Solved

Redirect OWA to HTTPS

Posted on 2009-05-11
9
721 Views
Last Modified: 2012-05-06
To Experts,

When users type http://mail.contoso.com, I would like the traffic to go to this website address https://mail.contoso.com/owa. How to configure the IIS? I'm runningWindows Server 2003 with Exchange 2007.

Thanks!
0
Comment
Question by:reysrivera
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
  • 2
  • 2
  • +2
9 Comments
 
LVL 10

Assisted Solution

by:bob_the_builder
bob_the_builder earned 100 total points
ID: 24359771
0
 

Author Comment

by:reysrivera
ID: 24360022
I real don't know must about IIS 6 so is there step-by-step instruction on how to do this?
0
 
LVL 13

Expert Comment

by:FearNoMore
ID: 24360737
0
Optimizing Cloud Backup for Low Bandwidth

With cloud storage prices going down a growing number of SMBs start to use it for backup storage. Unfortunately, business data volume rarely fits the average Internet speed. This article provides an overview of main Internet speed challenges and reveals backup best practices.

 
LVL 4

Expert Comment

by:aletjolly
ID: 24363245
As you said that you are having Windows 2003. Kindly have a look on below link:
http://exchange.mvps.org/owaredirect_frames.htm

Note: In the above link replace /exchange with /owa
0
 
LVL 4

Expert Comment

by:aletjolly
ID: 24363262
Sorry mistyped instead of "/exchange" please type in "https://mail.contoso.com/owa"
0
 
LVL 1

Assisted Solution

by:davegooch
davegooch earned 100 total points
ID: 24363959
When I setup Outlook Web Access at my company, I also wanted to redirect HTTP to HTTPS. However, a Microsoft consultant told me not to do it. Apparently it is not a "best practice" to allow unencrypted HTTP into an Exchange front-end server, however briefly. It seems that Microsoft is afraid that it could be used to compromise the server. It seems silly, but that's what Microsoft told me, so our OWA server requires users to connect with HTTPS and does not redirect.
0
 

Author Comment

by:reysrivera
ID: 24365723
davegooch:

Do you have the article from Microsoft about there claim? I myself not comfortable about the redirection and I'm trying to get article from Microsoft its not good practice.
0
 
LVL 13

Accepted Solution

by:
FearNoMore earned 300 total points
ID: 24366951
If Microsoft did not consider it best practice then they would not have published an article explaining how to do it

http://technet.microsoft.com/en-us/library/aa998359.aspx
 
0
 
LVL 1

Expert Comment

by:davegooch
ID: 24373981
Reysrivera, I was given this warning verbally and have so far not been able to find the same warning in writing. I can however give you the email address of the Microsoft consultant who told me this, if you would like to ask her yourself.

In a quick Google search this morning, I found one blog post that starts this way:

It is best practice to require users to use a secure connection for OWA, but it is impractical to train them to type a specific URL such as https://owa.myorg.com/exchange.

That blog post continues to describe a different approach than the Technet article in the previous post. Perhaps this is more secure - http://blog.pennic.com/?p=5
0

Featured Post

Does Powershell have you tied up in knots?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article lists the top 5 free OST to PST Converter Tools. These tools save a lot of time for users when they want to convert OST to PST after their exchange server is no longer available or some other critical issue with exchange server or impor…
If you troubleshoot Outlook for clients, you may want to know a bit more about the OST file before doing your next job. IMAP can cause a lot of drama if removed in the accounts without backing up.
In this video we show how to create a Resource Mailbox in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: Navigate to the Recipients >> Resources tab.: "Recipients" is our default selection …
This video discusses moving either the default database or any database to a new volume.

705 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question