Posts Tagged ‘Microsoft’
How to configure ISA 2006 with FBA for OWA and NTLM for Outlook Anywhere and Autodiscover in Exchange 2007
Configuration of Exchange 2007 with Outlook Web Access (OWA), Outlook Anywhere (OA), ActiveSync and Autodiscover can add grey hair to any system administrator or IT consultant. Then also trying to get different authentication schemes and ISA 2006 to play nice is not making it any easier.
Most Administrators have a wish to configure their environments used externally as securely as possible, including using SSL certificates with HTTPS instead of no encryption with HTTP, and using NTLM authentication instead of Basic authentication. But security is not everything, a userfriendly interface like Forms Based Authentication (FBA) is a must to avoid user iritation and support calls.
However getting FBA and NTLM to work together in ISA with Exchange 2007 can be quite scary, so lets go deeper and find out what we need to be aware of to get it working.
How to place FSMO and Global Catalog roles in Active Directory
During installation of Active Directory on a Windows Server 2000/2003/2008 all FSMO roles will automatically be installed on the first server. But Best Practice dictates to move some of theese Flexible Single Master of Operation (FSMO) roles to seperate servers.
If you only have one domain controller (not recommended), there is nothing to do since all roles must be on this server, but if you have multiple servers you should move some of theese roles on to more servers. It is also important to be aware of what servers are Global Catalog servers, especially if you have more than one domain and even if only one domain, they will be prefered by applications like Exchange server.
Windows Server 2008 DNS root hints are bugged – how to identify and fix
I recently had a problem at a customer, where Windows Server 2008 DNS, at times would not resolve requests for certain top level domains (Among others .CN, .BR, .DK and .CO.UK). The customer would experience the problem every 12-48 hours and fix it by restarting the DNS server service – not acceptable.
The problem is reproduceable and is limited to all Windows 2008 servers of all editions, including Small Business Server (SBS), where the DNS server uses root hints for internet resolution. Read the rest of this entry »
Microsoft Security Bulletin for October 2009
Next week will be busy, Microsoft is releasing several security updates.
“You hereby receive this month’s Advance Notification. Next week we are posting 13 security bulletins, of which 8 are critical. Rebooting is known to be necessary for 6 of this month’s bulletins.”
The full details of the updates can be viewed at http://www.microsoft.com/technet/security/bulletin/ms09-oct.mspx (corrected link to october – not september)
To subscribe to update information or see other updates go to http://www.microsoft.com/technet/security/current.aspx
Knowing what will be updated, before all the servers start downloading and installing can be quite helpfull to predict problems due to updates.