RE: IIS6 on W2k3 DCs

From: Laura A. Robinson (larobins_at_bellatlantic.net)
Date: 01/15/05

  • Next message: Devin Ganger: "RE: IIS6 on W2k3 DCs" 
    To: "'Miroslaw Slawek Chorazy'" <mchorazy@depaul.edu>, <focus-ms@securityfocus.com>, <sd_wireless@yahoo.com>
Date: Fri, 14 Jan 2005 21:25:59 -0500

    > One pro-vote for IIS6 being installed on DC is related to
    > your Certificate Authority which might be installed on a DC.
    > The Microsoft Certificate Engine would then by default; 1.
    > try to obtain Certificate Revocation List updates from http
    > location 2. offer certifcate enrollment for end-users via http
    >
    Actually, none of that has anything to do with the machine being a DC or
    not. Enterprise CA, standalone CA, it doesn't matter- they should not be
    installed on DCs. The items that you list, which are only a couple of the
    methods available for CRL/AIA/CPS retrievals, do not have anything
    whatsoever to do with the CA being a DC. And again, DCs should not be CAs,
    both for performance and security reasons.

    Laura

    ---------------------------------------------------------------------------
    ---------------------------------------------------------------------------

  • Next message: Devin Ganger: "RE: IIS6 on W2k3 DCs"

    Relevant Pages

    • Re: Outlook RPC over HTTp deosnt work
      ... but i need install certificate key to using rpc over http. ... when you try to use RPC over HTTP to connect the Exchange Server. ... Make sure you have enabled "Outlook over the Internet" and "Remote Web ...
      (microsoft.public.windows.server.sbs)
    • Re: RPC over HTTP
      ... Also we do not receive a Certificate error when we visit the OWA webpage. ... Outlook via the Internet and fully followed the steps to configure RPC over ... HTTP Error 403.2 - Forbidden: ... Microsoft CSS Online Newsgroup Support ...
      (microsoft.public.windows.server.sbs)
    • RE: Outlook RPC over HTTp deosnt work
      ... i have same problem .and try to export certificate to a pfx file .and ... when you try to use RPC over HTTP to connect the Exchange Server. ... we don't have to manually configure RPC over HTTP. ... Make sure you have enabled "Outlook over the Internet" and "Remote Web ...
      (microsoft.public.windows.server.sbs)
    • Re: Connect exchange mailbox using http "Outlook 2003"
      ... certificate on my laptop and the connection just goes straight in now. ... Outlook will verify the certificate back to the Certificate Authority ... I am running Exchange Server 2003 and am trying to connect via http using ...
      (microsoft.public.outlook.installation)
    • Re: certificate problem with outlook 2007
      ... certificate but using the certificate that generated by CECIW. ... On the Outlook 2007 client Windows Vista computer, ... Re-configure a Outlook 2007 profile for PRC over HTTP and try again to ... How to Create an Outlook Profile for Users to Use with RPC over HTTP ...
      (microsoft.public.windows.server.sbs)