Go Premium for a chance to win a PS4. Enter to Win

x
?
Solved

Outlook Anywhere on Sb Server 2011

Posted on 2013-02-01
6
Medium Priority
?
368 Views
Last Modified: 2013-02-04
Hi

I have a Small Business Server 2011 and can access email via web outlook. However, I woud like to setup Outlook Anywhere.

Please can someone point me in the direction of setting it up including sorting the certificate out. Ideally I would like to use a self assigned but I have no idea where to start and what details need entering.

Thanks
0
Comment
Question by:JayHine
  • 3
  • 3
6 Comments
 
LVL 59

Expert Comment

by:Cliff Galiher
ID: 38843775
As long as you used the wizards when you first set up SBS, you are set to go. The certificate OA uses is the same one RWA uses. So if you didn't buy and install a 3rd party cert, you will want to use the certificate installer package to install certificate chains on any machine that will be using OA.

With that said, I strongly recommend just buying a certificate. For $10 a year, it'll pay for itself in t amount of time it takes to find t certificate file, copy it to a USB key, and then install it on the first target machine,
0
 

Author Comment

by:JayHine
ID: 38850268
Hi

I have got this working using a Self Assigned Certificate as I want to test it before purchasing a new Certificate and check whether it is something we will use.

The only problem I have currently is that when I logon to Outlook Anywhere I get a "Security Alert". It says the Security Certificate has expired or is not yet valid and The name on the Certificate is invalid or does not match the name of the site.

When I "View Certificate" it has been issued bu "plesk" and has expired.

I have rerun the "domain name wizard on the Server and recreated the Certificate Distribution package. I have installed this on the Laptop. but I still ge tthe error.

How do I get rid of this old Certificate and forcr the Laptop to use the one I have installed from the distribution package.

If I say "Yes" to the error message everything works fine.
0
 
LVL 59

Expert Comment

by:Cliff Galiher
ID: 38850319
A certificate issued by plesiosaur is almost always a certificate on your web host. It probably means you have a wildcard DNS record messing its how autodiscover works. Remove any wildcard A Records and make specific records instead (www, etc) and that shoild clear up.
0
What does it mean to be "Always On"?

Is your cloud always on? With an Always On cloud you won't have to worry about downtime for maintenance or software application code updates, ensuring that your bottom line isn't affected.

 

Author Comment

by:JayHine
ID: 38850333
but if I edit the wild card on my A record for my domain wont this stop people being able to just type out domain name in the address bar of google etc and our website will come up.

Isnt there a way of removing this certificate or by forcing the Outlook anywhere to use the right certificate?
0
 
LVL 59

Accepted Solution

by:
Cliff Galiher earned 2000 total points
ID: 38850401
First, no, you can't force it. The problem isn't the certificate. Outlook has a hard coded set of queries that it attempts when performing autodiscover. VERY high on that list is, if your email address is me@yourdomain.com, it will attempt https://yourdomain.com/

Now here is the rub. EVEN if your internal certificate has that name (self signed, or you purchase a UCC cert), if you have a wildcard record pointing at another server, outlook will never GET your cert. it does a DNS Lookup, gets the wildcard record, connects to THAT server, gets its SSL cert (the plesk one) and YOU get an error.

Which means there are two choices to resolve your problem.

1) make sure no DNS record answers to just ://yourdomain.com/ ...which means no wildcard records and no blank records. This is usually a non-issue as people put www out of habit by now. You just want to make sure marketing and links include the www as well.

Or

2) if you REALLY want ://yourdomain.com/ to point to your website, you need that website to have a valid UCC cert or wildcard cert so the plain domain name AND www.yourdomain.com works. The autodiscover will pick up the cert which will actually match, thus no error, then get a 404, and fall down to the next lookup method, which would be your internal server.  This is bigger hassle to maintain and significantly more expensive.
0
 

Author Comment

by:JayHine
ID: 38850524
thanks very much for the explanation. I will double check about the wildcard and possinly remove it or live with the error for the time being.
0

Featured Post

Free Tool: Path Explorer

An intuitive utility to help find the CSS path to UI elements on a webpage. These paths are used frequently in a variety of front-end development and QA automation tasks.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Eseutil Hard Recovery is part of exchange tool and ensures Exchange mailbox data recovery when mailbox gets corrupt due to some problem on Exchange server.
Take a look at these 6 Outlook Email management tools which can augment the working and performance of Microsoft Outlook to give you a more rewarding emailing experience.
In this Micro Video tutorial you will learn the basics about Database Availability Groups and How to configure one using a live Exchange Server Environment. The video tutorial explains the basics of the Exchange server Database Availability grou…
The basic steps you have just learned will be implemented in this video. The basic steps are shown to configure an Exchange DAG in a live working Exchange Server Environment and manage the same (Exchange Server 2010 Software is used in a Windows Ser…
Suggested Courses

972 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question