RE: Multiple cert (Ex 2007) Internal vs. Eternal

2009-02-17 Thread Troy Meyer
Hi Marty,

Did you get my post concerning DNS entries and setting those service urls?  If 
you are still having troubles, you might benefit from a support call to 
Microsoft.

Many times I have been stuck on a problem and a call to support not only solves 
the issue, but gives me in-site into the product itself and helps me understand 
the big picture.  

-troy


-Original Message-
From: Marty Nelson [mailto:mnel...@transdyn.com] 
Sent: Monday, February 16, 2009 5:58 PM
To: MS-Exchange Admin Issues
Subject: RE: Multiple cert (Ex 2007) Internal vs. Eternal

Aah, maybe the receipts did it.  I have it set to default and forgot to uncheck 
it, I apologize!

Thanks,

-M


-Original Message-
From: Marty Nelson [mailto:mnel...@transdyn.com]
Sent: Monday, February 16, 2009 5:56 PM
To: MS-Exchange Admin Issues
Subject: RE: Multiple cert (Ex 2007) Internal vs. Eternal

Happy Sunday eve all.

I didn't see this thread listed so either I completely missed it or it went 
away.  If it violate the TOS here, I apologize.

I still don't completely understand how to do this, so please if this post is 
improper, feel free to contact me directly @ mnel...@transdyn.com.

Thanks,

-Marty

-Original Message-
From: Marty Nelson
Sent: Friday, February 13, 2009 1:59 PM
To: MS-Exchange Admin Issues
Subject: RE: Multiple cert (Ex 2007) Internal vs. Eternal

Thanks all.

Being a somewhat noob to Exchange, and not wanting to break anything.  Can 
someone translate the following, ie if/where I enter my domain, both internal 
as well as external I would appreciate it.

1) Modify the Autodiscover URL in the Service Connection Point. The Service 
Connection Point is stored in the Active Directory directory service. To modify 
this URL, type the following command, and then press ENTER:

Set-ClientAccessServer -Identity CAS_Server_Name -
AutodiscoverServiceInternalUri 
https://mail.contoso.com/autodiscover/autodiscover.xml

2) Modify the InternalUrl attribute of the EWS. To do this, type the following 
command, and then press ENTER:

Set-WebServicesVirtualDirectory -Identity CAS_Server_Name\EWS (Default Web 
Site) -InternalUrl https://mail.contoso.com/ews/exchange.asmx

3) Modify the InternalUrl attribute for Web-based Offline Address Book 
distribution. To do this, type the following command, and then press ENTER:

Set-OABVirtualDirectory -Identity CAS_Server_name\oab (Default Web Site) 
-InternalUrl https://mail.contoso.com/oab

4) Modify the InternalUrl attribute of the UM Web service. To do this, type the 
following command, and then press ENTER:

Set-UMVirtualDirectory -Identity CAS_Server_Name\unifiedmessaging (Default Web 
Site) -InternalUrl https://mail.contoso.com/unifiedmessaging/service.asmx


Again, any help would help me out profoundly.

-Marty

-Original Message-
From: Paul Cookman [mailto:paul.cook...@selection.co.uk]
Sent: Friday, February 13, 2009 12:34 AM
To: MS-Exchange Admin Issues
Subject: RE: Multiple cert (Ex 2007) Internal vs. Eternal


I had this same issue, my internal domain name was different from my external 
and outlook 2007 clients were initially connecting to the CAS checking the 
certificate which had the external domain name causing a certificate error.

http://support.microsoft.com/kb/940726 fixed it for me to.








Paul Cookman * Technical Account Manager
+44(0) 844 874 1000 * +44(0) 844 874 1001
paul.cook...@selection.co.uk * http://www.selection.co.uk/


This e-mail is confidential and is intended for the exclusive use of the 
addressee only. Selection Services Plc accepts no liability for personal views 
expressed. While every effort has been made to ensure the attachments are 
virus-free, they must be checked before further use, especially those 
containing encrypted data. If you have any problems with this e-mail, please 
contact our IT Manager on mailto:em...@selection.co.uk

Registered in England and Wales Registered Number: 2758710 Registered Office: 
Provident House, 122 High Street, Bromley, Kent BR1 1EZ

-Original Message-

From: Kennedy, Jim [mailto:kennedy...@elyriaschools.org]
Sent: 13 February 2009 00:50
To: MS-Exchange Admin Issues
Subject: RE: Multiple cert (Ex 2007) Internal vs. Eternal


I think you are on the correct motorcycle. The article below is how I fixed 
this issue with us.

http://support.microsoft.com/kb/940726



From: Troy Meyer [troy.me...@monacocoach.com]
Sent: Thursday, February 12, 2009 5:09 PM
To: MS-Exchange Admin Issues
Subject: RE: Multiple cert (Ex 2007) Internal vs. Eternal

My money is on the autodiscover service using an internal cert and causing the 
prompt when Outlook 2007 looks for availability info

http://technet.microsoft.com/en-us/library/bb397225.aspx


-troy

-Original Message-
From: Michael B. Smith [mailto:mich...@theessentialexchange.com]
Sent: Thursday, February 12, 2009 2:05 PM
To: MS-Exchange Admin Issues
Subject: RE: Multiple cert (Ex 2007) Internal vs

RE: Multiple cert (Ex 2007) Internal vs. Eternal

2009-02-16 Thread Marty Nelson
Happy Sunday eve all.

I didn't see this thread listed so either I completely missed it or it went 
away.  If it violate the TOS here, I apologize.

I still don't completely understand how to do this, so please if this post is 
improper, feel free to contact me directly @ mnel...@transdyn.com.

Thanks,

-Marty

-Original Message-
From: Marty Nelson
Sent: Friday, February 13, 2009 1:59 PM
To: MS-Exchange Admin Issues
Subject: RE: Multiple cert (Ex 2007) Internal vs. Eternal

Thanks all.

Being a somewhat noob to Exchange, and not wanting to break anything.  Can 
someone translate the following, ie if/where I enter my domain, both internal 
as well as external I would appreciate it.

1) Modify the Autodiscover URL in the Service Connection Point. The Service 
Connection Point is stored in the Active Directory directory service. To modify 
this URL, type the following command, and then press ENTER:

Set-ClientAccessServer -Identity CAS_Server_Name -
AutodiscoverServiceInternalUri 
https://mail.contoso.com/autodiscover/autodiscover.xml

2) Modify the InternalUrl attribute of the EWS. To do this, type the following 
command, and then press ENTER:

Set-WebServicesVirtualDirectory -Identity CAS_Server_Name\EWS (Default Web 
Site) -InternalUrl https://mail.contoso.com/ews/exchange.asmx

3) Modify the InternalUrl attribute for Web-based Offline Address Book 
distribution. To do this, type the following command, and then press ENTER:

Set-OABVirtualDirectory -Identity CAS_Server_name\oab (Default Web Site) 
-InternalUrl https://mail.contoso.com/oab

4) Modify the InternalUrl attribute of the UM Web service. To do this, type the 
following command, and then press ENTER:

Set-UMVirtualDirectory -Identity CAS_Server_Name\unifiedmessaging (Default Web 
Site) -InternalUrl https://mail.contoso.com/unifiedmessaging/service.asmx


Again, any help would help me out profoundly.

-Marty

-Original Message-
From: Paul Cookman [mailto:paul.cook...@selection.co.uk]
Sent: Friday, February 13, 2009 12:34 AM
To: MS-Exchange Admin Issues
Subject: RE: Multiple cert (Ex 2007) Internal vs. Eternal


I had this same issue, my internal domain name was different from my external 
and outlook 2007 clients were initially connecting to the CAS checking the 
certificate which had the external domain name causing a certificate error.

http://support.microsoft.com/kb/940726 fixed it for me to.








Paul Cookman * Technical Account Manager
+44(0) 844 874 1000 * +44(0) 844 874 1001
paul.cook...@selection.co.uk * http://www.selection.co.uk/


This e-mail is confidential and is intended for the exclusive use of the 
addressee only. Selection Services Plc accepts no liability for personal views 
expressed. While every effort has been made to ensure the attachments are 
virus-free, they must be checked before further use, especially those 
containing encrypted data. If you have any problems with this e-mail, please 
contact our IT Manager on mailto:em...@selection.co.uk

Registered in England and Wales Registered Number: 2758710 Registered Office: 
Provident House, 122 High Street, Bromley, Kent BR1 1EZ

-Original Message-

From: Kennedy, Jim [mailto:kennedy...@elyriaschools.org]
Sent: 13 February 2009 00:50
To: MS-Exchange Admin Issues
Subject: RE: Multiple cert (Ex 2007) Internal vs. Eternal


I think you are on the correct motorcycle. The article below is how I fixed 
this issue with us.

http://support.microsoft.com/kb/940726



From: Troy Meyer [troy.me...@monacocoach.com]
Sent: Thursday, February 12, 2009 5:09 PM
To: MS-Exchange Admin Issues
Subject: RE: Multiple cert (Ex 2007) Internal vs. Eternal

My money is on the autodiscover service using an internal cert and causing the 
prompt when Outlook 2007 looks for availability info

http://technet.microsoft.com/en-us/library/bb397225.aspx


-troy

-Original Message-
From: Michael B. Smith [mailto:mich...@theessentialexchange.com]
Sent: Thursday, February 12, 2009 2:05 PM
To: MS-Exchange Admin Issues
Subject: RE: Multiple cert (Ex 2007) Internal vs. Eternal

What?



Are you deploying Outlook 2007 using Outlook Anywhere for your internal users?



Regards,



Michael B. Smith, MCITP:SA,EMA/MCSE/Exchange MVP

My blog: http://TheEssentialExchange.com/blogs/michael

I'll be at TEC'2009! http://www.tec2009.com/vegas/index.php



From: Marty Nelson [mailto:mnel...@transdyn.com]
Sent: Thursday, February 12, 2009 5:01 PM
To: MS-Exchange Admin Issues
Subject: Multiple cert (Ex 2007) Internal vs. Eternal



Greeting all.



I]m running into a problem where, as we roll out Office 2007 the users are 
prompted with security dialog boxes warning that the certificate doesn't match 
the server name.  We currently have a certificate of the external web address 
(webmail ,etc.) but the internal Exchange server has a completely different 
name.  Is there any way around this?  This problem has reached the upper 
echelon of or organization

RE: Multiple cert (Ex 2007) Internal vs. Eternal

2009-02-16 Thread Marty Nelson
Aah, maybe the receipts did it.  I have it set to default and forgot to uncheck 
it, I apologize!

Thanks,

-M


-Original Message-
From: Marty Nelson [mailto:mnel...@transdyn.com]
Sent: Monday, February 16, 2009 5:56 PM
To: MS-Exchange Admin Issues
Subject: RE: Multiple cert (Ex 2007) Internal vs. Eternal

Happy Sunday eve all.

I didn't see this thread listed so either I completely missed it or it went 
away.  If it violate the TOS here, I apologize.

I still don't completely understand how to do this, so please if this post is 
improper, feel free to contact me directly @ mnel...@transdyn.com.

Thanks,

-Marty

-Original Message-
From: Marty Nelson
Sent: Friday, February 13, 2009 1:59 PM
To: MS-Exchange Admin Issues
Subject: RE: Multiple cert (Ex 2007) Internal vs. Eternal

Thanks all.

Being a somewhat noob to Exchange, and not wanting to break anything.  Can 
someone translate the following, ie if/where I enter my domain, both internal 
as well as external I would appreciate it.

1) Modify the Autodiscover URL in the Service Connection Point. The Service 
Connection Point is stored in the Active Directory directory service. To modify 
this URL, type the following command, and then press ENTER:

Set-ClientAccessServer -Identity CAS_Server_Name -
AutodiscoverServiceInternalUri 
https://mail.contoso.com/autodiscover/autodiscover.xml

2) Modify the InternalUrl attribute of the EWS. To do this, type the following 
command, and then press ENTER:

Set-WebServicesVirtualDirectory -Identity CAS_Server_Name\EWS (Default Web 
Site) -InternalUrl https://mail.contoso.com/ews/exchange.asmx

3) Modify the InternalUrl attribute for Web-based Offline Address Book 
distribution. To do this, type the following command, and then press ENTER:

Set-OABVirtualDirectory -Identity CAS_Server_name\oab (Default Web Site) 
-InternalUrl https://mail.contoso.com/oab

4) Modify the InternalUrl attribute of the UM Web service. To do this, type the 
following command, and then press ENTER:

Set-UMVirtualDirectory -Identity CAS_Server_Name\unifiedmessaging (Default Web 
Site) -InternalUrl https://mail.contoso.com/unifiedmessaging/service.asmx


Again, any help would help me out profoundly.

-Marty

-Original Message-
From: Paul Cookman [mailto:paul.cook...@selection.co.uk]
Sent: Friday, February 13, 2009 12:34 AM
To: MS-Exchange Admin Issues
Subject: RE: Multiple cert (Ex 2007) Internal vs. Eternal


I had this same issue, my internal domain name was different from my external 
and outlook 2007 clients were initially connecting to the CAS checking the 
certificate which had the external domain name causing a certificate error.

http://support.microsoft.com/kb/940726 fixed it for me to.








Paul Cookman * Technical Account Manager
+44(0) 844 874 1000 * +44(0) 844 874 1001
paul.cook...@selection.co.uk * http://www.selection.co.uk/


This e-mail is confidential and is intended for the exclusive use of the 
addressee only. Selection Services Plc accepts no liability for personal views 
expressed. While every effort has been made to ensure the attachments are 
virus-free, they must be checked before further use, especially those 
containing encrypted data. If you have any problems with this e-mail, please 
contact our IT Manager on mailto:em...@selection.co.uk

Registered in England and Wales Registered Number: 2758710 Registered Office: 
Provident House, 122 High Street, Bromley, Kent BR1 1EZ

-Original Message-

From: Kennedy, Jim [mailto:kennedy...@elyriaschools.org]
Sent: 13 February 2009 00:50
To: MS-Exchange Admin Issues
Subject: RE: Multiple cert (Ex 2007) Internal vs. Eternal


I think you are on the correct motorcycle. The article below is how I fixed 
this issue with us.

http://support.microsoft.com/kb/940726



From: Troy Meyer [troy.me...@monacocoach.com]
Sent: Thursday, February 12, 2009 5:09 PM
To: MS-Exchange Admin Issues
Subject: RE: Multiple cert (Ex 2007) Internal vs. Eternal

My money is on the autodiscover service using an internal cert and causing the 
prompt when Outlook 2007 looks for availability info

http://technet.microsoft.com/en-us/library/bb397225.aspx


-troy

-Original Message-
From: Michael B. Smith [mailto:mich...@theessentialexchange.com]
Sent: Thursday, February 12, 2009 2:05 PM
To: MS-Exchange Admin Issues
Subject: RE: Multiple cert (Ex 2007) Internal vs. Eternal

What?



Are you deploying Outlook 2007 using Outlook Anywhere for your internal users?



Regards,



Michael B. Smith, MCITP:SA,EMA/MCSE/Exchange MVP

My blog: http://TheEssentialExchange.com/blogs/michael

I'll be at TEC'2009! http://www.tec2009.com/vegas/index.php



From: Marty Nelson [mailto:mnel...@transdyn.com]
Sent: Thursday, February 12, 2009 5:01 PM
To: MS-Exchange Admin Issues
Subject: Multiple cert (Ex 2007) Internal vs. Eternal



Greeting all.



I]m running into a problem where, as we roll out Office 2007 the users are 
prompted with security

RE: Multiple cert (Ex 2007) Internal vs. Eternal

2009-02-13 Thread Paul Cookman

I had this same issue, my internal domain name was different from my external 
and outlook 2007 clients were initially connecting to the CAS checking the 
certificate which had the external domain name causing a certificate error.

http://support.microsoft.com/kb/940726 fixed it for me to.








Paul Cookman • Technical Account Manager
+44(0) 844 874 1000 • +44(0) 844 874 1001
paul.cook...@selection.co.uk • http://www.selection.co.uk/


This e-mail is confidential and is intended for the exclusive use of the 
addressee only. Selection Services Plc accepts no liability for personal views 
expressed. While every effort has been made to ensure the attachments are 
virus-free, they must be checked before further use, especially those 
containing encrypted data. If you have any problems with this e-mail, please 
contact our IT Manager on mailto:em...@selection.co.uk

Registered in England and Wales Registered Number: 2758710 Registered Office: 
Provident House, 122 High Street, Bromley, Kent BR1 1EZ

-Original Message-

From: Kennedy, Jim [mailto:kennedy...@elyriaschools.org]
Sent: 13 February 2009 00:50
To: MS-Exchange Admin Issues
Subject: RE: Multiple cert (Ex 2007) Internal vs. Eternal


I think you are on the correct motorcycle. The article below is how I fixed 
this issue with us.

http://support.microsoft.com/kb/940726



From: Troy Meyer [troy.me...@monacocoach.com]
Sent: Thursday, February 12, 2009 5:09 PM
To: MS-Exchange Admin Issues
Subject: RE: Multiple cert (Ex 2007) Internal vs. Eternal

My money is on the autodiscover service using an internal cert and causing the 
prompt when Outlook 2007 looks for availability info

http://technet.microsoft.com/en-us/library/bb397225.aspx


-troy

-Original Message-
From: Michael B. Smith [mailto:mich...@theessentialexchange.com]
Sent: Thursday, February 12, 2009 2:05 PM
To: MS-Exchange Admin Issues
Subject: RE: Multiple cert (Ex 2007) Internal vs. Eternal

What?



Are you deploying Outlook 2007 using Outlook Anywhere for your internal users?



Regards,



Michael B. Smith, MCITP:SA,EMA/MCSE/Exchange MVP

My blog: http://TheEssentialExchange.com/blogs/michael

I'll be at TEC'2009! http://www.tec2009.com/vegas/index.php



From: Marty Nelson [mailto:mnel...@transdyn.com]
Sent: Thursday, February 12, 2009 5:01 PM
To: MS-Exchange Admin Issues
Subject: Multiple cert (Ex 2007) Internal vs. Eternal



Greeting all.



I]m running into a problem where, as we roll out Office 2007 the users are 
prompted with security dialog boxes warning that the certificate doesn't match 
the server name.  We currently have a certificate of the external web address 
(webmail ,etc.) but the internal Exchange server has a completely different 
name.  Is there any way around this?  This problem has reached the upper 
echelon of or organization.  It was fine was it was just me, but now it has 
become a problem.



Any help would be appreciated.



-Martt











~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~


~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~


--
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.





~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~



RE: Multiple cert (Ex 2007) Internal vs. Eternal

2009-02-13 Thread Marty Nelson
Thanks all.

Being a somewhat noob to Exchange, and not wanting to break anything.  Can 
someone translate the following, ie if/where I enter my domain, both internal 
as well as external I would appreciate it.

1) Modify the Autodiscover URL in the Service Connection Point. The Service 
Connection Point is stored in the Active Directory directory service. To modify 
this URL, type the following command, and then press ENTER:

Set-ClientAccessServer -Identity CAS_Server_Name -
AutodiscoverServiceInternalUri 
https://mail.contoso.com/autodiscover/autodiscover.xml

2) Modify the InternalUrl attribute of the EWS. To do this, type the following 
command, and then press ENTER:

Set-WebServicesVirtualDirectory -Identity CAS_Server_Name\EWS (Default Web 
Site) -InternalUrl https://mail.contoso.com/ews/exchange.asmx

3) Modify the InternalUrl attribute for Web-based Offline Address Book 
distribution. To do this, type the following command, and then press ENTER:

Set-OABVirtualDirectory -Identity CAS_Server_name\oab (Default Web Site) 
-InternalUrl https://mail.contoso.com/oab

4) Modify the InternalUrl attribute of the UM Web service. To do this, type the 
following command, and then press ENTER:

Set-UMVirtualDirectory -Identity CAS_Server_Name\unifiedmessaging (Default Web 
Site) -InternalUrl https://mail.contoso.com/unifiedmessaging/service.asmx


Again, any help would help me out profoundly.

-Marty

-Original Message-
From: Paul Cookman [mailto:paul.cook...@selection.co.uk]
Sent: Friday, February 13, 2009 12:34 AM
To: MS-Exchange Admin Issues
Subject: RE: Multiple cert (Ex 2007) Internal vs. Eternal


I had this same issue, my internal domain name was different from my external 
and outlook 2007 clients were initially connecting to the CAS checking the 
certificate which had the external domain name causing a certificate error.

http://support.microsoft.com/kb/940726 fixed it for me to.








Paul Cookman * Technical Account Manager
+44(0) 844 874 1000 * +44(0) 844 874 1001
paul.cook...@selection.co.uk * http://www.selection.co.uk/


This e-mail is confidential and is intended for the exclusive use of the 
addressee only. Selection Services Plc accepts no liability for personal views 
expressed. While every effort has been made to ensure the attachments are 
virus-free, they must be checked before further use, especially those 
containing encrypted data. If you have any problems with this e-mail, please 
contact our IT Manager on mailto:em...@selection.co.uk

Registered in England and Wales Registered Number: 2758710 Registered Office: 
Provident House, 122 High Street, Bromley, Kent BR1 1EZ

-Original Message-

From: Kennedy, Jim [mailto:kennedy...@elyriaschools.org]
Sent: 13 February 2009 00:50
To: MS-Exchange Admin Issues
Subject: RE: Multiple cert (Ex 2007) Internal vs. Eternal


I think you are on the correct motorcycle. The article below is how I fixed 
this issue with us.

http://support.microsoft.com/kb/940726



From: Troy Meyer [troy.me...@monacocoach.com]
Sent: Thursday, February 12, 2009 5:09 PM
To: MS-Exchange Admin Issues
Subject: RE: Multiple cert (Ex 2007) Internal vs. Eternal

My money is on the autodiscover service using an internal cert and causing the 
prompt when Outlook 2007 looks for availability info

http://technet.microsoft.com/en-us/library/bb397225.aspx


-troy

-Original Message-
From: Michael B. Smith [mailto:mich...@theessentialexchange.com]
Sent: Thursday, February 12, 2009 2:05 PM
To: MS-Exchange Admin Issues
Subject: RE: Multiple cert (Ex 2007) Internal vs. Eternal

What?



Are you deploying Outlook 2007 using Outlook Anywhere for your internal users?



Regards,



Michael B. Smith, MCITP:SA,EMA/MCSE/Exchange MVP

My blog: http://TheEssentialExchange.com/blogs/michael

I'll be at TEC'2009! http://www.tec2009.com/vegas/index.php



From: Marty Nelson [mailto:mnel...@transdyn.com]
Sent: Thursday, February 12, 2009 5:01 PM
To: MS-Exchange Admin Issues
Subject: Multiple cert (Ex 2007) Internal vs. Eternal



Greeting all.



I]m running into a problem where, as we roll out Office 2007 the users are 
prompted with security dialog boxes warning that the certificate doesn't match 
the server name.  We currently have a certificate of the external web address 
(webmail ,etc.) but the internal Exchange server has a completely different 
name.  Is there any way around this?  This problem has reached the upper 
echelon of or organization.  It was fine was it was just me, but now it has 
become a problem.



Any help would be appreciated.



-Martt











~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~


~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~


--
This message has been scanned for viruses and
dangerous content by MailScanner

RE: Multiple cert (Ex 2007) Internal vs. Eternal

2009-02-13 Thread Troy Meyer
Hey Marty,

In our environment my CAS server is called something cheesy like ORCAS1 with 
two IP addresses.  It has two web sites,  for autodiscover and the other one 
for OWA/AS/OAB/etc.  Each IP has an entry in our internal DNS that matches the 
external name.  Even though my machine is called ORCAS1 the names our customers 
use match the external names (a cname for owa and a static to the spare IP for 
autodiscover).

In a setup like ours, you would walk through each of your steps below and set 
both -internalurl and -externalurl to the same address. Because your internal 
hosts can resolve to the same address as external, you don't have certificate 
validation issues when people are internal (because outlook doesn't use the 
actual machine name ORCAS1, its uses the external name, which is on your 
certificate; the name you created an internal DNS cname for).

Basically instead of caring what your server is named, worry about what you 
want your service to be named (just make sure for the autodiscover website you 
use autodiscover.transdyn.com as that address is built into OL/WM), no one 
besides our IS staff even knows what ORCAS1 is.  Not everyone is setup like 
this, but if you can, it sure makes things easy.

NOTE: if you don't have unified messaging setup (we don't), you can skip step 4 
on your list.

Hope that helps your quest, good luck :)

-troy



-Original Message-
From: Marty Nelson [mailto:mnel...@transdyn.com] 
Sent: Friday, February 13, 2009 1:59 PM
To: MS-Exchange Admin Issues
Subject: RE: Multiple cert (Ex 2007) Internal vs. Eternal

Thanks all.

Being a somewhat noob to Exchange, and not wanting to break anything.  Can 
someone translate the following, ie if/where I enter my domain, both internal 
as well as external I would appreciate it.

1) Modify the Autodiscover URL in the Service Connection Point. The Service 
Connection Point is stored in the Active Directory directory service. To modify 
this URL, type the following command, and then press ENTER:

Set-ClientAccessServer -Identity CAS_Server_Name -
AutodiscoverServiceInternalUri 
https://mail.contoso.com/autodiscover/autodiscover.xml

2) Modify the InternalUrl attribute of the EWS. To do this, type the following 
command, and then press ENTER:

Set-WebServicesVirtualDirectory -Identity CAS_Server_Name\EWS (Default Web 
Site) -InternalUrl https://mail.contoso.com/ews/exchange.asmx

3) Modify the InternalUrl attribute for Web-based Offline Address Book 
distribution. To do this, type the following command, and then press ENTER:

Set-OABVirtualDirectory -Identity CAS_Server_name\oab (Default Web Site) 
-InternalUrl https://mail.contoso.com/oab

4) Modify the InternalUrl attribute of the UM Web service. To do this, type the 
following command, and then press ENTER:

Set-UMVirtualDirectory -Identity CAS_Server_Name\unifiedmessaging (Default Web 
Site) -InternalUrl https://mail.contoso.com/unifiedmessaging/service.asmx


Again, any help would help me out profoundly.

-Marty

-Original Message-
From: Paul Cookman [mailto:paul.cook...@selection.co.uk]
Sent: Friday, February 13, 2009 12:34 AM
To: MS-Exchange Admin Issues
Subject: RE: Multiple cert (Ex 2007) Internal vs. Eternal


I had this same issue, my internal domain name was different from my external 
and outlook 2007 clients were initially connecting to the CAS checking the 
certificate which had the external domain name causing a certificate error.

http://support.microsoft.com/kb/940726 fixed it for me to.








Paul Cookman * Technical Account Manager
+44(0) 844 874 1000 * +44(0) 844 874 1001
paul.cook...@selection.co.uk * http://www.selection.co.uk/


This e-mail is confidential and is intended for the exclusive use of the 
addressee only. Selection Services Plc accepts no liability for personal views 
expressed. While every effort has been made to ensure the attachments are 
virus-free, they must be checked before further use, especially those 
containing encrypted data. If you have any problems with this e-mail, please 
contact our IT Manager on mailto:em...@selection.co.uk

Registered in England and Wales Registered Number: 2758710 Registered Office: 
Provident House, 122 High Street, Bromley, Kent BR1 1EZ

-Original Message-

From: Kennedy, Jim [mailto:kennedy...@elyriaschools.org]
Sent: 13 February 2009 00:50
To: MS-Exchange Admin Issues
Subject: RE: Multiple cert (Ex 2007) Internal vs. Eternal


I think you are on the correct motorcycle. The article below is how I fixed 
this issue with us.

http://support.microsoft.com/kb/940726



From: Troy Meyer [troy.me...@monacocoach.com]
Sent: Thursday, February 12, 2009 5:09 PM
To: MS-Exchange Admin Issues
Subject: RE: Multiple cert (Ex 2007) Internal vs. Eternal

My money is on the autodiscover service using an internal cert and causing the 
prompt when Outlook 2007 looks for availability info

http://technet.microsoft.com/en-us/library/bb397225.aspx


-troy

RE: Multiple cert (Ex 2007) Internal vs. Eternal

2009-02-12 Thread Michael B. Smith
What?

 

Are you deploying Outlook 2007 using Outlook Anywhere for your internal
users?

 

Regards,

 

Michael B. Smith, MCITP:SA,EMA/MCSE/Exchange MVP

My blog: http://TheEssentialExchange.com/blogs/michael

I'll be at TEC'2009! http://www.tec2009.com/vegas/index.php

 

From: Marty Nelson [mailto:mnel...@transdyn.com] 
Sent: Thursday, February 12, 2009 5:01 PM
To: MS-Exchange Admin Issues
Subject: Multiple cert (Ex 2007) Internal vs. Eternal

 

Greeting all.

 

I]m running into a problem where, as we roll out Office 2007 the users are
prompted with security dialog boxes warning that the certificate doesn't
match the server name.  We currently have a certificate of the external web
address (webmail ,etc.) but the internal Exchange server has a completely
different name.  Is there any way around this?  This problem has reached the
upper echelon of or organization.  It was fine was it was just me, but now
it has become a problem.

 

Any help would be appreciated. 

 

-Martt

 

 

 


~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

RE: Multiple cert (Ex 2007) Internal vs. Eternal

2009-02-12 Thread Marty Nelson
I apologize for the OOS message, I mean to disable.

-M

From: Marty Nelson [mailto:mnel...@transdyn.com]
Sent: Thursday, February 12, 2009 2:01 PM
To: MS-Exchange Admin Issues
Subject: Multiple cert (Ex 2007) Internal vs. Eternal

Greeting all.

I]m running into a problem where, as we roll out Office 2007 the users are 
prompted with security dialog boxes warning that the certificate doesn't match 
the server name.  We currently have a certificate of the external web address 
(webmail ,etc.) but the internal Exchange server has a completely different 
name.  Is there any way around this?  This problem has reached the upper 
echelon of or organization.  It was fine was it was just me, but now it has 
become a problem.

Any help would be appreciated.

-Martt





~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

RE: Multiple cert (Ex 2007) Internal vs. Eternal

2009-02-12 Thread Troy Meyer
My money is on the autodiscover service using an internal cert and causing the 
prompt when Outlook 2007 looks for availability info

http://technet.microsoft.com/en-us/library/bb397225.aspx


-troy

-Original Message-
From: Michael B. Smith [mailto:mich...@theessentialexchange.com] 
Sent: Thursday, February 12, 2009 2:05 PM
To: MS-Exchange Admin Issues
Subject: RE: Multiple cert (Ex 2007) Internal vs. Eternal

What?

 

Are you deploying Outlook 2007 using Outlook Anywhere for your internal users?

 

Regards,

 

Michael B. Smith, MCITP:SA,EMA/MCSE/Exchange MVP

My blog: http://TheEssentialExchange.com/blogs/michael

I'll be at TEC'2009! http://www.tec2009.com/vegas/index.php

 

From: Marty Nelson [mailto:mnel...@transdyn.com] 
Sent: Thursday, February 12, 2009 5:01 PM
To: MS-Exchange Admin Issues
Subject: Multiple cert (Ex 2007) Internal vs. Eternal

 

Greeting all.

 

I]m running into a problem where, as we roll out Office 2007 the users are 
prompted with security dialog boxes warning that the certificate doesn't match 
the server name.  We currently have a certificate of the external web address 
(webmail ,etc.) but the internal Exchange server has a completely different 
name.  Is there any way around this?  This problem has reached the upper 
echelon of or organization.  It was fine was it was just me, but now it has 
become a problem.

 

Any help would be appreciated. 

 

-Martt

 

 

 


 


~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~



RE: Multiple cert (Ex 2007) Internal vs. Eternal

2009-02-12 Thread Marty Nelson
Not at all.  It only seems to effect those with Office 2007.  Every time we 
login, they get prompted with Security dialog boxes from both of our mail 
servers (two different locals.

-M

From: Michael B. Smith [mailto:mich...@theessentialexchange.com]
Sent: Thursday, February 12, 2009 2:05 PM
To: MS-Exchange Admin Issues
Subject: RE: Multiple cert (Ex 2007) Internal vs. Eternal

What?

Are you deploying Outlook 2007 using Outlook Anywhere for your internal users?

Regards,

Michael B. Smith, MCITP:SA,EMA/MCSE/Exchange MVP
My blog: http://TheEssentialExchange.com/blogs/michael
I'll be at TEC'2009! http://www.tec2009.com/vegas/index.php

From: Marty Nelson [mailto:mnel...@transdyn.com]
Sent: Thursday, February 12, 2009 5:01 PM
To: MS-Exchange Admin Issues
Subject: Multiple cert (Ex 2007) Internal vs. Eternal

Greeting all.

I]m running into a problem where, as we roll out Office 2007 the users are 
prompted with security dialog boxes warning that the certificate doesn't match 
the server name.  We currently have a certificate of the external web address 
(webmail ,etc.) but the internal Exchange server has a completely different 
name.  Is there any way around this?  This problem has reached the upper 
echelon of or organization.  It was fine was it was just me, but now it has 
become a problem.

Any help would be appreciated.

-Martt








~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

RE: Multiple cert (Ex 2007) Internal vs. Eternal

2009-02-12 Thread Steve Hart
Can this be addressed with an alias in DNS?   How does webmail.yourdomain.com 
resolve in internal DNS?

Steve Hart
I T Manager
Wright Business Graphics Inc. wrightbg.comhttp://www.wrightbg.com/
Wright Imaging Inc. wrightimg.comhttp://www.wrightimg.com/
P.O. Box 20489
18440 NE San Rafael
Portland, OR 97230
503-491-4343 Direct
sh...@wrightbg.com



From: Michael B. Smith [mailto:mich...@theessentialexchange.com]
Sent: Thursday, February 12, 2009 2:05 PM
To: MS-Exchange Admin Issues
Subject: RE: Multiple cert (Ex 2007) Internal vs. Eternal

What?

Are you deploying Outlook 2007 using Outlook Anywhere for your internal users?

Regards,

Michael B. Smith, MCITP:SA,EMA/MCSE/Exchange MVP
My blog: http://TheEssentialExchange.com/blogs/michael
I'll be at TEC'2009! http://www.tec2009.com/vegas/index.php

From: Marty Nelson [mailto:mnel...@transdyn.com]
Sent: Thursday, February 12, 2009 5:01 PM
To: MS-Exchange Admin Issues
Subject: Multiple cert (Ex 2007) Internal vs. Eternal

Greeting all.

I]m running into a problem where, as we roll out Office 2007 the users are 
prompted with security dialog boxes warning that the certificate doesn't match 
the server name.  We currently have a certificate of the external web address 
(webmail ,etc.) but the internal Exchange server has a completely different 
name.  Is there any way around this?  This problem has reached the upper 
echelon of or organization.  It was fine was it was just me, but now it has 
become a problem.

Any help would be appreciated.

-Martt








~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

RE: Multiple cert (Ex 2007) Internal vs. Eternal

2009-02-12 Thread Marty Nelson
It resolves to the same name, just an internal IP.

-M

From: Steve Hart [mailto:sh...@wrightbg.com]
Sent: Thursday, February 12, 2009 2:13 PM
To: MS-Exchange Admin Issues
Subject: RE: Multiple cert (Ex 2007) Internal vs. Eternal

Can this be addressed with an alias in DNS?   How does webmail.yourdomain.com 
resolve in internal DNS?

Steve Hart
I T Manager
Wright Business Graphics Inc. wrightbg.comhttp://www.wrightbg.com/
Wright Imaging Inc. wrightimg.comhttp://www.wrightimg.com/
P.O. Box 20489
18440 NE San Rafael
Portland, OR 97230
503-491-4343 Direct
sh...@wrightbg.com



From: Michael B. Smith [mailto:mich...@theessentialexchange.com]
Sent: Thursday, February 12, 2009 2:05 PM
To: MS-Exchange Admin Issues
Subject: RE: Multiple cert (Ex 2007) Internal vs. Eternal
What?

Are you deploying Outlook 2007 using Outlook Anywhere for your internal users?

Regards,

Michael B. Smith, MCITP:SA,EMA/MCSE/Exchange MVP
My blog: http://TheEssentialExchange.com/blogs/michael
I'll be at TEC'2009! http://www.tec2009.com/vegas/index.php

From: Marty Nelson [mailto:mnel...@transdyn.com]
Sent: Thursday, February 12, 2009 5:01 PM
To: MS-Exchange Admin Issues
Subject: Multiple cert (Ex 2007) Internal vs. Eternal

Greeting all.

I]m running into a problem where, as we roll out Office 2007 the users are 
prompted with security dialog boxes warning that the certificate doesn't match 
the server name.  We currently have a certificate of the external web address 
(webmail ,etc.) but the internal Exchange server has a completely different 
name.  Is there any way around this?  This problem has reached the upper 
echelon of or organization.  It was fine was it was just me, but now it has 
become a problem.

Any help would be appreciated.

-Martt











~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

RE: Multiple cert (Ex 2007) Internal vs. Eternal

2009-02-12 Thread Steve Hart
I haven't worked much with Office 07, so I'm guessing.

When you set up your email profile, is it set up as webmail.xxx.xx  or   
realservername.xxx.xxx?

Some programs I've used in the past have cared; others didn't.

Somtimes the client will change the servername to match whatever it likes 
anyway.



Steve Hart
I T Manager
Wright Business Graphics Inc. wrightbg.comhttp://www.wrightbg.com/
Wright Imaging Inc. wrightimg.comhttp://www.wrightimg.com/
P.O. Box 20489
18440 NE San Rafael
Portland, OR 97230
503-491-4343 Direct
sh...@wrightbg.com



From: Marty Nelson [mailto:mnel...@transdyn.com]
Sent: Thursday, February 12, 2009 2:34 PM
To: MS-Exchange Admin Issues
Subject: RE: Multiple cert (Ex 2007) Internal vs. Eternal

It resolves to the same name, just an internal IP.

-M

From: Steve Hart [mailto:sh...@wrightbg.com]
Sent: Thursday, February 12, 2009 2:13 PM
To: MS-Exchange Admin Issues
Subject: RE: Multiple cert (Ex 2007) Internal vs. Eternal

Can this be addressed with an alias in DNS?   How does webmail.yourdomain.com 
resolve in internal DNS?

Steve Hart
I T Manager
Wright Business Graphics Inc. wrightbg.comhttp://www.wrightbg.com/
Wright Imaging Inc. wrightimg.comhttp://www.wrightimg.com/
P.O. Box 20489
18440 NE San Rafael
Portland, OR 97230
503-491-4343 Direct
sh...@wrightbg.com



From: Michael B. Smith [mailto:mich...@theessentialexchange.com]
Sent: Thursday, February 12, 2009 2:05 PM
To: MS-Exchange Admin Issues
Subject: RE: Multiple cert (Ex 2007) Internal vs. Eternal
What?

Are you deploying Outlook 2007 using Outlook Anywhere for your internal users?

Regards,

Michael B. Smith, MCITP:SA,EMA/MCSE/Exchange MVP
My blog: http://TheEssentialExchange.com/blogs/michael
I'll be at TEC'2009! http://www.tec2009.com/vegas/index.php

From: Marty Nelson [mailto:mnel...@transdyn.com]
Sent: Thursday, February 12, 2009 5:01 PM
To: MS-Exchange Admin Issues
Subject: Multiple cert (Ex 2007) Internal vs. Eternal

Greeting all.

I]m running into a problem where, as we roll out Office 2007 the users are 
prompted with security dialog boxes warning that the certificate doesn't match 
the server name.  We currently have a certificate of the external web address 
(webmail ,etc.) but the internal Exchange server has a completely different 
name.  Is there any way around this?  This problem has reached the upper 
echelon of or organization.  It was fine was it was just me, but now it has 
become a problem.

Any help would be appreciated.

-Martt














~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

RE: Multiple cert (Ex 2007) Internal vs. Eternal

2009-02-12 Thread Troy Meyer
Webmail really shouldn't have anything to do with Outlook local MAPI access.
AND you MAPI profile doesn't care about valid certs.

Try this:

Open Outlook 2007
Hold ctrl and right click the Outlook icon in the notification area (clock area)
Select test email auto configuration
Uncheck guessmart and secure guessmart

Run the test.

We saw these issues in the beginning of our Ex 2007 deployment when only our 
group was using OL2007, users using OL2003 didn't see the issue (because they 
didn't use autodiscover for availability).

-troy



-Original Message-
From: Marty Nelson [mailto:mnel...@transdyn.com] 
Sent: Thursday, February 12, 2009 2:34 PM
To: MS-Exchange Admin Issues
Subject: RE: Multiple cert (Ex 2007) Internal vs. Eternal

It resolves to the same name, just an internal IP.  

 

-M

 

From: Steve Hart [mailto:sh...@wrightbg.com] 
Sent: Thursday, February 12, 2009 2:13 PM
To: MS-Exchange Admin Issues
Subject: RE: Multiple cert (Ex 2007) Internal vs. Eternal

 

Can this be addressed with an alias in DNS?   How does webmail.yourdomain.com 
resolve in internal DNS?

 

Steve Hart

I T Manager

Wright Business Graphics Inc. wrightbg.com http://www.wrightbg.com/ 

Wright Imaging Inc. wrightimg.com http://www.wrightimg.com/ 

P.O. Box 20489 

18440 NE San Rafael

Portland, OR 97230

503-491-4343 Direct

sh...@wrightbg.com

 

 



From: Michael B. Smith [mailto:mich...@theessentialexchange.com] 
Sent: Thursday, February 12, 2009 2:05 PM
To: MS-Exchange Admin Issues
Subject: RE: Multiple cert (Ex 2007) Internal vs. Eternal

What?

 

Are you deploying Outlook 2007 using Outlook Anywhere for your internal users?

 

Regards,

 

Michael B. Smith, MCITP:SA,EMA/MCSE/Exchange MVP

My blog: http://TheEssentialExchange.com/blogs/michael

I'll be at TEC'2009! http://www.tec2009.com/vegas/index.php

 

From: Marty Nelson [mailto:mnel...@transdyn.com] 
Sent: Thursday, February 12, 2009 5:01 PM
To: MS-Exchange Admin Issues
Subject: Multiple cert (Ex 2007) Internal vs. Eternal

 

Greeting all.

 

I]m running into a problem where, as we roll out Office 2007 the users are 
prompted with security dialog boxes warning that the certificate doesn't match 
the server name.  We currently have a certificate of the external web address 
(webmail ,etc.) but the internal Exchange server has a completely different 
name.  Is there any way around this?  This problem has reached the upper 
echelon of or organization.  It was fine was it was just me, but now it has 
become a problem.

 

Any help would be appreciated. 

 

-Martt

 

 

 

 

 

 

 


 


~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~



RE: Multiple cert (Ex 2007) Internal vs. Eternal

2009-02-12 Thread Marty Nelson
Troy, thanks.  Can you specify the clock area?

-M

-Original Message-
From: Troy Meyer [mailto:troy.me...@monacocoach.com]
Sent: Thursday, February 12, 2009 2:43 PM
To: MS-Exchange Admin Issues
Subject: RE: Multiple cert (Ex 2007) Internal vs. Eternal

Webmail really shouldn't have anything to do with Outlook local MAPI access.
AND you MAPI profile doesn't care about valid certs.

Try this:

Open Outlook 2007
Hold ctrl and right click the Outlook icon in the notification area (clock area)
Select test email auto configuration
Uncheck guessmart and secure guessmart

Run the test.

We saw these issues in the beginning of our Ex 2007 deployment when only our 
group was using OL2007, users using OL2003 didn't see the issue (because they 
didn't use autodiscover for availability).

-troy



-Original Message-
From: Marty Nelson [mailto:mnel...@transdyn.com]
Sent: Thursday, February 12, 2009 2:34 PM
To: MS-Exchange Admin Issues
Subject: RE: Multiple cert (Ex 2007) Internal vs. Eternal

It resolves to the same name, just an internal IP.



-M



From: Steve Hart [mailto:sh...@wrightbg.com]
Sent: Thursday, February 12, 2009 2:13 PM
To: MS-Exchange Admin Issues
Subject: RE: Multiple cert (Ex 2007) Internal vs. Eternal



Can this be addressed with an alias in DNS?   How does webmail.yourdomain.com 
resolve in internal DNS?



Steve Hart

I T Manager

Wright Business Graphics Inc. wrightbg.com http://www.wrightbg.com/

Wright Imaging Inc. wrightimg.com http://www.wrightimg.com/

P.O. Box 20489

18440 NE San Rafael

Portland, OR 97230

503-491-4343 Direct

sh...@wrightbg.com







From: Michael B. Smith [mailto:mich...@theessentialexchange.com]
Sent: Thursday, February 12, 2009 2:05 PM
To: MS-Exchange Admin Issues
Subject: RE: Multiple cert (Ex 2007) Internal vs. Eternal

What?



Are you deploying Outlook 2007 using Outlook Anywhere for your internal users?



Regards,



Michael B. Smith, MCITP:SA,EMA/MCSE/Exchange MVP

My blog: http://TheEssentialExchange.com/blogs/michael

I'll be at TEC'2009! http://www.tec2009.com/vegas/index.php



From: Marty Nelson [mailto:mnel...@transdyn.com]
Sent: Thursday, February 12, 2009 5:01 PM
To: MS-Exchange Admin Issues
Subject: Multiple cert (Ex 2007) Internal vs. Eternal



Greeting all.



I]m running into a problem where, as we roll out Office 2007 the users are 
prompted with security dialog boxes warning that the certificate doesn't match 
the server name.  We currently have a certificate of the external web address 
(webmail ,etc.) but the internal Exchange server has a completely different 
name.  Is there any way around this?  This problem has reached the upper 
echelon of or organization.  It was fine was it was just me, but now it has 
become a problem.



Any help would be appreciated.



-Martt



















~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~


~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~



RE: Multiple cert (Ex 2007) Internal vs. Eternal

2009-02-12 Thread Troy Meyer
Sure, the area on the taskbar where the clock is.  Mine is at the very bottom 
right hand over my right most monitor.

The list wont let me send an attachment or an embedded image otherwise I would 
put the snipping tool to work.

(how do people get that stuff working on their signatures to the list?)


-troy

-Original Message-
From: Marty Nelson [mailto:mnel...@transdyn.com]
Sent: Thursday, February 12, 2009 3:54 PM
To: MS-Exchange Admin Issues
Subject: RE: Multiple cert (Ex 2007) Internal vs. Eternal

Troy, thanks.  Can you specify the clock area?

-M

-Original Message-
From: Troy Meyer [mailto:troy.me...@monacocoach.com]
Sent: Thursday, February 12, 2009 2:43 PM
To: MS-Exchange Admin Issues
Subject: RE: Multiple cert (Ex 2007) Internal vs. Eternal

Webmail really shouldn't have anything to do with Outlook local MAPI access.
AND you MAPI profile doesn't care about valid certs.

Try this:

Open Outlook 2007
Hold ctrl and right click the Outlook icon in the notification area (clock area)
Select test email auto configuration
Uncheck guessmart and secure guessmart

Run the test.

We saw these issues in the beginning of our Ex 2007 deployment when only our 
group was using OL2007, users using OL2003 didn't see the issue (because they 
didn't use autodiscover for availability).

-troy



-Original Message-
From: Marty Nelson [mailto:mnel...@transdyn.com]
Sent: Thursday, February 12, 2009 2:34 PM
To: MS-Exchange Admin Issues
Subject: RE: Multiple cert (Ex 2007) Internal vs. Eternal

It resolves to the same name, just an internal IP.



-M



From: Steve Hart [mailto:sh...@wrightbg.com]
Sent: Thursday, February 12, 2009 2:13 PM
To: MS-Exchange Admin Issues
Subject: RE: Multiple cert (Ex 2007) Internal vs. Eternal



Can this be addressed with an alias in DNS?   How does webmail.yourdomain.com 
resolve in internal DNS?



Steve Hart

I T Manager

Wright Business Graphics Inc. wrightbg.com http://www.wrightbg.com/

Wright Imaging Inc. wrightimg.com http://www.wrightimg.com/

P.O. Box 20489

18440 NE San Rafael

Portland, OR 97230

503-491-4343 Direct

sh...@wrightbg.com







From: Michael B. Smith [mailto:mich...@theessentialexchange.com]
Sent: Thursday, February 12, 2009 2:05 PM
To: MS-Exchange Admin Issues
Subject: RE: Multiple cert (Ex 2007) Internal vs. Eternal

What?



Are you deploying Outlook 2007 using Outlook Anywhere for your internal users?



Regards,



Michael B. Smith, MCITP:SA,EMA/MCSE/Exchange MVP

My blog: http://TheEssentialExchange.com/blogs/michael

I'll be at TEC'2009! http://www.tec2009.com/vegas/index.php



From: Marty Nelson [mailto:mnel...@transdyn.com]
Sent: Thursday, February 12, 2009 5:01 PM
To: MS-Exchange Admin Issues
Subject: Multiple cert (Ex 2007) Internal vs. Eternal



Greeting all.



I]m running into a problem where, as we roll out Office 2007 the users are 
prompted with security dialog boxes warning that the certificate doesn't match 
the server name.  We currently have a certificate of the external web address 
(webmail ,etc.) but the internal Exchange server has a completely different 
name.  Is there any way around this?  This problem has reached the upper 
echelon of or organization.  It was fine was it was just me, but now it has 
become a problem.



Any help would be appreciated.



-Martt



















~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~


~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~



~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~

RE: Multiple cert (Ex 2007) Internal vs. Eternal

2009-02-12 Thread Kennedy, Jim

I think you are on the correct motorcycle. The article below is how I fixed 
this issue with us.

http://support.microsoft.com/kb/940726



From: Troy Meyer [troy.me...@monacocoach.com]
Sent: Thursday, February 12, 2009 5:09 PM
To: MS-Exchange Admin Issues
Subject: RE: Multiple cert (Ex 2007) Internal vs. Eternal

My money is on the autodiscover service using an internal cert and causing the 
prompt when Outlook 2007 looks for availability info

http://technet.microsoft.com/en-us/library/bb397225.aspx


-troy

-Original Message-
From: Michael B. Smith [mailto:mich...@theessentialexchange.com]
Sent: Thursday, February 12, 2009 2:05 PM
To: MS-Exchange Admin Issues
Subject: RE: Multiple cert (Ex 2007) Internal vs. Eternal

What?



Are you deploying Outlook 2007 using Outlook Anywhere for your internal users?



Regards,



Michael B. Smith, MCITP:SA,EMA/MCSE/Exchange MVP

My blog: http://TheEssentialExchange.com/blogs/michael

I'll be at TEC'2009! http://www.tec2009.com/vegas/index.php



From: Marty Nelson [mailto:mnel...@transdyn.com]
Sent: Thursday, February 12, 2009 5:01 PM
To: MS-Exchange Admin Issues
Subject: Multiple cert (Ex 2007) Internal vs. Eternal



Greeting all.



I]m running into a problem where, as we roll out Office 2007 the users are 
prompted with security dialog boxes warning that the certificate doesn't match 
the server name.  We currently have a certificate of the external web address 
(webmail ,etc.) but the internal Exchange server has a completely different 
name.  Is there any way around this?  This problem has reached the upper 
echelon of or organization.  It was fine was it was just me, but now it has 
become a problem.



Any help would be appreciated.



-Martt











~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~


~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~
~ http://www.sunbeltsoftware.com/Ninja~