how to configure outlook anywhere in exchange 2007 without certificate ?

Posted on 2009-12-20
Last Modified: 2012-05-08
how to configure outlook anywhere in exchange 2007 without certificate ?
Question by:asfourcrystal
    LVL 74

    Expert Comment

    by:Glen Knight
    You mean without any certificate at all or with a self signed certificate?

    Author Comment

    without any certificate
    LVL 4

    Expert Comment

    You can remove all the SSL settings from the IIS virtual directories and (viz: default web site and Rpc ).
    Then modify a registry value of AllowAnonymous at the following location in registry to 1:


    Author Comment

    rpcproxywanonymous not found in registry
    and i need more explain remove all the ssl settings from IIs ?
    LVL 4

    Expert Comment

    Open IIS manager, then check out if we have SSl settings enabled for Default web site and RPC directory. If so remove them.

    And for registry seting kindly check the follwing:
    Configure a front-end server for non-SSL traffic
    Normally RPC over HTTP uses SSL and port 443.  If you need to allow anonymous access over port 80 then you need this registry hack.  Your goal is edit the registry on the front-end server and add a DWORD called: AllowAnonymous

    Launch Regedit, Navigate to this registry key:
    Add a new REG_DWORD called: AllowAnonymous
    Set the value = 1 (Meaning Enabled)
    LVL 65

    Expert Comment

    I don't believe the non-certificate option is supported.
    Why don't you want to use a certificate? You realise that all information is going across in the clear?
    If the reason is cost - you don't have to pay Verisign $2000 for a suitable certificate. GoDaddy do suitable certificates for US$60/year.

    I would encourage you to reconsider your decision not to use a certificate because the entire Exchange 2007 product is based around it.

    LVL 74

    Accepted Solution

    You can set Outlook to not use a certificate I believe there is a checkbox where you configure the server settings.

    You can then uncheck the require SSL in the IIS configuratio

    However, this would mean sending all your username/password information along with all your emails in clear text.  Why would you want to do this?

    When you can buy certificates so cheaply why would you try to avoid it?  As already mentioned you can get certificates fro GoDaddy for a very small cost in comparison to some of the bigger vendors.

    Then you have the headache of trying to get it to work properly without the SSL certificate!  How much do you get paid an hour? Compare how much tune you would spend on this to the yearly cost of a certificate and you will get your answer.
    LVL 15

    Expert Comment

    Enable windows authentication (integrated) on Rpc virtual directory in IIS and unchek require SSl option and when you manually configure OL for Outlookanywhere in Authentication method select NTML that will let you connect over HTTP.

    See this article:

    After step 6 directly go to step 10 and just select "Connect to my Exchange mailbox using HTTP."
    in step 11 you will notice that you do not have option for http, by default it selects https.
    in step 11 mention the URL and do not mention MSSTD and under "Proxy Authentication settings" select NTML it will turn that https to http.Click ok and try to do check name.

    However it is reccomended that you use SSL for Rpc-Https. Ol 2007 with Exchange 2007 will not be able to use full funcationality, preventng user from using free busy , OAB etc.


    Featured Post

    Are end users causing IT problems again?

    You’ve taken the time to design and update all your end user’s email signatures, only to find out they’re messing up the HTML, changing the font and ruining the imagery. What can you do to prevent this? Find out how you can save your signatures from end users today.

    Join & Write a Comment

    Suggested Solutions

    Set OWA language and time zone in Exchange for individuals, all users or per database.
    Use email signature images to promote corporate certifications and industry awards.
    In this video we show how to create an email address policy in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.:  First we need to log into the Exchange Admin Center. Navigate to the Mail Flow…
    To add imagery to an HTML email signature, you have two options available to you. You can either add a logo/image by embedding it directly into the signature or hosting it externally and linking to it. The vast majority of email clients display l…

    755 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    20 Experts available now in Live!

    Get 1:1 Help Now