Chevy Uplander

Dear Avis Rent-a-Car:

Please accept my thanks for renting me a Chevy Uplander minivan instead of the car I actually reserved. Ordinarily I would have preferred to have a standard sedan. since I was traveling solo. However, I’m grateful for the opportunity you gave me to drive an Uplander during my recent trip to Seattle. Why? Because it helps me appreciate the engineering quality, driveability, ergonomics, and product quality of my Dodge Grand Caravan. In fact, I can say that the Uplander was inferior to every other car I’ve ever owned or even driven, including the 1972 VW Super Beetle.

Continue reading

Comments Off on Chevy Uplander

Filed under Reviews

DST and Exchange

My UPDATE columns for this week and next cover the process of updating Exchange 2003 to handle the upcoming DST change. (I’ll update this post with links to the columns when they’re published.) Oddly, as I was writing this week’s installment, I found myself wondering how Notes and Domino will manage the DST transition; today I saw Ed’s post on the topic. Apparently no matter whose messaging system you use, it’s still a messy process. Of course, Exchange 2007 doesn’t have this problem; if you hurry maybe you can get your environment upgraded before the DST switchover ๐Ÿ™‚

UPDATE: here’s part 1 of the series.

Technorati Tags:

Comments Off on DST and Exchange

Filed under UC&C

Specifying a perimeter IP with Exchange Edge Transport

So I was trying to figure out how to exempt a particular IP address from connection filtering on an Exchange Edge Transport server. I needed to do this to keep Edge from deciding that the internal relay server was generating spam. It’s going to be injecting spam (for some tests I’m doing), but I didn’t want the sender reputation agent to decide that the server was a spammer itself.

My first thought was to add the server’s IP to the IP accept list. That wouldn’t work, though, because mail coming from IPs that appear on the accept list are tagged with an SCL of -1, indicating that no further filtering is necessary. I could have turned off connection filtering altogether, but I didn’t want to do that either. Finally I broke down and pinged a friend who works for Microsoft, and once he understood what I wanted to do he came up with the right answer: I needed to use the set-transportConfig cmdlet’s -internalSMTPServers flag.

Once I knew that, I was able to find references to the cmdlet all over the place (including one at Bharat’s blog from yesterday… I guess that’s a good reason to be more diligent about my blog reading!) As much as I’ve worked with Exchange 2007 over the last year, I still have a lot to learn.

Technorati Tags:

Comments Off on Specifying a perimeter IP with Exchange Edge Transport

Filed under UC&C

Conference etiquette: avoid the cellphone while in the bathroom

Charles posted a list of etiquette suggestions based on his recent visit to Lotusphere, and Josh Maher posted a list of cell phone use social norms. Unfortunately, neither of these address a real problem I encounter when traveling: people who talk on the phone while in the men’s room. I’ve seen a wide range of offenders, from CEO-looking types in Armani to flannel-shirt-clad, John Deere-cap-wearing rustics. It amazes me: if you wouldn’t talk to your boss through a bathroom door, why on earth would you do it with a cellphone?

Let me make this perfectly clear: under no circumstance would I make a phone call while in the restroom, unless perhaps someone needed immediate medical help. Nor would I stay on the phone, chatting away, while I stood in front of the urinal doing my bidness. I’m pretty sure none of my friends, customers, family members, or co-workers want to talk to me that badly.

So, to summarize: no phone use in the bathroom. Thankyouverymuch.

Comments Off on Conference etiquette: avoid the cellphone while in the bathroom

Filed under FAIL

Which ports does Exchange 2007 unified messaging use?

Devin asked me, and I realized that apart from TCP 5060 (for SIP) I didn’t know. A little googling, however, produced this topic in the Exchange documentation. See table 1, which shows the remaining ports that you have to keep open to make UM work across a firewall.

Technorati Tags: ,

Comments Off on Which ports does Exchange 2007 unified messaging use?

Filed under UC&C

Finding contacts with Exchange Web Services

On the heels of my EWS post the other day, a new post from Microsoft’s Wes Haggard, this time explaining how to use EWS to find contacts.

Technorati Tags:

Comments Off on Finding contacts with Exchange Web Services

Filed under UC&C

Barracuda blocking mail that contains xmlsoap URL

This is a hassle; I got two separate notifications from fellow MVPs that my Barracuda box was blocking their inbound mail. When I checked the Barracuda logs, sure enough, it had rejected both messages; the reason listed was “Intent (xmlsoap.org)”.

“Intent” is the status code the ‘cuda uses to indicate that it blocked a message because it contains a spammish URL; it’s essentially the equivalent of SURBL. I checked the two messages, and sure enough they contain a reference to xmlsoap: “http://schemas.xmlsoap.org/soap/envelope/”. However, this reference comes from the original message in the thread, which was an HTML message! Apparently somewhere in the round-trip reply cycle, the HTML version was converted to plain text, which exposed the xmlsoap reference, which the Barracuda improperly blocked. Evidently spammers have sent HTML-formattted mail from Outlook before, so xmlsoap.org has ended up on the intent list. Thankfully the Barracuda interface has an easy-to-find “Exempt this URL” link, so I could clear the ban, but it’s still not what I would’ve expected.

Comments Off on Barracuda blocking mail that contains xmlsoap URL

Filed under UC&C

Free T-Mobile wi-fi for Vista users

T-Mobile has a pretty sweet deal: free T-Mobile wi-fi service for Windows Vista users from now until April 30. Go here from your Vista machine to sign up.

Comments Off on Free T-Mobile wi-fi for Vista users

Filed under General Tech Stuff

32-bit Exchange 2007 management tools released

Excellent news: the 32-bit versions of the Exchange 2007 management tools are now available. This download includes the Exchange Management Console, the Exchange Management Shell, ExBPA, and the Exchange Troubleshooting Assistant.

Technorati Tags:

Comments Off on 32-bit Exchange 2007 management tools released

Filed under UC&C

Entourage public folder access with Exchange 2007

Just to set the record straight: Entourage 2004 works fine with Exchange 2007 public folders.

If you’ve read the Exchange docs (or the Exchange team blog, or any of the zillions of places that reported this), you might be forgiven for being confused. The docs say that public folders are “de-emphasized”, a fancy way for saying that Microsoft is hoping you’ll start using SharePoint instead. The docs also say that OWA 2007 doesn’t support browser-based access to public folders (a regression from Exchange 2003, and a mistake IMHO, but that’s a discussion for another time.)

The Exchange team posted a blog entry explaining the details of what they meant by “de-emphasized”, but it doesn’t mention Entourage. As Exchange 2007 draws more attention, I’m seeing more people asking questions about Entourage and Exchange 2007.

The answer comes in two parts:

  • Entourage uses WebDAV to access public folders (and mailboxes, for that matter) on an Exchange server. WebDAV is fully supported for public folder access in Exchange 2007. It works great; I use it daily with three different Exchange servers.
  • OWA 2003 includes its own code that uses WebDAV to access public folders. There is no equivalent code in OWA 2007, so it can’t display public folder contents. If and when MS adds such code to OWA 2007, that will have no impact on Entourage because Entourage doesn’t use OWA to render public folders, it uses WebDAV.

Hopefully this will help clear things up somewhat, but (as John Welch has repeatedly said) it would be great to see an official statement from MS on this.

Comments Off on Entourage public folder access with Exchange 2007

Filed under UC&C

Huge list of Exchange web services samples

Wow, Matt Stehle may have just become my favorite Microsoft employee. He’s posted a long list of Exchange Web Services samples, some of which are very interesting (this is my current favorite since Entourage can’t do it yet).

Technorati Tags:

Comments Off on Huge list of Exchange web services samples

Filed under UC&C

Multiple subjectAltNames in certificates: now from Entrust

Back in September I wrote a pair of columns about how Exchange 2007 uses certificates. In it I pointed out the utility of having multiple subject alternative names, or subjectAltNames, in a single certificate; doing so allows you to have a single cert that works with autodiscover.yourdomain.com, mail.yourdomain.com, and the real underlying FQDN, all in one cert. Unfortunately, as far as I can tell no commercial CAs will actually issue such a certificate.

However, I got mail today from Andrew Codrington at Entrust. They’ve just introduced a new “unified communications certificate” as part of their partnership with Microsoft. The UC cert includes 10 subjectAltNames, with the option of adding 3 more for an additional $99. Good deal? Maybe; the 1-year cert price is a whopping $599. Still, that’s certainly cheaper than buying 3 standard Entrust certs @ $159 each when you factor in the time and labor required to obtain and install them. More on this later…

Technorati Tags:

Comments Off on Multiple subjectAltNames in certificates: now from Entrust

Filed under Security, UC&C

An embarrassing contrast: Lotusphere vs TechEd

Doggone it, this just isn’t fair. I was going to go to Lotusphere, but decided not to because I’m already going to Orlando twice this year for other trips.. and who’s their keynote speaker? Only the first man to walk on the moon.

The list of past speakers from Lotusphere is pretty impressive: John Cleese; Rudy Giulani, Walter Cronkite… meanwhile, at the flagship MS event, we get… Microsoft executives. Don’t get me wrong; I expect to see executives touting their products, and I appreciate Microsoft’s efforts to bring in sidekicks like Samantha Bee or Mary Lynn Rajskub to liven things up a bit. However, why couldn’t we have an interesting topical speaker? It couldn’t be that hard. Warren Buffett would probably be glad to help his friend Bill out. How about Sean Payton? Scott Adams? The possibilities are limitless.

Comments Off on An embarrassing contrast: Lotusphere vs TechEd

Filed under Musings

View BitLocker recovery passwords stored in Active Directory

So, you can probably tell I’m working on a BitLocker-related project by now…

One drawback to storing BitLocker recovery passwords in Active Directory is that there’s no good way to retrieve the recovery password when you need it, or so I thought. I suggested to the BitLocker team that they consider writing an extension to AD Users & Computers to make it easy for authorized admins to get a recovery password for a given computer– turns out they’d already done it and were deep into the signoff process!

The tool is officially documented in KB 928202. It’s an AD U&C extension that makes the BitLocker recovery information visible; you need to get it from PSS, but it’s a free call, so why not?

Comments Off on View BitLocker recovery passwords stored in Active Directory

Filed under General Tech Stuff, Security

First part of the Data Encryption Toolkit for Mobile PCs released

Great news– Security Analysis, the first part of the Data Encryption Toolkit for Mobile PCs, just went live.The overall Data Encryption Toolkit is a set of tools and guidance to help people secure the data on their laptops using Windows Vista with BitLocker and the Encrypting File System (EFS) in Windows XP and Windows Vista. Look for more pieces of the DET coming soon, as soon as we finish writing them ๐Ÿ™‚

Comments Off on First part of the Data Encryption Toolkit for Mobile PCs released

Filed under Security