[Okta Webinar] Learn how to a build a cloud-first strategyRegister Now

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 767
  • Last Modified:

What are the proper security settings in IIS for Exchange and RPC using SSL

I have a clients server that I belive the security settings are all screwed up inside of IIS.
We recently purchased a SSL cert for them and are attempting to setup their Exchange OWA and RPC to use the SSL.  I can't seem to find an article that addresses ALL the settings from use SSL 128 and authentication and access types.
I remember reading a EE posting about this very thing, but cannot seem to find it.
Any help would be appreciated.
Our server is a Win2k3 sp1.
Thanks.
0
brian_appliedcpu
Asked:
brian_appliedcpu
  • 5
  • 5
1 Solution
 
SembeeCommented:
The simplest way to deal with this is to recreate the virtual directories for OWA using this article:
http://support.microsoft.com/default.aspx?kbid=883380

Remove the RPC Proxy component from Add/Remove Windows Components, then delete the RPC and RPCWITHCERT virtual directories from IIS Manager. Run IISRESET in a command prompt and then reinstall the component. You will then need to recreate the registry settings.

No other changes are required. Require SSL and the 128 bit settings are not required to work correctly and should be left alone. The SSL certificate will work correctly without those being set. Many people seem to think that require SSL turns SSL support on and off - it does not. All it does is force the server to generate a warning if the client does not come in on the HTTPS URL.

Simon.
0
 
brian_appliedcpuAuthor Commented:
Recreate what registry settings?
the rpc ports?  
0
 
SembeeCommented:
RPC over HTTPS requires a ton of registry settings to be applied unless you are in a frontend/backend scenario. Those are wiped out when you remove the RPC Proxy component.

Simon.
0
Get quick recovery of individual SharePoint items

Free tool – Veeam Explorer for Microsoft SharePoint, enables fast, easy restores of SharePoint sites, documents, libraries and lists — all with no agents to manage and no additional licenses to buy.

 
brian_appliedcpuAuthor Commented:
did the recreate the virtual directories for OWA using this article:
http://support.microsoft.com/default.aspx?kbid=883380
but still having the same 404 issue.
I do not have sharepoint installed.
I do have reporting services installed however.
0
 
SembeeCommented:
Are you getting a 404 on both http and https?
Is that happening immediately, or do you get any kind of prompt?
Did the directories create correctly on their own?
Any errors in the event logs when the services were restarted?

Anything else installed on this machine that could have taken over the Default Web Site?
Have you checked the configuration of IIS to ensure that there is nothing else listening on the port on that IP address?

Simon.
0
 
brian_appliedcpuAuthor Commented:
We had sql 2000 reporting services installed and uninstalled them but i dont think that was the issue.
I did the recreate 3 times with no difference then i tried a different account rather than the administrator's and it worked fine.  Now i wonder if it was broken at all.....????
Thanks for your help and i will give you the points because you taught me something about recreating the iis virts.
0
 
brian_appliedcpuAuthor Commented:
I lied, i did not wait long enough to see if it finished loading...
Now all it says is that it is Loading the inbox....forever.
0
 
SembeeCommented:
Microsoft have an extensive article on the "loading" issue:
http://support.microsoft.com/default.aspx?kbid=280823

Simon.
0
 
brian_appliedcpuAuthor Commented:
I now understand that i must reinstall exchange so i am in the process and since i have sp2 installed it keeps asking me to overwrite newer file?  Since i will immediately install sp2 should i say yes or no?
0
 
SembeeCommented:
I tend to say no, and then install the service pack immediately. You must also install any updates that were on the machine that are dated after the service pack, before you look at putting the machine back in to production.

Simon.
0

Featured Post

Free learning courses: Active Directory Deep Dive

Get a firm grasp on your IT environment when you learn Active Directory best practices with Veeam! Watch all, or choose any amount, of this three-part webinar series to improve your skills. From the basics to virtualization and backup, we got you covered.

  • 5
  • 5
Tackle projects and never again get stuck behind a technical roadblock.
Join Now