http://blogs.technet.com/pierrc/archive/tags/RPC+over+HTTPs/default.aspxTags: RPC over HTTPsen-USCommunityServer 2.1 SP1 (Build: 61025.2)http://blogs.technet.com/pierrc/archive/2007/12/04/partie-7-param-trage-de-small-business-server-2003-r2-pour-le-mise-en-oeuvre-des-rpc-over-https-avec-le-client-office-outlook-2003-sp1-outlook-2007.aspxTue, 04 Dec 2007 17:01:00 GMTd5e57398-b9ef-4490-9955-07cbb4e4a80d:2607370pierrc0http://blogs.technet.com/pierrc/comments/2607370.aspxhttp://blogs.technet.com/pierrc/commentrss.aspx?PostID=2607370<P>Slides des Universités Small Business Serveur "mise en oeuvre d' une solution de mobilité autour de Small Business Serveur"</P> <P>Voici la procédure à suivre pour mettre en oeuvre facilement les "RPC over HTTPs" dans SBS Standard ou Premium de manière à ce que les utilisateurs nomades puissent se connecter à leur messagerie avec le client Office Outlook 2003 SP1 ou Office Outlook 2007 depuis Internet sans avoir à ouvrir de connexion VPN (PPTP) .</P> <P>"L' assistant de configuration de la messagerie et de la connexion Internet" va nous aider à configurer simplement :</P> <P>- le contrôle de flux SSL (TCP 443) sur la carte externe du serveur SBS</P> <P>- le paramétrage de IIS/Exchange automatiquement (site RPC de IIS)</P> <P mce_keep="true">&nbsp;</P> <P><A href="http://blogs.technet.com/blogfiles/pierrc/WindowsLiveWriter/Partie7ParamtrageduserveurSmallBusinessS_EC9C/image_2.png" mce_href="http://blogs.technet.com/blogfiles/pierrc/WindowsLiveWriter/Partie7ParamtrageduserveurSmallBusinessS_EC9C/image_2.png"><IMG style="BORDER-TOP-WIDTH: 0px; BORDER-LEFT-WIDTH: 0px; BORDER-BOTTOM-WIDTH: 0px; BORDER-RIGHT-WIDTH: 0px" height=487 alt=image src="http://blogs.technet.com/blogfiles/pierrc/WindowsLiveWriter/Partie7ParamtrageduserveurSmallBusinessS_EC9C/image_thumb.png" width=611 border=0 mce_src="http://blogs.technet.com/blogfiles/pierrc/WindowsLiveWriter/Partie7ParamtrageduserveurSmallBusinessS_EC9C/image_thumb.png"></A> </P> <P>&nbsp;<A href="http://blogs.technet.com/blogfiles/pierrc/WindowsLiveWriter/Partie7ParamtrageduserveurSmallBusinessS_EC9C/image_4.png" mce_href="http://blogs.technet.com/blogfiles/pierrc/WindowsLiveWriter/Partie7ParamtrageduserveurSmallBusinessS_EC9C/image_4.png"><IMG style="BORDER-TOP-WIDTH: 0px; BORDER-LEFT-WIDTH: 0px; BORDER-BOTTOM-WIDTH: 0px; BORDER-RIGHT-WIDTH: 0px" height=494 alt=image src="http://blogs.technet.com/blogfiles/pierrc/WindowsLiveWriter/Partie7ParamtrageduserveurSmallBusinessS_EC9C/image_thumb_1.png" width=611 border=0 mce_src="http://blogs.technet.com/blogfiles/pierrc/WindowsLiveWriter/Partie7ParamtrageduserveurSmallBusinessS_EC9C/image_thumb_1.png"></A> </P> <P>Encore une fois le certificat auto signé doit absolument matcher avec le nom public de votre serveur SBS</P> <P>Côté client il faudra paramétrer&nbsp; Office Outlook 2003 ou Outlook 2007</P> <P><A href="http://blogs.technet.com/blogfiles/pierrc/WindowsLiveWriter/Partie7ParamtrageduserveurSmallBusinessS_EC9C/image_6.png" mce_href="http://blogs.technet.com/blogfiles/pierrc/WindowsLiveWriter/Partie7ParamtrageduserveurSmallBusinessS_EC9C/image_6.png"></A><A href="http://blogs.technet.com/blogfiles/pierrc/WindowsLiveWriter/Partie7ParamtrageduserveurSmallBusinessS_EC9C/image_8.png" mce_href="http://blogs.technet.com/blogfiles/pierrc/WindowsLiveWriter/Partie7ParamtrageduserveurSmallBusinessS_EC9C/image_8.png"></A><A href="http://blogs.technet.com/blogfiles/pierrc/WindowsLiveWriter/Partie7ParamtrageduserveurSmallBusinessS_EC9C/image_10.png" mce_href="http://blogs.technet.com/blogfiles/pierrc/WindowsLiveWriter/Partie7ParamtrageduserveurSmallBusinessS_EC9C/image_10.png"><IMG style="BORDER-TOP-WIDTH: 0px; BORDER-LEFT-WIDTH: 0px; BORDER-BOTTOM-WIDTH: 0px; BORDER-RIGHT-WIDTH: 0px" height=461 alt=image src="http://blogs.technet.com/blogfiles/pierrc/WindowsLiveWriter/Partie7ParamtrageduserveurSmallBusinessS_EC9C/image_thumb_4.png" width=613 border=0 mce_src="http://blogs.technet.com/blogfiles/pierrc/WindowsLiveWriter/Partie7ParamtrageduserveurSmallBusinessS_EC9C/image_thumb_4.png"></A>&nbsp;&nbsp; </P> <P>&nbsp;<A href="http://blogs.technet.com/blogfiles/pierrc/WindowsLiveWriter/Partie7ParamtrageduserveurSmallBusinessS_EC9C/image_12.png" mce_href="http://blogs.technet.com/blogfiles/pierrc/WindowsLiveWriter/Partie7ParamtrageduserveurSmallBusinessS_EC9C/image_12.png"><IMG style="BORDER-TOP-WIDTH: 0px; BORDER-LEFT-WIDTH: 0px; BORDER-BOTTOM-WIDTH: 0px; BORDER-RIGHT-WIDTH: 0px" height=471 alt=image src="http://blogs.technet.com/blogfiles/pierrc/WindowsLiveWriter/Partie7ParamtrageduserveurSmallBusinessS_EC9C/image_thumb_5.png" width=612 border=0 mce_src="http://blogs.technet.com/blogfiles/pierrc/WindowsLiveWriter/Partie7ParamtrageduserveurSmallBusinessS_EC9C/image_thumb_5.png"></A> </P> <P>&nbsp;<A href="http://blogs.technet.com/blogfiles/pierrc/WindowsLiveWriter/Partie7ParamtrageduserveurSmallBusinessS_EC9C/image_14.png" mce_href="http://blogs.technet.com/blogfiles/pierrc/WindowsLiveWriter/Partie7ParamtrageduserveurSmallBusinessS_EC9C/image_14.png"><IMG style="BORDER-TOP-WIDTH: 0px; BORDER-LEFT-WIDTH: 0px; BORDER-BOTTOM-WIDTH: 0px; BORDER-RIGHT-WIDTH: 0px" height=415 alt=image src="http://blogs.technet.com/blogfiles/pierrc/WindowsLiveWriter/Partie7ParamtrageduserveurSmallBusinessS_EC9C/image_thumb_6.png" width=613 border=0 mce_src="http://blogs.technet.com/blogfiles/pierrc/WindowsLiveWriter/Partie7ParamtrageduserveurSmallBusinessS_EC9C/image_thumb_6.png"></A> </P> <P>&nbsp;<A href="http://blogs.technet.com/blogfiles/pierrc/WindowsLiveWriter/Partie7ParamtrageduserveurSmallBusinessS_EC9C/image_16.png" mce_href="http://blogs.technet.com/blogfiles/pierrc/WindowsLiveWriter/Partie7ParamtrageduserveurSmallBusinessS_EC9C/image_16.png"><IMG style="BORDER-TOP-WIDTH: 0px; BORDER-LEFT-WIDTH: 0px; BORDER-BOTTOM-WIDTH: 0px; BORDER-RIGHT-WIDTH: 0px" height=392 alt=image src="http://blogs.technet.com/blogfiles/pierrc/WindowsLiveWriter/Partie7ParamtrageduserveurSmallBusinessS_EC9C/image_thumb_7.png" width=613 border=0 mce_src="http://blogs.technet.com/blogfiles/pierrc/WindowsLiveWriter/Partie7ParamtrageduserveurSmallBusinessS_EC9C/image_thumb_7.png"></A> </P> <P><A href="http://blogs.technet.com/blogfiles/pierrc/WindowsLiveWriter/Partie7ParamtrageduserveurSmallBusinessS_EC9C/image_18.png" mce_href="http://blogs.technet.com/blogfiles/pierrc/WindowsLiveWriter/Partie7ParamtrageduserveurSmallBusinessS_EC9C/image_18.png"><IMG style="BORDER-TOP-WIDTH: 0px; BORDER-LEFT-WIDTH: 0px; BORDER-BOTTOM-WIDTH: 0px; BORDER-RIGHT-WIDTH: 0px" height=421 alt=image src="http://blogs.technet.com/blogfiles/pierrc/WindowsLiveWriter/Partie7ParamtrageduserveurSmallBusinessS_EC9C/image_thumb_8.png" width=622 border=0 mce_src="http://blogs.technet.com/blogfiles/pierrc/WindowsLiveWriter/Partie7ParamtrageduserveurSmallBusinessS_EC9C/image_thumb_8.png"></A>&nbsp; </P> <P><A href="http://blogs.technet.com/blogfiles/pierrc/WindowsLiveWriter/Partie7ParamtrageduserveurSmallBusinessS_EC9C/image_20.png" mce_href="http://blogs.technet.com/blogfiles/pierrc/WindowsLiveWriter/Partie7ParamtrageduserveurSmallBusinessS_EC9C/image_20.png"><IMG style="BORDER-TOP-WIDTH: 0px; BORDER-LEFT-WIDTH: 0px; BORDER-BOTTOM-WIDTH: 0px; BORDER-RIGHT-WIDTH: 0px" height=467 alt=image src="http://blogs.technet.com/blogfiles/pierrc/WindowsLiveWriter/Partie7ParamtrageduserveurSmallBusinessS_EC9C/image_thumb_9.png" width=620 border=0 mce_src="http://blogs.technet.com/blogfiles/pierrc/WindowsLiveWriter/Partie7ParamtrageduserveurSmallBusinessS_EC9C/image_thumb_9.png"></A> </P> <P>Le certificat auto signé "remote.ma-fr" généré pendant "L' assistant de configuration de la messagerie et de la connexion Internet" doit être installé sur le poste client.</P> <P><A href="http://blogs.technet.com/blogfiles/pierrc/WindowsLiveWriter/Partie7ParamtrageduserveurSmallBusinessS_EC9C/image_22.png" mce_href="http://blogs.technet.com/blogfiles/pierrc/WindowsLiveWriter/Partie7ParamtrageduserveurSmallBusinessS_EC9C/image_22.png"><IMG style="BORDER-TOP-WIDTH: 0px; BORDER-LEFT-WIDTH: 0px; BORDER-BOTTOM-WIDTH: 0px; BORDER-RIGHT-WIDTH: 0px" height=369 alt=image src="http://blogs.technet.com/blogfiles/pierrc/WindowsLiveWriter/Partie7ParamtrageduserveurSmallBusinessS_EC9C/image_thumb_10.png" width=625 border=0 mce_src="http://blogs.technet.com/blogfiles/pierrc/WindowsLiveWriter/Partie7ParamtrageduserveurSmallBusinessS_EC9C/image_thumb_10.png"></A> </P> <P>&nbsp;<A href="http://blogs.technet.com/blogfiles/pierrc/WindowsLiveWriter/Partie7ParamtrageduserveurSmallBusinessS_EC9C/image_26.png" mce_href="http://blogs.technet.com/blogfiles/pierrc/WindowsLiveWriter/Partie7ParamtrageduserveurSmallBusinessS_EC9C/image_26.png"><IMG style="BORDER-TOP-WIDTH: 0px; BORDER-LEFT-WIDTH: 0px; BORDER-BOTTOM-WIDTH: 0px; BORDER-RIGHT-WIDTH: 0px" height=468 alt=image src="http://blogs.technet.com/blogfiles/pierrc/WindowsLiveWriter/Partie7ParamtrageduserveurSmallBusinessS_EC9C/image_thumb_12.png" width=626 border=0 mce_src="http://blogs.technet.com/blogfiles/pierrc/WindowsLiveWriter/Partie7ParamtrageduserveurSmallBusinessS_EC9C/image_thumb_12.png"></A> <A href="http://blogs.technet.com/blogfiles/pierrc/WindowsLiveWriter/Partie7ParamtrageduserveurSmallBusinessS_EC9C/image_24.png" mce_href="http://blogs.technet.com/blogfiles/pierrc/WindowsLiveWriter/Partie7ParamtrageduserveurSmallBusinessS_EC9C/image_24.png"></A>&nbsp;<A href="http://blogs.technet.com/blogfiles/pierrc/WindowsLiveWriter/Partie7ParamtrageduserveurSmallBusinessS_EC9C/image_28.png" mce_href="http://blogs.technet.com/blogfiles/pierrc/WindowsLiveWriter/Partie7ParamtrageduserveurSmallBusinessS_EC9C/image_28.png"><IMG style="BORDER-TOP-WIDTH: 0px; BORDER-LEFT-WIDTH: 0px; BORDER-BOTTOM-WIDTH: 0px; BORDER-RIGHT-WIDTH: 0px" height=415 alt=image src="http://blogs.technet.com/blogfiles/pierrc/WindowsLiveWriter/Partie7ParamtrageduserveurSmallBusinessS_EC9C/image_thumb_13.png" width=636 border=0 mce_src="http://blogs.technet.com/blogfiles/pierrc/WindowsLiveWriter/Partie7ParamtrageduserveurSmallBusinessS_EC9C/image_thumb_13.png"></A></P><img src="http://blogs.technet.com/aggbug.aspx?PostID=2607370" width="1" height="1">VPNRPC over HTTPsSmall Business Server 2003 R2SSLhttp://blogs.technet.com/pierrc/archive/2007/11/21/slides-des-universit-s-small-business-serveur-mise-en-oeuvre-d-une-solution-de-mobilit-autour-de-small-business-serveur-partie-2-ceicw.aspxThu, 22 Nov 2007 00:47:00 GMTd5e57398-b9ef-4490-9955-07cbb4e4a80d:2540602pierrc0http://blogs.technet.com/pierrc/comments/2540602.aspxhttp://blogs.technet.com/pierrc/commentrss.aspx?PostID=2540602<P>Slides des Universités Small Business Serveur "mise en oeuvre d'une solution de mobilité autour de Small Business Serveur"&nbsp;</P> <P mce_keep="true">&nbsp;</P> <P>L' assistant de configuration de la messagerie et de la connexion Internet est la première tâche à effectuer sur le serveur SBS il va nous aider à configurer :</P> <P>- La connexion du serveur SBS sur Internet ( carte réseau, modem .... )</P> <P>- Le pare-feu (RRAS et ISA Serveur pour les versions Premium)</P> <P>- Les règles de flux entrantes sur la carte Externe du serveur (SMTP, PPTP, .... )</P> <P>- Les règles de flux HTTP et HTTPS entrantes sur la carte Externe du serveur&nbsp;et les paramètres&nbsp; des sites de IIS </P> <P>- la gestion d' un certificat Web pour les connexions SSL</P> <P>- la gestion de la messagerie ( connecteur SMTP d'exchange, méthode de remise, relay SMTP, connecteur POP3, pièces jointes</P> <P>Cet assistant SBS génère un fichier C:\Program Files\Microsoft Windows Small Business Server\config.vbs que l'on peut re-exécuter à tout moment . </P> <P mce_keep="true">&nbsp;</P> <P><A href="http://blogs.technet.com/blogfiles/pierrc/WindowsLiveWriter/SlidesdesUniversitsSmallBusinessServeurm_12760/image_2.png" mce_href="http://blogs.technet.com/blogfiles/pierrc/WindowsLiveWriter/SlidesdesUniversitsSmallBusinessServeurm_12760/image_2.png"><IMG style="BORDER-TOP-WIDTH: 0px; BORDER-LEFT-WIDTH: 0px; BORDER-BOTTOM-WIDTH: 0px; BORDER-RIGHT-WIDTH: 0px" height=421 alt=image src="http://blogs.technet.com/blogfiles/pierrc/WindowsLiveWriter/SlidesdesUniversitsSmallBusinessServeurm_12760/image_thumb.png" width=561 border=0 mce_src="http://blogs.technet.com/blogfiles/pierrc/WindowsLiveWriter/SlidesdesUniversitsSmallBusinessServeurm_12760/image_thumb.png"></A> </P> <P><A href="http://blogs.technet.com/blogfiles/pierrc/WindowsLiveWriter/SlidesdesUniversitsSmallBusinessServeurm_12760/image_4.png" mce_href="http://blogs.technet.com/blogfiles/pierrc/WindowsLiveWriter/SlidesdesUniversitsSmallBusinessServeurm_12760/image_4.png"><IMG style="BORDER-TOP-WIDTH: 0px; BORDER-LEFT-WIDTH: 0px; BORDER-BOTTOM-WIDTH: 0px; BORDER-RIGHT-WIDTH: 0px" height=421 alt=image src="http://blogs.technet.com/blogfiles/pierrc/WindowsLiveWriter/SlidesdesUniversitsSmallBusinessServeurm_12760/image_thumb_1.png" width=561 border=0 mce_src="http://blogs.technet.com/blogfiles/pierrc/WindowsLiveWriter/SlidesdesUniversitsSmallBusinessServeurm_12760/image_thumb_1.png"></A> </P> <P>Il est fortement recommandé d' utiliser une version de SBS Premium (ISA Serveur) pour connecter son serveur sur Internet . Pour la version standard c' est le composant RRAS de Windows 2003 qui gère la partie pare-feu&nbsp;donc:</P> <P>- aucun contrôle des flux sortants</P> <P>- pare-feu niveau 3 et 4</P> <P>- compliqué pour récupérer les logs</P> <P mce_keep="true">&nbsp;</P> <P><A href="http://blogs.technet.com/blogfiles/pierrc/WindowsLiveWriter/SlidesdesUniversitsSmallBusinessServeurm_12760/image_6.png" mce_href="http://blogs.technet.com/blogfiles/pierrc/WindowsLiveWriter/SlidesdesUniversitsSmallBusinessServeurm_12760/image_6.png"><IMG style="BORDER-TOP-WIDTH: 0px; BORDER-LEFT-WIDTH: 0px; BORDER-BOTTOM-WIDTH: 0px; BORDER-RIGHT-WIDTH: 0px" height=427 alt=image src="http://blogs.technet.com/blogfiles/pierrc/WindowsLiveWriter/SlidesdesUniversitsSmallBusinessServeurm_12760/image_thumb_2.png" width=568 border=0 mce_src="http://blogs.technet.com/blogfiles/pierrc/WindowsLiveWriter/SlidesdesUniversitsSmallBusinessServeurm_12760/image_thumb_2.png"></A> </P> <P>Contrôle des flux entrants sur la carte externe de SBS (TCP 25, TCP 1723, TCP 3389, TCP 21)</P> <P>Pour la version Standard les filtres sont créés dans RRAS </P> <P>Pour la version Premium les règles des flux entrants sont créées dans Isa Serveur </P> <P><A href="http://blogs.technet.com/blogfiles/pierrc/WindowsLiveWriter/SlidesdesUniversitsSmallBusinessServeurm_12760/image_8.png" mce_href="http://blogs.technet.com/blogfiles/pierrc/WindowsLiveWriter/SlidesdesUniversitsSmallBusinessServeurm_12760/image_8.png"><IMG style="BORDER-TOP-WIDTH: 0px; BORDER-LEFT-WIDTH: 0px; BORDER-BOTTOM-WIDTH: 0px; BORDER-RIGHT-WIDTH: 0px" height=427 alt=image src="http://blogs.technet.com/blogfiles/pierrc/WindowsLiveWriter/SlidesdesUniversitsSmallBusinessServeurm_12760/image_thumb_3.png" width=568 border=0 mce_src="http://blogs.technet.com/blogfiles/pierrc/WindowsLiveWriter/SlidesdesUniversitsSmallBusinessServeurm_12760/image_thumb_3.png"></A> </P> <P>Contrôle des flux HTTPs entrants sur la carte externe de SBS plus les paramètres&nbsp; des sites de IIS (restriction d' accès par adresse IP)</P> <P>Pour la version Premium les règles de publication seront créées dans Isa Serveur</P> <P><A href="http://blogs.technet.com/blogfiles/pierrc/WindowsLiveWriter/SlidesdesUniversitsSmallBusinessServeurm_12760/image_10.png" mce_href="http://blogs.technet.com/blogfiles/pierrc/WindowsLiveWriter/SlidesdesUniversitsSmallBusinessServeurm_12760/image_10.png"></A><A href="http://blogs.technet.com/blogfiles/pierrc/WindowsLiveWriter/SlidesdesUniversitsSmallBusinessServeurm_12760/image_12.png" mce_href="http://blogs.technet.com/blogfiles/pierrc/WindowsLiveWriter/SlidesdesUniversitsSmallBusinessServeurm_12760/image_12.png"><IMG style="BORDER-TOP-WIDTH: 0px; BORDER-LEFT-WIDTH: 0px; BORDER-BOTTOM-WIDTH: 0px; BORDER-RIGHT-WIDTH: 0px" height=427 alt=image src="http://blogs.technet.com/blogfiles/pierrc/WindowsLiveWriter/SlidesdesUniversitsSmallBusinessServeurm_12760/image_thumb_5.png" width=568 border=0 mce_src="http://blogs.technet.com/blogfiles/pierrc/WindowsLiveWriter/SlidesdesUniversitsSmallBusinessServeurm_12760/image_thumb_5.png"></A>&nbsp; </P> <P>Si vous voulez mettre en oeuvre ActiveSync en SSL ou les RPC over HTTPs le nom du certificat doit absolument matcher avec le nom public de votre serveur SBS ...</P> <P>Exemple, si je mets "remote.ma-tpe.fr " l' assistant&nbsp; va nous créer un certificat auto-généré&nbsp;sans autorités principales de confiance&nbsp;, bien évidemment remote.ma-tpe.fr doit pouvoir être résolu dans votre domaine public.</P> <P mce_keep="true">&nbsp;</P> <P><A href="http://blogs.technet.com/blogfiles/pierrc/WindowsLiveWriter/SlidesdesUniversitsSmallBusinessServeurm_12760/image_14.png" mce_href="http://blogs.technet.com/blogfiles/pierrc/WindowsLiveWriter/SlidesdesUniversitsSmallBusinessServeurm_12760/image_14.png"><IMG style="BORDER-TOP-WIDTH: 0px; BORDER-LEFT-WIDTH: 0px; BORDER-BOTTOM-WIDTH: 0px; BORDER-RIGHT-WIDTH: 0px" height=436 alt=image src="http://blogs.technet.com/blogfiles/pierrc/WindowsLiveWriter/SlidesdesUniversitsSmallBusinessServeurm_12760/image_thumb_6.png" width=579 border=0 mce_src="http://blogs.technet.com/blogfiles/pierrc/WindowsLiveWriter/SlidesdesUniversitsSmallBusinessServeurm_12760/image_thumb_6.png"></A> </P> <P>Comment sont envoyés les mails (connecteur SMPT d' Exchange ou un relais SMPT d'un FAI) ?</P> <P>Important ! le nom du domaine de messagerie doit être votre nom de domaine public </P> <P>exemple : ma-tpe.fr </P><img src="http://blogs.technet.com/aggbug.aspx?PostID=2540602" width="1" height="1">VPNRRASRPC over HTTPsCertificatSmall Business Server 2003 R2SBSActiveSyncSSL