HTTP vs HTTPS for OWA

[BGCSOCAL]

Yesterday I updated our certificates for Exchange 2007. Something in that
changed how OWA is reacting externally. Before the update, we could type
www.company.com/owa and it worked well, now we have to type
https://www.company.com/owa. I found articles taht said to setup a
redirection, but OWA server also hosts the companies tiny little web site
www.company.com. Can I just click on the OWA properties in IIS management, go
to the Directory Security tab/Edit Authentication and Access Control and just
enable anonymous access?

Other good approaches?
--
Bettie

[BGCSOCAL]

I can also see that under the Directory Security tab if you edit Secure
Communications, there is a check box for Require secure channel (SSL). How
about just turning this off?
--
Bettie

[Ed Crowley [MVP]]

Does external OWA come straight through to the Exchange server or through a
web publishing device like an ISA server?

You can redirect HTTP to HTTPS using this method:
http://web2.minasi.com/forum/topic.asp?TOPIC_ID=28679
--
Ed Crowley MVP
"There are seldom good technological solutions to behavioral problems."
.

"BGCSOCAL" <BGCS...@discussions.microsoft.com> wrote in message
news:2E19CF04-968E-43AF...@microsoft.com...

[BGCSOCAL]

Straight through. there is no ISA server.
--
Bettie

"Ed Crowley [MVP]" wrote:

> Does external OWA come straight through to the Exchange server or through a
> web publishing device like an ISA server?
>
> You can redirect HTTP to HTTPS using this method:
> http://web2.minasi.com/forum/topic.asp?TOPIC_ID=28679
> --
> Ed Crowley MVP
> "There are seldom good technological solutions to behavioral problems."

> ..

>
> "BGCSOCAL" <BGCS...@discussions.microsoft.com> wrote in message
> news:2E19CF04-968E-43AF...@microsoft.com...
> > Yesterday I updated our certificates for Exchange 2007. Something in that
> > changed how OWA is reacting externally. Before the update, we could type
> > www.company.com/owa and it worked well, now we have to type
> > https://www.company.com/owa. I found articles taht said to setup a
> > redirection, but OWA server also hosts the companies tiny little web site
> > www.company.com. Can I just click on the OWA properties in IIS management,
> > go
> > to the Directory Security tab/Edit Authentication and Access Control and
> > just
> > enable anonymous access?
> >
> > Other good approaches?
> > --
> > Bettie
>

> .
>

[Ed Crowley [MVP]]

So it seems that you need to redirect http: to https:, right? This is a bit
tricky if you use the web site for other applications as you indicate you
do. In IIS administrator you can open the properties of the Default Web
Site, add a custom error page for 403.4 with an absolute redirect to URL
http://www.company.com.

You can also create an HTTP redirect of the Default Web Site to /owa.

That way, http://www.company.com redirects to https://www.company.com, which
redirects to https://www.company.com/owa.

--
Ed Crowley MVP
"There are seldom good technological solutions to behavioral problems."
.

"BGCSOCAL" <BGCS...@discussions.microsoft.com> wrote in message
news:8FED8EA5-CF73-4648...@microsoft.com...

[BGCSOCAL]

Our web site has no applications unless you count having text pages that
explain what we do. It is a very dorky web site. the only real application is
the OWA. Does that make a difference in what you are telling me?

BTW Even checking the notify box, I'm not getting any notices that you
reply. Is something going on? I checked to see if any are blocked but there
are not there.
--
Bettie

"Ed Crowley [MVP]" wrote:

> So it seems that you need to redirect http: to https:, right? This is a bit
> tricky if you use the web site for other applications as you indicate you
> do. In IIS administrator you can open the properties of the Default Web
> Site, add a custom error page for 403.4 with an absolute redirect to URL
> http://www.company.com.
>
> You can also create an HTTP redirect of the Default Web Site to /owa.
>
> That way, http://www.company.com redirects to https://www.company.com, which
> redirects to https://www.company.com/owa.
> --
> Ed Crowley MVP
> "There are seldom good technological solutions to behavioral problems."

> .
>

[Ed Crowley [MVP]]

If you want to keep that root page, then you can just add a link to OWA.

I don't understand your comment about the "notify box".

--
Ed Crowley MVP
"There are seldom good technological solutions to behavioral problems."
.

"BGCSOCAL" <BGCS...@discussions.microsoft.com> wrote in message
news:51861481-E217-43E1...@microsoft.com...

[BGCSOCAL]

When you reply, on the reply page there is a check box at the bottom of the
page that says Notify me of replies. It used to work but has not been working
lately.
--
Bettie

"Ed Crowley [MVP]" wrote:

> If you want to keep that root page, then you can just add a link to OWA.
>
> I don't understand your comment about the "notify box".
> --
> Ed Crowley MVP
> "There are seldom good technological solutions to behavioral problems."

> .
>

[Ed Crowley [MVP]]

Reply to what? I'm not aware of any such checkbox. I just opened OWA and
replied to a message and I see no such checkbox.

--
Ed Crowley MVP
"There are seldom good technological solutions to behavioral problems."
.

"BGCSOCAL" <BGCS...@discussions.microsoft.com> wrote in message
news:4E2E5103-61EF-441F...@microsoft.com...

[BGCSOCAL]

Reply to your posts on this forum. I'm nto getting any notification when you
reply here.
--
Bettie

"Ed Crowley [MVP]" wrote:

> Reply to what? I'm not aware of any such checkbox. I just opened OWA and
> replied to a message and I see no such checkbox.
> --
> Ed Crowley MVP
> "There are seldom good technological solutions to behavioral problems."

> .
>

[Ed Crowley [MVP]]

Sorry. I don't control your newsreader or newsfeed. I just reply to posts
using Outlook Express.

--
Ed Crowley MVP
"There are seldom good technological solutions to behavioral problems."
.

"BGCSOCAL" <BGCS...@discussions.microsoft.com> wrote in message
news:0285534D-6172-45F6...@microsoft.com...