Archived from groups: microsoft.public.win2000.active_directory (More info?)

Hello again,

I have a Windows Server 2003 Enterprise with Exchange Server 2003
Enterprise. The Machine is based here in the USA. I have created user
accounts for some relatives living in Africa. I want them to use my exchange
for their email infrastructure. The problem is that a couple of them have Win
2000 Professional Machines while another has XP home edition, and some have
XP Pro.

In the above scenario, I am trying to setup SMTP/POP3 accounts for this
users. all they need is to get to their email and nothing else on my server.
In trying to secure the Exchange Server, which Certificate Authority would be
best to be deployed in the above scenario.

The materials says one is for people inside my domain and the other is for
people outside my domain. since these users are objects in my AD, would it be
right to think Enterprise CA or am I not understanding the material well
enough.

Thank you.

Ola
--
An Avvid Student

Archived from groups: microsoft.public.win2000.active_directory (More info?)

"ola_atb" <olaatb@discussions.microsoft.com> wrote in message
news:A8141969-7699-4F43-9F5C-3506252FA185@microsoft.com...
> Hello again,
>
> I have a Windows Server 2003 Enterprise with Exchange Server 2003
> Enterprise. The Machine is based here in the USA. I have created user
> accounts for some relatives living in Africa. I want them to use my
exchange
> for their email infrastructure. The problem is that a couple of them have
Win
> 2000 Professional Machines while another has XP home edition, and some
have
> XP Pro.
>
> In the above scenario, I am trying to setup SMTP/POP3 accounts for this
> users. all they need is to get to their email and nothing else on my
server.
> In trying to secure the Exchange Server, which Certificate Authority would
be
> best to be deployed in the above scenario.
>
> The materials says one is for people inside my domain and the other is for
> people outside my domain. since these users are objects in my AD, would it
be
> right to think Enterprise CA or am I not understanding the material well
> enough.

Enterprise is essentially an "Active Directory CA" and
Standalone is essentially a "regular Server CA."

Enterprise CAs SHINE when handing out Certs to your
users AUTOMATICALLY since they can decide based
on permissions (group membership.)

Standalone CAs are usually used with 1) you have no
DC/AD or 2) plan to hand out certs to non-domain users
and approve them manually anyway.

An Enterprise CA can do this latter but it is overkill if
you don't need it -- if you need both(ideas), you can use the
Enterprise or install two of them on different servers.

--
Herb Martin


>
> Thank you.
>
> Ola
> --
> An Avvid Student