RPC Encryption Disabled By Default In Exchange 2010 SP1…
One of the big issues that admins had while migrating to Exchange 2010 was the RPC Encryption requirement on CAS servers and Outlook 2003 clients. Outlook 2003 users had to have their RPC encryption turned on for them to get connected to a 2010 mailbox. Check my previous article for more info. Few admins sorted…
One of the big issues that admins had while migrating to Exchange 2010 was the RPC Encryption requirement on CAS servers and Outlook 2003 clients. Outlook 2003 users had to have their RPC encryption turned on for them to get connected to a 2010 mailbox. Check my previous article for more info. Few admins sorted the issue by turning the encryption off on the server while few others turned on encryption on Outlook 2003 clients manually or by using group policy.
Exchange Product Group have disabled the RPC encryption on CAS servers in 2010 SP1 servers. Existing 2010 RTM & upgraded SP1 servers are unaffected. I found this the hard way and hence thought of sharing the info. Run the following command to find out the RPC encryption setting in 2010 SP1.
Get-RPCClientAccess | fl name, encryptionrequired
Though the product group have disabled it to make migration easier for admins managing older versions of clients, my take will be to enable it right after the 2010 SP1 CAS role installation. Run the following command to enable RPC encryption.
Get-RPCClientAccess | Set-RPCClientAccess –EncryptionRequired $true
If you introduce new 2010 SP1 CAS servers into your environment, make sure that the RPC encryption setting is the same on all servers.
I have the opposite problem! I have just installed Exchange 2010 SP1 and I cannot get Outlook 2010 clients to connect with or without encryption. Am I missing something? A dependent service or something? Thanks for your clear concise tips.
J
Fixed the problem. I had a bad Exchange install and very carefully removed every reference to the bad exchange. However the one account that was created on the domain for mail was the administrator account. Once I deleted the mail box and re-created it was well . That is waht a long working weekend does for you.
Thanks for sharing the solution Jason.
You're welcome Uttam
thank
Thanks Deepak.
Thanks Rajith, I did not realise they have disabled it. I agree should be enabled ASAP otherwise these things always left forgotten. Thanks for sharing.
Yes, there is 2010 SP1 binaries. It can be used for a clean install and upgrade. It has the full set.
It should be available in your licensing site.
Hi Rajith
Is there a release out of Exchange 2010 including SP1? You make it sound that way.
Can't find it on my MVLS, sorry VLSC site :)
Did I miss anything? I thought you had to go from RTM to SP1 via the SP1 upgrade patch?