rjm

Hi guys, We have just purchased a wildcard certificate to replace our mail. webserver. and portal. sites, as we are going to publish more sites in the future and it seemed more cost effective. However, I am having problems with Exchange OWA. It used to be secured using mail.school.com security certificate, and is now secured using *.school.com However, internally OWA is accessed by the URL https://internalservername/owa - and it states that is a certificate mismatch as the certificate is trying to secure mail.school.com from the wildcard certificate. This is the bit that gets confusing, when using the old mail.school.com certificate on the OWA site, and accessing https://internalservername/owa the site comes up as secured, even though when you click on the padlock it still says its using the mail.school.com certificate - and the name doesnt match the internal server name. Is there somewhere that a trust between the two is setup, and if so how do I add the wildcard ceritificate to also secure the internal servername address. My other throught was for users to browse to the external site name, which does resolve, but then they get prompted for authentication, which when accessing via the internal addresss then don't - presumably due to autodiscover? Thanks for any help!!

Hi mate, I have changed the DNS entries on both connections to point to our two internal DNS Servers. Both internal servers have the external DNS servers for our ISP listed. I have also changed the Metrics in both connections, making the primary connection lower than the secondary redundant connection. The Lan is still priority though. After both of these changes, im still getting the same issue. Mail. works but webserver. doesn't. Disable the redundant connection and webserver. works instantly. I really have no idea what is causing it...

Both external connections and the internal LAN connection are all set to automatic metric. Should I change this? I still cant get my head around why mail. works regardless of the secondary connection, but webserver. doesn't... How can I set the forwarders in DNS when both connections are from different ISPs and therefore use different DNS servers from each other? Thanks for your help with this!

Where can I find the cost? I have looked in the advanced options in network connections, and verified the primary internet connection is above the backup secondary connection, which it is. Both internet connections use the ISP DNS servers relevant to that connection. The internal LAN nic on the TMG server points to our internal DNS servers, which have both mail. and webserver. entries specified. The TMG rule specified the site name and IP Address, and when I run the "Test Rule" I get success and green ticks.

Hi mate, Thanks for your reply. In our Domain DNS I have an "Host A" entry for mail. which runs the OWA, and one for webserver. Also, both names are registered with our domain name provider so resolved on the internet to the relevant external IP addresses. I am looking at Routing in TMG but that seems to be static and just picks up addresses from the NICs in the TMG server. Thanks for your help.

Hi guys, Im after abit more advice. Our TMG server has two internet connections that are in Failover Only mode on the ISP Redundanct Tab. My issue is we cannot access a published web server when both connections are active. When the 2nd reduntant connection is disabled it works instantly. I also have Exchange 2007 OWA published through the same TMG server, but access to this works regardless of the 2nd connection being active. Now the external IP address for the site in question is linked to the Primary network connection, as is the OWA, so I cant understand why having the 2nd redundant connection active would cause the published site not to work. I have compared both access rules for OWA and the published site and they are the same, other than the details of ther server they are hosted on, and their relative host names etc. One last thing, when I remove the gateway address from the 2nd redundant connection, it works instantly, so it appears the request comes in using the external IP through the primary internet connection, but then tries to reply and go out on the 2nd redundant connection causing it to time out. Any ideas would be greatly appreciated. Cheers Rich

Sorted mate - thanks for your help!!

Yes ive done a rule, so far the setup is: Action: Allow Traffic: Allow RDP (Terminal Services) Server From: (External IP) To: (Internal IP) Networks: External Thanks

Morning all, Im after abit of advice. I need to allow a remote desktop connection from the internet to one of our Windows 7 PCs on our internal network, that is secured using TMG 2010. I have got an external IP dedicated to the job, but I cant get a configuration to allow a connection through the TMG, however I can get a remote desktop connection to the TMG itself via the net, just not though it to an internal PC. Has anyone tried this/got any advice? Thanks in advance!

Hi there, I am trying a write a VB Script to do the following: Check if a folder exists - if it doesn't END - If it does check if two files exist within it - if they do END - if they don't, copy the two files Basically I want to check that two files exist within a folder of some software that might be installed. I want to copy the two files if the software is installed, but not if the software isnt installed. Hope that makes sense, and any help is greatly appreciated. Many thanks!

Hi guys/girls Im abit stuck with creating a transform for Java Update 23/24. I want to add some network settings - a proxy server address and port as the way our network has been setup, java cant use the default browser settings as its setup just to Automatically detect settings. When I manually set the proxy server details in the Java control panel, it works fine, but I want to set this as the MSI is deployed rather than doing the manual change on every machine. Any help/pointers would be appreciated! Cheers

Name : ContentFilterConfig RejectionResponse : Message rejected as spam by Content Fil tering. OutlookEmailPostmarkValidationEnabled : True BypassedRecipients : {} QuarantineMailbox : SCLRejectThreshold : 7 SCLRejectEnabled : True SCLDeleteThreshold : 9 SCLDeleteEnabled : False SCLQuarantineThreshold : 9 SCLQuarantineEnabled : False BypassedSenders : {[email protected]} BypassedSenderDomains : {} Enabled : True ExternalMailEnabled : True InternalMailEnabled : False AdminDisplayName : ExchangeVersion : 0.1 (8.0.535.0) DistinguishedName : CN=ContentFilterConfig,CN=Message Hygie ne,CN=Transport Settings,CN=Company, CN=Microsoft Exchange,CN=Services,CN=Co nfiguration,DC=Company,DC=local Identity : ContentFilterConfig Guid : ObjectCategory : company.local/Configuration/Schema/m s-Exch-Message-Hygiene-Content-Filter-C onfig ObjectClass : {top, msExchAgent, msExchMessageHygiene ContentFilterConfig} WhenChanged : 24/02/2011 14:39:01 WhenCreated : 18/12/2008 15:57:06 OriginatingServer : server.company.local IsValid : True

Ive added that line using the shell command and its made no difference. Ive opened one of the emails in Outlook that has landed in the Junk Email folder, and it says "This message was marked as spam using the Outlook Junk E-Mail filter" at the top of the message. - Any help?

In the helpdesk configuration, it asks for the name of your exchange server(s) and the mailbox to use, and then you can verify the connection, which I have done. That bit is working as the emails send.

We don't have an Edge server at this college, everything is done using the same box. I suspect that the SCL rating is why some messages are getting transferred to Junk and some are not, even though they have the same email address, the content varies depending on the call contents. As ive only really used the console and not the shell im not very familiar with the shell commands, but seem to remember there is a test command to check the result before you action the command to implement the change. Is the above command in " marks a test command? All help with this is appreciated. Cheers

Can you explain what the ED/HT is and the SCL onmessages? Id prefer to set this rule globally. Many thanks

Hi Sukh, Yes, the helpdesk system uses the same domain, so my address is [email protected] and the helpdesk used [email protected] Our exchange is all hosted on a single server, so all of the roles are together. The server itself is Windows 2008 Standard Service Pack 2 and exchange is 2007 Service pack 1. The helpdesk system does have an exchange mailbox, and uses our exchange server to send the emails. Any help would be great! Thanks for your response!

Thanks Synack, I found that the "Remove Boot / Shutdown / Logon / Logoff status messages" policy was enabled in one of the many we seem to have running. It all needs a tidy up, but this issue is solved so thanks!!

So this is a weird one, when deploying managed software via GPO, the software does install on the clients, but when installing, it doesnt display the "Installing managed software" dialog box, we just get the usual windows blue background with the mouse cursor, plenty of HD activity, then when the software has installed the logon box appears. Any idea why we don't get the message (as it would be useful to see whats installing, and therefore the progress depending on which software package is being installed)? Many thanks R

I am trying to find out if there is a way to add an email address to a safe list in Exchange Server 2007 to ensure it doesn't end up in a users Junk folder in Outlook 2010. Its a strange issue as the email (its an automated message generated by our helpdesk system) is being sent from an internal account, hosted on our exchange server. To add to this, only some of the automated emails end up in the junk folder, some land in the inbox. I would like to add this for all users that use our exchange system, as it would be a near impossible task to manually add a safelist entry for the particular email address to everyones Outlook client. Any help on this would be greatly appreciated.

Hi Mate, So when you say 10gb per server, im presuming you mean a 10gb limit for staff, and a 10gb limit for students? We have a total disk usage of 194gb for staff and students combined. So at that amount, 20gb should provide about 10 days? Thanks for the reply.

Hi there, I am looking to enable previous versions on our staff and student files. Is there a way of calculating how much disk space will be used? I know Server states that it will be a minimum of 300mb just to enable the feature, but what else? Im presuming it uses the actual file as the base and then just saves the changes upto the limit you set? Any pointers or advice would be gratefully received. Cheers

Hi there We are currently implementing Exchange 2007 SP2 standard onto a Server 2003 Network. We have setup four mailbox servers (2 for staff, split into a-m and n-z, 1 for heavy users and 1 for students), then one hub transport server and one client access server (CAS). When creating a custom MSP file for the outlook 2007 deployment it asks me to name an Exchange server, but how can we name one as we have four mailbox servers, the server will depend on who is logged onto that machine at that time. I tried naming the CAS server, no joy. Has anyone come across this? All input/advice is appreciated. Cheers, Richard

Hi mate, the info above is really helpful. Did you manage to get the PDAs sync'ed back to the server?