thumbprint)") -eq $true) {
Write-Warning "Certificate `"$($pfx.Subject)`" is already 
installed."
return
}

$store = Get-Item $path
$store.Open("MaxAllowed")
$store.Add($pfx)
$store.Close()
Write-Host "Installed certificate `"$($pfx.Subject)`""
}


# First check the root
InstallCertificate $root "Cert:\LocalMachine\Root"

# Then do the intermediate
InstallCertificate $intermediate "Cert:\LocalMachine\CA"
---


---
seth wright (wrigh...@jmu.edu)
lead exchange administrator
540.568.2912 (office)
james madison university




On Sep 20, 2011, at 7:07 AM, Joseph L. Casale wrote:

> Appreciated the clarification on the CSR.
> Looks like the X509Certificate2 can do the intermediate cert, gotta get in 
> front of a test box to see.
>  
> Thanks!
> jlc
>  
> From: Simon Butler [mailto:si...@sembee.co.uk] 
> Sent: Tuesday, September 20, 2011 4:58 AM
> To: MS-Exchange Admin Issues
> Subject: RE: Renewing SSL Cert in Exchange 2010
>  
> You can’t re-use the CSR because there is no request pending in the system. 
> The file you get when you do a certificate request is only part of it, you 
> need to have the pending request to apply the resulting certificate from the 
> vendor to. Therefore you will need to create a new one using the GUI.
>  
> I am not aware of a way to import the intermediate certificate in through 
> Powershell with current technologies (although I am happy to shown 
> otherwise). It isn’t an Exchange task, but a server task and not everything 
> in Windows Server has been made possible through PowerShell yet.
>  
> Simon.  
>  
> From: Joseph L. Casale [mailto:jcas...@activenetwerx.com] 
> Sent: 20 September 2011 11:39
> To: MS-Exchange Admin Issues
> Subject: Renewing SSL Cert in Exchange 2010
>  
> Hey guys,
> Any real difference in reusing the csr for a san cert when renewing?
> Also, anyone know a PowerShell command line to import an intermediate cert?
>  
> Thanks!
> jlc
> ---
> To manage subscriptions click here: 
> http://lyris.sunbelt-software.com/read/my_forums/
> or send an email to listmana...@lyris.sunbeltsoftware.com
> with the body: unsubscribe exchangelist
> 
> ---
> To manage subscriptions click here: 
> http://lyris.sunbelt-software.com/read/my_forums/
> or send an email to listmana...@lyris.sunbeltsoftware.com
> with the body: unsubscribe exchangelist
> 
> ---
> To manage subscriptions click here: 
> http://lyris.sunbelt-software.com/read/my_forums/
> or send an email to listmana...@lyris.sunbeltsoftware.com
> with the body: unsubscribe exchangelist
> 


---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

OWA Cert

[Spencer Read]

Hi there,

 

I've got a cert that is about to expire on our exchange 2003 server and
I'm looking at going to www.certificatesforexchange.com to get a UCC
cert 

 

Then I take a cold call from a UK based reseller called
www.safebuy.org.uk 

The person said 'The price is a little more than what you have been
quoted elsewhere but the chances are the quote is so low because of poor
quality of the certificate.'

Price is double and only for a single domain, whereas the one I've been
looking at is for up to 5 domains!

 

I'm sure I remember certificatesforexchange being mentioned here so can
anyone comment on the above?

This is only being used for iPhone/HTC phone synchronisation and rare
use of OWA so I don't see any issues - or am I missing something
obvious?

 

Thanks

 

...Spence


__
This email has been scanned by the MessageLabs Email Security System.
For more information please visit http://www.messagelabs.com/email 
__
---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

RE: Autodiscover question

[Peter Johnson]

As long as the DNS entries match the domain names that the user is entering it 
all should work 100% i.e. There is an autodiscover.domain.name that matches 
n...@domain.com as the e-mail address.

Regards
Peter Johnson
I.T Architect
United Kingdom:+44 1285 658542
South Africa: +27 11 252 1100
Swaziland: +268 442 7000
Fax:+27 11 974 7130
Mobile: +2783 306 0019
peter.john...@peterstow.com
www.peterstow.com
This email message (including attachments) contains information which may be 
confidential and/or legally privileged. Unless you are the intended recipient, 
you may not use, copy or disclose to anyone the message or any information 
contained in the message or from any attachments that were sent with this 
email, and If you have received this email message in error, please advise the 
sender by email, and delete the message. Unauthorised disclosure and/or use of 
information contained in this email may result in civil and criminal liability. 
Everything in this e-mail and attachments relating to the official business of 
Peterstow Aquapower is proprietary to the company. 

Caution should be observed in placing any reliance upon any information 
contained in this e-mail, which is not intended to be a representation or 
inducement to make any decision in relation to Peterstow Aquapower. Any 
decision taken based on the information provided in this e-mail, should only be 
made after consultation with appropriate legal, regulatory, tax, technical, 
business, investment, financial, and accounting advisors. Neither the sender of 
the e-mail, nor Peterstow Aquapower shall be liable to any party for any 
direct, indirect or consequential damages, including, without limitation, loss 
of profit, interruption of business or loss of information, data or software or 
otherwise.

The e-mail address of the sender may not be used, copied, sold, disclosed or 
incorporated into any database or mailing list for spamming and/or other 
marketing purposes without the prior consent of Peterstow Aquapower. 

No warranties are created or implied that an employee of Peterstow Aquapower 
and/or a contractor of Peterstow Aquapower is authorised to create and send 
this e-mail. 

-Original Message-
From: N Parr [mailto:npar...@mortonind.com] 
Sent: 22 September 2011 08:49 PM
To: MS-Exchange Admin Issues
Subject: Autodiscover question

Does autodiscover only work by e-mail address if your internal domain is the 
same as your external primary address?  In my case it's not working and I'm 
guessing it's because domainname.com and mail.domainname.com are different 
IP's?  And the mail server is at mail.domainname.com.

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist




---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist