Jeniffer K
2006-07-06 04:50:38 UTC
I've followed all steps outlined in Microsoft's whitepaper on how to set
this up, but its just not working for me...I will be a bit specific on how I
set this up, hopefully someone can jump in and help me out.
My scenario is as follows...Exchange Server 2003 SP2 running on windows 2003
SP1, one single server, no front-end server, back-end running on global
catalog server, the internal NetBios name is MAIN, i will call our internal
domain 'InternalDomain.Local' and external domain 'mail.ExternalDomain.com'
1) Installed RPC-Over-HTTP proxy Windows component
2) In ESM I checked off RPC-HTTP back end server and clicked Yes to auto
configure ports
3)In IIS under Directory Security of the RPC Virtual server, i unchecked
anonymous access and checked basic authentication
4) Verified registry values for NTDS port, here is the value under
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\NTDS\Parameters
Name: NSPI interface protocol sequences
Type: REG_MULTI_SZ
Value: ncacn_http:6004
6) Verified registry values for auto configured ports to use for by the
proxy server, i have the following
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\MSExchangeIS\ParametersSystem
Nname: Rpc/HTTP Port
Type: REG_DWORD
Value: 0x1771 (6001)
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\MSExchangeSA\Parameters
Name: HTTP Port
Type: REG_DWORD
Value: 0x1772 (6002)
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\MSExchangeSA\Parameters
Name: Rpc/HTTP NSPI Port
Type: REG_DWORD
Value: 0x1774 (6004)
7) Configure the RPC proxy server to use specified ports for RPC over HTTP,
i have the following
HKEY_LOCAL_MACHINE\Software\Microsoft\Rpc\RpcProxy
Name: ValidPorts
Type: REG_SZ
Value:
main:6001-6002;main.InternalDomain.Local:6001-6002;main:6004;main.InternalDomain.Local:6004
8) When running 'rpccfg /hd' it outputs the following
Server Name Port Settings
----------------------------------------------------
main 6001-6002 6004
main.InternalDomain.Local 6001-6002 6004
9) Installed Microsoft CA on the global catalog server and configured a new
Enterprise Root CA server
10) Obtained a SSL certificate from the above Root CA for IIS and applied
the SSL settings to all virtual server under the 'Default Web site'
11) Tested the new certificate from an outside machine accessing OWA over
HTTPS, test was successful
12) Configured that same outside machine to trust the above Root CA and when
accessing OWA i wasn't given any warnings
13) Created a new Outlook profile (running Outlook 2003 SP1) using the
following settings
*Microsoft Exchange Server: mail.InternalDomain.Local
*UserName: administrator
*Checked "Connect to my Exchange mailbox using HTTP
*Under connection settings...use this URL...mail.ExternalDomain.com
*Connect using SSL only is checked and grayed out
*Checked "Mutually authenticate the session when connecting with SSL"
*Principal name...msstd:ExternalDomain.com
*under Use this authentication i selected "Basic Authentication"
So finally at this point when I click 'Check Name' i get the 'connect to
mail.Internaldomain.Local' logon box, i enter for the UserName:
InternalDomain\administator then type the password...click OK and I get the
standard frustrating error "Outlook could not log on.....The connection to
the Microsoft Exchange Server is unavailable...etc.
This is sooo frustrating, i've spend countless hours trying to figure
this...I would really appreciate anyone's help, oh of course i rebooted the
server after setting it up
thanks loads
this up, but its just not working for me...I will be a bit specific on how I
set this up, hopefully someone can jump in and help me out.
My scenario is as follows...Exchange Server 2003 SP2 running on windows 2003
SP1, one single server, no front-end server, back-end running on global
catalog server, the internal NetBios name is MAIN, i will call our internal
domain 'InternalDomain.Local' and external domain 'mail.ExternalDomain.com'
1) Installed RPC-Over-HTTP proxy Windows component
2) In ESM I checked off RPC-HTTP back end server and clicked Yes to auto
configure ports
3)In IIS under Directory Security of the RPC Virtual server, i unchecked
anonymous access and checked basic authentication
4) Verified registry values for NTDS port, here is the value under
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\NTDS\Parameters
Name: NSPI interface protocol sequences
Type: REG_MULTI_SZ
Value: ncacn_http:6004
6) Verified registry values for auto configured ports to use for by the
proxy server, i have the following
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\MSExchangeIS\ParametersSystem
Nname: Rpc/HTTP Port
Type: REG_DWORD
Value: 0x1771 (6001)
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\MSExchangeSA\Parameters
Name: HTTP Port
Type: REG_DWORD
Value: 0x1772 (6002)
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\MSExchangeSA\Parameters
Name: Rpc/HTTP NSPI Port
Type: REG_DWORD
Value: 0x1774 (6004)
7) Configure the RPC proxy server to use specified ports for RPC over HTTP,
i have the following
HKEY_LOCAL_MACHINE\Software\Microsoft\Rpc\RpcProxy
Name: ValidPorts
Type: REG_SZ
Value:
main:6001-6002;main.InternalDomain.Local:6001-6002;main:6004;main.InternalDomain.Local:6004
8) When running 'rpccfg /hd' it outputs the following
Server Name Port Settings
----------------------------------------------------
main 6001-6002 6004
main.InternalDomain.Local 6001-6002 6004
9) Installed Microsoft CA on the global catalog server and configured a new
Enterprise Root CA server
10) Obtained a SSL certificate from the above Root CA for IIS and applied
the SSL settings to all virtual server under the 'Default Web site'
11) Tested the new certificate from an outside machine accessing OWA over
HTTPS, test was successful
12) Configured that same outside machine to trust the above Root CA and when
accessing OWA i wasn't given any warnings
13) Created a new Outlook profile (running Outlook 2003 SP1) using the
following settings
*Microsoft Exchange Server: mail.InternalDomain.Local
*UserName: administrator
*Checked "Connect to my Exchange mailbox using HTTP
*Under connection settings...use this URL...mail.ExternalDomain.com
*Connect using SSL only is checked and grayed out
*Checked "Mutually authenticate the session when connecting with SSL"
*Principal name...msstd:ExternalDomain.com
*under Use this authentication i selected "Basic Authentication"
So finally at this point when I click 'Check Name' i get the 'connect to
mail.Internaldomain.Local' logon box, i enter for the UserName:
InternalDomain\administator then type the password...click OK and I get the
standard frustrating error "Outlook could not log on.....The connection to
the Microsoft Exchange Server is unavailable...etc.
This is sooo frustrating, i've spend countless hours trying to figure
this...I would really appreciate anyone's help, oh of course i rebooted the
server after setting it up
thanks loads