RPC over HTTP/S ... All on one box, possible?

[idoelectronics]

I have a single server that is handling everything. It is running Windows 2k3 server std and exchange 2003 std. It is also the DC and global catalog server. I have attempted to setup RPC over HTTPS only to be disconnected at every turn from the server when trying to use a HTTPS connection. I was wondering if anyone knew if this was possible. I saw an eariler post regarding this which lead to the implemntation articles on MS and petri.co.il, every resource I see mentions at minimum a 2 box solution (1 DC and 1 GC/exchange) ... I think it may be a certificate issue. I am currently reading through that information. If anyone can assist please let me know.


Thanks In Advance

 

[Zelandakh]

I'd say you either have a certificate issue (most common) or a firewall disconnect problem - check the timeout values.

 

[idoelectronics]

Thanks. I'll continue tightening the certificate services. Using the local certsrv ... should be fun. I left the firewall values at default. What should they be?

 

[idoelectronics]

Reset the certificate services and re-installed. Not working still, any suggestions?

 

[58sniper]

You don't mention what you've tried, so look at these:

How to configure RPC over HTTP in Exchange Server 2003

http://support.microsoft.com/kb/833401

Configuring the Outlook 2003 RPC over HTTP Client

http://www.msexchange.org/tutorials/outlookrpchttp.html

Using Outlook 2003 to connect to Exchange 2003 using RPC over HTTPS

http://www.msexchange.org/tutorials/Outlook_2003_Connect_Exchange_2003.html

Pat Richard, MCSE(2) MCSA:Messaging, CNA(2)

 

[idoelectronics]

Thanks sniper.

I went through all three articles.

I am still unable to connect ... when I perform start->run->outlook.exe /rpcdiag and enter the needed credentials I get disconnected.

I don't have an ISA server or any other server in the domain.

Also I have installed SSL CA's per petri's ste recommedations. Along with that I have the folling configuration on the Exch box.

Windows 2003 R2; Exchange 2k3 standard SP2; I can't think of anything else that can hamper the setup.

Thanks again for the help fellas keep the coming.

 

[58sniper]

Are you using a self-signed SSL cert, or a third party trusted cert?

Pat Richard, MCSE(2) MCSA:Messaging, CNA(2)

 

[idoelectronics]

Self-signed cert ... I have it configged per the websites and Q articles that I have read.

I have the server setup as the Enterprise Root CA.

 

[bence8810]

Hi

I had the same error. You need to import the ROOT Certificate to the machine you are trying from. That was what I missed, and held me up for days.

Let me know if it works for you. Be sure the import the ROOT certificate, which will then be a Trusted Certificate Authority in your PC.

Ben

 

[idoelectronics]

Thanks Ben,

I have the whole CA chain in the trusted ROOT in IE. Is there any other steps that need to be taken?

 

[Zelandakh]

Check the idle timeout on the firewall isn't the thing disconnecting you.