Re: Exchange/MAPI/RPC

From: Simara (simara@formdesign.com)
Date: 03/18/03

  • Next message: Douglas R. Wilson: "Re: Microsoft Security Advisory MS 03-007" 
    From: "Simara" <simara@formdesign.com>
To: "Joseph Burton" <joseph_burton1970@hotmail.com>, <focus-ms@securityfocus.com>
Date: Mon, 17 Mar 2003 20:24:50 -0500

    You will need office 2003 on top of Windows XP SP1 to connect to a Exchange
    2003.

    Other benefits:

    1. Logs of client behaviours
    2. End user statistics of responsiveness and connections in general
    3. No more offline/online mode, it is always on a mix mode (it may fail on
    communications and the client wont know if tthe server is down, allowing him
    to continue to work.)
    4. Security has been one of the principles of design
    5. It is as secured as using a regular OWA with SSL, the only thing new is
    that you are using a Win32 rich client to acces owa (and to be able to
    mantain a connection by http and to be able to sync to the server by means
    of HTTPS)

    Hope this helps,

    Alex

    ----- Original Message -----
    From: "Joseph Burton" <joseph_burton1970@hotmail.com>
    To: <focus-ms@securityfocus.com>
    Sent: Monday, March 17, 2003 10:04 AM
    Subject: RE: Exchange/MAPI/RPC

    >
    > Thank you for all the answers, I now have a better understanding of MAPI
    and
    > RPC.
    >
    > Two follow-up questions:
    >
    > 1. When using ISA server to publish an Exchange server, which port do the
    > clients connect to? Port 135? Can this be changed to any port?
    >
    > 2. Do I need the new Outlook 11 version to be able to use the
    RPC-over-HTTP
    > feature in Exchange 2003? Or does Outlook 2000/XP work as well? Also, is
    it
    > possible to use SSL with this feature? Any other issues with HTTP-RPC that
    I
    > need to be aware of? For example, does it play nice with proxies?
    >
    > Thanks again,
    >
    > //Joe
    >
    >
    >
    >
    > _________________________________________________________________
    > Lättare att hitta drömresan med MSN Resor http://www.msn.se/resor/
    >
    >
    > ----------------------------------------------------------------------
    > ALERT: How a Hacker Uses SQL Injection to Steal Your SQL Data!
    > It's as simple as placing additional SQL commands into a Web Form input
    > box giving hackers complete access to all your backend systems!
    > http://www.spidynamics.com/mktg/sqlinjection33
    >

    ----------------------------------------------------------------------
    ALERT: How a Hacker Uses SQL Injection to Steal Your SQL Data!
    It's as simple as placing additional SQL commands into a Web Form input
    box giving hackers complete access to all your backend systems!
    http://www.spidynamics.com/mktg/sqlinjection33

  • Next message: Douglas R. Wilson: "Re: Microsoft Security Advisory MS 03-007"

    Relevant Pages

    • Re: SQL Setup Advice Needed
      ... as a starter, looking at general security, have you used the Basline ... It also can be used against Exchange servers, so not sure if you've used it ... Our SQL guy did a runner, ... Client is also looking for a High Availability solution. ...
      (microsoft.public.sqlserver.setup)
    • Re: Exchange & SQL Server
      ... SQL store: http://www.outlookbythesound.com/prod03.htm I haven't looked at ... > I have a client that is currently using act to store contact & scheduling ... > info and has an app running off of SQL to do client proposals, ... > I am hoping for a way to do this using the ole-db provider for exchange, ...
      (microsoft.public.exchange.connectivity)
    • Re: Exchange & SQL Server
      ... SQL store: http://www.outlookbythesound.com/prod03.htm I haven't looked at ... > I have a client that is currently using act to store contact & scheduling ... > info and has an app running off of SQL to do client proposals, ... > I am hoping for a way to do this using the ole-db provider for exchange, ...
      (microsoft.public.exchange.applications)
    • Exchange & SQL Server
      ... I am looking for information on how, if it is possible, I can setup sql to ... not only be able to view contacts in exchange but "update/insert/delete" ... I have a client that is currently using act to store contact & scheduling ... info and has an app running off of SQL to do client proposals, ...
      (microsoft.public.exchange.applications)
    • Exchange & SQL Server
      ... I am looking for information on how, if it is possible, I can setup sql to ... not only be able to view contacts in exchange but "update/insert/delete" ... I have a client that is currently using act to store contact & scheduling ... info and has an app running off of SQL to do client proposals, ...
      (microsoft.public.exchange.connectivity)