François Lamontagne
asked on
System Admin
Hello,
We are currently setting up a Exchange 2016 server.
We would like to manage access to the server (Blacklist / Whitelist) to all our device include Desktop and laptop. For all mobile it is simple we will use ACTIVESYNC. The problem is with desktops and laptops. We thought using a share management certificate ...
(A user needs to have a certificate on his computer to access the exchange server without valid certificate it is impossible for him to open his client Microsoft Outlook)
But our expert seems to say that it is impossible. Is it possible ? If no exist there are other solutions to limit access to the Exchange to the computer and portable?
Thank you!
We are currently setting up a Exchange 2016 server.
We would like to manage access to the server (Blacklist / Whitelist) to all our device include Desktop and laptop. For all mobile it is simple we will use ACTIVESYNC. The problem is with desktops and laptops. We thought using a share management certificate ...
(A user needs to have a certificate on his computer to access the exchange server without valid certificate it is impossible for him to open his client Microsoft Outlook)
But our expert seems to say that it is impossible. Is it possible ? If no exist there are other solutions to limit access to the Exchange to the computer and portable?
Thank you!
Scott C
If I'm understanding you correctly, your expert is correct. You DO need a cert. If only internal, then a self-signed cert will work, of you are going to the internet, then you will need to get a SAN Cert from a CA such as GoDaddy.
ASKER
Okay, can you just tell me where or how to configure this feature
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
I summarize,
By setting up the public certificate I could manage desktop and portable using Microsoft Outlook? If the users have the certificate to install on their computer it will have access to the server without certificate they will have no access?
Could I assign the certificate to the MAPI service successfully? So manage my mobile with Activesync and desktop and portable computers with a certificate?
Is it possible to have more than one certificate, for a service (MAPI)?
Thank you
By setting up the public certificate I could manage desktop and portable using Microsoft Outlook? If the users have the certificate to install on their computer it will have access to the server without certificate they will have no access?
Could I assign the certificate to the MAPI service successfully? So manage my mobile with Activesync and desktop and portable computers with a certificate?
Is it possible to have more than one certificate, for a service (MAPI)?
Thank you
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Suggestions answered the question asked.