I have a customer who is asking me if he can use rpc over http for all his outlook access. Is there any reason I can give him for NOT doing this. Why is it not a best practice (or is it)? Does anyone have an opinion?

If you have OWA, RPC over HTTPs is no more risk than having OWA. Who says it isn't a best practice?

I don't know if it is or is not a best practice. I'm wondering if there is a down side, that's all. I appreciate you answering my questions though! You may be the only person on these newsgroups (other than me) who cares about this... -Patrick