• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 770
  • Last Modified:

What are the proper security settings in IIS for Exchange and RPC using SSL

I have a clients server that I belive the security settings are all screwed up inside of IIS.
We recently purchased a SSL cert for them and are attempting to setup their Exchange OWA and RPC to use the SSL.  I can't seem to find an article that addresses ALL the settings from use SSL 128 and authentication and access types.
I remember reading a EE posting about this very thing, but cannot seem to find it.
Any help would be appreciated.
Our server is a Win2k3 sp1.
Thanks.
0
brian_appliedcpu
Asked:
brian_appliedcpu
  • 5
  • 5
1 Solution
 
SembeeCommented:
The simplest way to deal with this is to recreate the virtual directories for OWA using this article:
http://support.microsoft.com/default.aspx?kbid=883380

Remove the RPC Proxy component from Add/Remove Windows Components, then delete the RPC and RPCWITHCERT virtual directories from IIS Manager. Run IISRESET in a command prompt and then reinstall the component. You will then need to recreate the registry settings.

No other changes are required. Require SSL and the 128 bit settings are not required to work correctly and should be left alone. The SSL certificate will work correctly without those being set. Many people seem to think that require SSL turns SSL support on and off - it does not. All it does is force the server to generate a warning if the client does not come in on the HTTPS URL.

Simon.
0
 
brian_appliedcpuAuthor Commented:
Recreate what registry settings?
the rpc ports?  
0
 
SembeeCommented:
RPC over HTTPS requires a ton of registry settings to be applied unless you are in a frontend/backend scenario. Those are wiped out when you remove the RPC Proxy component.

Simon.
0
Simplify Active Directory Administration

Administration of Active Directory does not have to be hard.  Too often what should be a simple task is made more difficult than it needs to be.The solution?  Hyena from SystemTools Software.  With ease-of-use as well as powerful importing and bulk updating capabilities.

 
brian_appliedcpuAuthor Commented:
did the recreate the virtual directories for OWA using this article:
http://support.microsoft.com/default.aspx?kbid=883380
but still having the same 404 issue.
I do not have sharepoint installed.
I do have reporting services installed however.
0
 
SembeeCommented:
Are you getting a 404 on both http and https?
Is that happening immediately, or do you get any kind of prompt?
Did the directories create correctly on their own?
Any errors in the event logs when the services were restarted?

Anything else installed on this machine that could have taken over the Default Web Site?
Have you checked the configuration of IIS to ensure that there is nothing else listening on the port on that IP address?

Simon.
0
 
brian_appliedcpuAuthor Commented:
We had sql 2000 reporting services installed and uninstalled them but i dont think that was the issue.
I did the recreate 3 times with no difference then i tried a different account rather than the administrator's and it worked fine.  Now i wonder if it was broken at all.....????
Thanks for your help and i will give you the points because you taught me something about recreating the iis virts.
0
 
brian_appliedcpuAuthor Commented:
I lied, i did not wait long enough to see if it finished loading...
Now all it says is that it is Loading the inbox....forever.
0
 
SembeeCommented:
Microsoft have an extensive article on the "loading" issue:
http://support.microsoft.com/default.aspx?kbid=280823

Simon.
0
 
brian_appliedcpuAuthor Commented:
I now understand that i must reinstall exchange so i am in the process and since i have sp2 installed it keeps asking me to overwrite newer file?  Since i will immediately install sp2 should i say yes or no?
0
 
SembeeCommented:
I tend to say no, and then install the service pack immediately. You must also install any updates that were on the machine that are dated after the service pack, before you look at putting the machine back in to production.

Simon.
0

Featured Post

Easily manage email signatures in Office 365

Managing email signatures in Office 365 can be a challenging task if you don't have the right tool. CodeTwo Email Signatures for Office 365 will help you implement a unified email signature look, no matter what email client is used by users. Test it for free!

  • 5
  • 5
Tackle projects and never again get stuck behind a technical roadblock.
Join Now