RPC Encryption Disabled By Default In Exchange 2010 SP1…

ByRajith Enchiparambil

One of the big issues that admins had while migrating to Exchange 2010 was the RPC Encryption requirement on CAS servers and Outlook 2003 clients. Outlook 2003 users had to have their RPC encryption turned on for them to get connected to a 2010 mailbox. Check my previous article for more info. Few admins sorted…

One of the big issues that admins had while migrating to Exchange 2010 was the RPC Encryption requirement on CAS servers and Outlook 2003 clients. Outlook 2003 users had to have their RPC encryption turned on for them to get connected to a 2010 mailbox. Check my previous article for more info. Few admins sorted the issue by turning the encryption off on the server while few others turned on encryption on Outlook 2003 clients manually or by using group policy.

Exchange Product Group have disabled the RPC encryption on CAS servers in 2010 SP1 servers. Existing 2010 RTM & upgraded SP1 servers are unaffected. I found this the hard way and hence thought of sharing the info. Run the following command to find out the RPC encryption setting in 2010 SP1.

Get-RPCClientAccess | fl name, encryptionrequired

RPCCLientAccess in 2010 SP1

Though the product group have disabled it to make migration easier for admins managing older versions of clients, my take will be to enable it right after the 2010 SP1 CAS role installation. Run the following command to enable RPC encryption.

Get-RPCClientAccess | Set-RPCClientAccess –EncryptionRequired $true

Set RPC Encryption to true in 2010 SP1

If you introduce new 2010 SP1 CAS servers into your environment, make sure that the RPC encryption setting is the same on all servers.

Rajith Enchiparambil

Cloud Architect & Blogger with interests in Microsoft 365, Azure, AWS & PowerShell. I am active on Experts Exchange & TechNet forums and I am a technical author for SearchExchange. Follow me on Twitter, LinkedIn, or Facebook for the latest updates. For consultancy opportunities, drop me a line.

9 Comments

  1. I have the opposite problem! I have just installed Exchange 2010 SP1 and I cannot get Outlook 2010 clients to connect with or without encryption. Am I missing something? A dependent service or something? Thanks for your clear concise tips.

    J

    Reply

    1. Fixed the problem. I had a bad Exchange install and very carefully removed every reference to the bad exchange. However the one account that was created on the domain for mail was the administrator account. Once I deleted the mail box and re-created it was well . That is waht a long working weekend does for you.

      Reply
      1. Rajith Enchiparambil says:

        Thanks for sharing the solution Jason.

        Reply
  2. Rajith Jose Enchiparambil says:

    You're welcome Uttam

    Reply
  4. Rajith Jose Enchiparambil says:

    Thanks Deepak.

    Reply
  5. Deepak Khandelwal says:

    Thanks Rajith, I did not realise they have disabled it. I agree should be enabled ASAP otherwise these things always left forgotten. Thanks for sharing.

    Reply
  6. Rajith Jose Enchiparambil says:

    Yes, there is 2010 SP1 binaries. It can be used for a clean install and upgrade. It has the full set.

    It should be available in your licensing site.

    Reply

  7. Hi Rajith

    Is there a release out of Exchange 2010 including SP1? You make it sound that way.

    Can't find it on my MVLS, sorry VLSC site :)

    Did I miss anything? I thought you had to go from RTM to SP1 via the SP1 upgrade patch?

    Reply

Leave a Reply

Your email address will not be published. Required fields are marked *