whats the recommended setup for Exchange 2007 with SBS 2008 ? Here are the problems that I seem to see: How should the Certificates be configured on SBS 2008 ? Outlook clients use autodiscover.domain.com to setup outlook yet SBS sets up remote.domain.com for the local certificates and adds the additional DNS zone for this. We have some remote users that VPN in from non domain workstations and run outlook locally, the name resolution fails for autodiscover.domain.com becuase this doesnt exist in DNS. I can manually set an entry in the local hosts file or create a dns zone for this if necessary. But what do I do about the certificates ? should I then issue a new certificate that covers the dns name autodiscover.domain.com as the remote users will get prompted each time they use OOF etc otherwise ? Can someone indicate what the recommended setup is for SBS ?

The SBS 2008 certificate wizard makes a number of presumptions, the main one being that your DNS provider supports SRV records. The fact that most providers do not, seems to have escaped Microsoft, because their preferred DNS providers do. For everyone else, I have outlined the steps required for SBS 2008 certificate installations here: http://blog.sembee.co.uk/post/SBS-2008-Certificate-Installation.aspx Simon.Simon Butler, Exchange MVP Blog | Exchange Resources

Thanks for that , I am going to run through that document but it is exactly what I was looking for. I think in trying to dumb down the installation Microsoft have actually made it harder to get everything working smoothly in SBS. I would have preferred it if SBS was just a collection of standard licenses rather than this bodged "simplified" custom setup that has got worse with each addition. Have you ever considered combining those three documents in to one downloadable guide, that info in those is really useful ?

It is a bit of a mess with multiple documents. I am currently rewriting my web site, and the SSL certificate instructions from the blog will go in to the rewrite. Microsoft have very much simplified things, but they also have this rather blinkered view of things. The SRV record method can make things easier (and cheaper) because a single name certificate is required. It is just unfortunate that no many providers support SRV records. Simon.Simon Butler, Exchange MVP Blog | Exchange Resources

Hi, How thing is going on? Gen Lin TechNet Subscriber Support in forum If you have any feedback on our support, please contact tngfb@microsoft.com Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread. Thanks Gen Lin-MSFT