RE: Outlook 2003 client

Hello TonyV,

Thank you for posting in the SBS newsgroup.

According to your description, I understand that the Outlook 2003 slow
send/receive email, when you are accessing the Exchange mailbox over 64K
link. If I have misunderstood your concern, please don't hesitate to let me
know.

First of all, please understand the speed of sending/receiving emails
depend on the speed of the network transport on the Internet, when you
remote access the Exchange Server mailbox through Internet connection.

To narrow down this issue, please answer and perform the below questions
and steps:

1. As you mentioned, "An Outlook 2003 user is accessing his Exchange
mailbox over 64K link. The outlook client is setup in cached mode but not
RPC/HTTP", can I assume the user access the Exchange by using Dial-up VPN
through 64K ISDN internet connection? If so, does the workstation join in
the SBS 2003 Domain?

2. Please configure the Outlook 2003 client to connect Exchange mailbox
using RPC over HTTP, and then check if it take effect. To do so, please
perform the below steps:

a. On the workstation, use the https://Router_Public_IP/remote or
https://SBS2003FQDN/remote link to access the RWW on the SBS 2003 Server.

b. After logon, please click "Configure Outlook via the Internet" link to
view the detailed steps to configure the problematic Outlook client to
connect Exchange mailbox using RPC over HTTP.

c. Please check if the issue can be reproduced.

3. Please disable any Anti-Virus or firewall software on the workstation,
and then check if it take effect.

4. Please also try the below steps to check if the issue can be
reproduced:

Step 1: Starting Outlook in Safe Mode
=========================
Safe Mode will disable all add-ins and extensions that will not start, as
well as any corrupted resources, files, registries and templates.

a. Close Outlook.

b. Click Start menu-> Run, type "Outlook /Safe" (without the quotation
marks and there is a space between Outlook and /Safe) in the Open box and
press Enter.

If issue still persists in safe mode, please perform the next step.

Step 2: Creating a new Outlook profile
==========================
Please use the following method to create a new profile to perform a test:

a. Close Outlook.

b. Click Start menu-> Control Panel. If Control Panel is not in Classic
View, click Switch to Classic View, and then double-click the Mail icon.

c. Click Show Profiles and then click Add. In the New Profile dialog box,
type a descriptive name for the new profile in the Profile Name box, and
then click OK.

d. On the pop-up "E-mail Accounts", choose "add a new e-mail account",
click next.

e. Choose the type of your account, click next.

f. Input the corresponding info of the mail account, click Next, click
Finish.

g. On the "Mail" box, click the "Prompt for a profile to be used" option
and click OK. This way, you will be prompted for a profile when starting
Outlook.

For more information, please refer to the article:

829918 How to create a new e-mail profile in Outlook 2003
http://support.microsoft.com/?id=829918

Start Outlook with the new profile to test the issue again. Is the issue
resolved?

I am appreciated your time and cooperation. If anything is unclear, please
feel free to let me know. I am looking forward to hearing from you.

Best regards,

Nathan Liu (MSFT)
Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security
================================================== ====
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities...s/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.
================================================== ====
This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------
>From: "TonyV" <>
>Newsgroups: microsoft.public.windows.server.sbs
>Subject: Outlook 2003 client
>Date: Thu, 11 Aug 2005 16:14:40 +0200
>Organization: unused
>Lines: 19
>Message-ID: <>
>NNTP-Posting-Host: proxy.storm.co.za
>X-Trace: ctb-nnrp2.saix.net 1123769686 16256 196.22.192.24 (11 Aug 2005
14:14:46 GMT)
>X-Complaints-To:
>NNTP-Posting-Date: 11 Aug 2005 14:14:46 GMT
>X-Priority: 3
>X-MSMail-Priority: Normal
>X-Newsreader: Microsoft Outlook Express 6.00.2900.2180
>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
>X-RFC2646: Format=Flowed; Original
>Cache-Post-Path: proxy.jhb.stormnet.co.za!
>X-Cache: nntpcache 3.0.1 (see http://www.nntpcache.org/)
>Path:
TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP08.phx.gbl!newsfee d00.sul.t-online.de!t-onli
ne.de!tsicnews.teliasonera.com!ctb-nntp1.saix.net!not-for-mail
>Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:143389
>X-Tomcat-NG: microsoft.public.windows.server.sbs
>
>An Outlook 2003 user is accessing his Exchange mailbox over 64K link. The
>outlook client is setup in cached mode but not RPC/HTTP.
>He can send and receive mail, but is extremely slow as it shows a
>popup window that says 'Outlook is trying to retrieve data from the
>MSExchange server Servername.domain.local'.
>The mail does eventually get sent/received, and attachment sizes are only
>about 50kb (if any).
>
>This even happens when there is no other users on the line.
>I saw it once trying to syncronise the SENT items, and took about 2
minutes.
>
>I can't figure out why it is so slow. How do I fault find this?
>Please advise.
>
>
>
>
>
>
>

Hi TonyV,

Thank you for your kind reply.

As you mentioned, can I assume your network topology like the below
description:
(Branch office) problematic user <-> Router <-> 64K link <-> Router <-> SBS
2003 / ISA Server <-> Switch <-> LAN users (main office)

For your question: I had a look at the certificate status on the SBS Server
and it shows 'The CA root certificate is not trusted because it is not in
the trusted root certification authorities store'. How do I fix this?

Answer: Please understand this message is anticipation, since we need to
access the RWW with SSL, so we need the certificate. If we don't have
install the certificate in the Trusted Root Certification Authorities
store, the message will display. Please click 'Install Certificate' button,
in the next page, click Next, then choose the default "Automatically select
the certificate store based on the type of certificate" option, click Next,
then click Finish. In the Security Warning dialog box, click Yes. You
should then be able to see the RWW logon page.

Question 2: Does the user have to be a member of the RWW security group to
run Outlook in RPC/HTTP mode?

Answer: It is not necessary for the user must be a member of the RWW
security group to run Outlook in RPC/HTTP mode, but for SBS 2003 Server, if
we use the four default User template to create new user, and the new user
account is a member of the Remote Web Workplace Users security group by
default. In addition, we can follow the detailed steps to configure the
Outlook client to connect Exchange mailbox using RPC over HTTP, after we
logon the RWW and click the "Configure Outlook via the Internet" link.

I am appreciated your time and cooperation. If anything is unclear, please
feel free to let me know. I am looking forward to hearing from you.

Best regards,

Nathan Liu (MSFT)
Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security
================================================== ====
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities...s/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.
================================================== ====
This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------
>From: "TonyV" <>
>Newsgroups: microsoft.public.windows.server.sbs
>Subject: Re: Outlook 2003 client
>Date: Mon, 15 Aug 2005 18:37:28 +0200
>Organization: unused
>Lines: 199
>Message-ID: <>
>References: <>
<>
>NNTP-Posting-Host: proxy.storm.co.za
>X-Trace: ctb-nnrp2.saix.net 1124123848 13999 196.22.192.24 (15 Aug 2005
16:37:28 GMT)
>X-Complaints-To:
>NNTP-Posting-Date: 15 Aug 2005 16:37:28 GMT
>X-Newsreader: Microsoft Outlook Express 6.00.2900.2180
>X-RFC2646: Format=Flowed; Original
>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
>Cache-Post-Path: proxy.jhb.stormnet.co.za!
>X-Cache: nntpcache 3.0.1 (see http://www.nntpcache.org/)
>Path:
TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP08.phx.gbl!newsfee d00.sul.t-online.de!t-onli
ne.de!border2.nntp.dca.giganews.com!nntp.giganews. com!nx02.iad01.newshosting
..com!newshosting.com!ctb-nntp1.saix.net!not-for-mail
>Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:144504
>X-Tomcat-NG: microsoft.public.windows.server.sbs
>
>The 64k link I'm talking about is permanent between 2 cities (non-VPN). The
>Outlook user works in a branch office of the company.
> He is on a different subnet than the SBS server, but on the same side of
>the ISA firewall than the other LAN users. Therefore there is only 2
routers
>between the user and the SBS server.
>This user is not mobile and never comes into the main office.
>
>I went ahead and configured RPC over HTTP anyway.
>When I accessed https://servername/remote to access RWW, I was prompted
>about the certificate.
>I had a look at the certificate status on the SBS Server and it shows 'The
>CA root certificate is not trusted because it is not in the trusted root
>certification authorities store'. How do I fix this?
>
>This raises another question....Does the user have to be a member of the
RWW
>security group to run Outllok in RPC/HTTP mode?
>
>
>
>""Nathan Liu [MSFT]"" <v-> wrote in message
>news:...
>> Hello TonyV,
>>
>> Thank you for posting in the SBS newsgroup.
>>
>> According to your description, I understand that the Outlook 2003 slow
>> send/receive email, when you are accessing the Exchange mailbox over 64K
>> link. If I have misunderstood your concern, please don't hesitate to let
>> me
>> know.
>>
>> First of all, please understand the speed of sending/receiving emails
>> depend on the speed of the network transport on the Internet, when you
>> remote access the Exchange Server mailbox through Internet connection.
>>
>> To narrow down this issue, please answer and perform the below questions
>> and steps:
>>
>> 1. As you mentioned, "An Outlook 2003 user is accessing his Exchange
>> mailbox over 64K link. The outlook client is setup in cached mode but not
>> RPC/HTTP", can I assume the user access the Exchange by using Dial-up VPN
>> through 64K ISDN internet connection? If so, does the workstation join in
>> the SBS 2003 Domain?
>>
>> 2. Please configure the Outlook 2003 client to connect Exchange mailbox
>> using RPC over HTTP, and then check if it take effect. To do so, please
>> perform the below steps:
>>
>> a. On the workstation, use the https://Router_Public_IP/remote or
>> https://SBS2003FQDN/remote link to access the RWW on the SBS 2003 Server.
>>
>> b. After logon, please click "Configure Outlook via the Internet" link
>> to
>> view the detailed steps to configure the problematic Outlook client to
>> connect Exchange mailbox using RPC over HTTP.
>>
>> c. Please check if the issue can be reproduced.
>>
>> 3. Please disable any Anti-Virus or firewall software on the
>> workstation,
>> and then check if it take effect.
>>
>> 4. Please also try the below steps to check if the issue can be
>> reproduced:
>>
>> Step 1: Starting Outlook in Safe Mode
>> =========================
>> Safe Mode will disable all add-ins and extensions that will not start, as
>> well as any corrupted resources, files, registries and templates.
>>
>> a. Close Outlook.
>>
>> b. Click Start menu-> Run, type "Outlook /Safe" (without the quotation
>> marks and there is a space between Outlook and /Safe) in the Open box and
>> press Enter.
>>
>> If issue still persists in safe mode, please perform the next step.
>>
>> Step 2: Creating a new Outlook profile
>> ==========================
>> Please use the following method to create a new profile to perform a
test:
>>
>> a. Close Outlook.
>>
>> b. Click Start menu-> Control Panel. If Control Panel is not in Classic
>> View, click Switch to Classic View, and then double-click the Mail icon.
>>
>> c. Click Show Profiles and then click Add. In the New Profile dialog box,
>> type a descriptive name for the new profile in the Profile Name box, and
>> then click OK.
>>
>> d. On the pop-up "E-mail Accounts", choose "add a new e-mail account",
>> click next.
>>
>> e. Choose the type of your account, click next.
>>
>> f. Input the corresponding info of the mail account, click Next, click
>> Finish.
>>
>> g. On the "Mail" box, click the "Prompt for a profile to be used" option
>> and click OK. This way, you will be prompted for a profile when starting
>> Outlook.
>>
>> For more information, please refer to the article:
>>
>> 829918 How to create a new e-mail profile in Outlook 2003
>> http://support.microsoft.com/?id=829918
>>
>> Start Outlook with the new profile to test the issue again. Is the issue
>> resolved?
>>
>> I am appreciated your time and cooperation. If anything is unclear,
please
>> feel free to let me know. I am looking forward to hearing from you.
>>
>> Best regards,
>>
>> Nathan Liu (MSFT)
>> Microsoft CSS Online Newsgroup Support
>>
>> Get Secure! - www.microsoft.com/security
>> ================================================== ====
>> This newsgroup only focuses on SBS technical issues. If you have issues
>> regarding other Microsoft products, you'd better post in the
corresponding
>> newsgroups so that they can be resolved in an efficient and timely
manner.
>> You can locate the newsgroup here:
>> http://www.microsoft.com/communities...s/default.aspx
>>
>> When opening a new thread via the web interface, we recommend you check
>> the
>> "Notify me of replies" box to receive e-mail notifications when there are
>> any updates in your thread. When responding to posts via your newsreader,
>> please "Reply to Group" so that others may learn and benefit from your
>> issue.
>>
>> Microsoft engineers can only focus on one issue per thread. Although we
>> provide other information for your reference, we recommend you post
>> different incidents in different threads to keep the thread clean. In
>> doing
>> so, it will ensure your issues are resolved in a timely manner.
>>
>> For urgent issues, you may want to contact Microsoft CSS directly. Please
>> check http://support.microsoft.com for regional support phone numbers.
>>
>> Any input or comments in this thread are highly appreciated.
>> ================================================== ====
>> This posting is provided "AS IS" with no warranties, and confers no
>> rights.
>>
>> --------------------
>>>From: "TonyV" <>
>>>Newsgroups: microsoft.public.windows.server.sbs
>>>Subject: Outlook 2003 client
>>>Date: Thu, 11 Aug 2005 16:14:40 +0200
>>>Organization: unused
>>>Lines: 19
>>>Message-ID: <>
>>>NNTP-Posting-Host: proxy.storm.co.za
>>>X-Trace: ctb-nnrp2.saix.net 1123769686 16256 196.22.192.24 (11 Aug 2005
>> 14:14:46 GMT)
>>>X-Complaints-To:
>>>NNTP-Posting-Date: 11 Aug 2005 14:14:46 GMT
>>>X-Priority: 3
>>>X-MSMail-Priority: Normal
>>>X-Newsreader: Microsoft Outlook Express 6.00.2900.2180
>>>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
>>>X-RFC2646: Format=Flowed; Original
>>>Cache-Post-Path: proxy.jhb.stormnet.co.za!
>>>X-Cache: nntpcache 3.0.1 (see http://www.nntpcache.org/)
>>>Path:
>>
TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP08.phx.gbl!newsfee d00.sul.t-online.de!t-onli
>> ne.de!tsicnews.teliasonera.com!ctb-nntp1.saix.net!not-for-mail
>>>Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:143389
>>>X-Tomcat-NG: microsoft.public.windows.server.sbs
>>>
>>>An Outlook 2003 user is accessing his Exchange mailbox over 64K link.
The
>>>outlook client is setup in cached mode but not RPC/HTTP.
>>>He can send and receive mail, but is extremely slow as it shows a
>>>popup window that says 'Outlook is trying to retrieve data from the
>>>MSExchange server Servername.domain.local'.
>>>The mail does eventually get sent/received, and attachment sizes are only
>>>about 50kb (if any).
>>>
>>>This even happens when there is no other users on the line.
>>>I saw it once trying to syncronise the SENT items, and took about 2
>> minutes.
>>>
>>>I can't figure out why it is so slow. How do I fault find this?
>>>Please advise.
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>
>
>
>
>

Hi Nathan,
Thank you for the reply.

Your latest assumption of the network topology is correct.

When I initially ran CEICW, I created my own web server certificate:
remote.domain.local.

While following the steps to configure Outlook for RPC/HTTP, the install
notes tells me to enter https://remote.domain.local/remote in my Internet
Explorer address bar. After doing that it returns the following error:

Network Access Message: The page cannot be displayed
Technical Information (for Support personnel)
• Error Code: 502 Proxy Error. The host was not found.(11001)
• IP Address: 192.168.1.13
• Date: 18/08/2005 15:52:52
• Server: servername.company.local
Source: proxy

However, when I type https://domain.local/remote, I get the ‘Security Alert‘
window to view the certificate. The warning is ‘The name on the security
certificate is invalid or does not match the name of the site’. When I click
to view the certificate, it is one named ‘publishing.domain.local’ and not
‘remote.domain.local’.

Even after installing ‘publishing.domain.local’ certificate, it still
prompts me the same ‘Security Alert’ window the next time I log on.

On the SBS server I have both ‘remote.domain.local’ and
‘publishing.domain.local’ certificates installed in the ‘Personal’ and
‘Trusted Root Certification Authorities’ folders of Certificates snap-in
(MMC).

1) How do I get https://remote.domain.local/remote to work?
2) Was I right in creating the certificate to be ‘remote.domain.local’, or
should it rather be ‘remote.domain.com’? I ask this as some users would like
to use RPC/HTTP from the Internet in the near future.
3) Where does this ‘publishing.domain.local’ fit into the picture?
4) I am also quite curious to know how RPC/HTTP will improve
performance…does it synchronize less or simply communicate thinner to the
server?
5) Do I have to get my ISP to create an A-record for ‘remote.domain.com’?

I am quite confused now, please advise.
Many thanks.


""Nathan Liu [MSFT]"" wrote:

> Hi TonyV,
>
> Thank you for your kind reply.
>
> As you mentioned, can I assume your network topology like the below
> description:
> (Branch office) problematic user <-> Router <-> 64K link <-> Router <-> SBS
> 2003 / ISA Server <-> Switch <-> LAN users (main office)
>
> For your question: I had a look at the certificate status on the SBS Server
> and it shows 'The CA root certificate is not trusted because it is not in
> the trusted root certification authorities store'. How do I fix this?
>
> Answer: Please understand this message is anticipation, since we need to
> access the RWW with SSL, so we need the certificate. If we don't have
> install the certificate in the Trusted Root Certification Authorities
> store, the message will display. Please click 'Install Certificate' button,
> in the next page, click Next, then choose the default "Automatically select
> the certificate store based on the type of certificate" option, click Next,
> then click Finish. In the Security Warning dialog box, click Yes. You
> should then be able to see the RWW logon page.
>
> Question 2: Does the user have to be a member of the RWW security group to
> run Outlook in RPC/HTTP mode?
>
> Answer: It is not necessary for the user must be a member of the RWW
> security group to run Outlook in RPC/HTTP mode, but for SBS 2003 Server, if
> we use the four default User template to create new user, and the new user
> account is a member of the Remote Web Workplace Users security group by
> default. In addition, we can follow the detailed steps to configure the
> Outlook client to connect Exchange mailbox using RPC over HTTP, after we
> logon the RWW and click the "Configure Outlook via the Internet" link.
>
> I am appreciated your time and cooperation. If anything is unclear, please
> feel free to let me know. I am looking forward to hearing from you.
>
> Best regards,
>
> Nathan Liu (MSFT)
> Microsoft CSS Online Newsgroup Support
>
> Get Secure! - www.microsoft.com/security
> ================================================== ====
> This newsgroup only focuses on SBS technical issues. If you have issues
> regarding other Microsoft products, you'd better post in the corresponding
> newsgroups so that they can be resolved in an efficient and timely manner.
> You can locate the newsgroup here:
> http://www.microsoft.com/communities...s/default.aspx
>
> When opening a new thread via the web interface, we recommend you check the
> "Notify me of replies" box to receive e-mail notifications when there are
> any updates in your thread. When responding to posts via your newsreader,
> please "Reply to Group" so that others may learn and benefit from your
> issue.
>
> Microsoft engineers can only focus on one issue per thread. Although we
> provide other information for your reference, we recommend you post
> different incidents in different threads to keep the thread clean. In doing
> so, it will ensure your issues are resolved in a timely manner.
>
> For urgent issues, you may want to contact Microsoft CSS directly. Please
> check http://support.microsoft.com for regional support phone numbers.
>
> Any input or comments in this thread are highly appreciated.
> ================================================== ====
> This posting is provided "AS IS" with no warranties, and confers no rights.
>
> --------------------
> >From: "TonyV" <>
> >Newsgroups: microsoft.public.windows.server.sbs
> >Subject: Re: Outlook 2003 client
> >Date: Mon, 15 Aug 2005 18:37:28 +0200
> >Organization: unused
> >Lines: 199
> >Message-ID: <>
> >References: <>
> <>
> >NNTP-Posting-Host: proxy.storm.co.za
> >X-Trace: ctb-nnrp2.saix.net 1124123848 13999 196.22.192.24 (15 Aug 2005
> 16:37:28 GMT)
> >X-Complaints-To:
> >NNTP-Posting-Date: 15 Aug 2005 16:37:28 GMT
> >X-Newsreader: Microsoft Outlook Express 6.00.2900.2180
> >X-RFC2646: Format=Flowed; Original
> >X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
> >Cache-Post-Path: proxy.jhb.stormnet.co.za!
> >X-Cache: nntpcache 3.0.1 (see http://www.nntpcache.org/)
> >Path:
> TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP08.phx.gbl!newsfee d00.sul.t-online.de!t-onli
> ne.de!border2.nntp.dca.giganews.com!nntp.giganews. com!nx02.iad01.newshosting
> .com!newshosting.com!ctb-nntp1.saix.net!not-for-mail
> >Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:144504
> >X-Tomcat-NG: microsoft.public.windows.server.sbs
> >
> >The 64k link I'm talking about is permanent between 2 cities (non-VPN). The
> >Outlook user works in a branch office of the company.
> > He is on a different subnet than the SBS server, but on the same side of
> >the ISA firewall than the other LAN users. Therefore there is only 2
> routers
> >between the user and the SBS server.
> >This user is not mobile and never comes into the main office.
> >
> >I went ahead and configured RPC over HTTP anyway.
> >When I accessed https://servername/remote to access RWW, I was prompted
> >about the certificate.
> >I had a look at the certificate status on the SBS Server and it shows 'The
> >CA root certificate is not trusted because it is not in the trusted root
> >certification authorities store'. How do I fix this?
> >
> >This raises another question....Does the user have to be a member of the
> RWW
> >security group to run Outllok in RPC/HTTP mode?
> >
> >
> >
> >""Nathan Liu [MSFT]"" <v-> wrote in message
> >news:...
> >> Hello TonyV,
> >>
> >> Thank you for posting in the SBS newsgroup.
> >>
> >> According to your description, I understand that the Outlook 2003 slow
> >> send/receive email, when you are accessing the Exchange mailbox over 64K
> >> link. If I have misunderstood your concern, please don't hesitate to let
> >> me
> >> know.
> >>
> >> First of all, please understand the speed of sending/receiving emails
> >> depend on the speed of the network transport on the Internet, when you
> >> remote access the Exchange Server mailbox through Internet connection.
> >>
> >> To narrow down this issue, please answer and perform the below questions
> >> and steps:
> >>
> >> 1. As you mentioned, "An Outlook 2003 user is accessing his Exchange
> >> mailbox over 64K link. The outlook client is setup in cached mode but not
> >> RPC/HTTP", can I assume the user access the Exchange by using Dial-up VPN
> >> through 64K ISDN internet connection? If so, does the workstation join in
> >> the SBS 2003 Domain?
> >>
> >> 2. Please configure the Outlook 2003 client to connect Exchange mailbox
> >> using RPC over HTTP, and then check if it take effect. To do so, please
> >> perform the below steps:
> >>
> >> a. On the workstation, use the https://Router_Public_IP/remote or
> >> https://SBS2003FQDN/remote link to access the RWW on the SBS 2003 Server.
> >>
> >> b. After logon, please click "Configure Outlook via the Internet" link
> >> to
> >> view the detailed steps to configure the problematic Outlook client to
> >> connect Exchange mailbox using RPC over HTTP.
> >>
> >> c. Please check if the issue can be reproduced.
> >>
> >> 3. Please disable any Anti-Virus or firewall software on the
> >> workstation,
> >> and then check if it take effect.
> >>
> >> 4. Please also try the below steps to check if the issue can be
> >> reproduced:
> >>
> >> Step 1: Starting Outlook in Safe Mode
> >> =========================
> >> Safe Mode will disable all add-ins and extensions that will not start, as
> >> well as any corrupted resources, files, registries and templates.
> >>
> >> a. Close Outlook.
> >>
> >> b. Click Start menu-> Run, type "Outlook /Safe" (without the quotation
> >> marks and there is a space between Outlook and /Safe) in the Open box and
> >> press Enter.
> >>
> >> If issue still persists in safe mode, please perform the next step.
> >>
> >> Step 2: Creating a new Outlook profile
> >> ==========================
> >> Please use the following method to create a new profile to perform a
> test:
> >>
> >> a. Close Outlook.
> >>
> >> b. Click Start menu-> Control Panel. If Control Panel is not in Classic
> >> View, click Switch to Classic View, and then double-click the Mail icon.
> >>
> >> c. Click Show Profiles and then click Add. In the New Profile dialog box,
> >> type a descriptive name for the new profile in the Profile Name box, and
> >> then click OK.
> >>
> >> d. On the pop-up "E-mail Accounts", choose "add a new e-mail account",
> >> click next.
> >>
> >> e. Choose the type of your account, click next.
> >>
> >> f. Input the corresponding info of the mail account, click Next, click
> >> Finish.
> >>
> >> g. On the "Mail" box, click the "Prompt for a profile to be used" option
> >> and click OK. This way, you will be prompted for a profile when starting
> >> Outlook.
> >>
> >> For more information, please refer to the article:
> >>
> >> 829918 How to create a new e-mail profile in Outlook 2003
> >> http://support.microsoft.com/?id=829918
> >>
> >> Start Outlook with the new profile to test the issue again. Is the issue
> >> resolved?
> >>
> >> I am appreciated your time and cooperation. If anything is unclear,
> please
> >> feel free to let me know. I am looking forward to hearing from you.
> >>
> >> Best regards,
> >>
> >> Nathan Liu (MSFT)
> >> Microsoft CSS Online Newsgroup Support
> >>
> >> Get Secure! - www.microsoft.com/security
> >> ================================================== ====
> >> This newsgroup only focuses on SBS technical issues. If you have issues
> >> regarding other Microsoft products, you'd better post in the
> corresponding
> >> newsgroups so that they can be resolved in an efficient and timely
> manner.
> >> You can locate the newsgroup here:
> >> http://www.microsoft.com/communities...s/default.aspx
> >>
> >> When opening a new thread via the web interface, we recommend you check
> >> the
> >> "Notify me of replies" box to receive e-mail notifications when there are
> >> any updates in your thread. When responding to posts via your newsreader,
> >> please "Reply to Group" so that others may learn and benefit from your
> >> issue.
> >>
> >> Microsoft engineers can only focus on one issue per thread. Although we
> >> provide other information for your reference, we recommend you post
> >> different incidents in different threads to keep the thread clean. In
> >> doing
> >> so, it will ensure your issues are resolved in a timely manner.
> >>
> >> For urgent issues, you may want to contact Microsoft CSS directly. Please
> >> check http://support.microsoft.com for regional support phone numbers.
> >>
> >> Any input or comments in this thread are highly appreciated.
> >> ================================================== ====
> >> This posting is provided "AS IS" with no warranties, and confers no
> >> rights.
> >>
> >> --------------------
> >>>From: "TonyV" <>
> >>>Newsgroups: microsoft.public.windows.server.sbs
> >>>Subject: Outlook 2003 client
> >>>Date: Thu, 11 Aug 2005 16:14:40 +0200
> >>>Organization: unused
> >>>Lines: 19
> >>>Message-ID: <>
> >>>NNTP-Posting-Host: proxy.storm.co.za
> >>>X-Trace: ctb-nnrp2.saix.net 1123769686 16256 196.22.192.24 (11 Aug 2005
> >> 14:14:46 GMT)
> >>>X-Complaints-To:
> >>>NNTP-Posting-Date: 11 Aug 2005 14:14:46 GMT
> >>>X-Priority: 3
> >>>X-MSMail-Priority: Normal
> >>>X-Newsreader: Microsoft Outlook Express 6.00.2900.2180
> >>>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
> >>>X-RFC2646: Format=Flowed; Original
> >>>Cache-Post-Path: proxy.jhb.stormnet.co.za!
> >>>X-Cache: nntpcache 3.0.1 (see http://www.nntpcache.org/)
> >>>Path:
> >>
> TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP08.phx.gbl!newsfee d00.sul.t-online.de!t-onli
> >> ne.de!tsicnews.teliasonera.com!ctb-nntp1.saix.net!not-for-mail
> >>>Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:143389
> >>>X-Tomcat-NG: microsoft.public.windows.server.sbs
> >>>
> >>>An Outlook 2003 user is accessing his Exchange mailbox over 64K link.
> The
> >>>outlook client is setup in cached mode but not RPC/HTTP.
> >>>He can send and receive mail, but is extremely slow as it shows a
> >>>popup window that says 'Outlook is trying to retrieve data from the
> >>>MSExchange server Servername.domain.local'.
> >>>The mail does eventually get sent/received, and attachment sizes are only
> >>>about 50kb (if any).
> >>>
> >>>This even happens when there is no other users on the line.
> >>>I saw it once trying to syncronise the SENT items, and took about 2
> >> minutes.
> >>>
> >>>I can't figure out why it is so slow. How do I fault find this?
> >>>Please advise.
> >>>
> >>>
> >>>
> >>>
> >>>
> >>>
> >>>
> >>
> >
> >

> remote.domain.local. Nope, this won't work. It must be resolveable from
> the internet.

Remote.domain.com will work, so long as you have a DNS record for
remote.domain.com. Then https://remote.domain.com/remote will work.

If you have an existing record for mail.domain.com, you can use that for
your cert name, and https://mail.domain.com/remote for RWW. Even an IP will
work (if you have no registered domain name). The cert name would then be
the IP address, and you'd use https://ip_address/remote for RWW.

The FQDN on your cert must match whatever you use in the URL to access RWW,
or you get the certificate does not match condition. And the FQDN must
resolve to your public IP, hence the need for DNS record.

Once you get this straight by running the CEICW, the RPC/HTTP instructions
will change to reflect the correct information.

--
Les Connor [SBS Community Member - SBS MVP]
-----------------------------------------------------------
SBS Rocks !


"TonyV" <> wrote in message
news:E94E1E76-AE3C-4E62-ACFD-...
> Hi Nathan,
> Thank you for the reply.
>
> Your latest assumption of the network topology is correct.
>
> When I initially ran CEICW, I created my own web server certificate:
> remote.domain.local.
>
> While following the steps to configure Outlook for RPC/HTTP, the install
> notes tells me to enter https://remote.domain.local/remote in my Internet
> Explorer address bar. After doing that it returns the following error:
>
> Network Access Message: The page cannot be displayed
> Technical Information (for Support personnel)
> . Error Code: 502 Proxy Error. The host was not found.(11001)
> . IP Address: 192.168.1.13
> . Date: 18/08/2005 15:52:52
> . Server: servername.company.local
> Source: proxy
>
> However, when I type https://domain.local/remote, I get the 'Security
> Alert'
> window to view the certificate. The warning is 'The name on the security
> certificate is invalid or does not match the name of the site'. When I
> click
> to view the certificate, it is one named 'publishing.domain.local' and not
> 'remote.domain.local'.
>
> Even after installing 'publishing.domain.local' certificate, it still
> prompts me the same 'Security Alert' window the next time I log on.
>
> On the SBS server I have both 'remote.domain.local' and
> 'publishing.domain.local' certificates installed in the 'Personal' and
> 'Trusted Root Certification Authorities' folders of Certificates snap-in
> (MMC).
>
> 1) How do I get https://remote.domain.local/remote to work?
> 2) Was I right in creating the certificate to be 'remote.domain.local', or
> should it rather be 'remote.domain.com'? I ask this as some users would
> like
> to use RPC/HTTP from the Internet in the near future.
> 3) Where does this 'publishing.domain.local' fit into the picture?
> 4) I am also quite curious to know how RPC/HTTP will improve
> performance.does it synchronize less or simply communicate thinner to the
> server?
> 5) Do I have to get my ISP to create an A-record for 'remote.domain.com'?
>
> I am quite confused now, please advise.
> Many thanks.
>
>
> ""Nathan Liu [MSFT]"" wrote:
>
>> Hi TonyV,
>>
>> Thank you for your kind reply.
>>
>> As you mentioned, can I assume your network topology like the below
>> description:
>> (Branch office) problematic user <-> Router <-> 64K link <-> Router <->
>> SBS
>> 2003 / ISA Server <-> Switch <-> LAN users (main office)
>>
>> For your question: I had a look at the certificate status on the SBS
>> Server
>> and it shows 'The CA root certificate is not trusted because it is not in
>> the trusted root certification authorities store'. How do I fix this?
>>
>> Answer: Please understand this message is anticipation, since we need to
>> access the RWW with SSL, so we need the certificate. If we don't have
>> install the certificate in the Trusted Root Certification Authorities
>> store, the message will display. Please click 'Install Certificate'
>> button,
>> in the next page, click Next, then choose the default "Automatically
>> select
>> the certificate store based on the type of certificate" option, click
>> Next,
>> then click Finish. In the Security Warning dialog box, click Yes. You
>> should then be able to see the RWW logon page.
>>
>> Question 2: Does the user have to be a member of the RWW security group
>> to
>> run Outlook in RPC/HTTP mode?
>>
>> Answer: It is not necessary for the user must be a member of the RWW
>> security group to run Outlook in RPC/HTTP mode, but for SBS 2003 Server,
>> if
>> we use the four default User template to create new user, and the new
>> user
>> account is a member of the Remote Web Workplace Users security group by
>> default. In addition, we can follow the detailed steps to configure the
>> Outlook client to connect Exchange mailbox using RPC over HTTP, after we
>> logon the RWW and click the "Configure Outlook via the Internet" link.
>>
>> I am appreciated your time and cooperation. If anything is unclear,
>> please
>> feel free to let me know. I am looking forward to hearing from you.
>>
>> Best regards,
>>
>> Nathan Liu (MSFT)
>> Microsoft CSS Online Newsgroup Support
>>
>> Get Secure! - www.microsoft.com/security
>> ================================================== ====
>> This newsgroup only focuses on SBS technical issues. If you have issues
>> regarding other Microsoft products, you'd better post in the
>> corresponding
>> newsgroups so that they can be resolved in an efficient and timely
>> manner.
>> You can locate the newsgroup here:
>> http://www.microsoft.com/communities...s/default.aspx
>>
>> When opening a new thread via the web interface, we recommend you check
>> the
>> "Notify me of replies" box to receive e-mail notifications when there are
>> any updates in your thread. When responding to posts via your newsreader,
>> please "Reply to Group" so that others may learn and benefit from your
>> issue.
>>
>> Microsoft engineers can only focus on one issue per thread. Although we
>> provide other information for your reference, we recommend you post
>> different incidents in different threads to keep the thread clean. In
>> doing
>> so, it will ensure your issues are resolved in a timely manner.
>>
>> For urgent issues, you may want to contact Microsoft CSS directly. Please
>> check http://support.microsoft.com for regional support phone numbers.
>>
>> Any input or comments in this thread are highly appreciated.
>> ================================================== ====
>> This posting is provided "AS IS" with no warranties, and confers no
>> rights.
>>
>> --------------------
>> >From: "TonyV" <>
>> >Newsgroups: microsoft.public.windows.server.sbs
>> >Subject: Re: Outlook 2003 client
>> >Date: Mon, 15 Aug 2005 18:37:28 +0200
>> >Organization: unused
>> >Lines: 199
>> >Message-ID: <>
>> >References: <>
>> <>
>> >NNTP-Posting-Host: proxy.storm.co.za
>> >X-Trace: ctb-nnrp2.saix.net 1124123848 13999 196.22.192.24 (15 Aug 2005
>> 16:37:28 GMT)
>> >X-Complaints-To:
>> >NNTP-Posting-Date: 15 Aug 2005 16:37:28 GMT
>> >X-Newsreader: Microsoft Outlook Express 6.00.2900.2180
>> >X-RFC2646: Format=Flowed; Original
>> >X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
>> >Cache-Post-Path: proxy.jhb.stormnet.co.za!
>> >X-Cache: nntpcache 3.0.1 (see http://www.nntpcache.org/)
>> >Path:
>> TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP08.phx.gbl!newsfee d00.sul.t-online.de!t-onli
>> ne.de!border2.nntp.dca.giganews.com!nntp.giganews. com!nx02.iad01.newshosting
>> .com!newshosting.com!ctb-nntp1.saix.net!not-for-mail
>> >Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:144504
>> >X-Tomcat-NG: microsoft.public.windows.server.sbs
>> >
>> >The 64k link I'm talking about is permanent between 2 cities (non-VPN).
>> >The
>> >Outlook user works in a branch office of the company.
>> > He is on a different subnet than the SBS server, but on the same side
>> > of
>> >the ISA firewall than the other LAN users. Therefore there is only 2
>> routers
>> >between the user and the SBS server.
>> >This user is not mobile and never comes into the main office.
>> >
>> >I went ahead and configured RPC over HTTP anyway.
>> >When I accessed https://servername/remote to access RWW, I was prompted
>> >about the certificate.
>> >I had a look at the certificate status on the SBS Server and it shows
>> >'The
>> >CA root certificate is not trusted because it is not in the trusted root
>> >certification authorities store'. How do I fix this?
>> >
>> >This raises another question....Does the user have to be a member of the
>> RWW
>> >security group to run Outllok in RPC/HTTP mode?
>> >
>> >
>> >
>> >""Nathan Liu [MSFT]"" <v-> wrote in message
>> >news:...
>> >> Hello TonyV,
>> >>
>> >> Thank you for posting in the SBS newsgroup.
>> >>
>> >> According to your description, I understand that the Outlook 2003 slow
>> >> send/receive email, when you are accessing the Exchange mailbox over
>> >> 64K
>> >> link. If I have misunderstood your concern, please don't hesitate to
>> >> let
>> >> me
>> >> know.
>> >>
>> >> First of all, please understand the speed of sending/receiving emails
>> >> depend on the speed of the network transport on the Internet, when you
>> >> remote access the Exchange Server mailbox through Internet connection.
>> >>
>> >> To narrow down this issue, please answer and perform the below
>> >> questions
>> >> and steps:
>> >>
>> >> 1. As you mentioned, "An Outlook 2003 user is accessing his
>> >> Exchange
>> >> mailbox over 64K link. The outlook client is setup in cached mode but
>> >> not
>> >> RPC/HTTP", can I assume the user access the Exchange by using Dial-up
>> >> VPN
>> >> through 64K ISDN internet connection? If so, does the workstation join
>> >> in
>> >> the SBS 2003 Domain?
>> >>
>> >> 2. Please configure the Outlook 2003 client to connect Exchange
>> >> mailbox
>> >> using RPC over HTTP, and then check if it take effect. To do so,
>> >> please
>> >> perform the below steps:
>> >>
>> >> a. On the workstation, use the https://Router_Public_IP/remote or
>> >> https://SBS2003FQDN/remote link to access the RWW on the SBS 2003
>> >> Server.
>> >>
>> >> b. After logon, please click "Configure Outlook via the Internet"
>> >> link
>> >> to
>> >> view the detailed steps to configure the problematic Outlook client to
>> >> connect Exchange mailbox using RPC over HTTP.
>> >>
>> >> c. Please check if the issue can be reproduced.
>> >>
>> >> 3. Please disable any Anti-Virus or firewall software on the
>> >> workstation,
>> >> and then check if it take effect.
>> >>
>> >> 4. Please also try the below steps to check if the issue can be
>> >> reproduced:
>> >>
>> >> Step 1: Starting Outlook in Safe Mode
>> >> =========================
>> >> Safe Mode will disable all add-ins and extensions that will not start,
>> >> as
>> >> well as any corrupted resources, files, registries and templates.
>> >>
>> >> a. Close Outlook.
>> >>
>> >> b. Click Start menu-> Run, type "Outlook /Safe" (without the quotation
>> >> marks and there is a space between Outlook and /Safe) in the Open box
>> >> and
>> >> press Enter.
>> >>
>> >> If issue still persists in safe mode, please perform the next step.
>> >>
>> >> Step 2: Creating a new Outlook profile
>> >> ==========================
>> >> Please use the following method to create a new profile to perform a
>> test:
>> >>
>> >> a. Close Outlook.
>> >>
>> >> b. Click Start menu-> Control Panel. If Control Panel is not in
>> >> Classic
>> >> View, click Switch to Classic View, and then double-click the Mail
>> >> icon.
>> >>
>> >> c. Click Show Profiles and then click Add. In the New Profile dialog
>> >> box,
>> >> type a descriptive name for the new profile in the Profile Name box,
>> >> and
>> >> then click OK.
>> >>
>> >> d. On the pop-up "E-mail Accounts", choose "add a new e-mail account",
>> >> click next.
>> >>
>> >> e. Choose the type of your account, click next.
>> >>
>> >> f. Input the corresponding info of the mail account, click Next, click
>> >> Finish.
>> >>
>> >> g. On the "Mail" box, click the "Prompt for a profile to be used"
>> >> option
>> >> and click OK. This way, you will be prompted for a profile when
>> >> starting
>> >> Outlook.
>> >>
>> >> For more information, please refer to the article:
>> >>
>> >> 829918 How to create a new e-mail profile in Outlook 2003
>> >> http://support.microsoft.com/?id=829918
>> >>
>> >> Start Outlook with the new profile to test the issue again. Is the
>> >> issue
>> >> resolved?
>> >>
>> >> I am appreciated your time and cooperation. If anything is unclear,
>> please
>> >> feel free to let me know. I am looking forward to hearing from you.
>> >>
>> >> Best regards,
>> >>
>> >> Nathan Liu (MSFT)
>> >> Microsoft CSS Online Newsgroup Support
>> >>
>> >> Get Secure! - www.microsoft.com/security
>> >> ================================================== ====
>> >> This newsgroup only focuses on SBS technical issues. If you have
>> >> issues
>> >> regarding other Microsoft products, you'd better post in the
>> corresponding
>> >> newsgroups so that they can be resolved in an efficient and timely
>> manner.
>> >> You can locate the newsgroup here:
>> >> http://www.microsoft.com/communities...s/default.aspx
>> >>
>> >> When opening a new thread via the web interface, we recommend you
>> >> check
>> >> the
>> >> "Notify me of replies" box to receive e-mail notifications when there
>> >> are
>> >> any updates in your thread. When responding to posts via your
>> >> newsreader,
>> >> please "Reply to Group" so that others may learn and benefit from your
>> >> issue.
>> >>
>> >> Microsoft engineers can only focus on one issue per thread. Although
>> >> we
>> >> provide other information for your reference, we recommend you post
>> >> different incidents in different threads to keep the thread clean. In
>> >> doing
>> >> so, it will ensure your issues are resolved in a timely manner.
>> >>
>> >> For urgent issues, you may want to contact Microsoft CSS directly.
>> >> Please
>> >> check http://support.microsoft.com for regional support phone numbers.
>> >>
>> >> Any input or comments in this thread are highly appreciated.
>> >> ================================================== ====
>> >> This posting is provided "AS IS" with no warranties, and confers no
>> >> rights.
>> >>
>> >> --------------------
>> >>>From: "TonyV" <>
>> >>>Newsgroups: microsoft.public.windows.server.sbs
>> >>>Subject: Outlook 2003 client
>> >>>Date: Thu, 11 Aug 2005 16:14:40 +0200
>> >>>Organization: unused
>> >>>Lines: 19
>> >>>Message-ID: <>
>> >>>NNTP-Posting-Host: proxy.storm.co.za
>> >>>X-Trace: ctb-nnrp2.saix.net 1123769686 16256 196.22.192.24 (11 Aug
>> >>>2005
>> >> 14:14:46 GMT)
>> >>>X-Complaints-To:
>> >>>NNTP-Posting-Date: 11 Aug 2005 14:14:46 GMT
>> >>>X-Priority: 3
>> >>>X-MSMail-Priority: Normal
>> >>>X-Newsreader: Microsoft Outlook Express 6.00.2900.2180
>> >>>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
>> >>>X-RFC2646: Format=Flowed; Original
>> >>>Cache-Post-Path: proxy.jhb.stormnet.co.za!
>> >>>X-Cache: nntpcache 3.0.1 (see http://www.nntpcache.org/)
>> >>>Path:
>> >>
>> TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP08.phx.gbl!newsfee d00.sul.t-online.de!t-onli
>> >> ne.de!tsicnews.teliasonera.com!ctb-nntp1.saix.net!not-for-mail
>> >>>Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:143389
>> >>>X-Tomcat-NG: microsoft.public.windows.server.sbs
>> >>>
>> >>>An Outlook 2003 user is accessing his Exchange mailbox over 64K link.
>> The
>> >>>outlook client is setup in cached mode but not RPC/HTTP.
>> >>>He can send and receive mail, but is extremely slow as it shows a
>> >>>popup window that says 'Outlook is trying to retrieve data from the
>> >>>MSExchange server Servername.domain.local'.
>> >>>The mail does eventually get sent/received, and attachment sizes are
>> >>>only
>> >>>about 50kb (if any).
>> >>>
>> >>>This even happens when there is no other users on the line.
>> >>>I saw it once trying to syncronise the SENT items, and took about 2
>> >> minutes.
>> >>>
>> >>>I can't figure out why it is so slow. How do I fault find this?
>> >>>Please advise.
>> >>>
>> >>>
>> >>>
>> >>>
>> >>>
>> >>>
>> >>>
>> >>
>> >
>> >

Hi TonyV,

Thank you for your kindly update.

1. Question: As you mentioned, you have tested to un-checked my 'Deleted
Items' folder from the Send/Receive group for my account, but you can see
it newly deleted items in my Deleted folder when accessing my mailbox
through OWA after this setting was applied.

Answer: Based on my testing, this issue is expectation. When the Exchange
synchronize with the Outlook, and we un-checked the 'Deleted Items' folder
from the Send/Receive group for your account in the Outlook Send/Receive
settings. Since the Exchange cannot find some emails in the other items of
the Outlook, it will move these specific items to 'Deleted Items', this
process will avoid the conflict in the synchronization.

2. Question: Another question on RPC/HTTP....When a local LAN user takes
his notebook on an overseas trip and want to use RPC/HTTP feature, would he
have to remember to enable this feature for the trip only, or should it be
a permanent setting?

Answer: Yes, if the specific user would like to use the RPC/HTTP feature,
he must enable this function in his Outlook.

3. Question: When I type https://remote.domain.com/remote in my browser
from a PC on the
LAN, I get the following response: Error Code: 502 Proxy Error. The host
was not found (11001).

I this a normal response because I'm on the LAN? I don't see why I should
have to enter any DNS settings manually (not that I really know where in
SBS2003 to enter those values). Shouldn't CEICW do that automatically?

Answer: This issue is not a normal response, please check the web proxy's
settings on the problematic PC. if you have DHCP server on your network,
you don't need to enter any DNS settings manually, when you run the CEICW,
it will automatically configure the DHCP, DNS, etc. On the SBS Server, if
you use the http://localhost/remote link to access the RWW, what's the
result?

Regarding the 502 proxy error, I assume that you are trying to access the
RWW site behind an ISA server. This error was reported by your local ISA
server. When we use the ISA server as a proxy, only the standard SSL port
is allowed. If you want to access a SSL site with non-standard port number,
you need to modify the registry on the ISA server. For the detailed
information, please refer to the following KB article:

283284 Blank Page or Page Cannot Be Displayed When You View SSL Sites
Through
http://support.microsoft.com/?id=283284

To get more information, please refer to the below document:

Getting Started: Windows Small Business Server 2003 with SP1
http://go.microsoft.com/fwlink/?linkid=46574

Windows Small Business Server 2003 Troubleshooting
http://go.microsoft.com/fwlink/?LinkId=49937

Connecting Mobile and Remote Users
http://go.microsoft.com/fwlink/?LinkId=49918

I am appreciated your time and cooperation. If anything is unclear, please
feel free to let me know. I am looking forward to hearing from you.

Best regards,

Nathan Liu (MSFT)
Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security
================================================== ====
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities...s/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.
================================================== ====
This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------
>From: "TonyV" <>
>Newsgroups: microsoft.public.windows.server.sbs
>Subject: Re: Outlook 2003 client
>Date: Tue, 23 Aug 2005 17:49:56 +0200
>Organization: unused
>Lines: 587
>Message-ID: <>
>References: <>
<>
<>
<>
<E94E1E76-AE3C-4E62-ACFD->
<>
>NNTP-Posting-Host: proxy.storm.co.za
>X-Trace: ctb-nnrp2.saix.net 1124812202 19775 196.22.192.24 (23 Aug 2005
15:50:02 GMT)
>X-Complaints-To:
>NNTP-Posting-Date: 23 Aug 2005 15:50:02 GMT
>X-Priority: 3
>X-MSMail-Priority: Normal
>X-Newsreader: Microsoft Outlook Express 6.00.2900.2180
>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
>X-RFC2646: Format=Flowed; Original
>Cache-Post-Path: proxy.jhb.stormnet.co.za!
>X-Cache: nntpcache 3.0.1 (see http://www.nntpcache.org/)
>Path:
TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP08.phx.gbl!newsfee d00.sul.t-online.de!t-onli
ne.de!border2.nntp.dca.giganews.com!nntp.giganews. com!nx01.iad01.newshosting
.com!newshosting.com!ctb-nntp1.saix.net!not-for-mail
>Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:147021
>X-Tomcat-NG: microsoft.public.windows.server.sbs
>
>Thanks for the input Les & Nathan,
>
>After reading a doc I found at
>http://www.microsoft.com/technet/pro...linettraf.mspx,

>regarding client network traffic with Exchange 2003, I now believe that
>RPC/HTTP will generate even more traffic than normal RPC between client &
>server over my 64k line. Therefore I don't see the benefit of RPC/HTTP
when
>the client is on the same side of the ISA firewall as the other LAN users.
>
>Downloading headers frustrates my users.
>I think that synching the headers of Sent & Deleted items larger than 50k
>should work out a bit better.
>
>I did a little test on my own Outlook2003 client. In Send/Receive settings
I
>un-checked my 'Deleted Items' folder from the Send/Receive group for my
>account, but it seems as if it is still being synchronised as I can see
>newly deleted items in my Deleted folder when accessing my mailbox through
>OWA after this setting was applied. I think I need a deeper understanding
>here, please advise....
>
>In the meantime I am encouraging users to keep personal email with
>attachments to a minimum. A bit of user training is forming part of my
>solution.
>We are planning a Citrix implementation later this year. I think it would
>really enhance the user experience to let Outlook run on the Terminal
server
>to clear up the line congestion issue.
>
>Another question on RPC/HTTP....When a local LAN user takes his notebook
on
>an overseas trip and want to use RPC/HTTP feature, would he have to
remember
>to enable this feature for the trip only, or should it be a permanent
>setting?
>
>When I type https://remote.domain.com/remote in my browser from a PC on
the
>LAN, I get the following response: Error Code: 502 Proxy Error. The host
was
>not found.(11001).
>I this a normal response because I'm on the LAN? I don't see why I should
>have to enter any DNS settings manually (not that I really know where in
>SBS2003 to enter those values). Shouldn't CEICW do that automatically?
>
>I am struggling to wrap my head around some of the SBS2003 concepts &
>issues, but I would like to undertand it properly.
>It seems that SBS2003 server is great when you know how to handle it.
>Your assistance & patients is greatly appreciated.
>
>
>
>
>
>
>""Nathan Liu [MSFT]"" <v-> wrote in message
>news:...
>> Hi TonyV,
>>
>> Thank you for your detailed reply.
>>
>> Also, many thanks for Les's great input.
>>
>> Question 1: How do I get https://remote.domain.local/remote to work? Was
I
>> right in creating the certificate to be 'remote.domain.local'?, or
>> should it rather be 'remote.domain.com'? I ask this as some users would
>> like to use RPC/HTTP from the Internet in the near future.
>>
>> Answer: Les is right on target, when we are running the CEICW, we need
>> type a Fully Qualified Domain Name (FQDN) on the Web Server Certificate
>> page, since the remote.domain.local is the local domain name, it doesn't
>> work. So if you have an existing registral domain name, e.g.
>> remote.domain.com, you can type it. Alternatively, if you don't have an
>> existing registral domain name, you can type the Public IP address of the
>> SBS Server.
>>
>> Question 2: Where does this a publishing.domain.local fit into the
>> picture?
>>
>> Answer: Since you have a publishing.domain.local certificate, I assume
>> you
>> have installed the ISA Server. In the SBS 2K3 with ISA installed
scenario,
>> when you run CEICW, you are prompted to 'Create a new Web server
>> certificate', the name you input there will be automatically be created
as
>> the certificate used by ISA (configured in the 'Incoming Web listener'.)
>> The System will also create another certificate named as
>> publishing.domain.local, this is used by IIS. For example, if you input
>> the
>> name 'remote.domain.com' in CEICW, CEICW will create the following 2
>> certificates: publishing.domain.local & remote.domain.com.
>> remote.domain.com is imported into ISA and publishing.domain.local is
>> imported to IIS Default Website.
>>
>> Question 3: Do I have to get my ISP to create an A-record for a
>> remote.domain.com?
>>
>> Answer: If you need to use the remote.domain.com as the FQDN in the
>> certificate, you need to contact the ISP to create an A-record for the
>> remote.domain.com.
>>
>> I am appreciated your time and cooperation. If anything is unclear,
please
>> feel free to let me know. I am looking forward to hearing from you.
>>
>> Best regards,
>>
>> Nathan Liu (MSFT)
>> Microsoft CSS Online Newsgroup Support
>>
>> Get Secure! - www.microsoft.com/security
>> ================================================== ====
>> This newsgroup only focuses on SBS technical issues. If you have issues
>> regarding other Microsoft products, you'd better post in the
corresponding
>> newsgroups so that they can be resolved in an efficient and timely
manner.
>> You can locate the newsgroup here:
>> http://www.microsoft.com/communities...s/default.aspx
>>
>> When opening a new thread via the web interface, we recommend you check
>> the
>> "Notify me of replies" box to receive e-mail notifications when there are
>> any updates in your thread. When responding to posts via your newsreader,
>> please "Reply to Group" so that others may learn and benefit from your
>> issue.
>>
>> Microsoft engineers can only focus on one issue per thread. Although we
>> provide other information for your reference, we recommend you post
>> different incidents in different threads to keep the thread clean. In
>> doing
>> so, it will ensure your issues are resolved in a timely manner.
>>
>> For urgent issues, you may want to contact Microsoft CSS directly. Please
>> check http://support.microsoft.com for regional support phone numbers.
>>
>> Any input or comments in this thread are highly appreciated.
>> ================================================== ====
>> This posting is provided "AS IS" with no warranties, and confers no
>> rights.
>>
>> --------------------
>>>Thread-Topic: Outlook 2003 client
>>>thread-index: AcWkE1gVXCPP1OYnQ425MNdO2DF50g==
>>>X-WBNR-Posting-Host: 196.22.209.70
>>>From: "=?Utf-8?B?VG9ueVY=?=" <>
>>>References: <>
>> <>
>> <>
>> <>
>>>Subject: Re: Outlook 2003 client
>>>Date: Thu, 18 Aug 2005 09:39:03 -0700
>>>Lines: 350
>>>Message-ID: <E94E1E76-AE3C-4E62-ACFD->
>>>MIME-Version: 1.0
>>>Content-Type: text/plain;
>>> charset="Utf-8"
>>>Content-Transfer-Encoding: 8bit
>>>X-Newsreader: Microsoft CDO for Windows 2000
>>>Content-Class: urn:content-classes:message
>>>Importance: normal
>>>Priority: normal
>>>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
>>>Newsgroups: microsoft.public.windows.server.sbs
>>>NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
>>>Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGXA03.phx.gbl
>>>Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:145582
>>>X-Tomcat-NG: microsoft.public.windows.server.sbs
>>>
>>>Hi Nathan,
>>>Thank you for the reply.
>>>
>>>Your latest assumption of the network topology is correct.
>>>
>>>When I initially ran CEICW, I created my own web server certificate:
>>>remote.domain.local.
>>>
>>>While following the steps to configure Outlook for RPC/HTTP, the install
>>>notes tells me to enter https://remote.domain.local/remote in my
Internet
>>>Explorer address bar. After doing that it returns the following error:
>>>
>>>Network Access Message: The page cannot be displayed
>>>Technical Information (for Support personnel)
>>>â?¢ Error Code: 502 Proxy Error. The host was not found.(11001)
>>>â?¢ IP Address: 192.168.1.13
>>>â?¢ Date: 18/08/2005 15:52:52
>>>â?¢ Server: servername.company.local
>>>Source: proxy
>>>
>>>However, when I type https://domain.local/remote, I get the â?~Security
>> Alertâ?~
>>>window to view the certificate. The warning is â?~The name on the
security
>>>certificate is invalid or does not match the name of the siteâ?T. When I
>> click
>>>to view the certificate, it is one named â?~publishing.domain.localâ?T
and
>> not
>>>â?~remote.domain.localâ?T.
>>>
>>>Even after installing â?~publishing.domain.localâ?T certificate, it still
>>>prompts me the same â?~Security Alertâ?T window the next time I log on.
>>>
>>>On the SBS server I have both â?~remote.domain.localâ?T and
>>>â?~publishing.domain.localâ?T certificates installed in the
â?~Personalâ?T
>> and
>>>â?~Trusted Root Certification Authoritiesâ?T folders of Certificates
>> snap-in
>>>(MMC).
>>>
>>>1) How do I get https://remote.domain.local/remote to work?
>>>2) Was I right in creating the certificate to be
>> â?~remote.domain.localâ?T, or
>>>should it rather be â?~remote.domain.comâ?T? I ask this as some users
>> would like
>>>to use RPC/HTTP from the Internet in the near future.
>>>3) Where does this â?~publishing.domain.localâ?T fit into the picture?
>>>4) I am also quite curious to know how RPC/HTTP will improve
>>>performanceâ?¦does it synchronize less or simply communicate thinner to
>> the
>>>server?
>>>5) Do I have to get my ISP to create an A-record for
>> â?~remote.domain.comâ?T?
>>>
>>>I am quite confused now, please advise.
>>>Many thanks.
>>>
>>>
>>>""Nathan Liu [MSFT]"" wrote:
>>>
>>>> Hi TonyV,
>>>>
>>>> Thank you for your kind reply.
>>>>
>>>> As you mentioned, can I assume your network topology like the below
>>>> description:
>>>> (Branch office) problematic user <-> Router <-> 64K link <-> Router <->
>> SBS
>>>> 2003 / ISA Server <-> Switch <-> LAN users (main office)
>>>>
>>>> For your question: I had a look at the certificate status on the SBS
>> Server
>>>> and it shows 'The CA root certificate is not trusted because it is not
>> in
>>>> the trusted root certification authorities store'. How do I fix this?
>>>>
>>>> Answer: Please understand this message is anticipation, since we need
to
>>>> access the RWW with SSL, so we need the certificate. If we don't have
>>>> install the certificate in the Trusted Root Certification Authorities
>>>> store, the message will display. Please click 'Install Certificate'
>> button,
>>>> in the next page, click Next, then choose the default "Automatically
>> select
>>>> the certificate store based on the type of certificate" option, click
>> Next,
>>>> then click Finish. In the Security Warning dialog box, click Yes. You
>>>> should then be able to see the RWW logon page.
>>>>
>>>> Question 2: Does the user have to be a member of the RWW security group
>> to
>>>> run Outlook in RPC/HTTP mode?
>>>>
>>>> Answer: It is not necessary for the user must be a member of the RWW
>>>> security group to run Outlook in RPC/HTTP mode, but for SBS 2003
Server,
>> if
>>>> we use the four default User template to create new user, and the new
>> user
>>>> account is a member of the Remote Web Workplace Users security group by
>>>> default. In addition, we can follow the detailed steps to configure the
>>>> Outlook client to connect Exchange mailbox using RPC over HTTP, after
we
>>>> logon the RWW and click the "Configure Outlook via the Internet" link.
>>>>
>>>> I am appreciated your time and cooperation. If anything is unclear,
>> please
>>>> feel free to let me know. I am looking forward to hearing from you.
>>>>
>>>> Best regards,
>>>>
>>>> Nathan Liu (MSFT)
>>>> Microsoft CSS Online Newsgroup Support
>>>>
>>>> Get Secure! - www.microsoft.com/security
>>>> ================================================== ====
>>>> This newsgroup only focuses on SBS technical issues. If you have issues
>>>> regarding other Microsoft products, you'd better post in the
>> corresponding
>>>> newsgroups so that they can be resolved in an efficient and timely
>> manner.
>>>> You can locate the newsgroup here:
>>>> http://www.microsoft.com/communities...s/default.aspx
>>>>
>>>> When opening a new thread via the web interface, we recommend you check
>> the
>>>> "Notify me of replies" box to receive e-mail notifications when there
>> are
>>>> any updates in your thread. When responding to posts via your
>> newsreader,
>>>> please "Reply to Group" so that others may learn and benefit from your
>>>> issue.
>>>>
>>>> Microsoft engineers can only focus on one issue per thread. Although we
>>>> provide other information for your reference, we recommend you post
>>>> different incidents in different threads to keep the thread clean. In
>> doing
>>>> so, it will ensure your issues are resolved in a timely manner.
>>>>
>>>> For urgent issues, you may want to contact Microsoft CSS directly.
>> Please
>>>> check http://support.microsoft.com for regional support phone numbers.
>>>>
>>>> Any input or comments in this thread are highly appreciated.
>>>> ================================================== ====
>>>> This posting is provided "AS IS" with no warranties, and confers no
>> rights.
>>>>
>>>> --------------------
>>>> >From: "TonyV" <>
>>>> >Newsgroups: microsoft.public.windows.server.sbs
>>>> >Subject: Re: Outlook 2003 client
>>>> >Date: Mon, 15 Aug 2005 18:37:28 +0200
>>>> >Organization: unused
>>>> >Lines: 199
>>>> >Message-ID: <>
>>>> >References: <>
>>>> <>
>>>> >NNTP-Posting-Host: proxy.storm.co.za
>>>> >X-Trace: ctb-nnrp2.saix.net 1124123848 13999 196.22.192.24 (15 Aug
2005
>>>> 16:37:28 GMT)
>>>> >X-Complaints-To:
>>>> >NNTP-Posting-Date: 15 Aug 2005 16:37:28 GMT
>>>> >X-Newsreader: Microsoft Outlook Express 6.00.2900.2180
>>>> >X-RFC2646: Format=Flowed; Original
>>>> >X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
>>>> >Cache-Post-Path: proxy.jhb.stormnet.co.za!
>>>> >X-Cache: nntpcache 3.0.1 (see http://www.nntpcache.org/)
>>>> >Path:
>>>>
>>
TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP08.phx.gbl!newsfee d00.sul.t-online.de!t-onli
>>>>
>>
ne.de!border2.nntp.dca.giganews.com!nntp.giganews. com!nx02.iad01.newshosting
>>>> .com!newshosting.com!ctb-nntp1.saix.net!not-for-mail
>>>> >Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:144504
>>>> >X-Tomcat-NG: microsoft.public.windows.server.sbs
>>>> >
>>>> >The 64k link I'm talking about is permanent between 2 cities
(non-VPN).
>> The
>>>> >Outlook user works in a branch office of the company.
>>>> > He is on a different subnet than the SBS server, but on the same side
>> of
>>>> >the ISA firewall than the other LAN users. Therefore there is only 2
>>>> routers
>>>> >between the user and the SBS server.
>>>> >This user is not mobile and never comes into the main office.
>>>> >
>>>> >I went ahead and configured RPC over HTTP anyway.
>>>> >When I accessed https://servername/remote to access RWW, I was
prompted
>>>> >about the certificate.
>>>> >I had a look at the certificate status on the SBS Server and it shows
>> 'The
>>>> >CA root certificate is not trusted because it is not in the trusted
>> root
>>>> >certification authorities store'. How do I fix this?
>>>> >
>>>> >This raises another question....Does the user have to be a member of
>> the
>>>> RWW
>>>> >security group to run Outllok in RPC/HTTP mode?
>>>> >
>>>> >
>>>> >
>>>> >""Nathan Liu [MSFT]"" <v-> wrote in message
>>>> >news:...
>>>> >> Hello TonyV,
>>>> >>
>>>> >> Thank you for posting in the SBS newsgroup.
>>>> >>
>>>> >> According to your description, I understand that the Outlook 2003
>>>> >> slow
>>>> >> send/receive email, when you are accessing the Exchange mailbox over
>> 64K
>>>> >> link. If I have misunderstood your concern, please don't hesitate to
>> let
>>>> >> me
>>>> >> know.
>>>> >>
>>>> >> First of all, please understand the speed of sending/receiving
emails
>>>> >> depend on the speed of the network transport on the Internet, when
>>>> >> you
>>>> >> remote access the Exchange Server mailbox through Internet
>>>> >> connection.
>>>> >>
>>>> >> To narrow down this issue, please answer and perform the below
>> questions
>>>> >> and steps:
>>>> >>
>>>> >> 1. As you mentioned, "An Outlook 2003 user is accessing his
>> Exchange
>>>> >> mailbox over 64K link. The outlook client is setup in cached mode
but
>> not
>>>> >> RPC/HTTP", can I assume the user access the Exchange by using
Dial-up
>> VPN
>>>> >> through 64K ISDN internet connection? If so, does the workstation
>> join in
>>>> >> the SBS 2003 Domain?
>>>> >>
>>>> >> 2. Please configure the Outlook 2003 client to connect Exchange
>> mailbox
>>>> >> using RPC over HTTP, and then check if it take effect. To do so,
>> please
>>>> >> perform the below steps:
>>>> >>
>>>> >> a. On the workstation, use the https://Router_Public_IP/remote or
>>>> >> https://SBS2003FQDN/remote link to access the RWW on the SBS 2003
>> Server.
>>>> >>
>>>> >> b. After logon, please click "Configure Outlook via the Internet"
>> link
>>>> >> to
>>>> >> view the detailed steps to configure the problematic Outlook client
>>>> >> to
>>>> >> connect Exchange mailbox using RPC over HTTP.
>>>> >>
>>>> >> c. Please check if the issue can be reproduced.
>>>> >>
>>>> >> 3. Please disable any Anti-Virus or firewall software on the
>>>> >> workstation,
>>>> >> and then check if it take effect.
>>>> >>
>>>> >> 4. Please also try the below steps to check if the issue can be
>>>> >> reproduced:
>>>> >>
>>>> >> Step 1: Starting Outlook in Safe Mode
>>>> >> =========================
>>>> >> Safe Mode will disable all add-ins and extensions that will not
>> start, as
>>>> >> well as any corrupted resources, files, registries and templates.
>>>> >>
>>>> >> a. Close Outlook.
>>>> >>
>>>> >> b. Click Start menu-> Run, type "Outlook /Safe" (without the
>>>> >> quotation
>>>> >> marks and there is a space between Outlook and /Safe) in the Open
box
>> and
>>>> >> press Enter.
>>>> >>
>>>> >> If issue still persists in safe mode, please perform the next step.
>>>> >>
>>>> >> Step 2: Creating a new Outlook profile
>>>> >> ==========================
>>>> >> Please use the following method to create a new profile to perform a
>>>> test:
>>>> >>
>>>> >> a. Close Outlook.
>>>> >>
>>>> >> b. Click Start menu-> Control Panel. If Control Panel is not in
>> Classic
>>>> >> View, click Switch to Classic View, and then double-click the Mail
>> icon.
>>>> >>
>>>> >> c. Click Show Profiles and then click Add. In the New Profile dialog
>> box,
>>>> >> type a descriptive name for the new profile in the Profile Name box,
>> and
>>>> >> then click OK.
>>>> >>
>>>> >> d. On the pop-up "E-mail Accounts", choose "add a new e-mail
>>>> >> account",
>>>> >> click next.
>>>> >>
>>>> >> e. Choose the type of your account, click next.
>>>> >>
>>>> >> f. Input the corresponding info of the mail account, click Next,
>>>> >> click
>>>> >> Finish.
>>>> >>
>>>> >> g. On the "Mail" box, click the "Prompt for a profile to be used"
>> option
>>>> >> and click OK. This way, you will be prompted for a profile when
>> starting
>>>> >> Outlook.
>>>> >>
>>>> >> For more information, please refer to the article:
>>>> >>
>>>> >> 829918 How to create a new e-mail profile in Outlook 2003
>>>> >> http://support.microsoft.com/?id=829918
>>>> >>
>>>> >> Start Outlook with the new profile to test the issue again. Is the
>> issue
>>>> >> resolved?
>>>> >>
>>>> >> I am appreciated your time and cooperation. If anything is unclear,
>>>> please
>>>> >> feel free to let me know. I am looking forward to hearing from you.
>>>> >>
>>>> >> Best regards,
>>>> >>
>>>> >> Nathan Liu (MSFT)
>>>> >> Microsoft CSS Online Newsgroup Support
>>>> >>
>>>> >> Get Secure! - www.microsoft.com/security
>>>> >> ================================================== ====
>>>> >> This newsgroup only focuses on SBS technical issues. If you have
>> issues
>>>> >> regarding other Microsoft products, you'd better post in the
>>>> corresponding
>>>> >> newsgroups so that they can be resolved in an efficient and timely
>>>> manner.
>>>> >> You can locate the newsgroup here:
>>>> >> http://www.microsoft.com/communities...s/default.aspx
>>>> >>
>>>> >> When opening a new thread via the web interface, we recommend you
>> check
>>>> >> the
>>>> >> "Notify me of replies" box to receive e-mail notifications when
there
>> are
>>>> >> any updates in your thread. When responding to posts via your
>> newsreader,
>>>> >> please "Reply to Group" so that others may learn and benefit from
>>>> >> your
>>>> >> issue.
>>>> >>
>>>> >> Microsoft engineers can only focus on one issue per thread. Although
>> we
>>>> >> provide other information for your reference, we recommend you post
>>>> >> different incidents in different threads to keep the thread clean.
In
>>>> >> doing
>>>> >> so, it will ensure your issues are resolved in a timely manner.
>>>> >>
>>>> >> For urgent issues, you may want to contact Microsoft CSS directly.
>> Please
>>>> >> check http://support.microsoft.com for regional support phone
>>>> >> numbers.
>>>> >>
>>>> >> Any input or comments in this thread are highly appreciated.
>>>> >> ================================================== ====
>>>> >> This posting is provided "AS IS" with no warranties, and confers no
>>>> >> rights.
>>>> >>
>>>> >> --------------------
>>>> >>>From: "TonyV" <>
>>>> >>>Newsgroups: microsoft.public.windows.server.sbs
>>>> >>>Subject: Outlook 2003 client
>>>> >>>Date: Thu, 11 Aug 2005 16:14:40 +0200
>>>> >>>Organization: unused
>>>> >>>Lines: 19
>>>> >>>Message-ID: <>
>>>> >>>NNTP-Posting-Host: proxy.storm.co.za
>>>> >>>X-Trace: ctb-nnrp2.saix.net 1123769686 16256 196.22.192.24 (11 Aug
>> 2005
>>>> >> 14:14:46 GMT)
>>>> >>>X-Complaints-To:
>>>> >>>NNTP-Posting-Date: 11 Aug 2005 14:14:46 GMT
>>>> >>>X-Priority: 3
>>>> >>>X-MSMail-Priority: Normal
>>>> >>>X-Newsreader: Microsoft Outlook Express 6.00.2900.2180
>>>> >>>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
>>>> >>>X-RFC2646: Format=Flowed; Original
>>>> >>>Cache-Post-Path: proxy.jhb.stormnet.co.za!
>>>> >>>X-Cache: nntpcache 3.0.1 (see http://www.nntpcache.org/)
>>>> >>>Path:
>>>> >>
>>>>
>>
TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP08.phx.gbl!newsfee d00.sul.t-online.de!t-onli
>>>> >> ne.de!tsicnews.teliasonera.com!ctb-nntp1.saix.net!not-for-mail
>>>> >>>Xref: TK2MSFTNGXA01.phx.gbl
>>>> >>>microsoft.public.windows.server.sbs:143389
>>>> >>>X-Tomcat-NG: microsoft.public.windows.server.sbs
>>>> >>>
>>>> >>>An Outlook 2003 user is accessing his Exchange mailbox over 64K
>> link.
>>>> The
>>>> >>>outlook client is setup in cached mode but not RPC/HTTP.
>>>> >>>He can send and receive mail, but is extremely slow as it shows a
>>>> >>>popup window that says 'Outlook is trying to retrieve data from the
>>>> >>>MSExchange server Servername.domain.local'.
>>>> >>>The mail does eventually get sent/received, and attachment sizes are
>> only
>>>> >>>about 50kb (if any).
>>>> >>>
>>>> >>>This even happens when there is no other users on the line.
>>>> >>>I saw it once trying to syncronise the SENT items, and took about 2
>>>> >> minutes.
>>>> >>>
>>>> >>>I can't figure out why it is so slow. How do I fault find this?
>>>> >>>Please advise.
>>>> >>>
>>>> >>>
>>>> >>>
>>>> >>>
>>>> >>>
>>>> >>>
>>>> >>>
>>>> >>
>>>> >
>>>> >
>>>
>>
>
>
>

1. Since the Exchange cannot find some emails in the other items of
> the Outlook, it will move these specific items to 'Deleted Items', this
> process will avoid the conflict in the synchronization.

Please elaborate on your answer above....I'm not sure if I understand what
you said correctly.

3. I do have DHCP on my network. When I type http://localhost/remote on the
SBS server, the RWW page appears fine. I am using standard SSL ports (443).
When I type https://domain.local/remote from client on the same LAN it also
works fine, but https://remote.domain.com/remote still does not work.

Regards
Tony

""Nathan Liu [MSFT]"" wrote:

> Hi TonyV,
>
> Thank you for your kindly update.
>
> 1. Question: As you mentioned, you have tested to un-checked my 'Deleted
> Items' folder from the Send/Receive group for my account, but you can see
> it newly deleted items in my Deleted folder when accessing my mailbox
> through OWA after this setting was applied.
>
> Answer: Based on my testing, this issue is expectation. When the Exchange
> synchronize with the Outlook, and we un-checked the 'Deleted Items' folder
> from the Send/Receive group for your account in the Outlook Send/Receive
> settings. Since the Exchange cannot find some emails in the other items of
> the Outlook, it will move these specific items to 'Deleted Items', this
> process will avoid the conflict in the synchronization.
>
> 2. Question: Another question on RPC/HTTP....When a local LAN user takes
> his notebook on an overseas trip and want to use RPC/HTTP feature, would he
> have to remember to enable this feature for the trip only, or should it be
> a permanent setting?
>
> Answer: Yes, if the specific user would like to use the RPC/HTTP feature,
> he must enable this function in his Outlook.
>
> 3. Question: When I type https://remote.domain.com/remote in my browser
> from a PC on the
> LAN, I get the following response: Error Code: 502 Proxy Error. The host
> was not found (11001).
>
> I this a normal response because I'm on the LAN? I don't see why I should
> have to enter any DNS settings manually (not that I really know where in
> SBS2003 to enter those values). Shouldn't CEICW do that automatically?
>
> Answer: This issue is not a normal response, please check the web proxy's
> settings on the problematic PC. if you have DHCP server on your network,
> you don't need to enter any DNS settings manually, when you run the CEICW,
> it will automatically configure the DHCP, DNS, etc. On the SBS Server, if
> you use the http://localhost/remote link to access the RWW, what's the
> result?
>
> Regarding the 502 proxy error, I assume that you are trying to access the
> RWW site behind an ISA server. This error was reported by your local ISA
> server. When we use the ISA server as a proxy, only the standard SSL port
> is allowed. If you want to access a SSL site with non-standard port number,
> you need to modify the registry on the ISA server. For the detailed
> information, please refer to the following KB article:
>
> 283284 Blank Page or Page Cannot Be Displayed When You View SSL Sites
> Through
> http://support.microsoft.com/?id=283284
>
> To get more information, please refer to the below document:
>
> Getting Started: Windows Small Business Server 2003 with SP1
> http://go.microsoft.com/fwlink/?linkid=46574
>
> Windows Small Business Server 2003 Troubleshooting
> http://go.microsoft.com/fwlink/?LinkId=49937
>
> Connecting Mobile and Remote Users
> http://go.microsoft.com/fwlink/?LinkId=49918
>
> I am appreciated your time and cooperation. If anything is unclear, please
> feel free to let me know. I am looking forward to hearing from you.
>
> Best regards,
>
> Nathan Liu (MSFT)
> Microsoft CSS Online Newsgroup Support
>
> Get Secure! - www.microsoft.com/security
> ================================================== ====
> This newsgroup only focuses on SBS technical issues. If you have issues
> regarding other Microsoft products, you'd better post in the corresponding
> newsgroups so that they can be resolved in an efficient and timely manner.
> You can locate the newsgroup here:
> http://www.microsoft.com/communities...s/default.aspx
>
> When opening a new thread via the web interface, we recommend you check the
> "Notify me of replies" box to receive e-mail notifications when there are
> any updates in your thread. When responding to posts via your newsreader,
> please "Reply to Group" so that others may learn and benefit from your
> issue.
>
> Microsoft engineers can only focus on one issue per thread. Although we
> provide other information for your reference, we recommend you post
> different incidents in different threads to keep the thread clean. In doing
> so, it will ensure your issues are resolved in a timely manner.
>
> For urgent issues, you may want to contact Microsoft CSS directly. Please
> check http://support.microsoft.com for regional support phone numbers.
>
> Any input or comments in this thread are highly appreciated.
> ================================================== ====
> This posting is provided "AS IS" with no warranties, and confers no rights.
>
> --------------------
> >From: "TonyV" <>
> >Newsgroups: microsoft.public.windows.server.sbs
> >Subject: Re: Outlook 2003 client
> >Date: Tue, 23 Aug 2005 17:49:56 +0200
> >Organization: unused
> >Lines: 587
> >Message-ID: <>
> >References: <>
> <>
> <>
> <>
> <E94E1E76-AE3C-4E62-ACFD->
> <>
> >NNTP-Posting-Host: proxy.storm.co.za
> >X-Trace: ctb-nnrp2.saix.net 1124812202 19775 196.22.192.24 (23 Aug 2005
> 15:50:02 GMT)
> >X-Complaints-To:
> >NNTP-Posting-Date: 23 Aug 2005 15:50:02 GMT
> >X-Priority: 3
> >X-MSMail-Priority: Normal
> >X-Newsreader: Microsoft Outlook Express 6.00.2900.2180
> >X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
> >X-RFC2646: Format=Flowed; Original
> >Cache-Post-Path: proxy.jhb.stormnet.co.za!
> >X-Cache: nntpcache 3.0.1 (see http://www.nntpcache.org/)
> >Path:
> TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP08.phx.gbl!newsfee d00.sul.t-online.de!t-onli
> ne.de!border2.nntp.dca.giganews.com!nntp.giganews. com!nx01.iad01.newshosting
> .com!newshosting.com!ctb-nntp1.saix.net!not-for-mail
> >Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:147021
> >X-Tomcat-NG: microsoft.public.windows.server.sbs
> >
> >Thanks for the input Les & Nathan,
> >
> >After reading a doc I found at
> >http://www.microsoft.com/technet/pro...linettraf.mspx,
>
> >regarding client network traffic with Exchange 2003, I now believe that
> >RPC/HTTP will generate even more traffic than normal RPC between client &
> >server over my 64k line. Therefore I don't see the benefit of RPC/HTTP
> when
> >the client is on the same side of the ISA firewall as the other LAN users.
> >
> >Downloading headers frustrates my users.
> >I think that synching the headers of Sent & Deleted items larger than 50k
> >should work out a bit better.
> >
> >I did a little test on my own Outlook2003 client. In Send/Receive settings
> I
> >un-checked my 'Deleted Items' folder from the Send/Receive group for my
> >account, but it seems as if it is still being synchronised as I can see
> >newly deleted items in my Deleted folder when accessing my mailbox through
> >OWA after this setting was applied. I think I need a deeper understanding
> >here, please advise....
> >
> >In the meantime I am encouraging users to keep personal email with
> >attachments to a minimum. A bit of user training is forming part of my
> >solution.
> >We are planning a Citrix implementation later this year. I think it would
> >really enhance the user experience to let Outlook run on the Terminal
> server
> >to clear up the line congestion issue.
> >
> >Another question on RPC/HTTP....When a local LAN user takes his notebook
> on
> >an overseas trip and want to use RPC/HTTP feature, would he have to
> remember
> >to enable this feature for the trip only, or should it be a permanent
> >setting?
> >
> >When I type https://remote.domain.com/remote in my browser from a PC on
> the
> >LAN, I get the following response: Error Code: 502 Proxy Error. The host
> was
> >not found.(11001).
> >I this a normal response because I'm on the LAN? I don't see why I should
> >have to enter any DNS settings manually (not that I really know where in
> >SBS2003 to enter those values). Shouldn't CEICW do that automatically?
> >
> >I am struggling to wrap my head around some of the SBS2003 concepts &
> >issues, but I would like to undertand it properly.
> >It seems that SBS2003 server is great when you know how to handle it.
> >Your assistance & patients is greatly appreciated.
> >
> >
> >
> >
> >
> >
> >""Nathan Liu [MSFT]"" <v-> wrote in message
> >news:...
> >> Hi TonyV,
> >>
> >> Thank you for your detailed reply.
> >>
> >> Also, many thanks for Les's great input.
> >>
> >> Question 1: How do I get https://remote.domain.local/remote to work? Was
> I
> >> right in creating the certificate to be 'remote.domain.local'?, or
> >> should it rather be 'remote.domain.com'? I ask this as some users would
> >> like to use RPC/HTTP from the Internet in the near future.
> >>
> >> Answer: Les is right on target, when we are running the CEICW, we need
> >> type a Fully Qualified Domain Name (FQDN) on the Web Server Certificate
> >> page, since the remote.domain.local is the local domain name, it doesn't
> >> work. So if you have an existing registral domain name, e.g.
> >> remote.domain.com, you can type it. Alternatively, if you don't have an
> >> existing registral domain name, you can type the Public IP address of the
> >> SBS Server.
> >>
> >> Question 2: Where does this a publishing.domain.local fit into the
> >> picture?
> >>
> >> Answer: Since you have a publishing.domain.local certificate, I assume
> >> you
> >> have installed the ISA Server. In the SBS 2K3 with ISA installed
> scenario,
> >> when you run CEICW, you are prompted to 'Create a new Web server
> >> certificate', the name you input there will be automatically be created
> as
> >> the certificate used by ISA (configured in the 'Incoming Web listener'.)
> >> The System will also create another certificate named as
> >> publishing.domain.local, this is used by IIS. For example, if you input
> >> the
> >> name 'remote.domain.com' in CEICW, CEICW will create the following 2
> >> certificates: publishing.domain.local & remote.domain.com.
> >> remote.domain.com is imported into ISA and publishing.domain.local is
> >> imported to IIS Default Website.
> >>
> >> Question 3: Do I have to get my ISP to create an A-record for a
> >> remote.domain.com?
> >>
> >> Answer: If you need to use the remote.domain.com as the FQDN in the
> >> certificate, you need to contact the ISP to create an A-record for the
> >> remote.domain.com.
> >>
> >> I am appreciated your time and cooperation. If anything is unclear,
> please
> >> feel free to let me know. I am looking forward to hearing from you.
> >>
> >> Best regards,
> >>
> >> Nathan Liu (MSFT)
> >> Microsoft CSS Online Newsgroup Support
> >>
> >> Get Secure! - www.microsoft.com/security
> >> ================================================== ====
> >> This newsgroup only focuses on SBS technical issues. If you have issues
> >> regarding other Microsoft products, you'd better post in the
> corresponding
> >> newsgroups so that they can be resolved in an efficient and timely
> manner.
> >> You can locate the newsgroup here:
> >> http://www.microsoft.com/communities...s/default.aspx
> >>
> >> When opening a new thread via the web interface, we recommend you check
> >> the
> >> "Notify me of replies" box to receive e-mail notifications when there are
> >> any updates in your thread. When responding to posts via your newsreader,
> >> please "Reply to Group" so that others may learn and benefit from your
> >> issue.
> >>
> >> Microsoft engineers can only focus on one issue per thread. Although we
> >> provide other information for your reference, we recommend you post
> >> different incidents in different threads to keep the thread clean. In
> >> doing
> >> so, it will ensure your issues are resolved in a timely manner.
> >>
> >> For urgent issues, you may want to contact Microsoft CSS directly. Please
> >> check http://support.microsoft.com for regional support phone numbers.
> >>
> >> Any input or comments in this thread are highly appreciated.
> >> ================================================== ====
> >> This posting is provided "AS IS" with no warranties, and confers no
> >> rights.
> >>
> >> --------------------
> >>>Thread-Topic: Outlook 2003 client
> >>>thread-index: AcWkE1gVXCPP1OYnQ425MNdO2DF50g==
> >>>X-WBNR-Posting-Host: 196.22.209.70
> >>>From: "=?Utf-8?B?VG9ueVY=?=" <>
> >>>References: <>
> >> <>
> >> <>
> >> <>
> >>>Subject: Re: Outlook 2003 client
> >>>Date: Thu, 18 Aug 2005 09:39:03 -0700
> >>>Lines: 350
> >>>Message-ID: <E94E1E76-AE3C-4E62-ACFD->
> >>>MIME-Version: 1.0
> >>>Content-Type: text/plain;
> >>> charset="Utf-8"
> >>>Content-Transfer-Encoding: 8bit
> >>>X-Newsreader: Microsoft CDO for Windows 2000
> >>>Content-Class: urn:content-classes:message
> >>>Importance: normal
> >>>Priority: normal
> >>>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
> >>>Newsgroups: microsoft.public.windows.server.sbs
> >>>NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
> >>>Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGXA03.phx.gbl
> >>>Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:145582

1. Since the Exchange cannot find some emails in the other items of
> the Outlook, it will move these specific items to 'Deleted Items', this
> process will avoid the conflict in the synchronization.

Please elaborate on your answer above....I'm not sure if I understand what
you said correctly.

3. I do have DHCP on my network. When I type http://localhost/remote on the
SBS server, the RWW page appears fine. I am using standard SSL ports (443).
When I type https://domain.local/remote from client on the same LAN it also
works fine, but https://remote.domain.com/remote still does not work.

Regards
Tony

""Nathan Liu [MSFT]"" wrote:

> Hi TonyV,
>
> Thank you for your kindly update.
>
> 1. Question: As you mentioned, you have tested to un-checked my 'Deleted
> Items' folder from the Send/Receive group for my account, but you can see
> it newly deleted items in my Deleted folder when accessing my mailbox
> through OWA after this setting was applied.
>
> Answer: Based on my testing, this issue is expectation. When the Exchange
> synchronize with the Outlook, and we un-checked the 'Deleted Items' folder
> from the Send/Receive group for your account in the Outlook Send/Receive
> settings. Since the Exchange cannot find some emails in the other items of
> the Outlook, it will move these specific items to 'Deleted Items', this
> process will avoid the conflict in the synchronization.
>
> 2. Question: Another question on RPC/HTTP....When a local LAN user takes
> his notebook on an overseas trip and want to use RPC/HTTP feature, would he
> have to remember to enable this feature for the trip only, or should it be
> a permanent setting?
>
> Answer: Yes, if the specific user would like to use the RPC/HTTP feature,
> he must enable this function in his Outlook.
>
> 3. Question: When I type https://remote.domain.com/remote in my browser
> from a PC on the
> LAN, I get the following response: Error Code: 502 Proxy Error. The host
> was not found (11001).
>
> I this a normal response because I'm on the LAN? I don't see why I should
> have to enter any DNS settings manually (not that I really know where in
> SBS2003 to enter those values). Shouldn't CEICW do that automatically?
>
> Answer: This issue is not a normal response, please check the web proxy's
> settings on the problematic PC. if you have DHCP server on your network,
> you don't need to enter any DNS settings manually, when you run the CEICW,
> it will automatically configure the DHCP, DNS, etc. On the SBS Server, if
> you use the http://localhost/remote link to access the RWW, what's the
> result?
>
> Regarding the 502 proxy error, I assume that you are trying to access the
> RWW site behind an ISA server. This error was reported by your local ISA
> server. When we use the ISA server as a proxy, only the standard SSL port
> is allowed. If you want to access a SSL site with non-standard port number,
> you need to modify the registry on the ISA server. For the detailed
> information, please refer to the following KB article:
>
> 283284 Blank Page or Page Cannot Be Displayed When You View SSL Sites
> Through
> http://support.microsoft.com/?id=283284
>
> To get more information, please refer to the below document:
>
> Getting Started: Windows Small Business Server 2003 with SP1
> http://go.microsoft.com/fwlink/?linkid=46574
>
> Windows Small Business Server 2003 Troubleshooting
> http://go.microsoft.com/fwlink/?LinkId=49937
>
> Connecting Mobile and Remote Users
> http://go.microsoft.com/fwlink/?LinkId=49918
>
> I am appreciated your time and cooperation. If anything is unclear, please
> feel free to let me know. I am looking forward to hearing from you.
>
> Best regards,
>
> Nathan Liu (MSFT)
> Microsoft CSS Online Newsgroup Support
>
> Get Secure! - www.microsoft.com/security
> ================================================== ====
> This newsgroup only focuses on SBS technical issues. If you have issues
> regarding other Microsoft products, you'd better post in the corresponding
> newsgroups so that they can be resolved in an efficient and timely manner.
> You can locate the newsgroup here:
> http://www.microsoft.com/communities...s/default.aspx
>
> When opening a new thread via the web interface, we recommend you check the
> "Notify me of replies" box to receive e-mail notifications when there are
> any updates in your thread. When responding to posts via your newsreader,
> please "Reply to Group" so that others may learn and benefit from your
> issue.
>
> Microsoft engineers can only focus on one issue per thread. Although we
> provide other information for your reference, we recommend you post
> different incidents in different threads to keep the thread clean. In doing
> so, it will ensure your issues are resolved in a timely manner.
>
> For urgent issues, you may want to contact Microsoft CSS directly. Please
> check http://support.microsoft.com for regional support phone numbers.
>
> Any input or comments in this thread are highly appreciated.
> ================================================== ====
> This posting is provided "AS IS" with no warranties, and confers no rights.
>
> --------------------
> >From: "TonyV" <>
> >Newsgroups: microsoft.public.windows.server.sbs
> >Subject: Re: Outlook 2003 client
> >Date: Tue, 23 Aug 2005 17:49:56 +0200
> >Organization: unused
> >Lines: 587
> >Message-ID: <>
> >References: <>
> <>
> <>
> <>
> <E94E1E76-AE3C-4E62-ACFD->
> <>
> >NNTP-Posting-Host: proxy.storm.co.za
> >X-Trace: ctb-nnrp2.saix.net 1124812202 19775 196.22.192.24 (23 Aug 2005
> 15:50:02 GMT)
> >X-Complaints-To:
> >NNTP-Posting-Date: 23 Aug 2005 15:50:02 GMT
> >X-Priority: 3
> >X-MSMail-Priority: Normal
> >X-Newsreader: Microsoft Outlook Express 6.00.2900.2180
> >X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
> >X-RFC2646: Format=Flowed; Original
> >Cache-Post-Path: proxy.jhb.stormnet.co.za!
> >X-Cache: nntpcache 3.0.1 (see http://www.nntpcache.org/)
> >Path:
> TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP08.phx.gbl!newsfee d00.sul.t-online.de!t-onli
> ne.de!border2.nntp.dca.giganews.com!nntp.giganews. com!nx01.iad01.newshosting
> .com!newshosting.com!ctb-nntp1.saix.net!not-for-mail
> >Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:147021
> >X-Tomcat-NG: microsoft.public.windows.server.sbs
> >
> >Thanks for the input Les & Nathan,
> >
> >After reading a doc I found at
> >http://www.microsoft.com/technet/pro...linettraf.mspx,
>
> >regarding client network traffic with Exchange 2003, I now believe that
> >RPC/HTTP will generate even more traffic than normal RPC between client &
> >server over my 64k line. Therefore I don't see the benefit of RPC/HTTP
> when
> >the client is on the same side of the ISA firewall as the other LAN users.
> >
> >Downloading headers frustrates my users.
> >I think that synching the headers of Sent & Deleted items larger than 50k
> >should work out a bit better.
> >
> >I did a little test on my own Outlook2003 client. In Send/Receive settings
> I
> >un-checked my 'Deleted Items' folder from the Send/Receive group for my
> >account, but it seems as if it is still being synchronised as I can see
> >newly deleted items in my Deleted folder when accessing my mailbox through
> >OWA after this setting was applied. I think I need a deeper understanding
> >here, please advise....
> >
> >In the meantime I am encouraging users to keep personal email with
> >attachments to a minimum. A bit of user training is forming part of my
> >solution.
> >We are planning a Citrix implementation later this year. I think it would
> >really enhance the user experience to let Outlook run on the Terminal
> server
> >to clear up the line congestion issue.
> >
> >Another question on RPC/HTTP....When a local LAN user takes his notebook
> on
> >an overseas trip and want to use RPC/HTTP feature, would he have to
> remember
> >to enable this feature for the trip only, or should it be a permanent
> >setting?
> >
> >When I type https://remote.domain.com/remote in my browser from a PC on
> the
> >LAN, I get the following response: Error Code: 502 Proxy Error. The host
> was
> >not found.(11001).
> >I this a normal response because I'm on the LAN? I don't see why I should
> >have to enter any DNS settings manually (not that I really know where in
> >SBS2003 to enter those values). Shouldn't CEICW do that automatically?
> >
> >I am struggling to wrap my head around some of the SBS2003 concepts &
> >issues, but I would like to undertand it properly.
> >It seems that SBS2003 server is great when you know how to handle it.
> >Your assistance & patients is greatly appreciated.
> >
> >
> >
> >
> >
> >
> >""Nathan Liu [MSFT]"" <v-> wrote in message
> >news:...
> >> Hi TonyV,
> >>
> >> Thank you for your detailed reply.
> >>
> >> Also, many thanks for Les's great input.
> >>
> >> Question 1: How do I get https://remote.domain.local/remote to work? Was
> I
> >> right in creating the certificate to be 'remote.domain.local'?, or
> >> should it rather be 'remote.domain.com'? I ask this as some users would
> >> like to use RPC/HTTP from the Internet in the near future.
> >>
> >> Answer: Les is right on target, when we are running the CEICW, we need
> >> type a Fully Qualified Domain Name (FQDN) on the Web Server Certificate
> >> page, since the remote.domain.local is the local domain name, it doesn't
> >> work. So if you have an existing registral domain name, e.g.
> >> remote.domain.com, you can type it. Alternatively, if you don't have an
> >> existing registral domain name, you can type the Public IP address of the
> >> SBS Server.
> >>
> >> Question 2: Where does this a publishing.domain.local fit into the
> >> picture?
> >>
> >> Answer: Since you have a publishing.domain.local certificate, I assume
> >> you
> >> have installed the ISA Server. In the SBS 2K3 with ISA installed
> scenario,
> >> when you run CEICW, you are prompted to 'Create a new Web server
> >> certificate', the name you input there will be automatically be created
> as
> >> the certificate used by ISA (configured in the 'Incoming Web listener'.)
> >> The System will also create another certificate named as
> >> publishing.domain.local, this is used by IIS. For example, if you input
> >> the
> >> name 'remote.domain.com' in CEICW, CEICW will create the following 2
> >> certificates: publishing.domain.local & remote.domain.com.
> >> remote.domain.com is imported into ISA and publishing.domain.local is
> >> imported to IIS Default Website.
> >>
> >> Question 3: Do I have to get my ISP to create an A-record for a
> >> remote.domain.com?
> >>
> >> Answer: If you need to use the remote.domain.com as the FQDN in the
> >> certificate, you need to contact the ISP to create an A-record for the
> >> remote.domain.com.
> >>
> >> I am appreciated your time and cooperation. If anything is unclear,
> please
> >> feel free to let me know. I am looking forward to hearing from you.
> >>
> >> Best regards,
> >>
> >> Nathan Liu (MSFT)
> >> Microsoft CSS Online Newsgroup Support
> >>
> >> Get Secure! - www.microsoft.com/security
> >> ================================================== ====
> >> This newsgroup only focuses on SBS technical issues. If you have issues
> >> regarding other Microsoft products, you'd better post in the
> corresponding
> >> newsgroups so that they can be resolved in an efficient and timely
> manner.
> >> You can locate the newsgroup here:
> >> http://www.microsoft.com/communities...s/default.aspx
> >>
> >> When opening a new thread via the web interface, we recommend you check
> >> the
> >> "Notify me of replies" box to receive e-mail notifications when there are
> >> any updates in your thread. When responding to posts via your newsreader,
> >> please "Reply to Group" so that others may learn and benefit from your
> >> issue.
> >>
> >> Microsoft engineers can only focus on one issue per thread. Although we
> >> provide other information for your reference, we recommend you post
> >> different incidents in different threads to keep the thread clean. In
> >> doing
> >> so, it will ensure your issues are resolved in a timely manner.
> >>
> >> For urgent issues, you may want to contact Microsoft CSS directly. Please
> >> check http://support.microsoft.com for regional support phone numbers.
> >>
> >> Any input or comments in this thread are highly appreciated.
> >> ================================================== ====
> >> This posting is provided "AS IS" with no warranties, and confers no
> >> rights.
> >>
> >> --------------------
> >>>Thread-Topic: Outlook 2003 client
> >>>thread-index: AcWkE1gVXCPP1OYnQ425MNdO2DF50g==
> >>>X-WBNR-Posting-Host: 196.22.209.70
> >>>From: "=?Utf-8?B?VG9ueVY=?=" <>
> >>>References: <>
> >> <>
> >> <>
> >> <>
> >>>Subject: Re: Outlook 2003 client
> >>>Date: Thu, 18 Aug 2005 09:39:03 -0700
> >>>Lines: 350
> >>>Message-ID: <E94E1E76-AE3C-4E62-ACFD->
> >>>MIME-Version: 1.0
> >>>Content-Type: text/plain;
> >>> charset="Utf-8"
> >>>Content-Transfer-Encoding: 8bit
> >>>X-Newsreader: Microsoft CDO for Windows 2000
> >>>Content-Class: urn:content-classes:message
> >>>Importance: normal
> >>>Priority: normal
> >>>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
> >>>Newsgroups: microsoft.public.windows.server.sbs
> >>>NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
> >>>Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGXA03.phx.gbl
> >>>Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:145582

Since the Exchange cannot find some emails in the other items of
> the Outlook, it will move these specific items to 'Deleted Items', this
> process will avoid the conflict in the synchronization.

Please elaborate on your answer...I don't think I understand 100% what you
meant.

3. I do have DHCP on my network and use standard SSL port numbers (443).
When I type http://localhost/remote on the SBS server, the RWW page displays
fine.

Typing https://domain.local/remote from my PC on the same LAN also works,
but https://remote.domain.com/remote does not work.

But is https://remote.domain.com/remote suppose really suppose to work when
typed from the internal network (LAN), compared to
https://domain.local/remote?
What must the ISA2004 rules look like. At the moment there is one RWW
inbound rule that is disabled. Enabling it did also not makes a difference to
my problem.

I still have not told my ISP to create the A-record for remote.domain.com. I
don't think it will make a difference when the request comes from the
internal network.

Regards
Tony

""Nathan Liu [MSFT]"" wrote:

> Hi TonyV,
>
> Thank you for your kindly update.
>
> 1. Question: As you mentioned, you have tested to un-checked my 'Deleted
> Items' folder from the Send/Receive group for my account, but you can see
> it newly deleted items in my Deleted folder when accessing my mailbox
> through OWA after this setting was applied.
>
> Answer: Based on my testing, this issue is expectation. When the Exchange
> synchronize with the Outlook, and we un-checked the 'Deleted Items' folder
> from the Send/Receive group for your account in the Outlook Send/Receive
> settings. Since the Exchange cannot find some emails in the other items of
> the Outlook, it will move these specific items to 'Deleted Items', this
> process will avoid the conflict in the synchronization.
>
> 2. Question: Another question on RPC/HTTP....When a local LAN user takes
> his notebook on an overseas trip and want to use RPC/HTTP feature, would he
> have to remember to enable this feature for the trip only, or should it be
> a permanent setting?
>
> Answer: Yes, if the specific user would like to use the RPC/HTTP feature,
> he must enable this function in his Outlook.
>
> 3. Question: When I type https://remote.domain.com/remote in my browser
> from a PC on the
> LAN, I get the following response: Error Code: 502 Proxy Error. The host
> was not found (11001).
>
> I this a normal response because I'm on the LAN? I don't see why I should
> have to enter any DNS settings manually (not that I really know where in
> SBS2003 to enter those values). Shouldn't CEICW do that automatically?
>
> Answer: This issue is not a normal response, please check the web proxy's
> settings on the problematic PC. if you have DHCP server on your network,
> you don't need to enter any DNS settings manually, when you run the CEICW,
> it will automatically configure the DHCP, DNS, etc. On the SBS Server, if
> you use the http://localhost/remote link to access the RWW, what's the
> result?
>
> Regarding the 502 proxy error, I assume that you are trying to access the
> RWW site behind an ISA server. This error was reported by your local ISA
> server. When we use the ISA server as a proxy, only the standard SSL port
> is allowed. If you want to access a SSL site with non-standard port number,
> you need to modify the registry on the ISA server. For the detailed
> information, please refer to the following KB article:
>
> 283284 Blank Page or Page Cannot Be Displayed When You View SSL Sites
> Through
> http://support.microsoft.com/?id=283284
>
> To get more information, please refer to the below document:
>
> Getting Started: Windows Small Business Server 2003 with SP1
> http://go.microsoft.com/fwlink/?linkid=46574
>
> Windows Small Business Server 2003 Troubleshooting
> http://go.microsoft.com/fwlink/?LinkId=49937
>
> Connecting Mobile and Remote Users
> http://go.microsoft.com/fwlink/?LinkId=49918
>
> I am appreciated your time and cooperation. If anything is unclear, please
> feel free to let me know. I am looking forward to hearing from you.
>
> Best regards,
>
> Nathan Liu (MSFT)
> Microsoft CSS Online Newsgroup Support
>
> Get Secure! - www.microsoft.com/security
> ================================================== ====
> This newsgroup only focuses on SBS technical issues. If you have issues
> regarding other Microsoft products, you'd better post in the corresponding
> newsgroups so that they can be resolved in an efficient and timely manner.
> You can locate the newsgroup here:
> http://www.microsoft.com/communities...s/default.aspx
>
> When opening a new thread via the web interface, we recommend you check the
> "Notify me of replies" box to receive e-mail notifications when there are
> any updates in your thread. When responding to posts via your newsreader,
> please "Reply to Group" so that others may learn and benefit from your
> issue.
>
> Microsoft engineers can only focus on one issue per thread. Although we
> provide other information for your reference, we recommend you post
> different incidents in different threads to keep the thread clean. In doing
> so, it will ensure your issues are resolved in a timely manner.
>
> For urgent issues, you may want to contact Microsoft CSS directly. Please
> check http://support.microsoft.com for regional support phone numbers.
>
> Any input or comments in this thread are highly appreciated.
> ================================================== ====
> This posting is provided "AS IS" with no warranties, and confers no rights.
>
> --------------------
> >From: "TonyV" <>
> >Newsgroups: microsoft.public.windows.server.sbs
> >Subject: Re: Outlook 2003 client
> >Date: Tue, 23 Aug 2005 17:49:56 +0200
> >Organization: unused
> >Lines: 587
> >Message-ID: <>
> >References: <>
> <>
> <>
> <>
> <E94E1E76-AE3C-4E62-ACFD->
> <>
> >NNTP-Posting-Host: proxy.storm.co.za
> >X-Trace: ctb-nnrp2.saix.net 1124812202 19775 196.22.192.24 (23 Aug 2005
> 15:50:02 GMT)
> >X-Complaints-To:
> >NNTP-Posting-Date: 23 Aug 2005 15:50:02 GMT
> >X-Priority: 3
> >X-MSMail-Priority: Normal
> >X-Newsreader: Microsoft Outlook Express 6.00.2900.2180
> >X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
> >X-RFC2646: Format=Flowed; Original
> >Cache-Post-Path: proxy.jhb.stormnet.co.za!
> >X-Cache: nntpcache 3.0.1 (see http://www.nntpcache.org/)
> >Path:
> TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP08.phx.gbl!newsfee d00.sul.t-online.de!t-onli
> ne.de!border2.nntp.dca.giganews.com!nntp.giganews. com!nx01.iad01.newshosting
> .com!newshosting.com!ctb-nntp1.saix.net!not-for-mail
> >Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:147021
> >X-Tomcat-NG: microsoft.public.windows.server.sbs
> >
> >Thanks for the input Les & Nathan,
> >
> >After reading a doc I found at
> >http://www.microsoft.com/technet/pro...linettraf.mspx,
>
> >regarding client network traffic with Exchange 2003, I now believe that
> >RPC/HTTP will generate even more traffic than normal RPC between client &
> >server over my 64k line. Therefore I don't see the benefit of RPC/HTTP
> when
> >the client is on the same side of the ISA firewall as the other LAN users.
> >
> >Downloading headers frustrates my users.
> >I think that synching the headers of Sent & Deleted items larger than 50k
> >should work out a bit better.
> >
> >I did a little test on my own Outlook2003 client. In Send/Receive settings
> I
> >un-checked my 'Deleted Items' folder from the Send/Receive group for my
> >account, but it seems as if it is still being synchronised as I can see
> >newly deleted items in my Deleted folder when accessing my mailbox through
> >OWA after this setting was applied. I think I need a deeper understanding
> >here, please advise....
> >
> >In the meantime I am encouraging users to keep personal email with
> >attachments to a minimum. A bit of user training is forming part of my
> >solution.
> >We are planning a Citrix implementation later this year. I think it would
> >really enhance the user experience to let Outlook run on the Terminal
> server
> >to clear up the line congestion issue.
> >
> >Another question on RPC/HTTP....When a local LAN user takes his notebook
> on
> >an overseas trip and want to use RPC/HTTP feature, would he have to
> remember
> >to enable this feature for the trip only, or should it be a permanent
> >setting?
> >
> >When I type https://remote.domain.com/remote in my browser from a PC on
> the
> >LAN, I get the following response: Error Code: 502 Proxy Error. The host
> was
> >not found.(11001).
> >I this a normal response because I'm on the LAN? I don't see why I should
> >have to enter any DNS settings manually (not that I really know where in
> >SBS2003 to enter those values). Shouldn't CEICW do that automatically?
> >
> >I am struggling to wrap my head around some of the SBS2003 concepts &
> >issues, but I would like to undertand it properly.
> >It seems that SBS2003 server is great when you know how to handle it.
> >Your assistance & patients is greatly appreciated.
> >
> >
> >
> >
> >
> >
> >""Nathan Liu [MSFT]"" <v-> wrote in message
> >news:...
> >> Hi TonyV,
> >>
> >> Thank you for your detailed reply.
> >>
> >> Also, many thanks for Les's great input.
> >>
> >> Question 1: How do I get https://remote.domain.local/remote to work? Was
> I
> >> right in creating the certificate to be 'remote.domain.local'?, or
> >> should it rather be 'remote.domain.com'? I ask this as some users would
> >> like to use RPC/HTTP from the Internet in the near future.
> >>
> >> Answer: Les is right on target, when we are running the CEICW, we need
> >> type a Fully Qualified Domain Name (FQDN) on the Web Server Certificate
> >> page, since the remote.domain.local is the local domain name, it doesn't
> >> work. So if you have an existing registral domain name, e.g.
> >> remote.domain.com, you can type it. Alternatively, if you don't have an
> >> existing registral domain name, you can type the Public IP address of the
> >> SBS Server.
> >>
> >> Question 2: Where does this a publishing.domain.local fit into the
> >> picture?
> >>
> >> Answer: Since you have a publishing.domain.local certificate, I assume
> >> you
> >> have installed the ISA Server. In the SBS 2K3 with ISA installed
> scenario,
> >> when you run CEICW, you are prompted to 'Create a new Web server
> >> certificate', the name you input there will be automatically be created
> as
> >> the certificate used by ISA (configured in the 'Incoming Web listener'.)
> >> The System will also create another certificate named as
> >> publishing.domain.local, this is used by IIS. For example, if you input
> >> the
> >> name 'remote.domain.com' in CEICW, CEICW will create the following 2
> >> certificates: publishing.domain.local & remote.domain.com.
> >> remote.domain.com is imported into ISA and publishing.domain.local is
> >> imported to IIS Default Website.
> >>
> >> Question 3: Do I have to get my ISP to create an A-record for a
> >> remote.domain.com?
> >>
> >> Answer: If you need to use the remote.domain.com as the FQDN in the
> >> certificate, you need to contact the ISP to create an A-record for the
> >> remote.domain.com.
> >>
> >> I am appreciated your time and cooperation. If anything is unclear,
> please
> >> feel free to let me know. I am looking forward to hearing from you.
> >>
> >> Best regards,
> >>
> >> Nathan Liu (MSFT)
> >> Microsoft CSS Online Newsgroup Support
> >>
> >> Get Secure! - www.microsoft.com/security
> >> ================================================== ====
> >> This newsgroup only focuses on SBS technical issues. If you have issues
> >> regarding other Microsoft products, you'd better post in the
> corresponding
> >> newsgroups so that they can be resolved in an efficient and timely
> manner.
> >> You can locate the newsgroup here:
> >> http://www.microsoft.com/communities...s/default.aspx
> >>
> >> When opening a new thread via the web interface, we recommend you check
> >> the
> >> "Notify me of replies" box to receive e-mail notifications when there are
> >> any updates in your thread. When responding to posts via your newsreader,
> >> please "Reply to Group" so that others may learn and benefit from your
> >> issue.
> >>
> >> Microsoft engineers can only focus on one issue per thread. Although we
> >> provide other information for your reference, we recommend you post
> >> different incidents in different threads to keep the thread clean. In
> >> doing
> >> so, it will ensure your issues are resolved in a timely manner.
> >>
> >> For urgent issues, you may want to contact Microsoft CSS directly. Please
> >> check http://support.microsoft.com for regional support phone numbers.
> >>
> >> Any input or comments in this thread are highly appreciated.
> >> ================================================== ====
> >> This posting is provided "AS IS" with no warranties, and confers no
> >> rights.
> >>
> >> --------------------
> >>>Thread-Topic: Outlook 2003 client
> >>>thread-index: AcWkE1gVXCPP1OYnQ425MNdO2DF50g==
> >>>X-WBNR-Posting-Host: 196.22.209.70
> >>>From: "=?Utf-8?B?VG9ueVY=?=" <>
> >>>References: <>
> >> <>
> >> <>
> >> <>
> >>>Subject: Re: Outlook 2003 client
> >>>Date: Thu, 18 Aug 2005 09:39:03 -0700
> >>>Lines: 350
> >>>Message-ID: <E94E1E76-AE3C-4E62-ACFD->
> >>>MIME-Version: 1.0
> >>>Content-Type: text/plain;
> >>> charset="Utf-8"
> >>>Content-Transfer-Encoding: 8bit
> >>>X-Newsreader: Microsoft CDO for Windows 2000
> >>>Content-Class: urn:content-classes:message
> >>>Importance: normal
> >>>Priority: normal
> >>>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
> >>>Newsgroups: microsoft.public.windows.server.sbs
> >>>NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
> >>>Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGXA03.phx.gbl
> >>>Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:145582

Since the Exchange cannot find some emails in the other items of
> the Outlook, it will move these specific items to 'Deleted Items', this
> process will avoid the conflict in the synchronization.

Please elaborate on your answer...I don't think I understand 100% what you
meant.

3. I do have DHCP on my network and use standard SSL port numbers (443).
When I type http://localhost/remote on the SBS server, the RWW page displays
fine.

Typing https://domain.local/remote from my PC on the same LAN also works,
but https://remote.domain.com/remote does not work.

But is https://remote.domain.com/remote suppose really suppose to work when
typed from the internal network (LAN), compared to
https://domain.local/remote?
What must the ISA2004 rules look like. At the moment there is one RWW
inbound rule that is disabled. Enabling it did also not makes a difference to
my problem.

I still have not told my ISP to create the A-record for remote.domain.com. I
don't think it will make a difference when the request comes from the
internal network.

Regards
Tony

""Nathan Liu [MSFT]"" wrote:

> Hi TonyV,
>
> Thank you for your kindly update.
>
> 1. Question: As you mentioned, you have tested to un-checked my 'Deleted
> Items' folder from the Send/Receive group for my account, but you can see
> it newly deleted items in my Deleted folder when accessing my mailbox
> through OWA after this setting was applied.
>
> Answer: Based on my testing, this issue is expectation. When the Exchange
> synchronize with the Outlook, and we un-checked the 'Deleted Items' folder
> from the Send/Receive group for your account in the Outlook Send/Receive
> settings. Since the Exchange cannot find some emails in the other items of
> the Outlook, it will move these specific items to 'Deleted Items', this
> process will avoid the conflict in the synchronization.
>
> 2. Question: Another question on RPC/HTTP....When a local LAN user takes
> his notebook on an overseas trip and want to use RPC/HTTP feature, would he
> have to remember to enable this feature for the trip only, or should it be
> a permanent setting?
>
> Answer: Yes, if the specific user would like to use the RPC/HTTP feature,
> he must enable this function in his Outlook.
>
> 3. Question: When I type https://remote.domain.com/remote in my browser
> from a PC on the
> LAN, I get the following response: Error Code: 502 Proxy Error. The host
> was not found (11001).
>
> I this a normal response because I'm on the LAN? I don't see why I should
> have to enter any DNS settings manually (not that I really know where in
> SBS2003 to enter those values). Shouldn't CEICW do that automatically?
>
> Answer: This issue is not a normal response, please check the web proxy's
> settings on the problematic PC. if you have DHCP server on your network,
> you don't need to enter any DNS settings manually, when you run the CEICW,
> it will automatically configure the DHCP, DNS, etc. On the SBS Server, if
> you use the http://localhost/remote link to access the RWW, what's the
> result?
>
> Regarding the 502 proxy error, I assume that you are trying to access the
> RWW site behind an ISA server. This error was reported by your local ISA
> server. When we use the ISA server as a proxy, only the standard SSL port
> is allowed. If you want to access a SSL site with non-standard port number,
> you need to modify the registry on the ISA server. For the detailed
> information, please refer to the following KB article:
>
> 283284 Blank Page or Page Cannot Be Displayed When You View SSL Sites
> Through
> http://support.microsoft.com/?id=283284
>
> To get more information, please refer to the below document:
>
> Getting Started: Windows Small Business Server 2003 with SP1
> http://go.microsoft.com/fwlink/?linkid=46574
>
> Windows Small Business Server 2003 Troubleshooting
> http://go.microsoft.com/fwlink/?LinkId=49937
>
> Connecting Mobile and Remote Users
> http://go.microsoft.com/fwlink/?LinkId=49918
>
> I am appreciated your time and cooperation. If anything is unclear, please
> feel free to let me know. I am looking forward to hearing from you.
>
> Best regards,
>
> Nathan Liu (MSFT)
> Microsoft CSS Online Newsgroup Support
>
> Get Secure! - www.microsoft.com/security
> ================================================== ====
> This newsgroup only focuses on SBS technical issues. If you have issues
> regarding other Microsoft products, you'd better post in the corresponding
> newsgroups so that they can be resolved in an efficient and timely manner.
> You can locate the newsgroup here:
> http://www.microsoft.com/communities...s/default.aspx
>
> When opening a new thread via the web interface, we recommend you check the
> "Notify me of replies" box to receive e-mail notifications when there are
> any updates in your thread. When responding to posts via your newsreader,
> please "Reply to Group" so that others may learn and benefit from your
> issue.
>
> Microsoft engineers can only focus on one issue per thread. Although we
> provide other information for your reference, we recommend you post
> different incidents in different threads to keep the thread clean. In doing
> so, it will ensure your issues are resolved in a timely manner.
>
> For urgent issues, you may want to contact Microsoft CSS directly. Please
> check http://support.microsoft.com for regional support phone numbers.
>
> Any input or comments in this thread are highly appreciated.
> ================================================== ====
> This posting is provided "AS IS" with no warranties, and confers no rights.
>
> --------------------
> >From: "TonyV" <>
> >Newsgroups: microsoft.public.windows.server.sbs
> >Subject: Re: Outlook 2003 client
> >Date: Tue, 23 Aug 2005 17:49:56 +0200
> >Organization: unused
> >Lines: 587
> >Message-ID: <>
> >References: <>
> <>
> <>
> <>
> <E94E1E76-AE3C-4E62-ACFD->
> <>
> >NNTP-Posting-Host: proxy.storm.co.za
> >X-Trace: ctb-nnrp2.saix.net 1124812202 19775 196.22.192.24 (23 Aug 2005
> 15:50:02 GMT)
> >X-Complaints-To:
> >NNTP-Posting-Date: 23 Aug 2005 15:50:02 GMT
> >X-Priority: 3
> >X-MSMail-Priority: Normal
> >X-Newsreader: Microsoft Outlook Express 6.00.2900.2180
> >X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
> >X-RFC2646: Format=Flowed; Original
> >Cache-Post-Path: proxy.jhb.stormnet.co.za!
> >X-Cache: nntpcache 3.0.1 (see http://www.nntpcache.org/)
> >Path:
> TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP08.phx.gbl!newsfee d00.sul.t-online.de!t-onli
> ne.de!border2.nntp.dca.giganews.com!nntp.giganews. com!nx01.iad01.newshosting
> .com!newshosting.com!ctb-nntp1.saix.net!not-for-mail
> >Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:147021
> >X-Tomcat-NG: microsoft.public.windows.server.sbs
> >
> >Thanks for the input Les & Nathan,
> >
> >After reading a doc I found at
> >http://www.microsoft.com/technet/pro...linettraf.mspx,
>
> >regarding client network traffic with Exchange 2003, I now believe that
> >RPC/HTTP will generate even more traffic than normal RPC between client &
> >server over my 64k line. Therefore I don't see the benefit of RPC/HTTP
> when
> >the client is on the same side of the ISA firewall as the other LAN users.
> >
> >Downloading headers frustrates my users.
> >I think that synching the headers of Sent & Deleted items larger than 50k
> >should work out a bit better.
> >
> >I did a little test on my own Outlook2003 client. In Send/Receive settings
> I
> >un-checked my 'Deleted Items' folder from the Send/Receive group for my
> >account, but it seems as if it is still being synchronised as I can see
> >newly deleted items in my Deleted folder when accessing my mailbox through
> >OWA after this setting was applied. I think I need a deeper understanding
> >here, please advise....
> >
> >In the meantime I am encouraging users to keep personal email with
> >attachments to a minimum. A bit of user training is forming part of my
> >solution.
> >We are planning a Citrix implementation later this year. I think it would
> >really enhance the user experience to let Outlook run on the Terminal
> server
> >to clear up the line congestion issue.
> >
> >Another question on RPC/HTTP....When a local LAN user takes his notebook
> on
> >an overseas trip and want to use RPC/HTTP feature, would he have to
> remember
> >to enable this feature for the trip only, or should it be a permanent
> >setting?
> >
> >When I type https://remote.domain.com/remote in my browser from a PC on
> the
> >LAN, I get the following response: Error Code: 502 Proxy Error. The host
> was
> >not found.(11001).
> >I this a normal response because I'm on the LAN? I don't see why I should
> >have to enter any DNS settings manually (not that I really know where in
> >SBS2003 to enter those values). Shouldn't CEICW do that automatically?
> >
> >I am struggling to wrap my head around some of the SBS2003 concepts &
> >issues, but I would like to undertand it properly.
> >It seems that SBS2003 server is great when you know how to handle it.
> >Your assistance & patients is greatly appreciated.
> >
> >
> >
> >
> >
> >
> >""Nathan Liu [MSFT]"" <v-> wrote in message
> >news:...
> >> Hi TonyV,
> >>
> >> Thank you for your detailed reply.
> >>
> >> Also, many thanks for Les's great input.
> >>
> >> Question 1: How do I get https://remote.domain.local/remote to work? Was
> I
> >> right in creating the certificate to be 'remote.domain.local'?, or
> >> should it rather be 'remote.domain.com'? I ask this as some users would
> >> like to use RPC/HTTP from the Internet in the near future.
> >>
> >> Answer: Les is right on target, when we are running the CEICW, we need
> >> type a Fully Qualified Domain Name (FQDN) on the Web Server Certificate
> >> page, since the remote.domain.local is the local domain name, it doesn't
> >> work. So if you have an existing registral domain name, e.g.
> >> remote.domain.com, you can type it. Alternatively, if you don't have an
> >> existing registral domain name, you can type the Public IP address of the
> >> SBS Server.
> >>
> >> Question 2: Where does this a publishing.domain.local fit into the
> >> picture?
> >>
> >> Answer: Since you have a publishing.domain.local certificate, I assume
> >> you
> >> have installed the ISA Server. In the SBS 2K3 with ISA installed
> scenario,
> >> when you run CEICW, you are prompted to 'Create a new Web server
> >> certificate', the name you input there will be automatically be created
> as
> >> the certificate used by ISA (configured in the 'Incoming Web listener'.)
> >> The System will also create another certificate named as
> >> publishing.domain.local, this is used by IIS. For example, if you input
> >> the
> >> name 'remote.domain.com' in CEICW, CEICW will create the following 2
> >> certificates: publishing.domain.local & remote.domain.com.
> >> remote.domain.com is imported into ISA and publishing.domain.local is
> >> imported to IIS Default Website.
> >>
> >> Question 3: Do I have to get my ISP to create an A-record for a
> >> remote.domain.com?
> >>
> >> Answer: If you need to use the remote.domain.com as the FQDN in the
> >> certificate, you need to contact the ISP to create an A-record for the
> >> remote.domain.com.
> >>
> >> I am appreciated your time and cooperation. If anything is unclear,
> please
> >> feel free to let me know. I am looking forward to hearing from you.
> >>
> >> Best regards,
> >>
> >> Nathan Liu (MSFT)
> >> Microsoft CSS Online Newsgroup Support
> >>
> >> Get Secure! - www.microsoft.com/security
> >> ================================================== ====
> >> This newsgroup only focuses on SBS technical issues. If you have issues
> >> regarding other Microsoft products, you'd better post in the
> corresponding
> >> newsgroups so that they can be resolved in an efficient and timely
> manner.
> >> You can locate the newsgroup here:
> >> http://www.microsoft.com/communities...s/default.aspx
> >>
> >> When opening a new thread via the web interface, we recommend you check
> >> the
> >> "Notify me of replies" box to receive e-mail notifications when there are
> >> any updates in your thread. When responding to posts via your newsreader,
> >> please "Reply to Group" so that others may learn and benefit from your
> >> issue.
> >>
> >> Microsoft engineers can only focus on one issue per thread. Although we
> >> provide other information for your reference, we recommend you post
> >> different incidents in different threads to keep the thread clean. In
> >> doing
> >> so, it will ensure your issues are resolved in a timely manner.
> >>
> >> For urgent issues, you may want to contact Microsoft CSS directly. Please
> >> check http://support.microsoft.com for regional support phone numbers.
> >>
> >> Any input or comments in this thread are highly appreciated.
> >> ================================================== ====
> >> This posting is provided "AS IS" with no warranties, and confers no
> >> rights.
> >>
> >> --------------------
> >>>Thread-Topic: Outlook 2003 client
> >>>thread-index: AcWkE1gVXCPP1OYnQ425MNdO2DF50g==
> >>>X-WBNR-Posting-Host: 196.22.209.70
> >>>From: "=?Utf-8?B?VG9ueVY=?=" <>
> >>>References: <>
> >> <>
> >> <>
> >> <>
> >>>Subject: Re: Outlook 2003 client
> >>>Date: Thu, 18 Aug 2005 09:39:03 -0700
> >>>Lines: 350
> >>>Message-ID: <E94E1E76-AE3C-4E62-ACFD->
> >>>MIME-Version: 1.0
> >>>Content-Type: text/plain;
> >>> charset="Utf-8"
> >>>Content-Transfer-Encoding: 8bit
> >>>X-Newsreader: Microsoft CDO for Windows 2000
> >>>Content-Class: urn:content-classes:message
> >>>Importance: normal
> >>>Priority: normal
> >>>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
> >>>Newsgroups: microsoft.public.windows.server.sbs
> >>>NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
> >>>Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGXA03.phx.gbl
> >>>Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:145582

Hi Tony,

Thank you for your update.

1. Question: As you mentioned, you have tested to un-checked my 'Deleted
Items' folder from the Send/Receive group for my account, but you can see
it newly deleted items in my Deleted folder when accessing my mailbox
through OWA after this setting was applied.

Answer: Let's think it, if we un-check the 'Deleted Items' folder from the
Send/Receive group for your account in the Outlook Send/Receive Settings,
and then we delete a testing email in the Inbox on Outlook, this email will
appear in the 'Deleted Items' folder on the Outlook. Let's click the
Send/Receive to synchronize Outlook local data with the Exchange Server, it
will synchronize these Utility folders (common views, views, and security
settings), Calendar, Contacts, Drafts, Inbox, All other folders (defined
by the user), Sent Items, Public Folder Favorites (added by the user),
expect the 'Deleted Items' folder, therefore, only the deleted testing
email cannot sync, since the Exchange side cannot find some emails in the
other items of the Outlook, it will move these specific items to 'Deleted
Items', this process will avoid the conflict in the synchronization.
Additionally, you may refer to the below KB article:

870926 Description of Outlook 2003 with Cached Exchange Mode in an Exchange
Server 2003 environment
http://support.microsoft.com/?id=870926

2. Please understand the 'Default Web Site' listens on the 'All
Unassigned' IP address (i.e. SBS Internal and external IP address,
127.0.0.1 local loop IP address), when we access the
http://localhost/remote link on the SBS Server, this access request is
listened by 127.0.0.1 local loop IP address. when we access the
https://domain.local/remote link from your client PC on the same LAN, the
domain.local is resolved to SBS Internal IP address by the DNS Server on
the SBS Server.
When we access the https://remote.domain.com/remote from external/Internet,
if the remote.domain.com is not a FQDN name, we will cannot locate the
website. Therefore, please type a Fully Qualified Domain Name (FQDN) on the
Web Server Certificate page, when you are running the CEICW. This FQDN is
also used to access the website of the SBS Server from external.

3. To configure the ISA 2004 Server to allow appropriate network traffic,
you may refer to the below Ports table:

Ports that Enable Remote Access to SBS Services
Port 21 enable external and internal file transfer
Port 25 enable incoming and outgoing SMTP mail
Port 80 (http://) enables all nonsecure browser access, including:
internal access to IIS Webs including the company Web, Windows SharePoint
Web, Windows SharePoint administration Web, and server monitoring and usage
reports Enables internal access to Exchange by OWA and OMA clients
Port 110 enables Exchange to accept incoming POP3 mail
Port 123 (UDP port) enables the system to synchronize time with an
external Network Time Protocol (NTP) server
Port 143 enables Exchange to accept incoming IMAP4-compliant messages
Port 220 enables Exchange to accept incoming IMAP3-compliant messages
Port 443 (https://) enable all secure browser access, including
external access to Exchange for Outlook 2003, OWA, and OMA clients;
required for external access to server monitoring and usage reports
Port 444 enable internal and external access to the SharePoint Web
Port 500 enables external VPN connections by using IPSec
Port 1701 enables external L2TP VPN connections
Port 1723 enables external PPTP VPN connections
Port 3389 enables internal and external Terminal Services client
connections
Port 4125 (Note: you can change this port in RRAS) enable external OWA
access to Exchange, plus internal and external HTTPS access to the client
Web site
Port 4500 Internet Key Exchange (IKE) Network Address Translation (NAT)
traversal

======
Generally, in order to allow the relevant settings, we may perform the
following steps:

Note: These steps are not officially supported.

1. Inbound Terminal Service to SBS.

Action: Allow
Protocol: RDP
From: Anywhere
To: Local Host

2. Inbound RWW.

Action: Allow
Protocol: RWW (new one: TCP outbound 4125)
From: Anywhere
To: Local Host

3. Inbound VPN.

Make sure not to use the SBS wizard to enable RRAS. Stop RRAS service and
set to Manual.

In ISA console, under "Virtual Private Networks (VPN)", click "Verify that
VPN Client Access is Enabled" to enable and configure VPN. You can click
"Remote Access Configuration" for more VPN settings.

4. Web publishing RWW, OWA, OMA and such.

840614 How to install and use certificates for SSL connections in ISA Server
http://support.microsoft.com/?id=840614

838244 How to configure a certificate for use with a Web publishing rule in
ISA
http://support.microsoft.com/?id=838244

838252 How to configure Web publishing rules to host multiple Web sites with
http://support.microsoft.com/?id=838252

If you don't want to use Web publishing, you can use Server publishing rule
with HTTPS Server and HTTP Server (TCP inbound 80) to publish the internal
NIC to the External. Server Publishing (Also known tunneling) is much
easier for configuration. Refer to the following article:

837834 How to publish an SSL Web site by using SSL tunneling in ISA Server
2004
http://support.microsoft.com/?id=837834

===========

I am appreciated your time and cooperation. If anything is unclear, please
feel free to let me know. I am looking forward to hearing from you.

Best regards,

Nathan Liu (MSFT)
Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security
================================================== ====
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities...s/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.
================================================== ====
This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------
>Thread-Topic: Outlook 2003 client
>thread-index: AcWvDoPfUajJIHENSS2fTFWgMecfsw==
>X-WBNR-Posting-Host: 196.22.209.70
>From: "=?Utf-8?B?VG9ueVY=?=" <>
>References: <>
<>
<>
<>
<E94E1E76-AE3C-4E62-ACFD->
<>
<>
<>
>Subject: Re: Outlook 2003 client
>Date: Thu, 1 Sep 2005 09:02:12 -0700
>Lines: 330
>Message-ID: <B96DF385-F905-491C-A4F2->
>MIME-Version: 1.0
>Content-Type: text/plain;
> charset="Utf-8"
>Content-Transfer-Encoding: 7bit
>X-Newsreader: Microsoft CDO for Windows 2000
>Content-Class: urn:content-classes:message
>Importance: normal
>Priority: normal
>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
>Newsgroups: microsoft.public.windows.server.sbs
>NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
>Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGXA03.phx.gbl
>Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:149922
>X-Tomcat-NG: microsoft.public.windows.server.sbs
>
>Since the Exchange cannot find some emails in the other items of
>> the Outlook, it will move these specific items to 'Deleted Items', this
>> process will avoid the conflict in the synchronization.
>
>Please elaborate on your answer...I don't think I understand 100% what you
>meant.
>
>3. I do have DHCP on my network and use standard SSL port numbers (443).
>When I type http://localhost/remote on the SBS server, the RWW page
displays
>fine.
>
>Typing https://domain.local/remote from my PC on the same LAN also works,
>but https://remote.domain.com/remote does not work.
>
>But is https://remote.domain.com/remote suppose really suppose to work
when
>typed from the internal network (LAN), compared to
>https://domain.local/remote?
>What must the ISA2004 rules look like. At the moment there is one RWW
>inbound rule that is disabled. Enabling it did also not makes a difference
to
>my problem.
>
>I still have not told my ISP to create the A-record for remote.domain.com.
I
>don't think it will make a difference when the request comes from the
>internal network.
>
>Regards
>Tony
>
>""Nathan Liu [MSFT]"" wrote:
>
>> Hi TonyV,
>>
>> Thank you for your kindly update.
>>
>> 1. Question: As you mentioned, you have tested to un-checked my
'Deleted
>> Items' folder from the Send/Receive group for my account, but you can
see
>> it newly deleted items in my Deleted folder when accessing my mailbox
>> through OWA after this setting was applied.
>>
>> Answer: Based on my testing, this issue is expectation. When the
Exchange
>> synchronize with the Outlook, and we un-checked the 'Deleted Items'
folder
>> from the Send/Receive group for your account in the Outlook Send/Receive
>> settings. Since the Exchange cannot find some emails in the other items
of
>> the Outlook, it will move these specific items to 'Deleted Items', this
>> process will avoid the conflict in the synchronization.
>>
>> 2. Question: Another question on RPC/HTTP....When a local LAN user
takes
>> his notebook on an overseas trip and want to use RPC/HTTP feature, would
he
>> have to remember to enable this feature for the trip only, or should it
be
>> a permanent setting?
>>
>> Answer: Yes, if the specific user would like to use the RPC/HTTP
feature,
>> he must enable this function in his Outlook.
>>
>> 3. Question: When I type https://remote.domain.com/remote in my
browser
>> from a PC on the
>> LAN, I get the following response: Error Code: 502 Proxy Error. The host
>> was not found (11001).
>>
>> I this a normal response because I'm on the LAN? I don't see why I
should
>> have to enter any DNS settings manually (not that I really know where in
>> SBS2003 to enter those values). Shouldn't CEICW do that automatically?
>>
>> Answer: This issue is not a normal response, please check the web
proxy's
>> settings on the problematic PC. if you have DHCP server on your network,
>> you don't need to enter any DNS settings manually, when you run the
CEICW,
>> it will automatically configure the DHCP, DNS, etc. On the SBS Server,
if
>> you use the http://localhost/remote link to access the RWW, what's the
>> result?
>>
>> Regarding the 502 proxy error, I assume that you are trying to access
the
>> RWW site behind an ISA server. This error was reported by your local ISA
>> server. When we use the ISA server as a proxy, only the standard SSL
port
>> is allowed. If you want to access a SSL site with non-standard port
number,
>> you need to modify the registry on the ISA server. For the detailed
>> information, please refer to the following KB article:
>>
>> 283284 Blank Page or Page Cannot Be Displayed When You View SSL Sites
>> Through
>> http://support.microsoft.com/?id=283284
>>
>> To get more information, please refer to the below document:
>>
>> Getting Started: Windows Small Business Server 2003 with SP1
>> http://go.microsoft.com/fwlink/?linkid=46574
>>
>> Windows Small Business Server 2003 Troubleshooting
>> http://go.microsoft.com/fwlink/?LinkId=49937
>>
>> Connecting Mobile and Remote Users
>> http://go.microsoft.com/fwlink/?LinkId=49918
>>
>> I am appreciated your time and cooperation. If anything is unclear,
please
>> feel free to let me know. I am looking forward to hearing from you.
>>
>> Best regards,
>>
>> Nathan Liu (MSFT)
>> Microsoft CSS Online Newsgroup Support
>>
>> Get Secure! - www.microsoft.com/security
>> ================================================== ====
>> This newsgroup only focuses on SBS technical issues. If you have issues
>> regarding other Microsoft products, you'd better post in the
corresponding
>> newsgroups so that they can be resolved in an efficient and timely
manner.
>> You can locate the newsgroup here:
>> http://www.microsoft.com/communities...s/default.aspx
>>
>> When opening a new thread via the web interface, we recommend you check
the
>> "Notify me of replies" box to receive e-mail notifications when there
are
>> any updates in your thread. When responding to posts via your
newsreader,
>> please "Reply to Group" so that others may learn and benefit from your
>> issue.
>>
>> Microsoft engineers can only focus on one issue per thread. Although we
>> provide other information for your reference, we recommend you post
>> different incidents in different threads to keep the thread clean. In
doing
>> so, it will ensure your issues are resolved in a timely manner.
>>
>> For urgent issues, you may want to contact Microsoft CSS directly.
Please
>> check http://support.microsoft.com for regional support phone numbers.
>>
>> Any input or comments in this thread are highly appreciated.
>> ================================================== ====
>> This posting is provided "AS IS" with no warranties, and confers no
rights.
>>
>> --------------------
>> >From: "TonyV" <>
>> >Newsgroups: microsoft.public.windows.server.sbs
>> >Subject: Re: Outlook 2003 client
>> >Date: Tue, 23 Aug 2005 17:49:56 +0200
>> >Organization: unused
>> >Lines: 587
>> >Message-ID: <>
>> >References: <>
>> <>
>> <>
>> <>
>> <E94E1E76-AE3C-4E62-ACFD->
>> <>
>> >NNTP-Posting-Host: proxy.storm.co.za
>> >X-Trace: ctb-nnrp2.saix.net 1124812202 19775 196.22.192.24 (23 Aug 2005
>> 15:50:02 GMT)
>> >X-Complaints-To:
>> >NNTP-Posting-Date: 23 Aug 2005 15:50:02 GMT
>> >X-Priority: 3
>> >X-MSMail-Priority: Normal
>> >X-Newsreader: Microsoft Outlook Express 6.00.2900.2180
>> >X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
>> >X-RFC2646: Format=Flowed; Original
>> >Cache-Post-Path: proxy.jhb.stormnet.co.za!
>> >X-Cache: nntpcache 3.0.1 (see http://www.nntpcache.org/)
>> >Path:
>>
TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP08.phx.gbl!newsfee d00.sul.t-online.de!t-onli
>>
ne.de!border2.nntp.dca.giganews.com!nntp.giganews. com!nx01.iad01.newshosting
>> .com!newshosting.com!ctb-nntp1.saix.net!not-for-mail
>> >Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:147021
>> >X-Tomcat-NG: microsoft.public.windows.server.sbs
>> >
>> >Thanks for the input Les & Nathan,
>> >
>> >After reading a doc I found at
>>
>http://www.microsoft.com/technet/pro...linettraf.mspx,
>>
>> >regarding client network traffic with Exchange 2003, I now believe that
>> >RPC/HTTP will generate even more traffic than normal RPC between client
&
>> >server over my 64k line. Therefore I don't see the benefit of RPC/HTTP
>> when
>> >the client is on the same side of the ISA firewall as the other LAN
users.
>> >
>> >Downloading headers frustrates my users.
>> >I think that synching the headers of Sent & Deleted items larger than
50k
>> >should work out a bit better.
>> >
>> >I did a little test on my own Outlook2003 client. In Send/Receive
settings
>> I
>> >un-checked my 'Deleted Items' folder from the Send/Receive group for
my
>> >account, but it seems as if it is still being synchronised as I can see
>> >newly deleted items in my Deleted folder when accessing my mailbox
through
>> >OWA after this setting was applied. I think I need a deeper
understanding
>> >here, please advise....
>> >
>> >In the meantime I am encouraging users to keep personal email with
>> >attachments to a minimum. A bit of user training is forming part of my
>> >solution.
>> >We are planning a Citrix implementation later this year. I think it
would
>> >really enhance the user experience to let Outlook run on the Terminal
>> server
>> >to clear up the line congestion issue.
>> >
>> >Another question on RPC/HTTP....When a local LAN user takes his
notebook
>> on
>> >an overseas trip and want to use RPC/HTTP feature, would he have to
>> remember
>> >to enable this feature for the trip only, or should it be a permanent
>> >setting?
>> >
>> >When I type https://remote.domain.com/remote in my browser from a PC on
>> the
>> >LAN, I get the following response: Error Code: 502 Proxy Error. The
host
>> was
>> >not found.(11001).
>> >I this a normal response because I'm on the LAN? I don't see why I
should
>> >have to enter any DNS settings manually (not that I really know where
in
>> >SBS2003 to enter those values). Shouldn't CEICW do that automatically?
>> >
>> >I am struggling to wrap my head around some of the SBS2003 concepts &
>> >issues, but I would like to undertand it properly.
>> >It seems that SBS2003 server is great when you know how to handle it.
>> >Your assistance & patients is greatly appreciated.
>> >
>> >
>> >
>> >
>> >
>> >
>> >""Nathan Liu [MSFT]"" <v-> wrote in message
>> >news:...
>> >> Hi TonyV,
>> >>
>> >> Thank you for your detailed reply.
>> >>
>> >> Also, many thanks for Les's great input.
>> >>
>> >> Question 1: How do I get https://remote.domain.local/remote to work?
Was
>> I
>> >> right in creating the certificate to be 'remote.domain.local'?, or
>> >> should it rather be 'remote.domain.com'? I ask this as some users
would
>> >> like to use RPC/HTTP from the Internet in the near future.
>> >>
>> >> Answer: Les is right on target, when we are running the CEICW, we
need
>> >> type a Fully Qualified Domain Name (FQDN) on the Web Server
Certificate
>> >> page, since the remote.domain.local is the local domain name, it
doesn't
>> >> work. So if you have an existing registral domain name, e.g.
>> >> remote.domain.com, you can type it. Alternatively, if you don't have
an
>> >> existing registral domain name, you can type the Public IP address of
the
>> >> SBS Server.
>> >>
>> >> Question 2: Where does this a publishing.domain.local fit into the
>> >> picture?
>> >>
>> >> Answer: Since you have a publishing.domain.local certificate, I
assume
>> >> you
>> >> have installed the ISA Server. In the SBS 2K3 with ISA installed
>> scenario,
>> >> when you run CEICW, you are prompted to 'Create a new Web server
>> >> certificate', the name you input there will be automatically be
created
>> as
>> >> the certificate used by ISA (configured in the 'Incoming Web
listener'.)
>> >> The System will also create another certificate named as
>> >> publishing.domain.local, this is used by IIS. For example, if you
input
>> >> the
>> >> name 'remote.domain.com' in CEICW, CEICW will create the following 2
>> >> certificates: publishing.domain.local & remote.domain.com.
>> >> remote.domain.com is imported into ISA and publishing.domain.local is
>> >> imported to IIS Default Website.
>> >>
>> >> Question 3: Do I have to get my ISP to create an A-record for a
>> >> remote.domain.com?
>> >>
>> >> Answer: If you need to use the remote.domain.com as the FQDN in the
>> >> certificate, you need to contact the ISP to create an A-record for the
>> >> remote.domain.com.
>> >>
>> >> I am appreciated your time and cooperation. If anything is unclear,
>> please
>> >> feel free to let me know. I am looking forward to hearing from you.
>> >>
>> >> Best regards,
>> >>
>> >> Nathan Liu (MSFT)
>> >> Microsoft CSS Online Newsgroup Support
>> >>
>> >> Get Secure! - www.microsoft.com/security
>> >> ================================================== ====
>> >> This newsgroup only focuses on SBS technical issues. If you have
issues
>> >> regarding other Microsoft products, you'd better post in the
>> corresponding
>> >> newsgroups so that they can be resolved in an efficient and timely
>> manner.
>> >> You can locate the newsgroup here:
>> >> http://www.microsoft.com/communities...s/default.aspx
>> >>
>> >> When opening a new thread via the web interface, we recommend you
check
>> >> the
>> >> "Notify me of replies" box to receive e-mail notifications when there
are
>> >> any updates in your thread. When responding to posts via your
newsreader,
>> >> please "Reply to Group" so that others may learn and benefit from your
>> >> issue.
>> >>
>> >> Microsoft engineers can only focus on one issue per thread. Although
we
>> >> provide other information for your reference, we recommend you post
>> >> different incidents in different threads to keep the thread clean. In
>> >> doing
>> >> so, it will ensure your issues are resolved in a timely manner.
>> >>
>> >> For urgent issues, you may want to contact Microsoft CSS directly.
Please
>> >> check http://support.microsoft.com for regional support phone numbers.
>> >>
>> >> Any input or comments in this thread are highly appreciated.
>> >> ================================================== ====
>> >> This posting is provided "AS IS" with no warranties, and confers no
>> >> rights.
>> >>
>> >> --------------------
>> >>>Thread-Topic: Outlook 2003 client
>> >>>thread-index: AcWkE1gVXCPP1OYnQ425MNdO2DF50g==
>> >>>X-WBNR-Posting-Host: 196.22.209.70
>> >>>From: "=?Utf-8?B?VG9ueVY=?=" <>
>> >>>References: <>
>> >> <>
>> >> <>
>> >> <>
>> >>>Subject: Re: Outlook 2003 client
>> >>>Date: Thu, 18 Aug 2005 09:39:03 -0700
>> >>>Lines: 350
>> >>>Message-ID: <E94E1E76-AE3C-4E62-ACFD->
>> >>>MIME-Version: 1.0
>> >>>Content-Type: text/plain;
>> >>> charset="Utf-8"
>> >>>Content-Transfer-Encoding: 8bit
>> >>>X-Newsreader: Microsoft CDO for Windows 2000
>> >>>Content-Class: urn:content-classes:message
>> >>>Importance: normal
>> >>>Priority: normal
>> >>>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
>> >>>Newsgroups: microsoft.public.windows.server.sbs
>> >>>NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
>> >>>Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGXA03.phx.gbl
>> >>>Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:145582
>