Solved

When I open outlook on a workstation, I get a security alert, need help to resolve this also 2 of the workstations in the domain shown as offline

Posted on 2014-10-27
11
92 Views
Last Modified: 2014-11-06
I have a small network with SBS 2011 with 5 workstations. Using outlook 2010 for email. Everything has been working fine and suddenly I have started getting the pop up when start Outlook on any of the workstations - "Security alert" remote.konidas.com.au -InformationSecurity alert
I have tried "view certificate" and install as trusted certificate, but it does nothing. At this stage I do not want to purchase commercial certificate. I want to create self assigned certificate as mostly the email are used in-house.

 Security alertCan someone give me some guidance please to fix this?

Also 2 of the workstations always show offline status on SBS console even if they are online. They are receiving email and able to connect to server directories. I have even accounts and reconnected them. I need some assistance in this please.
0
Comment
Question by:Shaun-1
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 6
  • 5
11 Comments
 
LVL 11

Expert Comment

by:Maclean
ID: 40407722
A certificate from a trusted provider is so cheap that it easily outweighs any reasons for not implementing it.
The time spend trying to get things working with self signed certs will be more costly than getting it done the way it was meant to be from starters. I think its approx $80-90 USD per year average, compare that vs hourly wages and time spend on getting self signed working, and one would easily reap the benefits straight away unless your time has no cost attached to it :)

There are even some free SSL providers online such as StartSSL.

What you need to do when using self signed is write a group policy that imports the self signed root certificates into the trusted store.

http://technet.microsoft.com/en-us/library/cc770315(v=ws.10).aspx
http://technet.microsoft.com/en-us/library/cc733026.aspx

The second problem that the cert shows is that your URL is incorrectly configured on the certificate.
The below article describes how to rectify this

http://support2.microsoft.com/kb/940726
0
 

Author Comment

by:Shaun-1
ID: 40407766
What was the reason for it work OK before without this issue? What I could have done to make it to wake up?
I have another installation similar to this, I may have to get ready for that as well? I will try and follow the links above to solve the issue.
0
 
LVL 11

Expert Comment

by:Maclean
ID: 40407776
Did you recently change from a paid SSL cert to a self signed one?
If changes are made to the certificate, but the IIS Service is not restarted on Exchange, than it can take some time before the change becomes obvious to the clients.

But there are more potential variables which could impact this. I would go through the system and application logs to find if anything obvious was changed in the past week.
0
What is SQL Server and how does it work?

The purpose of this paper is to provide you background on SQL Server. It’s your self-study guide for learning fundamentals. It includes both the history of SQL and its technical basics. Concepts and definitions will form the solid foundation of your future DBA expertise.

 

Author Comment

by:Shaun-1
ID: 40407789
The installation of sbs 2011was done by someone else. I have just inherited it. As far as I am aware we never had a paid certificate. While following the procedure,

"Follow the instructions in the Certificate Import Wizard to find and import the certificate"
I have no certificate, so tried to create one led me to Exchange Management Console here I do not see server configuration, I guess it has got something to do permissions, I have logged in as Administrator? What else?
Anything to do with OUTLOOK 2010 installation on server?
0
 
LVL 11

Expert Comment

by:Maclean
ID: 40411921
Outlook 2010 should preferably not be installed on the Exchange Server if this is what you are implying.
It is not a recommended scenario. although I cannot locate a reason explaining why this is not recommended. by Microsoft, and what the impact of that could be. "If in doubt, don't" would be my rule of thumb.

Your certificate should be visible on either your IIS console under certificates on the Exchange server (See here ), or you can browse to the mmc.msc snap in (See here )

Found a MS article showing where on exchange you can locate certificate details as well

http://technet.microsoft.com/en-us/library/dd335060(v=exchg.141).aspx

If not familiar with Exchange I would recommend having a full server snapshot just in case anything goes wrong and you are required to revert changes.
0
 

Author Comment

by:Shaun-1
ID: 40414707
Hmm! looks like I have a bit of work to do.
0
 
LVL 11

Expert Comment

by:Maclean
ID: 40414735
Yes, for this reason having a $80-90 dollar signed certificate from GoDaddy or other, would be a better and more secure option, which should save you more time and money than trying fix it with less secure self signed certificates
0
 

Author Comment

by:Shaun-1
ID: 40414864
Do you mean I do not need to go through all the hassles? Could you please forward me a link which I can follow to successfully install a SSL certificate on server SBS 2011?
0
 
LVL 11

Expert Comment

by:Maclean
ID: 40414957
Step 1: https://support.godaddy.com/help/article/6086/generating-a-certificate-signing-request-csr-exchange-server-2010?countrysite=nz

Step 2: https://support.godaddy.com/help/article/5863/installing-an-ssl-certificate-in-microsoft-exchange-server-2010

You just need to make sure that you have all the proper server names used for in & external mail access such as e.g. webmail.domain.com This is more clearly displayed in the below article.

But again, if not sure what you are about to do, it might pay checking with a experienced MS Exchange technician to help out. Would hate for things to go wrong.
http://exchangeserverpro.com/configure-an-ssl-certificate-for-exchange-server-2010/
0
 

Accepted Solution

by:
Shaun-1 earned 0 total points
ID: 40417627
Thank you for your guidance. It was very helpful.
0
 

Author Closing Comment

by:Shaun-1
ID: 40425782
I am going to try and implement the solution given when it is possible. It is good when someone with experience is providing guidance to choose the right path.
0

Featured Post

Instantly Create Instructional Tutorials

Contextual Guidance at the moment of need helps your employees adopt to new software or processes instantly. Boost knowledge retention and employee engagement step-by-step with one easy solution.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Finding original email is quite difficult due to their duplicates. From this article, you will come to know why multiple duplicates of same emails appear and how to delete duplicate emails from Outlook securely and instantly while vital emails remai…
Read this checklist to learn more about the 15 things you should never include in an email signature.
This Experts Exchange video Micro Tutorial shows how to tell Microsoft Office that a word is NOT spelled correctly. Microsoft Office has a built-in, main dictionary that is shared by Office apps, including Excel, Outlook, PowerPoint, and Word. When …
A short tutorial showing how to set up an email signature in Outlook on the Web (previously known as OWA). For free email signatures designs, visit https://www.mail-signatures.com/articles/signature-templates/?sts=6651 If you want to manage em…

728 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question