Solved

Unable to access RPC over HTTP through Firewall accessing a DC running Exchange 2003

Posted on 2006-06-27
7
332 Views
Last Modified: 2008-01-09
I first must say I cannot put my frustration into words. That being said here is the scenario:

DC running Server 2003 and Exchange 2003, and Certificate Services
Global Catolog on other DC running Server 2000
Added to Global Catalog server registry:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NTDS\Parameters
REG_MULTI_SZ
Name: NSPI Interface protocol sequences
Value: ncacn_http:6004

Added to Exchange DC registry:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Rpc\RpcProxy
Key:ValidPorts

exchange01:100-5000;
exchange01:6001-6002;
exchange01:6004;
exchange01.domain.local:6001-6002;
exchange01.domain.local:6004;
mail.publicdomain.com:6001-6002;
mail.publicdomain.com:6004;

I forwarded all these ports on our router to the Exchange Server

I can connect through OWA no problem

When attempting to connect using Outlook 2003

I get NOTHING? Not even a login box?

Thanks in advance for any assistance.
0
Comment
Question by:INetX
  • 4
  • 3
7 Comments
 
LVL 8

Expert Comment

by:mvvinod
ID: 17001152
First of all,
   You dont need to forward all the ports on the router. These ports are used internally in the server. RPC over http only uses port 443 till the server. Follow this document to test the rpc proxy first...

http://support.microsoft.com/default.aspx?scid=kb;en-us;833401

And from my experience, 100-5000 ports are not required.... Did you also install rpc proxy in add/remove windows components....

Are you correctly configuring the clients???
Does your clients trust your CA ??

There are several links in the above page to troubleshoot setp by step. Try them and let me know...

Vinod.
0
 
LVL 8

Expert Comment

by:mvvinod
ID: 17001175
0
 

Author Comment

by:INetX
ID: 17001384
Thank you,

I'll check out the links.

If Exchange is only running on one server does it need to be configured as the "RPC-HTTP back-end server"?
0
Best Practices: Disaster Recovery Testing

Besides backup, any IT division should have a disaster recovery plan. You will find a few tips below relating to the development of such a plan and to what issues one should pay special attention in the course of backup planning.

 
LVL 8

Accepted Solution

by:
mvvinod earned 250 total points
ID: 17001455
No it should not be. On the rpc page in ESM, in rpc-http page, it should say "not a part of managed rpc-http proxy"

Vinod.
0
 

Author Comment

by:INetX
ID: 17001839
It's working!

The problem was there were two similar SSL certificates in the same folder I happened to install the wrong one.  Right now I have RPC configured to require SSL but not the OWA.  That is until I figure out a way to seemlessly install the certificate on remote clients.  Do you know of a way to automate this process?

THANKS!
0
 
LVL 8

Expert Comment

by:mvvinod
ID: 17002542
Domain members always trust the enterprise ca in your domain...

If your laptops are not domain mebers, i strongly suggest you buy a certificate form thawte, verisign etc which all windows clients trust. It will be a lot easier than putting in trusted root ca in each laptop.

Vinod.
0
 

Author Comment

by:INetX
ID: 17002739
Thanks,

So what you're saying if I first install my laptops in the domain then take them out to the field I shouldn't have a problem, correct?
0

Featured Post

Is Your AD Toolbox Looking More Like a Toybox?

Managing Active Directory can get complicated.  Often, the native tools for managing AD are just not up to the task.  The largest Active Directory installations in the world have relied on one tool to manage their day-to-day administration tasks: Hyena. Start your trial today.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

MS Outlook is a world-class email client application that is mainly used for e-communication globally.  In this article, we will discuss the basic idea about MS Outlook, its advanced features, and types of MS Outlook File formats.
This article aims to explain the working of CircularLogArchiver. This tool was designed to solve the buildup of log file in cases where systems do not support circular logging or where circular logging is not enabled
This video shows how to quickly and easily add an email signature for all users on Exchange 2016. The resulting signature is applied on a server level by Exchange Online. The email signature template has been downloaded from: www.mail-signatures…
A short tutorial showing how to set up an email signature in Outlook on the Web (previously known as OWA). For free email signatures designs, visit https://www.mail-signatures.com/articles/signature-templates/?sts=6651 If you want to manage em…

770 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question